also @ TechSpot: Blizzard talks Diablo 3 facts, nerfing and buffs for legendary items

TechSpot
Register now for a live online demo to see how the Office 365 suite of tools
- professional email, calendars, video conferencing, and file sharing -

[Solved] Unknown virus/malware - black screen w/ cursor after startup

Discussion in 'Virus and Malware Removal' started by KenBrown2, Nov 6, 2011.

Page 2 of 2

  1. Broni Malware Annihilator

    Download aswMBR to your desktop.
    Double click the aswMBR.exe to run it.
    If you see this question: Would you like to download latest Avast! virus definitions?" say "Yes".
    Click the "Scan" button to start scan:
    [IMG]

    On completion of the scan click "Save log", save it to your desktop and post in your next reply:
    [IMG]

    NOTE. aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.

    =================================================================

    Please download ComboFix from Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG users: ComboFix will not run until AVG is uninstalled as a protective measure against the anti-virus. This is because AVG "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.



    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try one of the following:

    1. Run Combofix from Safe Mode (How to...)

    2. Delete Combofix file, download fresh one, but rename combofix.exe to yourname.exe BEFORE saving it to your desktop.
    Do NOT run it yet.

    Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

    There are 4 different versions. If one of them won't run then download and try to run the other one.

    Vista and Win7 users need to right click Rkill and choose Run as Administrator

    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    Rkill.com
    Rkill.scr
    Rkill.exe

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    If normal mode still doesn't work, run BOTH tools from safe mode.

    In case #2, please post BOTH logs, rKill and Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
    Broni, Nov 8, 2011
    #21

  2. KenBrown2 Newcomer, in training

    aswMBR

    aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
    Run date: 2011-11-08 18:15:46
    -----------------------------
    18:15:46.758 OS Version: Windows x64 6.0.6002 Service Pack 2
    18:15:46.758 Number of processors: 2 586 0xF0D
    18:15:46.758 ComputerName: OWNER-PC UserName: Owner
    18:15:47.398 Initialize success
    18:15:47.850 AVAST engine defs: 11110800
    18:15:56.430 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
    18:15:56.446 Disk 0 Vendor: Hitachi_ FB4O Size: 305245MB BusType: 3
    18:15:56.446 Disk 0 MBR read error 0
    18:15:56.446 Disk 0 MBR scan
    18:15:56.851 Disk 0 unknown MBR code
    18:15:56.851 MBR BIOS signature not found 0
    18:15:56.867 Service scanning
    18:16:01.890 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 32
    18:16:03.107 Modules scanning
    18:16:03.107 Disk 0 trace - called modules:
    18:16:03.122 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys spmk.sys hal.dll
    18:16:03.138 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004fb9790]
    18:16:03.138 3 CLASSPNP.SYS[fffffa6000dcfc33] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004cc2050]
    18:16:07.631 AVAST engine scan C:\Windows
    18:21:00.958 AVAST engine scan C:\Windows\system32
    18:22:59.970 AVAST engine scan C:\Windows\system32\drivers
    18:23:12.200 AVAST engine scan C:\Users\Owner
    18:41:59.332 AVAST engine scan C:\ProgramData
    18:45:12.896 Scan finished successfully
    21:44:48.694 Disk 0 MBR has been saved successfully to "F:\6 November 2011\Logs\MBR.dat"
    21:44:48.725 The log file has been saved successfully to "F:\6 November 2011\Logs\aswMBR.txt"



    ComboFix

    ComboFix 11-11-08.02 - Owner 11/08/2011 21:53:42.3.2 - x64
    Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3960.2343 [GMT -5:00]
    Running from: c:\users\Owner\Desktop\ComboFix.exe
    AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
    SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{edbd594b-e8db-4633-b448-d1d0641c5173}
    c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{edbd594b-e8db-4633-b448-d1d0641c5173}\chrome.manifest
    c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{edbd594b-e8db-4633-b448-d1d0641c5173}\chrome\xulcache.jar
    c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{edbd594b-e8db-4633-b448-d1d0641c5173}\defaults\preferences\xulcache.js
    c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{edbd594b-e8db-4633-b448-d1d0641c5173}\install.rdf
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-10-09 to 2011-11-09 )))))))))))))))))))))))))))))))
    .
    .
    2011-11-09 03:07 . 2011-11-09 03:07 -------- d-----w- c:\users\Public\AppData\Local\temp
    2011-11-09 03:07 . 2011-11-09 03:07 -------- d-----w- c:\users\Owner\AppData\Local\temp
    2011-11-09 03:07 . 2011-11-09 03:07 -------- d-----w- c:\users\Default\AppData\Local\temp
    2011-11-08 01:11 . 2011-09-06 21:45 254400 ----a-w- c:\windows\system32\aswBoot.exe
    2011-11-08 01:11 . 2011-09-06 21:38 601944 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2011-11-08 01:07 . 2011-09-06 21:38 301912 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2011-11-08 01:07 . 2011-09-06 21:36 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2011-11-08 01:07 . 2011-09-06 21:36 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2011-11-08 01:07 . 2011-09-06 21:36 58200 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2011-11-08 01:07 . 2011-09-06 21:36 65368 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2011-11-08 01:06 . 2011-09-06 21:45 41184 ----a-w- c:\windows\avastSS.scr
    2011-11-08 01:06 . 2011-09-06 21:45 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
    2011-11-07 03:15 . 2011-11-07 03:15 -------- d-----w- C:\_OTL
    2011-11-01 14:11 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B7788402-BA3B-41B8-958A-358F0A2B4869}\mpengine.dll
    2011-10-26 01:59 . 2011-08-13 05:11 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
    2011-10-26 01:59 . 2011-08-13 04:43 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-08-31 22:00 . 2011-06-17 02:20 25416 ----a-w- c:\windows\system32\drivers\mbam.sys
    .
    .
    ((((((((((((((((((((((((((((( SnapShot@2011-06-18_18.26.11 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-10-04 08:14 . 2008-08-12 03:25 97304 c:\windows\SysWOW64\x64\Difx64.exe
    + 2011-02-24 13:49 . 2009-10-09 21:56 24064 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll
    + 2011-02-24 13:49 . 2009-10-09 21:56 20480 c:\windows\SysWOW64\WindowsPowerShell\v1.0\PSEvents.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 61952 c:\windows\SysWOW64\wbem\xml\wmi2xml.dll
    + 2009-09-19 15:50 . 2009-04-11 06:28 83968 c:\windows\SysWOW64\wbem\wmiutils.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 47104 c:\windows\SysWOW64\wbem\WmiPerfInst.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 91136 c:\windows\SysWOW64\wbem\WmiPerfClass.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 74752 c:\windows\SysWOW64\wbem\WMICOOKR.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 90112 c:\windows\SysWOW64\wbem\WmiApRpl.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 77824 c:\windows\SysWOW64\wbem\WinMgmt.exe
    + 2009-09-19 15:51 . 2009-04-11 06:28 49152 c:\windows\SysWOW64\wbem\wbemsvc.dll
    + 2009-09-19 15:50 . 2009-04-11 06:28 30208 c:\windows\SysWOW64\wbem\wbemprox.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 98304 c:\windows\SysWOW64\wbem\stdprov.dll
    + 2008-01-21 02:48 . 2008-01-21 02:48 19968 c:\windows\SysWOW64\wbem\mofcomp.exe
    + 2008-01-21 02:50 . 2008-01-21 02:50 94720 c:\windows\SysWOW64\sysprep\sysprep.exe
    + 2006-11-02 15:01 . 2006-11-02 15:01 16384 c:\windows\SysWOW64\Speech\SpeechUX\SpeechUXPS.DLL
    + 2008-01-21 02:47 . 2008-01-21 02:47 99328 c:\windows\SysWOW64\Speech\Engines\SR\spsrx.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 66048 c:\windows\SysWOW64\setup\tssysprep.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 59904 c:\windows\SysWOW64\setup\msdtcstp.dll
    + 2008-01-21 02:49 . 2008-01-21 02:49 56320 c:\windows\SysWOW64\setup\cmmigr.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 76800 c:\windows\SysWOW64\SetIEInstalledDate.exe
    + 2007-11-15 21:58 . 2007-11-15 21:58 73728 c:\windows\SysWOW64\SDA\SDPA7120.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 74752 c:\windows\SysWOW64\RegisterIEPKEYs.exe
    + 2006-11-02 15:13 . 2006-11-02 15:13 51462 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnqctl.vbs
    + 2006-11-02 15:13 . 2006-11-02 15:13 56756 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnport.vbs
    + 2006-11-02 15:13 . 2006-11-02 15:13 81048 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnmngr.vbs
    + 2006-11-02 15:13 . 2006-11-02 15:13 69882 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnjobs.vbs
    + 2006-11-02 15:13 . 2006-11-02 15:13 51312 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prndrvr.vbs
    + 2011-11-04 07:29 . 2011-11-04 07:29 54272 c:\windows\SysWOW64\pngfilt.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 62976 c:\windows\SysWOW64\oobe\windeploy.exe
    + 2008-01-21 02:50 . 2008-01-21 02:50 47616 c:\windows\SysWOW64\oobe\wdsutil.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 54272 c:\windows\SysWOW64\oobe\spprgrss.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 42496 c:\windows\SysWOW64\oobe\oobeldr.exe
    + 2008-01-21 02:50 . 2008-01-21 02:50 31232 c:\windows\SysWOW64\oobe\diagER.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 52736 c:\windows\SysWOW64\oobe\audit.exe
    + 2010-06-24 19:24 . 2009-11-08 14:55 11600 c:\windows\SysWOW64\MUI\0409\mscorees.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 48640 c:\windows\SysWOW64\mshtmler.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 72704 c:\windows\SysWOW64\mshtmled.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 11776 c:\windows\SysWOW64\mshta.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 10752 c:\windows\SysWOW64\msfeedssync.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 41472 c:\windows\SysWOW64\msfeedsbs.dll
    + 2006-11-02 12:14 . 2006-09-18 21:27 19429 c:\windows\SysWOW64\Msdtc\Trace\msdtcvtr.bat
    + 2008-01-21 02:47 . 2008-01-21 02:47 54272 c:\windows\SysWOW64\migwiz\usmt2xtr.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 87552 c:\windows\SysWOW64\migwiz\MXEAgent.dll
    + 2006-11-02 15:02 . 2006-11-02 15:02 82944 c:\windows\SysWOW64\migwiz\MIGUIRes.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 87552 c:\windows\SysWOW64\migwiz\dlmanifests\Networking-MPSSVC-Svc\icfupgd.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 31232 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\TableTextServiceMig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 22528 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imtcmig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 31744 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imscmig.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 38912 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imkrmig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 35328 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imjpmig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 98304 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TapiSetup\TapiMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 72704 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Sxs\SxsMigPlugin.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 79872 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-shmig-DL\shmig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 56320 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-RasConnectionManager\cmmigr.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 87552 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-OfflineFiles-DL\CscMig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 61952 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-NetworkBridge\bridgemigplugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 89088 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-International-Core-DL\nlscoremig.dll
    + 2009-09-19 15:52 . 2009-04-11 06:28 44544 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IE-ESC\EscMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 89088 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-DirectoryServices-ADAM-DL\adammigrate.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 59904 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-COM-DTC-Setup-DL\msdtcstp.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 55808 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-COM-ComPlus-Setup-DL\commig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 73216 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Bluetooth-Config\BthMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 60928 c:\windows\SysWOW64\migwiz\dlmanifests\BITSExtensions-Server\bitsmig.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 23552 c:\windows\SysWOW64\licmgr10.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 65024 c:\windows\SysWOW64\jsproxy.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 78848 c:\windows\SysWOW64\inseng.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 35840 c:\windows\SysWOW64\imgutil.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 86528 c:\windows\SysWOW64\iesysprep.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 74752 c:\windows\SysWOW64\iesetup.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 31744 c:\windows\SysWOW64\iernonce.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 74240 c:\windows\SysWOW64\ie4uinit.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 66048 c:\windows\SysWOW64\icardie.dll
    - 2008-01-21 03:20 . 2011-06-17 00:53 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2008-01-21 03:20 . 2011-11-08 03:48 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2011-07-23 11:41 . 2011-11-08 03:48 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2008-01-21 03:20 . 2011-06-17 00:53 65536 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2008-01-21 03:20 . 2011-11-08 03:48 65536 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2008-01-21 02:23 . 2011-11-08 03:48 60938 c:\windows\system32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2008-11-30 14:00 . 2011-11-08 23:20 14894 c:\windows\system32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1361230698-3698658676-2926581387-1000_UserData.bin
    + 2011-11-04 07:29 . 2011-11-04 07:29 91648 c:\windows\system32\SetIEInstalledDate.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 89088 c:\windows\system32\RegisterIEPKEYs.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 65024 c:\windows\system32\pngfilt.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 48640 c:\windows\system32\mshtmler.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 96256 c:\windows\system32\mshtmled.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 12288 c:\windows\system32\mshta.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 10752 c:\windows\system32\msfeedssync.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 55296 c:\windows\system32\msfeedsbs.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 86528 c:\windows\system32\migration\WininetPlugin.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 30720 c:\windows\system32\licmgr10.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 85504 c:\windows\system32\jsproxy.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 49664 c:\windows\system32\imgutil.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 85504 c:\windows\system32\iesetup.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 39936 c:\windows\system32\iernonce.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 89088 c:\windows\system32\ie4uinit.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 82432 c:\windows\system32\icardie.dll
    + 2011-07-12 17:41 . 2009-06-17 10:37 35328 c:\windows\system32\DriverStore\FileRepository\bth.inf_204106c4\BTHUSB.SYS
    + 2009-09-19 15:52 . 2009-04-11 05:39 26112 c:\windows\system32\DriverStore\FileRepository\bth.inf_204106c4\bthenum.sys
    - 2008-01-21 02:49 . 2008-01-21 02:49 85504 c:\windows\system32\csrsrv.dll
    + 2011-07-12 17:41 . 2011-04-20 15:58 85504 c:\windows\system32\csrsrv.dll
    - 2008-11-30 13:46 . 2011-06-18 00:11 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2008-11-30 13:46 . 2011-11-05 19:22 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2008-11-30 13:46 . 2011-06-18 00:11 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2011-06-21 00:47 . 2011-11-05 19:22 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2008-11-30 13:46 . 2011-06-18 00:11 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2008-11-30 13:46 . 2011-11-05 19:22 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-11-30 00:16 . 2011-11-04 01:06 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2009-11-30 00:16 . 2011-06-11 02:38 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2009-11-30 00:16 . 2011-06-11 02:38 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-11-30 00:16 . 2011-11-04 01:06 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-11-30 00:16 . 2011-06-11 02:38 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-11-30 00:16 . 2011-11-04 01:06 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-11-30 00:16 . 2011-06-18 14:42 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-11-30 00:16 . 2011-11-04 00:44 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-11-30 00:16 . 2011-11-04 00:44 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-11-30 00:16 . 2011-06-18 14:42 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2011-04-06 20:48 . 2011-04-06 20:48 11120 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
    - 2011-04-13 02:16 . 2011-04-13 02:16 67920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
    + 2011-07-09 14:05 . 2011-07-09 14:05 67920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
    + 2011-05-17 14:08 . 2011-05-17 14:08 53072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\Culture.dll
    - 2010-03-18 18:27 . 2010-03-18 18:27 53072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\Culture.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 11120 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
    + 2011-07-09 13:30 . 2011-07-09 13:30 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
    - 2011-04-12 19:11 . 2011-04-12 19:11 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
    + 2011-05-17 13:27 . 2011-05-17 13:27 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Culture.dll
    - 2010-03-18 17:16 . 2010-03-18 17:16 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Culture.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2011-06-18 14:49 . 2011-06-18 14:49 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-06-18 14:49 . 2011-06-18 14:49 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-10-22 16:56 . 2011-10-22 16:56 22016 c:\windows\Installer\2af992.msi
    + 2011-11-04 07:30 . 2011-11-04 07:30 19968 c:\windows\Installer\174b3ef.msi
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut9.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut9.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut8.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut8.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut7.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut7.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut6.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut6.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut5.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut5.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut28.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut28.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut27.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut27.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut26.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut26.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut25.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut25.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut24.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut24.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut23.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut23.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut22.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut22.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut21.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut21.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut20.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut20.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut2_1.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut2_1.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut19.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut19.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut18.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut18.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut17.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut17.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut16.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut16.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut15.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut15.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut14.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut14.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut13.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut13.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut12.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut12.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut11.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut11.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut10.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\NewShortcut10.BCCDD171_C13C_4D41_ACA3_0E088E5E60A9.exe
    - 2009-05-13 00:34 . 2010-11-29 04:48 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\ARPPRODUCTICON.exe
    + 2009-05-13 00:34 . 2011-06-18 22:09 25214 c:\windows\Installer\{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}\ARPPRODUCTICON.exe
    - 2011-06-16 23:08 . 2011-06-16 23:08 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
    + 2011-09-16 10:41 . 2011-09-16 10:41 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
    - 2008-09-03 18:10 . 2011-06-16 23:09 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
    + 2008-09-03 18:10 . 2011-09-16 10:41 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
    + 2008-09-03 18:10 . 2011-09-16 10:41 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
    - 2008-09-03 18:10 . 2011-06-16 23:09 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
    - 2008-09-03 18:10 . 2011-06-16 23:09 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
    + 2008-09-03 18:10 . 2011-09-16 10:41 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
    + 2011-09-16 10:41 . 2011-09-16 10:41 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
    - 2011-06-16 23:08 . 2011-06-16 23:08 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
    + 2010-09-23 08:47 . 2010-09-23 08:47 35760 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\reader_sl.exe
    + 2010-09-23 07:03 . 2010-09-23 07:03 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\eula.exe
    + 2010-09-21 03:07 . 2010-09-21 03:07 70584 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\adobeextractfiles.dll
    + 2010-09-23 06:52 . 2010-09-23 06:52 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\acrotextextractor.exe
    + 2010-09-22 22:12 . 2010-09-22 22:12 15800 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32Info.exe
    - 2006-11-02 12:40 . 2011-06-11 02:50 86016 c:\windows\inf\infstor.dat
    + 2006-11-02 12:40 . 2011-07-15 02:07 86016 c:\windows\inf\infstor.dat
    + 2006-11-02 12:40 . 2011-07-15 02:07 51200 c:\windows\inf\infpub.dat
    - 2006-11-02 12:40 . 2011-06-16 23:42 51200 c:\windows\inf\infpub.dat
    + 2011-10-16 15:52 . 2011-10-16 15:52 10240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\59e70022e798ce28f9f5b8870c5c8bf2\System.Xml.Serialization.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\d32e9d2d879649adb929915723e1eecb\System.Windows.Presentation.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\f36d1265de7263ea199fa7058bf40477\System.Web.ApplicationServices.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\09132e10556be9ab331f43b2a8c52235\System.AddIn.Contract.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\49a7edb0d7f35bebc304b303b0700ddc\Microsoft.VisualC.ni.dll
    + 2011-10-16 15:29 . 2011-10-16 15:29 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\5b39108886107f654624373c54000e3c\dfsvc.ni.exe
    + 2011-10-16 15:29 . 2011-10-16 15:29 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\41d4534c5a98fd1bc7edc2f73cd41a0a\Accessibility.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\1c177e9aa7a1661ddec16c2f9f30947c\UIAutomationProvider.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\e4f0e0d45a1739bad6cc96377c9dd7f2\System.Windows.Presentation.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\385b56be2d617548e4b731dd050a1f32\System.Web.ApplicationServices.ni.dll
    + 2011-10-16 16:01 . 2011-10-16 16:01 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\e08ecf530f270cd45c72318b67826cb1\System.ServiceModel.Channels.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\117b65133fc00228bc249d1c61c387ea\System.AddIn.Contract.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\432eb09604ab71ee1aa4622bfbc4afee\Microsoft.VisualC.ni.dll
    + 2011-10-16 15:55 . 2011-10-16 15:55 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\06ac8d640d2dfa7d4bb23c03584304ef\Accessibility.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\00db78298fe5452c0f0841e3688193df\System.Windows.Presentation.ni.dll
    + 2011-09-26 01:10 . 2011-09-26 01:10 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\00539d6e9bd5e7456bdbc98a47ab995c\System.Windows.Presentation.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\77e310c7ad8dd72ffc2bb041cb8b2844\System.Web.DynamicData.Design.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\1f136447130a4f69df3c6560ea58abb3\System.Web.DynamicData.Design.ni.dll
    - 2011-06-18 15:32 . 2011-06-18 15:32 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\5038a4070cfc72e23a191ab4ba38c477\stdole.ni.dll
    + 2011-09-21 03:37 . 2011-09-21 03:37 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\5038a4070cfc72e23a191ab4ba38c477\stdole.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\3dc984b6976f8bc8e7d2e9c2129e5ade\stdole.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\175efd925a4d4e7deccc7855d6dcb3c9\PresentationFontCache.ni.exe
    + 2011-09-26 01:06 . 2011-09-26 01:06 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\151ac6b026e8ca585e0dfd1ce33e8ecb\PresentationFontCache.ni.exe
    + 2011-10-16 17:08 . 2011-10-16 17:08 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\fa0c632bdf12e9d70405212bbcb255ee\PresentationCFFRasterizer.ni.dll
    + 2011-09-26 01:04 . 2011-09-26 01:04 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\b81308b591d239f587cc0e113d43fa35\PresentationCFFRasterizer.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\ec097538108aed5ed52aace1e4579f91\Microsoft.WSMan.Runtime.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\a4a66a531fcba4ae3db28c68033787a4\Microsoft.WSMan.Runtime.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\28baaf9cc7640ebf81cc317dbd5119d6\Microsoft.VisualC.ni.dll
    - 2011-06-18 15:27 . 2011-06-18 15:27 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\09f46722269da16f1a6d1abbb580d7ed\Microsoft.VisualC.ni.dll
    + 2011-09-21 02:19 . 2011-09-21 02:19 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\09f46722269da16f1a6d1abbb580d7ed\Microsoft.VisualC.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 62464 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtCOM\d44223fe604b9811a3a57cbf71c3f1f9\ehiExtCOM.ni.dll
    + 2011-09-22 01:45 . 2011-09-22 01:45 62464 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtCOM\8856fca280c8ecf7d1f798ed5a66dff1\ehiExtCOM.ni.dll
    - 2011-06-18 15:33 . 2011-06-18 15:33 62464 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtCOM\8856fca280c8ecf7d1f798ed5a66dff1\ehiExtCOM.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 62976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtCOM\2c497fedb47981d3f9cd789d3966ccf4\ehExtCOM.ni.dll
    + 2011-09-22 01:45 . 2011-09-22 01:45 62976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtCOM\071f35122c0c83d4791f7d7a5f2ae4a1\ehExtCOM.ni.dll
    + 2011-09-21 03:37 . 2011-09-21 03:37 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\be7de592b7f3c30299328ddff449db59\dfsvc.ni.exe
    - 2011-06-18 15:32 . 2011-06-18 15:32 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\be7de592b7f3c30299328ddff449db59\dfsvc.ni.exe
    + 2011-10-16 17:02 . 2011-10-16 17:02 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\42bec19a6f2ecc6f45c4d07b4e2d6083\dfsvc.ni.exe
    + 2011-09-21 02:23 . 2011-09-21 02:23 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\957ce139305f26be16614e23afa899a7\Accessibility.ni.dll
    - 2011-06-18 15:27 . 2011-06-18 15:27 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\957ce139305f26be16614e23afa899a7\Accessibility.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\006ccb4b89e6670929d149ff641369ef\Accessibility.ni.dll
    - 2011-06-18 15:15 . 2011-06-18 15:15 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a6485a160959fbed092dc2ddbed3509e\UIAutomationProvider.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a6485a160959fbed092dc2ddbed3509e\UIAutomationProvider.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5aab9bc687029a908fc01473f8e5f77b\UIAutomationProvider.ni.dll
    + 2011-10-16 17:23 . 2011-10-16 17:23 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\5a612d5f8aa2cd185d458018f1c516c8\System.Windows.Presentation.ni.dll
    + 2011-09-26 00:45 . 2011-09-26 00:45 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\3b0d2893e72d3baf1e67bcdb0b8737cf\System.Windows.Presentation.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\f02fc02350dad1da369a9c200b8ef277\System.Web.DynamicData.Design.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\46f477a132ae1e94e07d3873867cde2b\System.Web.DynamicData.Design.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\37cff04b1ba772743292372b797c28f6\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-16 17:20 . 2011-10-16 17:20 94208


    Continued...
    KenBrown2, Nov 8, 2011
    #22

  3. KenBrown2 Newcomer, in training

    c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\04ca8580a54386eb58d4a8815126f51b\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-16 17:20 . 2011-10-16 17:20 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\fa4e1998745ba5cfd3751d17172a50c1\System.AddIn.Contract.ni.dll
    - 2011-06-18 15:16 . 2011-06-18 15:16 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\971463f91825692f7cd123b2a3af721b\System.AddIn.Contract.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\971463f91825692f7cd123b2a3af721b\System.AddIn.Contract.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\b350a5cb539f16b07028cfa6483ee886\PresentationFontCache.ni.exe
    + 2011-10-16 17:19 . 2011-10-16 17:19 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\83be7d564785d94bf06b26fd10c8c981\PresentationFontCache.ni.exe
    + 2011-09-26 00:41 . 2011-09-26 00:41 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\4a2a3e502cc441c97350acf5c3dacc4e\PresentationCFFRasterizer.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\0e7ac2a3a8e276173911d35d51bfc0c8\PresentationCFFRasterizer.ni.dll
    - 2011-06-18 15:15 . 2011-06-18 15:15 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\78704655584ce2fd27a6c39573f6f36a\napcrypt.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\78704655584ce2fd27a6c39573f6f36a\napcrypt.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\67e74beedea6b1c61609c3199a41c112\napcrypt.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\bcdf31c5057d7222e2472d105e3ea5a7\Microsoft.WSMan.Runtime.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\018450526569962d4bb24564143c50f6\Microsoft.WSMan.Runtime.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\748a5063c67235044f516d4c2c5f090a\Microsoft.Vsa.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\41c8887d9cdeba5c067d34e2303a4a87\Microsoft.Vsa.ni.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\81bc126ce60194c5af7e6d4b1b03f6c1\Microsoft.VisualC.ni.dll
    - 2011-06-18 15:11 . 2011-06-18 15:11 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\81bc126ce60194c5af7e6d4b1b03f6c1\Microsoft.VisualC.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\0be0eb42238f115408fd2fab2b9a387f\Microsoft.VisualC.ni.dll
    + 2011-10-16 17:16 . 2011-10-16 17:16 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e51e9b0e132d5639a9d24d2fc93d84e2\Microsoft.Build.Framework.ni.dll
    - 2011-06-18 15:12 . 2011-06-18 15:12 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\9c6b098a9a7ee64cc4ff276a7babb0da\Microsoft.Build.Framework.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\9c6b098a9a7ee64cc4ff276a7babb0da\Microsoft.Build.Framework.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4bcbda8a78ed8746b758f2c961df98f9\Microsoft.Build.Framework.ni.dll
    - 2011-06-18 15:14 . 2011-06-18 15:14 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\09f4fc8e36b2012a5f3cb0a9d23b9e20\Microsoft.Build.Framework.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\09f4fc8e36b2012a5f3cb0a9d23b9e20\Microsoft.Build.Framework.ni.dll
    - 2011-06-18 15:13 . 2011-06-18 15:13 57856 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\b7dc08f390f95b199da497bba999b5dc\ehiUserXp.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 57856 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\b7dc08f390f95b199da497bba999b5dc\ehiUserXp.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 57856 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\188cef9a56634d7e4b9239c388576d94\ehiUserXp.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 73728 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\e6cbea88a9a9df05833dbd941a21528b\DriversHQ.DriverDetective.ExceptionLogging.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 73728 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\33cd844d8168c4fa50bbd03dda2a83a1\DriversHQ.DriverDetective.ExceptionLogging.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\e4c8338d98d38340bd2e9eb91eb4ad78\dfsvc.ni.exe
    + 2011-09-25 15:10 . 2011-09-25 15:10 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\710e9691861b597505a63f2b29e4d7d2\dfsvc.ni.exe
    - 2011-06-18 15:13 . 2011-06-18 15:13 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\710e9691861b597505a63f2b29e4d7d2\dfsvc.ni.exe
    - 2011-06-18 15:11 . 2011-06-18 15:11 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\c8750ecd71abac98fb26b2f4bf3a031a\Accessibility.ni.dll
    + 2011-09-22 00:05 . 2011-09-22 00:05 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\c8750ecd71abac98fb26b2f4bf3a031a\Accessibility.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\bcb66dbad2b45d05235b37a02f737eb5\Accessibility.ni.dll
    + 2011-02-24 13:49 . 2009-10-09 21:56 2048 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pwrshmsg.dll
    + 2011-02-24 13:49 . 2009-10-12 21:59 4096 c:\windows\SysWOW64\WindowsPowerShell\v1.0\en-US\powershell_ise.resources.dll
    + 2011-08-25 02:45 . 2011-07-11 13:25 2048 c:\windows\SysWOW64\tzres.dll
    - 2010-12-21 00:56 . 2010-10-28 13:20 2048 c:\windows\SysWOW64\tzres.dll
    + 2006-11-02 15:13 . 2006-11-02 15:13 7418 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\pubprn.vbs
    + 2011-10-15 13:58 . 2011-08-25 13:31 4096 c:\windows\SysWOW64\oleaccrc.dll
    - 2010-04-19 00:32 . 2009-10-08 21:07 4096 c:\windows\SysWOW64\oleaccrc.dll
    + 2006-11-02 12:19 . 2006-09-19 11:41 9560
    c:\windows\SysWOW64\networklist\icons\StockIcons\office_48.bin
    + 2006-11-02 12:19 . 2006-09-19 11:41 4280 c:\windows\SysWOW64\networklist\icons\StockIcons\office_32.bin
    + 2006-11-02 12:19 . 2006-09-19 11:41 2456 c:\windows\SysWOW64\networklist\icons\StockIcons\office_24.bin
    + 2006-11-02 12:19 . 2006-09-19 11:41 9560 c:\windows\SysWOW64\networklist\icons\StockIcons\house_48.bin
    + 2006-11-02 12:19 . 2006-09-19 11:41 4280 c:\windows\SysWOW64\networklist\icons\StockIcons\house_32.bin
    + 2006-11-02 12:19 . 2006-09-19 11:41 2456 c:\windows\SysWOW64\networklist\icons\StockIcons\house_24.bin
    + 2006-11-02 12:19 . 2006-09-19 11:41 9560 c:\windows\SysWOW64\networklist\icons\StockIcons\bench_48.bin
    + 2006-11-02 12:19 . 2006-09-19 11:41 4280 c:\windows\SysWOW64\networklist\icons\StockIcons\bench_32.bin
    + 2006-11-02 12:19 . 2006-09-19 11:41 2456 c:\windows\SysWOW64\networklist\icons\StockIcons\bench_24.bin
    + 2008-11-30 15:44 . 2011-11-08 03:45 1772 c:\windows\system32\WDI\ERCQueuedResolutions.dat
    - 2010-12-21 00:56 . 2010-10-28 13:56 2048 c:\windows\system32\tzres.dll
    + 2011-08-25 02:45 . 2011-07-11 13:45 2048 c:\windows\system32\tzres.dll
    + 2011-10-15 13:58 . 2011-08-25 13:54 4096 c:\windows\system32\oleaccrc.dll
    - 2010-04-19 00:32 . 2009-10-08 21:07 4096 c:\windows\system32\oleaccrc.dll
    + 2011-06-21 02:04 . 2011-06-21 02:04 9560 c:\windows\system32\networklist\icons\{CED50A58-9E1F-4B6D-8430-E5A692CF2425}_48.bin
    + 2011-06-21 02:04 . 2011-06-21 02:04 4280 c:\windows\system32\networklist\icons\{CED50A58-9E1F-4B6D-8430-E5A692CF2425}_32.bin
    + 2011-06-21 02:04 . 2011-06-21 02:04 2456 c:\windows\system32\networklist\icons\{CED50A58-9E1F-4B6D-8430-E5A692CF2425}_24.bin
    + 2011-07-30 22:18 . 2011-07-30 22:18 9560 c:\windows\system32\networklist\icons\{95043D38-2BED-49A6-A5F1-567CF577E295}_48.bin
    + 2011-07-30 22:18 . 2011-07-30 22:18 4280 c:\windows\system32\networklist\icons\{95043D38-2BED-49A6-A5F1-567CF577E295}_32.bin
    + 2011-07-30 22:18 . 2011-07-30 22:18 2456 c:\windows\system32\networklist\icons\{95043D38-2BED-49A6-A5F1-567CF577E295}_24.bin
    + 2011-11-08 03:46 . 2011-11-08 23:14 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2011-06-18 18:25 . 2011-06-18 18:25 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2011-06-18 18:25 . 2011-06-18 18:25 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2011-11-08 03:46 . 2011-11-08 23:14 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2011-10-16 16:02 . 2011-10-16 16:02 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\3a2ab56bb224b871516526753985ff69\System.Xml.Serialization.ni.dll
    + 2011-10-16 15:55 . 2011-10-16 15:55 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\5cc246adea1b07b9c2a76bbe86fbfe2e\dfsvc.ni.exe
    + 2009-09-19 15:53 . 2009-02-18 18:39 299368 c:\windows\SysWOW64\XPSViewer\XPSViewer.exe
    + 2011-08-10 14:50 . 2011-06-15 16:12 182784 c:\windows\SysWOW64\xmllite.dll
    + 2008-10-04 08:14 . 2006-11-10 01:25 525792 c:\windows\SysWOW64\x64\difxapi.dll
    + 2011-02-24 13:49 . 2009-10-09 21:57 154112 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pspluginwkr.dll
    + 2011-02-24 13:49 . 2009-10-09 21:57 204800 c:\windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe
    + 2011-02-24 13:49 . 2009-10-09 21:56 448000 c:\windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    + 2011-02-24 13:49 . 2009-10-09 21:57 112640 c:\windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitsTransfer\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll
    + 2011-02-24 13:49 . 2009-07-16 17:22 126976 c:\windows\SysWOW64\WindowsPowerShell\v1.0\CompiledComposition.Microsoft.PowerShell.GPowerShell.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 152064 c:\windows\SysWOW64\wextract.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 203776 c:\windows\SysWOW64\webcheck.dll
    + 2009-09-19 15:52 . 2009-04-11 06:28 247296 c:\windows\SysWOW64\wbem\WmiPrvSE.exe
    + 2009-09-19 15:52 . 2009-04-11 06:28 129024 c:\windows\SysWOW64\wbem\WmiDcPrv.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 625664 c:\windows\SysWOW64\wbem\WMIC.exe
    + 2009-09-19 15:51 . 2009-04-11 06:28 117248 c:\windows\SysWOW64\wbem\WMIADAP.exe
    + 2008-01-21 02:50 . 2008-01-21 02:50 143360 c:\windows\SysWOW64\wbem\Win32_Tpm.dll
    + 2008-01-21 02:51 . 2008-01-21 02:51 188928 c:\windows\SysWOW64\wbem\wbemdisp.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 250368 c:\windows\SysWOW64\wbem\wbemcntl.dll
    + 2008-01-21 02:48 . 2008-01-21 02:48 135168 c:\windows\SysWOW64\wbem\vsswmi.dll
    + 2008-01-21 02:49 . 2008-01-21 02:49 135168 c:\windows\SysWOW64\wbem\viewprov.dll
    + 2008-01-21 02:48 . 2008-01-21 02:48 160768 c:\windows\SysWOW64\wbem\vdswmi.dll
    + 2009-09-19 15:50 . 2009-04-11 06:28 189440 c:\windows\SysWOW64\wbem\mofd.dll
    + 2009-09-19 15:50 . 2009-04-11 06:28 614912 c:\windows\SysWOW64\wbem\fastprox.dll
    + 2009-09-19 15:50 . 2009-04-11 06:28 265728 c:\windows\SysWOW64\wbem\esscli.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 420864 c:\windows\SysWOW64\vbscript.dll
    - 2011-04-17 16:06 . 2011-02-17 06:23 420864 c:\windows\SysWOW64\vbscript.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 231936 c:\windows\SysWOW64\url.dll
    + 2011-10-15 13:58 . 2011-08-25 16:15 555520 c:\windows\SysWOW64\UIAutomationCore.dll
    - 2010-04-19 00:32 . 2009-10-08 21:08 555520 c:\windows\SysWOW64\UIAutomationCore.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 402432 c:\windows\SysWOW64\Speech\Engines\SR\srloc.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 851456 c:\windows\SysWOW64\Speech\Engines\SR\spsreng.dll
    + 2008-01-21 02:49 . 2008-01-21 02:49 115200 c:\windows\SysWOW64\setup\RasMigPlugin.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 125440 c:\windows\SysWOW64\setup\pbkmigr.dll
    + 2008-01-21 02:51 . 2008-01-21 02:51 246272 c:\windows\SysWOW64\setup\comsetup.dll
    + 2011-06-29 21:11 . 2011-04-29 15:59 276992 c:\windows\SysWOW64\schannel.dll
    - 2009-09-19 15:51 . 2009-04-11 06:28 293376 c:\windows\SysWOW64\psisdecd.dll
    + 2011-10-15 13:58 . 2011-07-29 16:01 293376 c:\windows\SysWOW64\psisdecd.dll
    + 2006-11-02 15:13 . 2006-11-02 15:13 105940 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prncnfg.vbs
    + 2008-01-21 02:50 . 2008-01-21 02:50 416768 c:\windows\SysWOW64\oobe\win32ui.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 266752 c:\windows\SysWOW64\oobe\W32UIRes.dll
    + 2008-01-21 02:50 . 2008-01-21 02:50 195640 c:\windows\SysWOW64\oobe\Setup.exe
    + 2008-01-21 02:50 . 2008-01-21 02:50 121856 c:\windows\SysWOW64\oobe\diagnostic.dll
    - 2011-06-16 11:10 . 2010-12-20 16:35 563712 c:\windows\SysWOW64\oleaut32.dll
    + 2011-10-15 13:58 . 2011-08-25 16:14 563712 c:\windows\SysWOW64\oleaut32.dll
    + 2011-10-15 13:58 . 2011-08-25 16:14 238080 c:\windows\SysWOW64\oleacc.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 123392 c:\windows\SysWOW64\occache.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 162304 c:\windows\SysWOW64\msrating.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 161792 c:\windows\SysWOW64\msls31.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 580608 c:\windows\SysWOW64\msfeeds.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 634268 c:\windows\SysWOW64\migwiz\SFLIST2K.dat
    + 2008-01-21 02:47 . 2008-01-21 02:47 155704 c:\windows\SysWOW64\migwiz\migwiz.exe
    + 2008-01-21 02:47 . 2008-01-21 02:47 372224 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-WMI-Core\WMIMigrationPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 143872 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Unimodem-Config\ModemMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 153600 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\msctfmig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 201216 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-StorageMigration\StorMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 115200 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-RasServer-MigPlugin\RasMigPlugin.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 125440 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-RasApi\pbkmigr.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 120832 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-PerformanceCounterInfrastructure-DL\CntrtextMig.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 135680 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-NetworkLoadBalancing-Core\NlbMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 129024 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-NDIS\ndismigplugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 122880 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-msmq-messagingcoreservice\mqmigplugin.dll
    + 2009-09-19 15:52 . 2009-04-11 06:28 539136 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer\MediaPlayer-DLMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 284672 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer-DRM-DL\drmmgrtn.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 209408 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IIS-DL\iismig.dll
    + 2009-09-19 15:53 . 2009-04-11 06:28 454144 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IasServer-MigPlugin\IasMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 122880 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-DHCPServerMigPlugin-DL\DhcpSrvMigPlugin.dll
    + 2008-01-21 02:47 . 2008-01-21 02:47 150016 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-ADFS-DL\adfsmig.dll
    + 2011-06-21 00:06 . 2011-06-21 00:06 240288 c:\windows\SysWOW64\Macromed\Flash\FlashUtil10t_ActiveX.exe
    + 2011-06-21 00:06 . 2011-06-21 00:06 321184 c:\windows\SysWOW64\Macromed\Flash\FlashUtil10t_ActiveX.dll
    + 2011-07-12 17:41 . 2011-04-12 16:11 859648 c:\windows\SysWOW64\kernel32.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 716800 c:\windows\SysWOW64\jscript.dll
    - 2009-09-19 15:53 . 2009-04-11 06:28 327680 c:\windows\SysWOW64\IME\IMEJP10\IMJPAPI.DLL
    + 2011-09-16 01:20 . 2011-07-26 16:04 327680 c:\windows\SysWOW64\IME\IMEJP10\IMJPAPI.DLL
    + 2011-11-04 07:29 . 2011-11-04 07:29 150528 c:\windows\SysWOW64\iexpress.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 142848 c:\windows\SysWOW64\ieUnatt.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 176640 c:\windows\SysWOW64\ieui.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 118784 c:\windows\SysWOW64\iepeers.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 353584 c:\windows\SysWOW64\iedkcs32.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 434176 c:\windows\SysWOW64\ieapfltr.dll
    - 2010-04-17 15:41 . 2009-03-08 11:32 163840 c:\windows\SysWOW64\ieakui.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 163840 c:\windows\SysWOW64\ieakui.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 227840 c:\windows\SysWOW64\ieaksie.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 130560 c:\windows\SysWOW64\ieakeng.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 110592 c:\windows\SysWOW64\IEAdvpack.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 223232 c:\windows\SysWOW64\dxtrans.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 353792 c:\windows\SysWOW64\dxtmsft.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 114176 c:\windows\SysWOW64\advpack.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 101888 c:\windows\SysWOW64\admparse.dll
    + 2011-08-10 14:50 . 2011-06-15 16:16 180736 c:\windows\system32\xmllite.dll
    + 2011-08-10 14:50 . 2011-06-17 16:16 451072 c:\windows\system32\winsrv.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 160256 c:\windows\system32\wextract.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 249344 c:\windows\system32\webcheck.dll
    + 2009-05-14 00:47 . 2011-11-09 02:44 327172 c:\windows\system32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
    + 2006-11-02 15:45 . 2011-11-08 23:20 102128 c:\windows\system32\WDI\BootPerformanceDiagnostics_SystemData.bin
    + 2011-11-04 07:29 . 2011-11-04 07:29 603648 c:\windows\system32\vbscript.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 237056 c:\windows\system32\url.dll
    + 2011-10-15 13:58 . 2011-08-25 16:20 735744 c:\windows\system32\UIAutomationCore.dll
    + 2011-06-29 21:11 . 2011-04-29 16:15 344576 c:\windows\system32\schannel.dll
    + 2008-01-21 02:47 . 2007-09-18 00:05 216064 c:\windows\system32\recdisc.exe
    - 2009-09-19 15:52 . 2009-04-11 07:11 375808 c:\windows\system32\psisdecd.dll
    + 2011-10-15 13:58 . 2011-07-29 16:08 375808 c:\windows\system32\psisdecd.dll
    + 2006-11-02 12:46 . 2011-11-09 02:45 644118 c:\windows\system32\perfh009.dat
    + 2006-11-02 12:46 . 2011-11-09 02:45 117992 c:\windows\system32\perfc009.dat
    + 2011-10-15 13:58 . 2011-08-25 16:19 847360 c:\windows\system32\oleaut32.dll
    - 2011-06-16 11:10 . 2010-12-20 16:59 847360 c:\windows\system32\oleaut32.dll
    + 2011-10-15 13:58 . 2011-08-25 16:19 332288 c:\windows\system32\oleacc.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 149504 c:\windows\system32\occache.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 197120 c:\windows\system32\msrating.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 222208 c:\windows\system32\msls31.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 697344 c:\windows\system32\msfeeds.dll
    + 2010-04-17 23:29 . 2011-05-24 23:14 270720 c:\windows\system32\MpSigStub.exe
    - 2010-04-17 23:29 . 2011-02-02 22:11 270720 c:\windows\system32\MpSigStub.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 818176 c:\windows\system32\jscript.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 103936 c:\windows\system32\inseng.dll
    + 2011-09-16 01:20 . 2011-07-26 16:28 507904 c:\windows\system32\IME\IMEJP10\IMJPAPI.DLL
    - 2009-09-19 15:53 . 2009-04-11 07:11 507904 c:\windows\system32\IME\IMEJP10\IMJPAPI.DLL
    + 2011-11-04 07:29 . 2011-11-04 07:29 165888 c:\windows\system32\iexpress.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 173056 c:\windows\system32\ieUnatt.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 248320 c:\windows\system32\ieui.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 111616 c:\windows\system32\iesysprep.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 145920 c:\windows\system32\iepeers.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 403248 c:\windows\system32\iedkcs32.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 534528 c:\windows\system32\ieapfltr.dll
    - 2010-04-17 15:41 . 2009-03-08 11:39 163840 c:\windows\system32\ieakui.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 163840 c:\windows\system32\ieakui.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 267776 c:\windows\system32\ieaksie.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 160256 c:\windows\system32\ieakeng.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 135168 c:\windows\system32\IEAdvpack.dll
    - 2006-11-02 15:21 . 2011-06-16 23:17 305984 c:\windows\system32\FNTCACHE.DAT
    + 2006-11-02 15:21 . 2011-10-16 16:40 305984 c:\windows\system32\FNTCACHE.DAT
    + 2011-11-04 07:29 . 2011-11-04 07:29 282112 c:\windows\system32\dxtrans.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 452608 c:\windows\system32\dxtmsft.dll
    + 2009-09-19 15:53 . 2009-04-11 07:10 204288 c:\windows\system32\DriverStore\FileRepository\bth.inf_204106c4\fsquirt.exe
    + 2011-07-12 17:41 . 2011-04-21 14:17 695296 c:\windows\system32\DriverStore\FileRepository\bth.inf_204106c4\bthport.sys
    - 2011-06-16 11:10 . 2011-04-29 13:39 275456 c:\windows\system32\drivers\mrxsmb10.sys
    + 2011-08-10 14:50 . 2011-07-06 15:49 275456 c:\windows\system32\drivers\mrxsmb10.sys
    - 2010-04-17 15:54 . 2011-06-12 23:55 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
    + 2010-04-17 15:54 . 2011-11-05 19:22 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
    + 2011-11-04 07:29 . 2011-11-04 07:29 136192 c:\windows\system32\advpack.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 114176 c:\windows\system32\admparse.dll
    + 2011-02-14 03:14 . 2011-11-08 03:45 289040 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2011-04-06 20:48 . 2011-04-06 20:48 236880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.dll
    - 2011-04-13 02:16 . 2011-04-13 02:16 597832 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
    + 2011-07-09 14:05 . 2011-07-09 14:05 597832 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
    + 2011-04-06 21:45 . 2011-04-06 21:45 260448 c:\windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe
    + 2011-05-17 14:08 . 2011-05-17 14:08 578896 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    - 2010-03-18 18:27 . 2010-03-18 18:27 578896 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    + 2011-10-15 13:58 . 2011-07-08 11:52 485192 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
    - 2011-06-18 00:19 . 2011-03-29 10:52 485192 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 916312 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpftxt_v0400.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 236880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Net.dll
    + 2011-07-09 13:30 . 2011-07-09 13:30 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
    - 2011-04-12 19:11 . 2011-04-12 19:11 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 191840 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
    + 2011-05-17 13:27 . 2011-05-17 13:27 413520 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
    + 2011-07-09 13:30 . 2011-07-09 13:30 956240 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
    - 2011-04-12 19:11 . 2011-04-12 19:11 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
    + 2011-05-17 13:27 . 2011-05-17 13:27 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
    - 2011-06-18 00:19 . 2011-03-29 10:53 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-10-15 13:58 . 2011-07-08 11:53 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-10-15 13:58 . 2011-07-08 11:53 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2011-06-18 00:19 . 2011-03-29 10:52 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2011-06-18 14:49 . 2011-06-18 14:49 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-06-18 14:49 . 2011-06-18 14:49 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-06-18 14:49 . 2011-06-18 14:49 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2008-09-03 18:10 . 2011-09-16 10:41 888080


    Continued
    KenBrown2, Nov 8, 2011
    #23

  4. KenBrown2 Newcomer, in training

    c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
    - 2008-09-03 18:10 . 2011-06-16 23:09 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
    - 2008-09-03 18:10 . 2011-06-16 23:09 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
    + 2008-09-03 18:10 . 2011-09-16 10:41 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
    - 2008-09-03 18:10 . 2011-06-16 23:09 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
    + 2008-09-03 18:10 . 2011-09-16 10:41 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
    - 2008-09-03 18:10 . 2011-06-16 23:09 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
    + 2008-09-03 18:10 . 2011-09-16 10:41 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
    + 2010-03-18 17:16 . 2010-03-18 17:16 915800 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\wpftxt_x86.dll
    + 2010-09-21 03:07 . 2010-09-21 03:07 338856 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\readerupdater.exe
    + 2010-09-22 22:10 . 2010-09-22 22:10 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\nppdf32.dll
    + 2010-09-10 22:17 . 2010-09-10 22:17 684032 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\JP2KLib.dll
    + 2010-09-23 00:41 . 2010-09-23 00:41 542168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AdobeCollabSync.exe
    + 2010-09-21 03:07 . 2010-09-21 03:07 932288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\adobearm.exe
    + 2010-09-23 08:47 . 2010-09-23 08:47 349616 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32.exe
    + 2010-09-22 22:04 . 2010-09-22 22:04 660912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroPDF.dll
    + 2010-09-22 23:39 . 2010-09-22 23:39 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\acrobroker.exe
    + 2010-09-21 03:07 . 2010-09-21 03:07 338856 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\acrobatupdater.exe
    + 2010-09-22 22:50 . 2010-09-22 22:50 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\a3dutility.exe
    + 2011-01-14 11:10 . 2011-01-14 11:10 155520 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD6.DLL
    + 2011-01-14 11:10 . 2011-01-14 11:10 140160 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL2.DLL
    - 2006-11-02 12:40 . 2011-06-16 23:42 143360 c:\windows\inf\infstrng.dat
    + 2006-11-02 12:40 . 2011-07-15 02:07 143360 c:\windows\inf\infstrng.dat
    - 2006-11-02 12:40 . 2010-04-19 02:40 665600 c:\windows\inf\drvindex.dat
    + 2006-11-02 12:40 . 2011-07-15 02:07 665600 c:\windows\inf\drvindex.dat
    + 2011-10-16 15:53 . 2011-10-16 15:53 336896 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\7bd6a3a7ccecff64ae970ef25b5fedb0\WindowsFormsIntegration.ni.dll
    + 2011-10-16 15:44 . 2011-10-16 15:44 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\a5daacd5d0f46d77f10814f975152b34\UIAutomationTypes.ni.dll
    + 2011-10-16 15:44 . 2011-10-16 15:44 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\86dd26195072a7ba1241c316a90d76c0\UIAutomationProvider.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\9b9b20440b1acb0bcbbb2f66aa421f0e\UIAutomationClient.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\d26a80d8e9ee010d3d1bc8c8c19f2d4d\System.Xml.Linq.ni.dll
    + 2011-10-16 15:44 . 2011-10-16 15:44 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\2f4927e3f120092b6d65371d502d6e73\System.Windows.Input.Manipulations.ni.dll
    + 2011-10-16 15:43 . 2011-10-16 15:43 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\578f67c81f61729a88f5de3b46f73c29\System.Transactions.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\127b422c3177e9f042ee3390dc53abff\System.ServiceProcess.ni.dll
    + 2011-10-16 15:51 . 2011-10-16 15:51 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\b93d584ea973a95d5e2632445fe47d30\System.ServiceModel.Channels.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\acd98781c9317af9edaf3da46ce1befc\System.ServiceModel.Routing.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\b94e86c584564773de3fe2b4b3b8ecbb\System.Security.ni.dll
    + 2011-10-16 15:43 . 2011-10-16 15:43 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\6cd778cd2c8c61130ff71ee7a685222b\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-10-16 15:43 . 2011-10-16 15:43 987648 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\8eaff8b779c73cbd317c1431a51ed5fa\System.Runtime.Remoting.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\55ac95edd96a5e6b675bb9b42d460b0b\System.Numerics.ni.dll
    + 2011-10-16 15:50 . 2011-10-16 15:50 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\5d1aa20dae99fcc9bd68410eb81eb9c0\System.Net.ni.dll
    + 2011-10-16 15:50 . 2011-10-16 15:50 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\75f4107c91447218fac9cc052c77d89d\System.Messaging.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\1e191470099054203157049f808f6629\System.Management.Instrumentation.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\e5f5a73a8fb1040b1f30a14a2adf9d5d\System.IO.Log.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\d23c19bfe0f8a508f143c5bf5d0d732f\System.IdentityModel.Selectors.ni.dll
    + 2011-10-16 15:43 . 2011-10-16 15:43 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\5a86b6067f001cef079bde90f001d54d\System.EnterpriseServices.Wrapper.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\86913afe1c8f5138c9ba36fdf6603bf8\System.Dynamic.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\cc9c9cebee876445d2b6439b15ffef94\System.DirectoryServices.Protocols.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\8465ce07d4753d5891458d09ee0b1fe7\System.Device.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\bc62508161a5a687274ef5cb39a09da3\System.Data.DataSetExtensions.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c9db420a1795c4347f93f2f089a8b49f\System.Configuration.Install.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\deff07dc250a4de404090ed98736b690\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\89a509497e04317189aa568e44d7a1e5\System.AddIn.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\04abc0f1feffd7a15c4815c15738324b\System.Activities.DurableInstancing.ni.dll
    + 2011-10-16 15:29 . 2011-10-16 15:29 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\bf456f7f6470250f58b92158aefdc008\SMSvcHost.ni.exe
    + 2011-10-16 15:43 . 2011-10-16 15:43 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\2d3c35ffc646287827a79c31eb91c21d\SMDiagnostics.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\bafbbd94a2c60bdf546669699b05a7fe\PresentationFramework.Classic.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\a60a1e1a47525ec0b227d3d612d65c60\PresentationFramework.Royale.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\900cacd34dc5bd770289d04b0b6face1\PresentationFramework.Aero.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\39a8890967e22ae6bd24a2ebf7ee694e\PresentationFramework.Luna.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 422400 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\19221010dfff8328105a4706e4a31f7a\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\694c3f74f790e2c327f114dfbe4983c2\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-16 15:29 . 2011-10-16 15:29 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\39973e3573bd27e6897e631ac1570c85\CustomMarshalers.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\962b04386ebf18f5871d5ceefa83ba4b\WindowsFormsIntegration.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\5b96ee4992d9559ba5483c769bc5c889\UIAutomationTypes.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\1c29539a07226b411e0a1a47aed57183\UIAutomationClient.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\bd729791a7504ef9ecb4ad6ebfd94935\System.Xml.Linq.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\dcad72e49476386b76a81d2df187c32c\System.Windows.Input.Manipulations.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\caf1d94cb89859c72d6c8cd8774068d3\System.Transactions.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\aab1c287bc73a03c51b55fb3f102c27e\System.ServiceProcess.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 369664
    c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\bd104bb2f798661c5a972249582b5441\System.ServiceModel.Routing.ni.dll
    + 2011-10-16 13:46 . 2011-10-16 13:46 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\aecd169d75edbcbe626d2a222a02e9f3\System.Security.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\bed774dde4b62ed1d2d55c2d1769d600\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 762880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\44d18693baaee5ee0e6f6fd4910e8f81\System.Runtime.Remoting.ni.dll
    + 2011-10-16 13:44 . 2011-10-16 13:44 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\97126244f88693adb36f94116d8d0dda\System.Numerics.ni.dll
    + 2011-10-16 16:01 . 2011-10-16 16:01 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\56fe9070b1d56613fd5cf7c73ec3b26f\System.Net.ni.dll
    + 2011-10-16 16:01 . 2011-10-16 16:01 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\420c9d9b271bc26d1b6f437f1f4913a9\System.Messaging.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\b71ea67c5bfa5b660efc12eb1c6ea4af\System.Management.Instrumentation.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\267d7dbdbe126590fba4a11c1ab12926\System.IO.Log.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\4ca1f130cbacf72beedf13da42b93e75\System.IdentityModel.Selectors.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\fd4f85af43b2c177c8d085a8ba3f4993\System.EnterpriseServices.Wrapper.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\fd4f85af43b2c177c8d085a8ba3f4993\System.EnterpriseServices.ni.dll
    + 2011-10-16 13:46 . 2011-10-16 13:46 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\b806ef4a19c8157e7858e0a15f9cf48d\System.Dynamic.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\4178d8536c67896ab77af36a48ee7ec4\System.DirectoryServices.Protocols.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\324617c0a492d6acc64325c836553f2c\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\ca25f888c067fa170d8bba824efa2ca8\System.Device.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\282487a15f595c199b6cc640ea8995e8\System.Data.DataSetExtensions.ni.dll
    + 2011-10-16 13:46 . 2011-10-16 13:46 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\4844dd28e0611d1ebd1e449fe822c2a5\System.Configuration.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\06f71e66b9913a24c22f85a0caef3ae4\System.Configuration.Install.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\fa608e0882b98981cb6fd6e0754bdff8\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\a91d48ec926171da7de01cf2a10b1dfc\System.ComponentModel.Composition.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\f407937d4694c46537c470007a1df957\System.AddIn.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\80347a66af30b5c14c0114baee4c64f8\System.Activities.DurableInstancing.ni.dll
    + 2011-10-16 15:55 . 2011-10-16 15:55 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\fcbb4a33ebdc8562603bc7f725a088ce\SMSvcHost.ni.exe
    + 2011-10-16 15:56 . 2011-10-16 15:56 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\398a52caf1e9fd1a6ea9dd589b0f6e68\SMDiagnostics.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\d2d4bdbd9e2196e04dcdd68994a1f952\PresentationFramework.Royale.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9211f2faac02f0082b201a95731736c4\PresentationFramework.Aero.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\6e48fb2ce01b4758a68f61651d6461d8\PresentationFramework.Luna.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\351819dc653a07a310cf1387b3266936\PresentationFramework.Classic.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\99cd15931eb2db4711057dce2af7d93a\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\f4ab32c177d931f26072a14c27efc3b5\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-16 15:55 . 2011-10-16 15:55 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\48ad8351ab66166c853d410d3282a408\CustomMarshalers.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\d3b8ba89ad6b7e3dd72e903eba259c9a\WsatConfig.ni.exe
    + 2011-09-26 01:11 . 2011-09-26 01:11 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\5f6a5d0fd18e43b62272d501e4cecc4b\WsatConfig.ni.exe
    + 2011-09-26 01:11 . 2011-09-26 01:11 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\f055886146673a35518ee749c53f0417\WindowsFormsIntegration.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\ea6d8df86fc35898ec0ed1931286079d\WindowsFormsIntegration.ni.dll
    + 2011-10-16 17:08 . 2011-10-16 17:08 257024 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\fcc1bb8b7816577d8ace229d8b10efc1\UIAutomationTypes.ni.dll
    - 2011-06-18 15:37 . 2011-06-18 15:37 257024 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\4587969f21341220dc17747f280477b2\UIAutomationTypes.ni.dll
    + 2011-09-26 01:04 . 2011-09-26 01:04 257024 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\4587969f21341220dc17747f280477b2\UIAutomationTypes.ni.dll
    + 2011-09-26 01:04 . 2011-09-26 01:04 120320 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\ff10a07c2b72a66edbe6f45f91d17769\UIAutomationProvider.ni.dll
    - 2011-06-18 15:37 . 2011-06-18 15:37 120320 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\ff10a07c2b72a66edbe6f45f91d17769\UIAutomationProvider.ni.dll
    + 2011-10-16 17:08 . 2011-10-16 17:08 120320 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\caf208f16abe2d305effc78e1f81e9b5\UIAutomationProvider.ni.dll
    + 2011-10-16 17:08 . 2011-10-16 17:08 648704 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\ff7ff4d1cef4eb69de7a031b48398987\UIAutomationClient.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 648704 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\9ec639af32b36d056d5044de48a51fbf\UIAutomationClient.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 290304 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\a386c1261e6fa238c30d1ac51f56ef5b\TaskScheduler.ni.dll
    + 2011-09-26 01:11 . 2011-09-26 01:11 290304 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\0ee32f3917dd39d4a7f4e52314b9157e\TaskScheduler.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\e961e5d1c86bf0c2b52249c3eb1d476c\System.Xml.Linq.ni.dll
    + 2011-09-26 01:11 . 2011-09-26 01:11 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\483ebadfe1f658e95b87a934cdd6cf8e\System.Xml.Linq.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\d9d826b4fd018549cd3a168f1f6d5b2a\System.Web.Routing.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\484c3ca1119870f02609a03d3a94be43\System.Web.Routing.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\f2602c5bcb6c2065db8329f1f7f32ae1\System.Web.RegularExpressions.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\b7e323c4caccb48a6c7cd45c5c8b16f7\System.Web.RegularExpressions.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 449536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\ee1384ab27cb5fc1885d21a390aa8ea8\System.Web.Entity.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 449536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\514928967cafc8e4a7671f68ce4eb43a\System.Web.Entity.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\b27836d6560a49750d21920693d19627\System.Web.Entity.Design.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\6614eb0a91d0de4f50300769e4f2b562\System.Web.Entity.Design.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 754176 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\e5ebefe6b81d9c789c8749521676f29a\System.Web.DynamicData.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 754176 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\d7e9403b32a63c9e61ac7ba90c37b757\System.Web.DynamicData.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\22e583697dbb5510101fab4aa5d18254\System.Web.Abstractions.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\0788917377526dad632f69a0c29a17f2\System.Web.Abstractions.ni.dll
    + 2011-09-21 02:20 . 2011-09-21 02:20 921088 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\b433e4de6804ce087c2c5827efc8feff\System.Transactions.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 921088 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\26713be7f0119f1ccd5cb301b4088616\System.Transactions.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\fd5a2f4321cd339b0d7dfcd46aac578c\System.ServiceProcess.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\fb509de55bc82e23c862dcd0a8823eb8\System.ServiceProcess.ni.dll
    + 2011-09-21 02:19 . 2011-09-21 02:19 929280 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\9191aa60b79eda0c7df35784e1986195\System.Security.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 929280 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\6ec0affc7f8a6ef94bb7457353bed773\System.Security.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\d526d3a3a6657c8cd4508ebe888d50ad\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\0d1187c395060f06d84e4c398e7729e2\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 911872 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\691b5229cb26bbb7fdb9ae20c289ad7f\System.Net.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 911872 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\2505633b5679bba3e3da53db79616c62\System.Net.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 782848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\43950691e68fa889d8276281c843c90a\System.Messaging.ni.dll
    + 2011-09-21 02:25 . 2011-09-21 02:25 782848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\32d484a0a6db3c92f0e593a958dc265a\System.Messaging.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\bb552a747610ce1e38ca20f767a905b3\System.Management.Instrumentation.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\a445650911635ffcedceaa5759e96c83\System.Management.Instrumentation.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 568832 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\b4d997aeba03b77e5d09f9eabd3e7ffb\System.IO.Log.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 568832 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\1b7cfed2b4bac8be0d75b2e5840e1648\System.IO.Log.ni.dll
    + 2011-09-21 02:25 . 2011-09-21 02:25 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\e327689326341f4d7656ff743c939838\System.IdentityModel.Selectors.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\b936404b70f3d96230370185221d2988\System.IdentityModel.Selectors.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\caab7166e3bd29ad25ddab20072bfa47\System.EnterpriseServices.Wrapper.dll
    + 2011-09-21 02:20 . 2011-09-21 02:20 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\60d0a368a83327d788a62b762a670cce\System.EnterpriseServices.Wrapper.dll
    + 2011-10-16 16:50 . 2011-10-16 16:50 289280 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\23ae39416a886e06e99e5f1a362a0ca2\System.Drawing.Design.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 289280 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\1049a906d8aeb09b7cf608ed4670b48a\System.Drawing.Design.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 650240 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\d3b45c9a426e4247060210a4442e57c1\System.DirectoryServices.Protocols.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 650240 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\495ff50306c8f7ca33e6407b4660ade5\System.DirectoryServices.Protocols.ni.dll
    + 2011-09-26 01:08 . 2011-09-26 01:08 489472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\b68168596944761a8a1613929f26ecd8\System.Data.Services.Design.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 489472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\8ae8c8c594d7ad7f6430b65d72d0cb58\System.Data.Services.Design.ni.dll
    + 2011-10-16 17:10 . 2011-10-16 17:10 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\5e7784d0562f54ba2bac4fab3f3c7da6\System.Data.DataSetExtensions.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\376e4579a8a9a6075b329e4414db7e30\System.Data.DataSetExtensions.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 191488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\a00d13945ba2ae72e0f81a330405ef94\System.Configuration.Install.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 191488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\41852b2f76b9a3883be55cd39268339b\System.Configuration.Install.ni.dll
    + 2011-10-16 17:10 . 2011-10-16 17:10 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\e0828964993d832dabb31b17c6d82a02\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\3684f5079f82b87759efed87ecb52c11\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-16 17:10 . 2011-10-16 17:10 889856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\892fa605806b4152e60a5b80d01d646a\System.AddIn.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 889856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\4e4ecc6b61f0e2a39ddfdae3ada992b0\System.AddIn.ni.dll
    + 2011-10-16 17:10 . 2011-10-16 17:10 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\fab800c985d2637100bb4a74ee70c5c1\System.AddIn.Contract.ni.dll
    - 2011-06-18 15:39 . 2011-06-18 15:39 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\eebfb193348c4ee09fde0f55897153ef\System.AddIn.Contract.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\eebfb193348c4ee09fde0f55897153ef\System.AddIn.Contract.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\88aeb9f3b7d6a8124f470a41a904d42a\sysglobl.ni.dll
    - 2011-06-18 15:42 . 2011-06-18 15:42 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\88aeb9f3b7d6a8124f470a41a904d42a\sysglobl.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\091348740bb38b85dece99d1deb33d06\sysglobl.ni.dll
    + 2011-10-16 17:10 . 2011-10-16 17:10 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\e50076b441b0a3744dfb857e8c10c7a3\SMSvcHost.ni.exe
    + 2011-09-26 01:06 . 2011-09-26 01:06 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\c2ae3ebf99c837d022aaafafc6cd04fd\SMSvcHost.ni.exe
    + 2011-10-16 17:02 . 2011-10-16 17:02 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\fa7982dd82101344f9a0ec5a7df12d13\SMDiagnostics.ni.dll
    + 2011-09-21 02:25 . 2011-09-21 02:25 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\37cadb80dab6954ac815ad5530032508\SMDiagnostics.ni.dll
    + 2011-10-16 17:10 . 2011-10-16 17:10 438784 c:\windows\assembly\NativeImages_v2.0.50727_64\ServiceModelReg\6048f8ab1d025e6654e291bf4f1d630d\ServiceModelReg.ni.exe
    + 2011-09-26 01:06 . 2011-09-26 01:06 438784 c:\windows\assembly\NativeImages_v2.0.50727_64\ServiceModelReg\383e793a6af09df130b14f96138aaa54\ServiceModelReg.ni.exe
    + 2011-09-26 01:06 . 2011-09-26 01:06 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\c2b971104c296416bb15eb458ec5f7c9\PresentationFramework.Aero.ni.dll
    + 2011-10-16 16:47 . 2011-10-16 16:47 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\b1a7be598a0c377152ef1f42e7c1eac3\PresentationFramework.Royale.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a9367ed6263e99440976427a650a86bc\PresentationFramework.Classic.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a46418abae39bda36af970a351a8cd23\PresentationFramework.Luna.ni.dll
    + 2011-10-16 16:47 . 2011-10-16 16:47 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\939a859ef807fb6511db2a22ede35d29\PresentationFramework.Luna.ni.dll
    + 2011-10-16 16:47 . 2011-10-16 16:47 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\574c8f267bed7da9a80d9f3a428099bd\PresentationFramework.Aero.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\5571660610f416a16f101e9dc615328d\PresentationFramework.Royale.ni.dll
    + 2011-10-16 16:47 . 2011-10-16 16:47 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\3f65d45a3ff81a26fc82e5c6fcc10370\PresentationFramework.Classic.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 852992 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\64af7da17fc9439d2c8f23d34feb260b\napsnap.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 852992 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\155c6b2c094e804bc48f3c697c8b5875\napsnap.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 154112 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\8ba28cd475eddd59aa72048078b9d38d\napinit.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 154112 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\336c6eca608a2bd0f07760aa73fc1dca\napinit.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 177152 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\e1b9bb0c83dd8cac30d87fdfd7166756\naphlpr.ni.dll
    - 2011-06-18 15:39 . 2011-06-18 15:39 177152 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\e1b9bb0c83dd8cac30d87fdfd7166756\naphlpr.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 177152 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\c1aca362549bc87db4cd9b39e915fc34\naphlpr.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 126464 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\fa472bf1f8f24c6ed281ed4dcd9d6571\napcrypt.ni.dll
    - 2011-06-18 15:39 . 2011-06-18 15:39 126464 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\fa472bf1f8f24c6ed281ed4dcd9d6571\napcrypt.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 126464 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\db12e1be90224e573376cc86b197d869\napcrypt.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\eb2563ff14d1cea338648ac1feeafc1f\MSBuild.ni.exe
    + 2011-09-21 02:19 . 2011-09-21 02:19 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\3fed3dfbbe1d477a86b5c5685e98bee1\MSBuild.ni.exe
    + 2011-10-16 17:05 . 2011-10-16 17:05 414720 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\f5e34def2ddaf9fbab2225e5a302d33f\MMCFxCommon.ni.dll
    + 2011-09-22 01:47 . 2011-09-22 01:47 414720 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\407d27837b8ecea3b66bdbd280586e5d\MMCFxCommon.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 657920 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\a340bab4c167d4ed8abeee6ce5685772\Microsoft.WSMan.Management.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 657920 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\94f66b0665ea9b4b709b570e7c814fed\Microsoft.WSMan.Management.ni.dll
    + 2011-09-25 14:43 . 2011-09-25 14:43 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\8378df092aebbb9e875f3daeb073b345\Microsoft.Vsa.ni.dll
    + 2011-10-16 17:07 . 2011-10-16 17:07 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\0e11d1b7322a3ccdcf4f62122608d657\Microsoft.Vsa.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\fed874427d329b3843becb214c2cbb24\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\39be58c468f0bf887a7548a6388cf419\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-16 17:06 . 2011-10-16 17:06 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\ec5a27a580cc2bf11095f4734768280c\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
    + 2011-09-22 01:48 . 2011-09-22 01:48 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\df75eeffbe8172f901c0f995f9d86205\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 224768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\d1d9afd53ef03252bb4407613ab11a1d\Microsoft.PowerShell.Security.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\bf181ea99e6aa101d6d6fcb21fb851ed\Microsoft.PowerShell.GraphicalHost.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\b0be0bdc2b41922fc436aaf40fbcc943\Microsoft.PowerShell.GraphicalHost.ni.dll
    + 2011-10-16 17:07 . 2011-10-16 17:07 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a097fc0285187f39c11115f78eef26af\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 224768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\626377739fe928133c5759b150ff933b\Microsoft.PowerShell.Security.ni.dll
    + 2011-09-25 14:44 . 2011-09-25 14:44 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\201551dfa891ef2533b4f6961f158b53\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2011-10-16 17:04 . 2011-10-16 17:04 324608 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e4b446852f196438818c0ce9e68605e8\Microsoft.MediaCenter.Shell.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 933376 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c981dc80ad13bec94aa54b8fb28b9b86\Microsoft.MediaCenter.ni.dll
    + 2011-10-16 17:04 . 2011-10-16 17:04 946688 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\9cd63300be3a34c0f37e141403dd4d02\Microsoft.MediaCenter.Sports.ni.dll
    + 2011-09-22 01:46 . 2011-09-22 01:46 324608 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\848c9da3e69048629734e47234788a7d\Microsoft.MediaCenter.Shell.ni.dll
    + 2011-09-22 01:45 . 2011-09-22 01:45 933376 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\643b81852e3d9761f609db2d2d149e6f\Microsoft.MediaCenter.ni.dll
    + 2011-09-22 01:46 . 2011-09-22 01:46 946688 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\3009e8d27d0662799fcde4a99cfaa62c\Microsoft.MediaCenter.Sports.ni.dll
    + 2011-09-22 01:47 . 2011-09-22 01:47 794624 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\7bccb8455ab63acd2fd36dbb6348b77a\Microsoft.ManagementConsole.ni.dll
    + 2011-10-16 17:05 . 2011-10-16 17:05 794624 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\3de8add426da03a3b88c5a35d9d60855\Microsoft.ManagementConsole.ni.dll
    + 2011-09-22 01:48 . 2011-09-22 01:48 228864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\f62d326919623ec6e0ab3f835aedb3f5\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-10-16 17:06 . 2011-10-16 17:06 228864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\b23eceb3a5e8db89f107bdc02ab6cda9\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-09-22 01:48 . 2011-09-22 01:48 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\9f583d5c7de9d6469697e822dbabe645\Microsoft.Build.Utilities.ni.dll
    + 2011-10-16 17:06 . 2011-10-16 17:06 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\1a43bbc417d8f56c5fd3d828bdca0c75\Microsoft.Build.Utilities.ni.dll
    + 2011-10-16 17:06 . 2011-10-16 17:06 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\96c6b81949f7e09457d21c1591996471\Microsoft.Build.Framework.ni.dll
    - 2011-06-18 15:28 . 2011-06-18 15:28 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\5cca853a01d7873f5d763de8677b8482\Microsoft.Build.Framework.ni.dll
    + 2011-09-21 02:19 . 2011-09-21 02:19 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\5cca853a01d7873f5d763de8677b8482\Microsoft.Build.Framework.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\592acc376f9c89d56f0c781289b42805\Microsoft.Build.Framework.ni.dll
    - 2011-06-18 15:35 . 2011-06-18 15:35 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\14790d6818b2c3722b3877caf007a418\Microsoft.Build.Framework.ni.dll
    + 2011-09-22 01:48 . 2011-09-22 01:48 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\14790d6818b2c3722b3877caf007a418\Microsoft.Build.Framework.ni.dll
    + 2011-10-16 17:05 . 2011-10-16 17:05 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\d4aed105d188ae1bfd6ed294f7c0eef6\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-09-22 01:47 . 2011-09-22 01:47 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\a65a7ff52cef80cd25d5f7a08be30bde\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-10-16 17:05 . 2011-10-16 17:05 372224 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\8724bb8184276f3d4fe41218ebf5f91a\Mcx2Dvcs.ni.dll
    + 2011-09-22 01:47 . 2011-09-22 01:47 372224 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\656fee71cea5bce92f762df631ecebeb\Mcx2Dvcs.ni.dll
    + 2011-09-22 01:47 . 2011-09-22 01:47 372224 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\46247732b2fdb4edb0f30f8c25dd14a4\mcupdate.ni.exe
    + 2011-10-16 17:05 . 2011-10-16 17:05 372224 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\1c4decc241e2a8c8ee713733948d8086\mcupdate.ni.exe
    + 2011-09-22 01:46 . 2011-09-22 01:46 337920 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\933b32ca7ef1bab5c3c846d1e8498b52\mcstoredb.ni.dll
    + 2011-10-16 17:04 . 2011-10-16 17:04 337920 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\29eb48280c132b50756e460f2d5b9811\mcstoredb.ni.dll
    + 2011-09-22 01:46 . 2011-09-22 01:46 893952 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\f542b6731c25678aa81fafe1e59292e4\mcstore.ni.dll
    + 2011-10-16 17:04 . 2011-10-16 17:04 893952 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\2a18d543282212deac79ff3c4f47ec43\mcstore.ni.dll
    + 2011-09-22 01:47 . 2011-09-22 01:47 108032 c:\windows\assembly\NativeImages_v2.0.50727_64\loadmxf\a4a6d5566946a8bf38b3b17446cf1f58\loadmxf.ni.exe
    + 2011-10-16 17:05 . 2011-10-16 17:05 108032 c:\windows\assembly\NativeImages_v2.0.50727_64\loadmxf\23bb4c93c638296182a538f3461c455b\loadmxf.ni.exe
    + 2011-09-22 01:47 . 2011-09-22 01:47 645120 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\a85ee567ab2608b4a0e926600b56b0ab\EventViewer.ni.dll
    + 2011-10-16 17:05 . 2011-10-16 17:05 645120 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\1fbfd420e2a2d97c24c80ac7cc8392c6\EventViewer.ni.dll
    + 2011-10-16 17:04 . 2011-10-16 17:04 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\eacfe9b74df294dc175cb2c85aece537\ehiWUapi.ni.dll
    + 2011-09-22 01:46 . 2011-09-22 01:46 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\2fcc1a9e9d1562a68bc676f4a9821f38\ehiWUapi.ni.dll
    - 2011-06-18 15:33 . 2011-06-18 15:33 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\2fcc1a9e9d1562a68bc676f4a9821f38\ehiWUapi.ni.dll
    + 2011-10-16 17:04 . 2011-10-16 17:04 927232 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\29283480f471139af1c4a6fd3b59b205\ehiwmp.ni.dll

    Continued...
    KenBrown2, Nov 8, 2011
    #24

  5. KenBrown2 Newcomer, in training

    + 2011-09-22 01:46 . 2011-09-22 01:46 927232 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\14701ef3387cf0a95c98bb1e4ceae0da\ehiwmp.ni.dll
    - 2011-06-18 15:33 . 2011-06-18 15:33 927232 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\14701ef3387cf0a95c98bb1e4ceae0da\ehiwmp.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 138752 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\16440d92821e195feb65203904210d75\ehiUserXp.ni.dll
    + 2011-09-22 01:45 . 2011-09-22 01:45 138752 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\00922b3ff2116a38b97469cc4b405573\ehiUserXp.ni.dll
    - 2011-06-18 15:33 . 2011-06-18 15:33 138752 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\00922b3ff2116a38b97469cc4b405573\ehiUserXp.ni.dll
    + 2011-09-22 01:46 . 2011-09-22 01:46 151040 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiReplay\ec0aa4c11ed3aefcae02eb38f86231cd\ehiReplay.ni.dll
    - 2011-06-18 15:33 . 2011-06-18 15:33 151040 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiReplay\ec0aa4c11ed3aefcae02eb38f86231cd\ehiReplay.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 151040 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiReplay\2e9bb1ae3de00a2678978386f6f73de9\ehiReplay.ni.dll
    + 2011-09-22 01:45 . 2011-09-22 01:45 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\aecbd2f45aa74ee3f57dc277e9d8343f\ehiExtens.ni.dll
    - 2011-06-18 15:33 . 2011-06-18 15:33 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\aecbd2f45aa74ee3f57dc277e9d8343f\ehiExtens.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\638557ed53ca8211c123007bdc3dc548\ehiExtens.ni.dll
    + 2011-09-22 01:45 . 2011-09-22 01:45 368640 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\7f3e720ebf0164673c94202b8e51c119\ehExtHost.ni.exe
    + 2011-10-16 17:03 . 2011-10-16 17:03 368640 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\0bc1a19c1cb03723ef685b5917e74903\ehExtHost.ni.exe
    + 2011-09-22 01:45 . 2011-09-22 01:45 409600 c:\windows\assembly\NativeImages_v2.0.50727_64\ehepgdat\d9c6f79562e7618065e4e22446500a02\ehepgdat.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 409600 c:\windows\assembly\NativeImages_v2.0.50727_64\ehepgdat\9fba8fc4c06bfe3d9a87d2035fa7b156\ehepgdat.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\5d69d006137ed7704b7b7aa2d54f296e\ehCIR.ni.dll
    + 2011-09-21 03:37 . 2011-09-21 03:37 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\3261cad9c1981ebf952370ebb267f46f\ehCIR.ni.dll
    - 2011-06-18 15:32 . 2011-06-18 15:32 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\44e83cf4ba00700dec4e6d9364daa7b1\CustomMarshalers.ni.dll
    + 2011-09-21 03:37 . 2011-09-21 03:37 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\44e83cf4ba00700dec4e6d9364daa7b1\CustomMarshalers.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\3af5fbffd80931f39a49cb1dc5737e5e\CustomMarshalers.ni.dll
    + 2011-09-21 02:20 . 2011-09-21 02:20 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\c392ae5019176660dd3e81503ede7bb4\ComSvcConfig.ni.exe
    + 2011-10-16 16:58 . 2011-10-16 16:58 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\3f5faea5c8517449702312f28aa6a7bb\ComSvcConfig.ni.exe
    + 2011-09-21 02:19 . 2011-09-21 02:19 568320 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\b8a793412f4ae385b0e6bc97f2afc1ff\BDATunePIA.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 568320 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\1049e555d490785eeb1e572a8c2c2637\BDATunePIA.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\XPBurnComponent\ba7aa58f0f726349207df53769dff760\XPBurnComponent.ni.dll
    + 2011-10-16 17:16 . 2011-10-16 17:16 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\XPBurnComponent\2b12278a0d6a52787de80bf6263b53f3\XPBurnComponent.ni.dll
    + 2011-10-16 17:23 . 2011-10-16 17:23 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\9857dc9eb534d32e93a93d5064bcd182\WsatConfig.ni.exe
    + 2011-09-26 00:55 . 2011-09-26 00:55 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\4393f39e7dcd910521a93a5a588fa1c5\WsatConfig.ni.exe
    + 2011-09-26 00:55 . 2011-09-26 00:55 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\64e6bc21d6554252e53e87c04a70a04d\WindowsFormsIntegration.ni.dll
    + 2011-10-16 17:23 . 2011-10-16 17:23 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\22e853d2fe1435baa459685dee7ce7b7\WindowsFormsIntegration.ni.dll
    - 2011-06-18 15:15 . 2011-06-18 15:15 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\96031e87be161842765531e37a996df6\UIAutomationTypes.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\96031e87be161842765531e37a996df6\UIAutomationTypes.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\8056d047225d4a9c2e4c6b096563d93d\UIAutomationTypes.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ec050b2f1ddc5f3023e9bc7375f90a1d\UIAutomationClient.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\3f30a98854189ad67ff97a1ed4e53917\UIAutomationClient.ni.dll
    + 2011-09-26 00:55 . 2011-09-26 00:55 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\8db6e879e71858d2995390526368262e\TaskScheduler.ni.dll
    + 2011-10-16 17:23 . 2011-10-16 17:23 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\5debac527eb5d431bbc033e36c80826a\TaskScheduler.ni.dll
    + 2011-09-26 00:55 . 2011-09-26 00:55 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\d3e1b40454b27a1f8d6a32654b7e57db\System.Xml.Linq.ni.dll
    + 2011-10-16 17:23 . 2011-10-16 17:23 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\2bd29c61fe6cc3ef769932a89a865acf\System.Xml.Linq.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\f62903d939777c65873c6f5760c8143a\System.Web.Routing.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\ebe085fa59b43b6c179dcf159348a2c4\System.Web.Routing.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\9a2b4bc9b326f62233a76100535ce039\System.Web.RegularExpressions.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\3ea90d05680ed6259ccb21f12cce70fb\System.Web.RegularExpressions.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\670c9d1c106d5707db388246a03455ab\System.Web.Extensions.Design.ni.dll
    + 2011-09-26 00:45 . 2011-09-26 00:45 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\1abc99e2fa94ca63c9b44ebcb074b031\System.Web.Extensions.Design.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\464aac8b3b4a36ee4a850f7c2e4366f5\System.Web.Entity.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\2f8678a10880144ac78440ab4e6a97d4\System.Web.Entity.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\855b737109e459f307c741bde4ffdc7f\System.Web.Entity.Design.ni.dll
    + 2011-09-26 00:45 . 2011-09-26 00:45 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\7727fb0db7028e636f30f7ff9f908113\System.Web.Entity.Design.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\eb60d9a30d018828f5dbe7f39e047030\System.Web.DynamicData.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\73a65d633f6e7795bfc4362b4e15d4c9\System.Web.DynamicData.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6932e2b0f41ee5cf6059633712b25fe7\System.Web.Abstractions.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\12da8d5708a0cf1c5c5ae02d1394880a\System.Web.Abstractions.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\8f3b3ab45e3e5fa61aa6cbfe2a8b61af\System.Transactions.ni.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5e58f10757c91da0ac05161ca8e11e8b\System.Transactions.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8645de531003807d00822e03986a075d\System.ServiceProcess.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\1cc11918d8dd561391bba05c61de7573\System.ServiceProcess.ni.dll
    + 2011-09-22 00:05 . 2011-09-22 00:05 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\ccd064df52eb5479bf745ec2a7b74952\System.Security.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\cbfa4bf002c1abaf94ba8634139727eb\System.Security.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f97b31da89858b85c70b4eb45bc91ace\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-09-22 00:06 . 2011-09-22 00:06 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\4a62d68943088191659432dbe33669f2\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a6d889aa69fd51c100352f23c7cebd22\System.Runtime.Remoting.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\6d2f689baff5da3df134fdec0742a13c\System.Runtime.Remoting.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\87ea73f8c8843eb7b022af4152bd21be\System.Net.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\7754d47296d9201c1856c41637b8a911\System.Net.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\6db17e040b1104fa9a9760c88c67b862\System.Messaging.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\6811eaa8b0f958064288a31d8e481326\System.Messaging.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\6bc98e9b5eedaa8f71c5454d36a4b772\System.Management.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\4117485024b0f652b9fbb66ff5025896\System.Management.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\c652c85e33a636d688b848cd5b39d7c4\System.Management.Instrumentation.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\47a7a4b08c2a08203849d20dd6ac3a4d\System.Management.Instrumentation.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\80bbf13d4e56a02266c87bc4710e0c66\System.IO.Log.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\06bcbb2f0b2de5bc7ebc92f7c2028181\System.IO.Log.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\2ba816b41a3f13685fd28d2ad50970ec\System.IdentityModel.Selectors.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\09d9d35b68b4fe07c1d2f25e2533f21e\System.IdentityModel.Selectors.ni.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\f2d2ebc3015150594787564a55d5abe9\System.EnterpriseServices.Wrapper.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\f2d2ebc3015150594787564a55d5abe9\System.EnterpriseServices.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\02768700bc8f762ccfe37785ba8eb498\System.EnterpriseServices.Wrapper.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\02768700bc8f762ccfe37785ba8eb498\System.EnterpriseServices.ni.dll
    + 2011-10-16 16:56 . 2011-10-16 16:56 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\a830aaff38f89b91fa5b5e36e7f5151d\System.Drawing.Design.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\29cbe2999c5c4d9b16ce0942323075fc\System.Drawing.Design.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\fc86e413df3f0d5f534d9075b59721b0\System.DirectoryServices.Protocols.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\4220d664c6e2df524893d5ff00090cf4\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\1ed84c038dbce9cab34496f5dbd10b12\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\10dea0183eb6ff30200d910dc34b872b\System.DirectoryServices.Protocols.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\bea25c80a05c3ec58f4cfa4f5047dfc3\System.Data.Services.Client.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ac6798f7b52c9ae389574ac01caa520f\System.Data.Services.Design.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\938ebecb514d07fd01d8ca66fd4571b8\System.Data.Services.Client.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\6046ede88b4cd96a42c29dc2671c99e2\System.Data.Services.Design.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\315d103465e4f181b6a1a81edfdd8b70\System.Data.Entity.Design.ni.dll
    + 2011-10-16 17:21 . 2011-10-16 17:21 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\1df0e488d8bb7111ec751ecdc9990781\System.Data.Entity.Design.ni.dll
    + 2011-10-16 17:20 . 2011-10-16 17:20 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\d032d9cae8a95ef817ba81ee12e9ccc1\System.Data.DataSetExtensions.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\429c6372db169d1867f5892d351a4a14\System.Data.DataSetExtensions.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\40da9084d0863e07d7ce55953833b8b0\System.Configuration.ni.dll
    + 2011-09-22 00:05 . 2011-09-22 00:05 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29c6ef7f07d89496c72a1bbf718aed5d\System.Configuration.ni.dll
    + 2011-09-22 00:06 . 2011-09-22 00:06 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c3cfe8388734152100ff476350fb3ddb\System.Configuration.Install.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\7f3c596d0a5463520a5f8052c0f298f6\System.Configuration.Install.ni.dll
    + 2011-10-16 17:20 . 2011-10-16 17:20 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\d7a8e2b8395718b508c677b102504a1f\System.AddIn.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\0d00826b5faadbfc192c3679e5ab30cf\System.AddIn.ni.dll
    - 2011-06-18 15:18 . 2011-06-18 15:18 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\7879c86ded9fabda3e3285420ab3a406\sysglobl.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\7879c86ded9fabda3e3285420ab3a406\sysglobl.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\289d4e6d05fe5ca5f43330483fb0e549\sysglobl.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\878ab210235309095edcd2565987503e\SMSvcHost.ni.exe
    + 2011-10-16 17:20 . 2011-10-16 17:20 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\1e92b23704410d1c43c4c7e9a7439d0c\SMSvcHost.ni.exe
    + 2011-09-25 15:09 . 2011-09-25 15:09 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\ca54e016986a14796591228eaa80cce1\SMDiagnostics.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\a800035f1686fdb0b7a019b954a37cfe\SMDiagnostics.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\c0e48084525f817b13d79d7d2dec52cc\ServiceModelReg.ni.exe
    + 2011-10-16 17:20 . 2011-10-16 17:20 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\a191710dc9ec0488fb2eafd7b7dc3ac8\ServiceModelReg.ni.exe
    + 2011-10-16 16:55 . 2011-10-16 16:55 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\bd47a61dc232cd6a0feea1b30ffa2499\PresentationFramework.Luna.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a51a17cc3195c47d97be3f387f86c462\PresentationFramework.Luna.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\6a38f370d4e68b65106d1065d0b77067\PresentationFramework.Aero.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\4aa958d331158aa1c46b80468c842a34\PresentationFramework.Classic.ni.dll
    + 2011-10-16 16:55 . 2011-10-16 16:55 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c472b6ac873a7ff2ebc5bb9eb0f9ce0\PresentationFramework.Classic.ni.dll
    + 2011-10-16 16:55 . 2011-10-16 16:55 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2500ab0516144f848294d6a3ad20692e\PresentationFramework.Royale.ni.dll
    + 2011-10-16 16:55 . 2011-10-16 16:55 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\231b0b42eff55de5c7d7debe555c16b7\PresentationFramework.Aero.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0159274c97a3fa4d942e6b4e321b6a54\PresentationFramework.Royale.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 724992 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\6849e7e884c97c0b8c9601539c0e093f\napsnap.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 724992 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\09588b506c3536beb6d684eb74dd085e\napsnap.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 110080 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\abace0d3ea5d15d57cac11c1bbcd0952\napinit.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 110080 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\a1aef4dc8e6bbef74ff53dfed28a0f4d\napinit.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 115712 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\86024627ce245ddb4d6df1acad88b4c6\naphlpr.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 115712 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\4dad5608f35eaa140c6eae43f1f2ea6c\naphlpr.ni.dll
    - 2011-06-18 15:15 . 2011-06-18 15:15 115712 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\4dad5608f35eaa140c6eae43f1f2ea6c\naphlpr.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\f1f2f55a0427a355d4bfde947a4a1546\MSBuild.ni.exe
    + 2011-10-16 17:16 . 2011-10-16 17:16 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\3c0c85efc63007f776f492e08fb32cdb\MSBuild.ni.exe
    + 2011-10-16 17:17 . 2011-10-16 17:17 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\daadd85d23b93f162d03a05c4cb0f2c3\MMCFxCommon.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\2c18cdf3808acb8ecb484b9f2940f0b3\MMCFxCommon.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 508928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\c3b4602f861bbf8a77d16be1a16017b7\Microsoft.WSMan.Management.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 508928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\4708bff160c4d942b1f02dd5a7b05be6\Microsoft.WSMan.Management.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\cf693d9799ee92ab0dc4ad51719842f9\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\c5f23819070d044fbefb785b5ed9e7a3\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 309248 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\e3867f57cf5555c7dc127a85c6536ad9\Microsoft.Practices.EnterpriseLibrary.Common.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 303616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\c2b70981f17c645a6da93adae7c2aa4d\Microsoft.Practices.ObjectBuilder.ni.dll
    + 2011-10-16 17:16 . 2011-10-16 17:16 309248 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\a12cdae7008a9049243d4fdc2033a6e3\Microsoft.Practices.EnterpriseLibrary.Common.ni.dll
    + 2011-10-16 17:16 . 2011-10-16 17:16 148992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\9717a238c6c200f93561ecbfba2319a0\Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.ni.dll
    + 2011-10-16 17:16 . 2011-10-16 17:16 303616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\683b49de1588ec1bedbd9d4c86bbda6b\Microsoft.Practices.ObjectBuilder.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 148992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\4cba203a22ae3a031c8e2612c2f5790c\Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ca43c0a5db3c716335b4d7c074b0cedd\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ac3ad80c24977b3bbee2b4f9be782c04\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2011-09-25 15:12 . 2011-09-25 15:12 737792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\a7de5db00e81689537057130e3fa9d5b\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 729600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\9cf468a79e3c6ef33976415b4854ecc2\Microsoft.PowerShell.GraphicalHost.ni.dll
    + 2011-09-25 15:13 . 2011-09-25 15:13 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\83306689d48575a50d4d84b27a63146b\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 729600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7d3830e31972116c36547ee39c4e8749\Microsoft.PowerShell.GraphicalHost.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 156160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7d12fa40f29bad911feaca0b3a70885c\Microsoft.PowerShell.Security.ni.dll
    + 2011-09-25 15:12 . 2011-09-25 15:12 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7c32a2335dc8481175cbef33ee90c8dd\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 156160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\767b4b96bb9ae9630bcb460fab12d2b0\Microsoft.PowerShell.Security.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 737792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\38f0b7ef64ff3079061ace44b2451980\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\bb189e9d53d02b3d63c3828c0463cc12\Microsoft.MediaCenter.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\a7d3927c679ca47b3d79f725ef37ebaf\Microsoft.MediaCenter.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 558592 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\dbc1816a7bd59302368ec20a8b1cdfb5\Microsoft.ManagementConsole.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 558592 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\6ef5be72dab25ea6491e4a6891aa1457\Microsoft.ManagementConsole.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 160768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\ec6572eaa39404db6eb5146b4a10cf3b\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 160768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\e9e6ed1e90de7f57500f137fcf429f0b\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\b316d7ba730f523a2ec12d9c5f4b73b6\Microsoft.Build.Utilities.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\41e4b2b0cf0b89613845e766cd85d047\Microsoft.Build.Utilities.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e9af947dc6d2428c521ac653b21b8668\Microsoft.Build.Engine.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\8531b16a502ccd0f53af70ca00411fd2\Microsoft.Build.Engine.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\ea3acb2fc7a8433efd09d63f6ff5bb5b\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\05adc31c04e41f58825cc4b26e0245e6\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 230912 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\631bd5ed7a121ba609770290d506e8c6\Microsoft.ApplicationBlocks.Updater.ni.dll
    + 2011-10-16 17:16 . 2011-10-16 17:16 230912 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\1f0b7a83f63f620d8758a5ae55367a03\Microsoft.ApplicationBlocks.Updater.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 543744 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\ce072aeecd1c5d0ae54fd0fce46f52e0\EventViewer.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 543744 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\988d71b788a69c083b6dd6993b37269d\EventViewer.ni.dll
    - 2011-06-18 15:13 . 2011-06-18 15:13 160768 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\9e98d7dcfeb34bbf6d2ea0e711b3ae4f\ehiExtens.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 160768 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\9e98d7dcfeb34bbf6d2ea0e711b3ae4f\ehiExtens.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 160768 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\6c0adc1b359993851c9af87074f237d5\ehiExtens.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 243200 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\b54654928cb5eabb468d19a32ae75d32\ehExtHost32.ni.exe
    + 2011-10-16 17:17 . 2011-10-16 17:17 243200 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\a49ee57ba76b53113b41af3fdb9eebd1\ehExtHost32.ni.exe
    + 2011-10-16 17:15 . 2011-10-16 17:15 364544 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\dfbca18139363c84e950c1a23af042f1\DriversHQ.DriverDetective.Client.Communication.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 315904 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\bdecc49e1f46e188d16a5ea46ebaf129\DriversHQ.DriverDetective.Common.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 315904 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\624983bb8a395535e62dd7b1767369b4\DriversHQ.DriverDetective.Common.ni.dll
    + 2011-09-22 00:06 . 2011-09-22 00:06 364544 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\09b30324fb783efe7b4ad6caa10874df\DriversHQ.DriverDetective.Client.Communication.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 602112 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.Common\bdf5516e95a5c4078e09b4bf66fb65a6\DriversHQ.Common.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 602112 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.Common\3e0d2f86feda9de5de2ccc8359a697ca\DriversHQ.Common.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\d72212e0e98b6ea4339d453bf540b5a6\CustomMarshalers.ni.dll
    - 2011-06-18 15:13 . 2011-06-18 15:13 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\798dad8e1b1dae489aa30b4341bcdba7\CustomMarshalers.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\798dad8e1b1dae489aa30b4341bcdba7\CustomMarshalers.ni.dll
    + 2011-10-16 17:16 . 2011-10-16 17:16 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\ad9bd4a8856b4c61f798da4dc31f5ef0\ComSvcConfig.ni.exe
    + 2011-09-22 00:24 . 2011-09-22 00:24 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\147a04caf482e4d4082582a7698883e4\ComSvcConfig.ni.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 1126912 c:\windows\SysWOW64\wininet.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 1102848 c:\windows\SysWOW64\urlmon.dll
    + 2009-09-19 15:51 . 2009-04-11 06:28 1154048 c:\windows\SysWOW64\Speech\Common\sapi.dll
    + 2009-09-19 15:52 . 2009-04-11 06:28 1469952 c:\windows\SysWOW64\oobe\winsetup.dll
    + 2006-11-02 12:21 . 2006-11-02 09:43 2928640 c:\windows\SysWOW64\oobe\W32UIImg.dll
    + 2006-11-02 12:20 . 2006-11-02 07:26 2105856 c:\windows\SysWOW64\oobe\OOBEResources.dll
    + 2009-09-19 15:52 . 2009-04-11 06:27 1315840 c:\windows\SysWOW64\oobe\msoobe.exe
    + 2008-01-21 02:47 . 2008-01-21 02:47 1427046 c:\windows\SysWOW64\migwiz\SFLISTXP.dat
    + 2008-01-21 02:47 . 2008-01-21 02:47 2462746 c:\windows\SysWOW64\migwiz\SFLISTLH.dat
    + 2011-11-04 07:29 . 2011-11-04 07:29 1798144 c:\windows\SysWOW64\jscript9.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 1791488 c:\windows\SysWOW64\iertutil.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 9704960 c:\windows\SysWOW64\ieframe.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 3695416 c:\windows\SysWOW64\ieapfltr.dat
    + 2011-11-04 07:29 . 2011-11-04 07:29 1389056 c:\windows\system32\wininet.dll
    + 2011-10-15 13:58 . 2011-09-06 13:56 2764288 c:\windows\system32\win32k.sys
    + 2011-11-04 07:29 . 2011-11-04 07:29 1344512 c:\windows\system32\urlmon.dll
    + 2011-08-10 14:50 . 2011-06-20 08:45 4699536 c:\windows\system32\ntoskrnl.exe
    + 2011-07-12 17:41 . 2011-04-12 16:15 1210880 c:\windows\system32\kernel32.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 2309120 c:\windows\system32\jscript9.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 2143744 c:\windows\system32\iertutil.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 3695416 c:\windows\system32\ieapfltr.dat
    + 2011-08-10 14:50 . 2011-06-17 20:14 1427344 c:\windows\system32\drivers\tcpip.sys
    + 2011-11-04 07:47 . 2011-11-08 01:13 2773972 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1361230698-3698658676-2926581387-1000-12288.dat
    - 2010-03-18 18:27 . 2010-03-18 18:27 1221464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpftxt_v0400.dll
    + 2011-04-06 21:45 . 2011-04-06 21:45 1221464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpftxt_v0400.dll
    - 2010-03-18 18:27 . 2010-03-18 18:27 2153816 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll
    + 2011-04-06 21:45 . 2011-04-06 21:45 2153816 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 1368920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 6428520 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll
    + 2011-04-06 21:45 . 2011-04-06 21:45 3824480 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationCore.dll
    + 2011-04-06 21:45 . 2011-04-06 21:45 3235656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe
    - 2010-03-18 17:16 . 2010-03-18 17:16 2207568 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.XML.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 2207568 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.XML.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 6097256 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.dll
    + 2011-04-28 12:48 . 2011-04-28 12:48 3510600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
    - 2011-03-23 02:01 . 2011-03-23 02:01 3510600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
    + 2011-05-17 14:08 . 2011-05-17 14:08 3116376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 1354584 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Core.dll
    + 2011-07-09 14:05 . 2011-07-09 14:05 4967248 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
    - 2011-04-13 02:16 . 2011-04-13 02:16 4967248 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
    + 2011-07-09 14:05 . 2011-07-09 14:05 1454416 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
    + 2011-07-09 14:05 . 2011-07-09 14:05 1514840 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
    + 2011-05-17 14:08 . 2011-05-17 14:08 1511240 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
    + 2011-07-09 14:05 . 2011-07-09 14:05 9790792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
    + 2011-08-10 14:50 . 2011-05-04 11:53 3182592 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
    - 2011-06-18 00:19 . 2011-01-20 11:09 3182592 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
    - 2011-06-18 00:19 . 2011-03-29 10:52 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
    + 2011-10-15 13:58 . 2011-07-08 11:52 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
    + 2011-10-15 13:58 . 2011-07-08 11:52 1764696 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
    - 2011-06-18 00:19 . 2011-03-29 10:52 1764696 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
    - 2010-03-18 17:16 . 2010-03-18 17:16 1663320 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 1663320 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 1368920 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 6428520 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 3788128 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 2261832 c:\windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
    + 2011-04-06 20:48 . 2011-04-06 20:48 2207568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.XML.dll
    - 2010-03-18 17:16 . 2010-03-18 17:16 2207568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.XML.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 6097256 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.dll
    + 2011-04-28 12:48 . 2011-04-28 12:48 3510600 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
    - 2011-03-23 02:01 . 2011-03-23 02:01 3510600 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
    + 2011-05-17 13:27 . 2011-05-17 13:27 2975064 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.dll
    + 2011-04-06 20:48 . 2011-04-06 20:48 1354584 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
    - 2011-04-12 19:11 . 2011-04-12 19:11 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
    + 2011-07-09 13:30 . 2011-07-09 13:30 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
    + 2011-07-09 13:30 . 2011-07-09 13:30 1142616 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
    + 2011-07-09 13:30 . 2011-07-09 13:30 6724424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
    - 2011-06-18 00:19 . 2011-01-20 11:09 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2011-08-10 14:50 . 2011-05-04 11:53 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2011-10-15 13:58 . 2011-07-08 11:53 5911888 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2011-06-18 00:19 . 2011-03-29 10:52 5911888 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2011-10-15 13:58 . 2011-07-08 11:53 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2011-06-18 00:19 . 2011-03-29 10:52 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2011-06-18 14:50 . 2011-06-18 14:50 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2011-10-16 13:41 . 2011-10-16 13:41 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2011-06-18 14:49 . 2011-06-18 14:49 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2011-06-18 14:49 . 2011-06-18 14:49 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2011-10-16 13:40 . 2011-10-16 13:40 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2011-08-10 21:43 . 2011-08-10 21:43 3795968 c:\windows\Installer\82fc4.msp
    + 2011-09-07 01:46 . 2011-09-07 01:46 9006080 c:\windows\Installer\82fbb.msp
    + 2011-08-10 21:42 . 2011-08-10 21:42 7070208 c:\windows\Installer\82f99.msp
    + 2011-09-07 01:48 . 2011-09-07 01:48 8181248 c:\windows\Installer\82f80.msp
    + 2011-07-27 11:39 . 2011-07-27 11:39 9892352 c:\windows\Installer\82f60.msp
    + 2011-09-07 23:36 . 2011-09-07 23:36 6069248 c:\windows\Installer\657a7.msp
    + 2011-07-21 17:34 . 2011-07-21 17:34 3456000 c:\windows\Installer\56cff.msp
    + 2011-04-28 13:57 . 2011-04-28 13:57 2721280 c:\windows\Installer\4fd7c.msp
    + 2011-07-17 23:17 . 2011-07-17 23:17 3940864 c:\windows\Installer\18ba9.msi
    - 2008-09-03 18:10 . 2011-06-16 23:09 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
    + 2008-09-03 18:10 . 2011-09-16 10:41 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
    + 2010-03-18 18:27 . 2010-03-18 18:27 1221464 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\wpftxt_amd64.dll
    + 2010-03-18 17:16 . 2010-03-18 17:16 1663320 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\wpfgfx_x86.dll
    + 2010-03-18 18:27 . 2010-03-18 18:27 2153816 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\wpfgfx_amd64.dll
    + 2010-03-18 17:16 . 2010-03-18 17:16 1303896 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\WindowsBase_x86.dll
    + 2010-03-18 17:16 . 2010-03-18 17:16 1303896 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\WindowsBase_amd64.dll
    + 2010-03-18 17:16 . 2010-03-18 17:16 6346600 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationFramework_x86.dll
    + 2010-03-18 17:16 . 2010-03-18 17:16 6346600 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationFramework_amd64.dll
    + 2010-03-18 17:16 . 2010-03-18 17:16 3545952


    Continued...
    KenBrown2, Nov 8, 2011
    #25

  6. KenBrown2 Newcomer, in training

    c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationCore_x86.dll
    + 2010-03-18 18:27 . 2010-03-18 18:27 3453792 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationCore_amd64.dll
    + 2010-09-22 22:05 . 2010-09-22 22:05 2405784 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\rt3d.dll
    + 2010-09-16 07:08 . 2010-09-16 07:08 6210560 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\authplay.dll
    + 2010-06-19 21:51 . 2010-06-19 21:51 5713920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AGM.dll
    + 2011-01-14 11:10 . 2011-01-14 11:10 2395008 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD.DLL
    + 2011-01-14 11:10 . 2011-01-14 11:10 2180992 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKPOWERPOINT.DLL
    + 2011-01-14 11:10 . 2011-01-14 11:10 3443072 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL.DLL
    + 2011-10-16 15:39 . 2011-10-16 15:39 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\d23388948ad58ad0fbd4eb2b8ce3af84\WindowsBase.ni.dll
    + 2011-10-16 15:53 . 2011-10-16 15:53 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\5a2dc348e7292fe2927385e4a31a4532\UIAutomationClientsideProviders.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\9a1aea68b24af9040536b0677c6c35ab\System.Xml.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\e814961ae6ed88dea384d113dca52c04\System.Xaml.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 5627904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\1d65501f517ac04f851625cfc1c20abb\System.Windows.Forms.DataVisualization.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 2236416 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\e6cfefe313cadcf114868e21bf95b546\System.Web.Services.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\680da560f61c4c594f504fe784c04d20\System.Speech.ni.dll
    + 2011-10-16 15:52 . 2011-10-16 15:52 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\ee537f5c792668106adacdcd2e5b185f\System.ServiceModel.Discovery.ni.dll
    + 2011-10-16 15:51 . 2011-10-16 15:51 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\3d07edda7a71c988260a553534cab32a\System.ServiceModel.Activities.ni.dll
    + 2011-10-16 15:43 . 2011-10-16 15:43 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\f68180d9f4ade9c313f9ad20422eb1c0\System.Runtime.Serialization.ni.dll
    + 2011-10-16 15:43 . 2011-10-16 15:43 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\b719608cfb73833aec4ffb15928325ec\System.Runtime.DurableInstancing.ni.dll
    + 2011-10-16 15:45 . 2011-10-16 15:45 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\7fd539a7cc8fba27e16b0e32ba41eb54\System.Printing.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\1bb0e129449a55ddd883368e3aa3c922\System.Management.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\06cd9761b93a2882309d01af90f9cc9c\System.IdentityModel.ni.dll
    + 2011-10-16 15:43 . 2011-10-16 15:43 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\5a86b6067f001cef079bde90f001d54d\System.EnterpriseServices.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 2290688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\a167f693a1c75650b73e1c63231d879d\System.Drawing.ni.dll
    + 2011-10-16 15:43 . 2011-10-16 15:43 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\860ec610fac6c83debf77d84c6145ab4\System.DirectoryServices.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 1217536 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\39f9fc075ec143345b32e19c2f9a2dde\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-16 15:44 . 2011-10-16 15:44 2402816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\410945be3ec8a637b6cd6eae72e43368\System.Deployment.ni.dll
    + 2011-10-16 15:44 . 2011-10-16 15:44 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\d9c354c0ac635de922c7d53d4619fdb6\System.Data.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\98dd37909515a67fd621cfafd612c24e\System.Data.SqlXml.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 1798656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\7f671e2b6e3112a0eef84f8353b628b9\System.Data.Services.Client.ni.dll
    + 2011-10-16 15:49 . 2011-10-16 15:49 3386368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\eb7264494ea0af497b92ea427e942ac2\System.Data.Linq.ni.dll
    + 2011-10-16 15:37 . 2011-10-16 15:37 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\88d89c2eb5f36a33cec8d1734c311f23\System.Configuration.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\e7b35e6834805f513151c702f842ee65\System.ComponentModel.Composition.ni.dll
    + 2011-10-16 15:45 . 2011-10-16 15:45 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\1540d14fd301d62241d230fa88f0b8ff\System.Activities.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\a68d1111d860d0af6810bbcd4f117c87\System.Activities.Presentation.ni.dll
    + 2011-10-16 15:46 . 2011-10-16 15:46 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\da9be9b930c7a4cf948213101d6ef289\System.Activities.Core.Presentation.ni.dll
    + 2011-10-16 15:45 . 2011-10-16 15:45 4232704 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\38ca6544a50c75f91f387f242a7b3f5c\ReachFramework.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 2056192 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\c9bb3f12c4f6f255805f1415f8ec3bb4\PresentationUI.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 1843200 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\db8b919ebdd2b92b529229ada83dd1e8\Microsoft.VisualBasic.Compatibility.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\a48478443ecab348f6ec13b2c8a2a9bb\Microsoft.VisualBasic.Activities.Compiler.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\8d82f84f064acfa2e734042c688fd599\Microsoft.VisualBasic.ni.dll
    + 2011-10-16 15:38 . 2011-10-16 15:38 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\72cbd2497c6b84681a6926a84be01f5c\Microsoft.Transactions.Bridge.ni.dll
    + 2011-10-16 15:50 . 2011-10-16 15:50 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\fdec29103893482cb31213e4f7d7bfcf\Microsoft.JScript.ni.dll
    + 2011-10-16 15:37 . 2011-10-16 15:37 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\5776a31cf6c5891f87a52a801f9e1f09\Microsoft.CSharp.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 3857920 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\9dacf8a5033dfbcb435be166d2f42cdf\WindowsBase.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\ac9379a0db1d8da11fbc46f09da411db\UIAutomationClientsideProviders.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 9086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System\5286fe2d0167eb835a9f11025f1cb756\System.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\419103071a5a5d17738afbe9dd03d58a\System.Xml.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\a3ffdc1316821b5ceb32c9a788334329\System.Xaml.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\e3a0483820fafd51c8cd4576de6eb45f\System.Windows.Forms.DataVisualization.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 1885696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\4cbc10b8a84a7ef0fcf9d2885bfe9832\System.Web.Services.ni.dll
    + 2011-10-16 16:02 . 2011-10-16 16:02 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\6663f8ba0327399c1a5b313707cff36f\System.Speech.ni.dll
    + 2011-10-16 16:01 . 2011-10-16 16:01 1392640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\a19563d781ccd0807a41d27701d485c6\System.ServiceModel.Activities.ni.dll
    + 2011-10-16 16:01 . 2011-10-16 16:01 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9be7f7f68d488eb02161d3f0663a61a4\System.ServiceModel.Discovery.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\993f89ba22499c379d2a9dd25d13cd94\System.Runtime.Serialization.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\41a4f6cc5d596e952fd880ae1a47308f\System.Runtime.DurableInstancing.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\0a30a201408744c5315446aef7fb3d5a\System.Printing.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\7c4eea005578d9990f604fda345fb2b4\System.Management.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\16c385f23b5e493899f0d206dfb60094\System.IdentityModel.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 1652736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\17bfc7131aca3a393f430121f79307bd\System.Drawing.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\83a815291644645a3ab1ce55452e1e61\System.DirectoryServices.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\1c2d038775f2c9d42468261118019e6b\System.Deployment.ni.dll
    + 2011-10-16 13:46 . 2011-10-16 13:46 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\14d8a7579839b11151cd901b846d0afb\System.Data.ni.dll
    + 2011-10-16 13:46 . 2011-10-16 13:46 2549760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\05f8ccf31515e720b1663e710e992211\System.Data.SqlXml.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 1343488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\c05998cb3411b039bdfb5d852e1413be\System.Data.Services.Client.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\d622a2c40d37cfdb88e4eea7315a323e\System.Data.Linq.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 7069696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\44a7d2597981a82da8b9e3e2298602de\System.Core.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 4129792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\e69e487d338ceb3883b7d175885f0794\System.Activities.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\cc25c620acedf02fd6b5c46238643cab\System.Activities.Presentation.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 1547264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\49577d8acbf16b6091f5466feae43403\System.Activities.Core.Presentation.ni.dll
    + 2011-10-16 15:57 . 2011-10-16 15:57 2907136 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\2d23bb6dd81b41002c8f927b95b7b226\ReachFramework.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1640448 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\ec64d7c99f7e030d39c355ce7a968600\PresentationUI.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e173e7c959c2e6743087d628810806f1\Microsoft.VisualBasic.Compatibility.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\c7dd3d91f33a79c70db8bd805a483f4b\Microsoft.VisualBasic.Activities.Compiler.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\51df2ad80d91a7669dd1856a9c1061f9\Microsoft.VisualBasic.ni.dll
    + 2011-10-16 15:56 . 2011-10-16 15:56 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\477c9b916a9aee0a8beb041ee00a5fcb\Microsoft.Transactions.Bridge.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\614f6f698d269e2c56bf23feba58551c\Microsoft.JScript.ni.dll
    + 2011-10-16 13:46 . 2011-10-16 13:46 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\f03a7f8f2393a04fac7fecc1c55bd02e\Microsoft.CSharp.ni.dll
    + 2011-09-25 14:45 . 2011-09-25 14:45 4925440 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\4481dd92332b45019023338cf615a630\WindowsBase.ni.dll
    + 2011-10-16 16:43 . 2011-10-16 16:43 4925440 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\38422ddfb88ccd3c565063035ebf3244\WindowsBase.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 1461248 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\7fa48da22e345b49d1f50bbaa5ffc39c\UIAutomationClientsideProviders.ni.dll
    + 2011-09-26 01:11 . 2011-09-26 01:11 1461248 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\45a7a0e9cfca734aa0aacec24cf58c6a\UIAutomationClientsideProviders.ni.dll
    + 2011-10-16 16:53 . 2011-10-16 16:53 6948352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\d444289d3cf8f139ec57cee71c59a4f9\System.Xml.ni.dll
    + 2011-09-21 02:19 . 2011-09-21 02:19 6948352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\55726d96df2a370794eb1a18253c4647\System.Xml.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 1754112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\e8b4dc04ee54e114d7d086a604f182ef\System.WorkflowServices.ni.dll
    + 2011-09-26 01:11 . 2011-09-26 01:11 1754112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\0c53724752b6912479128ea7cc02f6f6\System.WorkflowServices.ni.dll
    + 2011-09-26 01:11 . 2011-09-26 01:11 2702848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\fd1e02085a6aecb0dabeaea2db00b1e4\System.Workflow.Runtime.ni.dll
    + 2011-10-16 16:52 . 2011-10-16 16:52 2702848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\9a013ea903974ab1d883ee7f12ff91b9\System.Workflow.Runtime.ni.dll
    + 2011-09-26 01:10 . 2011-09-26 01:10 5956608 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\64e5f32fafa7178f2cb1a16371969ea2\System.Workflow.ComponentModel.ni.dll
    + 2011-10-16 16:52 . 2011-10-16 16:52 5956608 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\31c2d4c2fdbe781d15597ea137791683\System.Workflow.ComponentModel.ni.dll
    + 2011-09-26 01:10 . 2011-09-26 01:10 3893248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\cac06ca4c93cbf95921be63b8c09ee44\System.Workflow.Activities.ni.dll
    + 2011-10-16 16:51 . 2011-10-16 16:51 3893248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\7c85a4813d3351c2edb5aec87cb12aea\System.Workflow.Activities.ni.dll
    + 2011-09-21 02:21 . 2011-09-21 02:21 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\ccb9d0e917993cef0ecfebfcbcb08a5f\System.Web.Services.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\42fb92855615614209655c12a1a3df22\System.Web.Services.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\c4c3f2516a865a48ebdd9cdd545148d6\System.Web.Mobile.ni.dll
    + 2011-09-26 01:10 . 2011-09-26 01:10 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\5bbe971da5ecbe05c515c6f8c4f4e896\System.Web.Mobile.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 3045888 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\fff6d4bb38838e825ee88fdaf546b853\System.Web.Extensions.ni.dll
    + 2011-09-26 01:10 . 2011-09-26 01:10 1154560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\e445fe44a510709916e47395b31937c2\System.Web.Extensions.Design.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 3045888 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\c7c6e99c36e181c5505986fa8b07146a\System.Web.Extensions.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 1154560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\7b503d7457232d97971ae8517c02a737\System.Web.Extensions.Design.ni.dll
    + 2011-10-16 17:13 . 2011-10-16 17:13 2726912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\e0ad1fc372b77c63962d0ac7435c8ea7\System.Speech.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 2726912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\4a9449b7e5a9e2cb569b5960f83215bd\System.Speech.ni.dll
    + 2011-09-26 01:09 . 2011-09-26 01:09 2239488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\ba8d54452dfef1e8c77b7ad958261d16\System.ServiceModel.Web.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 2239488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\3d1ef1b7eca22a288603f0244c8a6b62\System.ServiceModel.Web.ni.dll
    + 2011-09-21 02:25 . 2011-09-21 02:25 3072512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\8f2756757122d8e810e54ad9a6a9b934\System.Runtime.Serialization.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 3072512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\0923cf543f311891eeae4e5ce30ca46c\System.Runtime.Serialization.ni.dll
    + 2011-10-16 16:59 . 2011-10-16 16:59 1022464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\9953f48654bc7d17bedab12bc74c3f2e\System.Runtime.Remoting.ni.dll
    + 2011-09-21 02:20 . 2011-09-21 02:20 1022464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\1417e3a586572bba058fc1b147932ed5\System.Runtime.Remoting.ni.dll
    + 2011-10-16 17:08 . 2011-10-16 17:08 1453056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\c9a260f49f8d68c27828e886deed8c2a\System.Printing.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 1453056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\5e6c150a1bfdb5ad172d939f41e4b1d5\System.Printing.ni.dll
    + 2011-10-16 17:07 . 2011-10-16 17:07 1408000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\2ecec1b5620795b9330bb6fadbe5e319\System.Management.ni.dll
    + 2011-09-25 14:42 . 2011-09-25 14:42 1408000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\1ce66c0c7c84321e850250fe7e89a6d7\System.Management.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 1428992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\6be3baa92a2cb8eae4bd5a98df3ef213\System.IdentityModel.ni.dll
    + 2011-09-21 02:25 . 2011-09-21 02:25 1428992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\2fc69556c19f1018463627e8691bfac2\System.IdentityModel.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\caab7166e3bd29ad25ddab20072bfa47\System.EnterpriseServices.ni.dll
    + 2011-09-21 02:20 . 2011-09-21 02:20 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\60d0a368a83327d788a62b762a670cce\System.EnterpriseServices.ni.dll
    + 2011-09-21 02:21 . 2011-09-21 02:21 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\ece8747d21e40443e5c2228818711917\System.Drawing.ni.dll
    + 2011-10-16 16:50 . 2011-10-16 16:50 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\bb534aa272960f375bef0d75162b5249\System.Drawing.ni.dll
    + 2011-09-21 02:20 . 2011-09-21 02:20 1639936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\e08075670461b361f7ab19764a2a65f0\System.DirectoryServices.ni.dll
    + 2011-10-16 16:59 . 2011-10-16 16:59 1639936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\d331e73478ddb35b0cdf57fb5d20f36b\System.DirectoryServices.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 1219584 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\8e50c51664409fd0827cad6f3bd6620f\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-09-26 01:08 . 2011-09-26 01:08 1219584 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\465aaeb3843fddc00825724c467ba928\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 2433024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\7c69e3dc27ebcbcfb593441dde062f9f\System.Deployment.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 2433024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\532040f56e2606c200cc8ea93d678fdb\System.Deployment.ni.dll
    + 2011-10-16 16:48 . 2011-10-16 16:48 8617984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\54a302a693fe200dca13ae027dd1483e\System.Data.ni.dll
    + 2011-09-21 02:21 . 2011-09-21 02:21 8617984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\44fbadec39cc1727a2eb1952bfa34f8a\System.Data.ni.dll
    + 2011-09-21 02:19 . 2011-09-21 02:19 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\d432627b67fa9a643f11a2ca01beaf32\System.Data.SqlXml.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\890ddce9d0da20701310973b426ad9bc\System.Data.SqlXml.ni.dll
    + 2011-09-26 01:08 . 2011-09-26 01:08 1845248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\dc74cdf82d4c527716c0876d2a694de4\System.Data.Services.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 1845248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\a8d27863031d0e4a58d2b07108bfcc40\System.Data.Services.ni.dll
    + 2011-09-26 01:08 . 2011-09-26 01:08 1277440 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\a5bb5f5edd376d88a883a6c492f6b0b4\System.Data.Services.Client.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 1277440 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\482a5772033d3697d48cd56fabaa8f47\System.Data.Services.Client.ni.dll
    + 2011-10-16 17:00 . 2011-10-16 17:00 1512448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\f94166a266be79a233e9adaef6dab1b7\System.Data.OracleClient.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 1512448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\4dbca3549ccd921fe1737fefdeb16e59\System.Data.OracleClient.ni.dll
    + 2011-10-16 16:49 . 2011-10-16 16:49 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\a9b091af2bfa6b42d6d4ba21bbab2654\System.Data.Linq.ni.dll
    + 2011-09-21 01:59 . 2011-09-21 01:59 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\95d92aba141d0560112a6aa34512efe4\System.Data.Linq.ni.dll
    + 2011-10-16 17:12 . 2011-10-16 17:12 1078272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\90d0dcfcd0825d796e1f2dc43650940e\System.Data.Entity.Design.ni.dll
    + 2011-09-26 01:08 . 2011-09-26 01:08 1078272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\773aa09083074b4b6ec4412117562ddf\System.Data.Entity.Design.ni.dll
    + 2011-10-16 16:48 . 2011-10-16 16:48 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\d29cd9af48c9f04e62f28a358ce7a5ef\System.Core.ni.dll
    + 2011-09-21 01:59 . 2011-09-21 01:59 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\a1f86b4e7e9b4f3b6ef7775a09b17314\System.Core.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\50f97a989230bfb46ad7522a8b5b2512\System.Configuration.ni.dll
    + 2011-09-21 02:19 . 2011-09-21 02:19 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\2d8a18ff1b0b4029fcea093444920fd2\System.Configuration.ni.dll
    + 2011-10-16 17:08 . 2011-10-16 17:08 3101184 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\cea11bf24c34ec3c60e3c625a5352bf8\ReachFramework.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 3101184 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\14ae2040aa87410b5a2f932260423510\ReachFramework.ni.dll
    + 2011-09-26 01:04 . 2011-09-26 01:04 2109440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\de9f5fb58d639cac800701ca9443d21a\PresentationUI.ni.dll
    + 2011-10-16 17:08 . 2011-10-16 17:08 2109440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\2f6ef4c26e7407afd96c67a356654b49\PresentationUI.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 1882112 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\f279cbbbf242e95f1585e0ed3cce3a8c\PresentationBuildTasks.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 1882112 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\05e1fb5e6b68eba9db5e8831b0eaa4f2\PresentationBuildTasks.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 3482112 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\5668e146fdbccc3f9f4b21d5a70b7eb4\Narrator.ni.exe
    + 2011-09-26 01:06 . 2011-09-26 01:06 3482112 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\3e805eee7e658fb9d2f94711ea769bb3\Narrator.ni.exe
    + 2011-10-16 17:09 . 2011-10-16 17:09 2314240 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\acd4d9299552d5e1680f939da1001675\MMCEx.ni.dll
    + 2011-09-26 01:06 . 2011-09-26 01:06 2314240 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\0ef6ee25c2aeab72acbbee9a0207ae76\MMCEx.ni.dll
    + 2011-09-22 01:47 . 2011-09-22 01:47 7836672 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\9bf16ef26005c399e46d9ff70c6ba0f2\MIGUIControls.ni.dll
    + 2011-10-16 17:05 . 2011-10-16 17:05 7836672 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\251386b18461d44e9ae1c9814fc21f86\MIGUIControls.ni.dll
    + 2011-10-16 17:09 . 2011-10-16 17:09 2173952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\dbe64f362e247628906a5e3d2a6f4382\Microsoft.VisualBasic.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 2173952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\9a4e215c8cb20a6638d114e84840e491\Microsoft.VisualBasic.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\f0e3b091c929659d66eb6d38806c9918\Microsoft.Transactions.Bridge.ni.dll
    + 2011-09-21 03:37 . 2011-09-21 03:37 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\7962020dd38abe36bfa49ba3e081cceb\Microsoft.Transactions.Bridge.ni.dll
    + 2011-10-16 17:08 . 2011-10-16 17:08 2104832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a8ca266acdc1120f6cbaf16bf1f5be12\Microsoft.PowerShell.GPowerShell.ni.dll
    + 2011-09-26 01:05 . 2011-09-26 01:05 2104832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\9bb1e0baeddcd1ff6d4225493f99363a\Microsoft.PowerShell.GPowerShell.ni.dll
    + 2011-09-25 14:44 . 2011-09-25 14:44 2101248 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\7977aa15ef526aa517a7d39f1ad1eaa3\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2011-10-16 17:07 . 2011-10-16 17:07 1081856 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\70876695a10b89775f51fd2033220260\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2011-10-16 17:08 . 2011-10-16 17:08 5346816 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\4ee8d9de2acfeb69ef137dc0683adfab\Microsoft.PowerShell.Editor.ni.dll
    + 2011-09-25 14:44 . 2011-09-25 14:44 5346816 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3f6af47aae50d64bf3823fd2d5cb8e7c\Microsoft.PowerShell.Editor.ni.dll
    + 2011-10-16 17:07 . 2011-10-16 17:07 2101248 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\10508e612e25aeb8b29a7ef98429ecb4\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2011-09-25 14:43 . 2011-09-25 14:43 1081856 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\0dea2cad63e23249fc20d63a79047947\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2011-09-22 01:45 . 2011-09-22 01:45 7721472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b6d3ccbb2ad5726656c7cce38d947462\Microsoft.MediaCenter.UI.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 7721472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\7218c2e9747ae0b0de010750e6f4f6cc\Microsoft.MediaCenter.UI.ni.dll
    + 2011-09-25 14:43 . 2011-09-25 14:43 3208704 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\69f3a2caef03aa1802dbf72889d44277\Microsoft.JScript.ni.dll
    + 2011-10-16 17:07 . 2011-10-16 17:07 3208704 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\0d63b26057e00a40a7cfdfb58d7593cd\Microsoft.JScript.ni.dll
    + 2011-09-22 01:48 . 2011-09-22 01:48 2357248 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\f3e97852244f77a0524e6902b59a7386\Microsoft.Ink.ni.dll
    + 2011-10-16 17:06 . 2011-10-16 17:06 2357248 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\3045878874146498c9da9a6eed4be62b\Microsoft.Ink.ni.dll
    + 2011-10-16 17:06 . 2011-10-16 17:06 2575872 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\82f74fab143033cd45fcd41b17ad022c\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-10-16 17:06 . 2011-10-16 17:06 2217984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\72488f2c9eb8bf1a2dde5c3496d8522a\Microsoft.Build.Tasks.ni.dll
    + 2011-09-22 01:48 . 2011-09-22 01:48 2575872 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\1682b069fc1fd9a6c81257a16a8af255\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-09-22 01:48 . 2011-09-22 01:48 2217984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\077f3aa04081b94d8f8e785947d26b5e\Microsoft.Build.Tasks.ni.dll
    + 2011-10-16 16:58 . 2011-10-16 16:58 2433024 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\ce277fc44040a06e7b22f2715d7a05bf\Microsoft.Build.Engine.ni.dll
    + 2011-10-16 17:06 . 2011-10-16 17:06 1188352 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\9fa4fecb821f6b383105ca9c998822ff\Microsoft.Build.Engine.ni.dll
    + 2011-09-22 01:48 . 2011-09-22 01:48 1188352 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\8b3186906166d0e1ce1db762ac594598\Microsoft.Build.Engine.ni.dll
    + 2011-09-21 02:20 . 2011-09-21 02:20 2433024 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\6864d3b75b5cbe1abc7a63fab84493bd\Microsoft.Build.Engine.ni.dll
    + 2011-09-22 01:46 . 2011-09-22 01:46 2413056 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\18d26ff1dc354d212e8fe28b2365cab5\ehRecObj.ni.dll
    + 2011-10-16 17:04 . 2011-10-16 17:04 2413056 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\0430891c4fd63c2c2c57e8818837b8e9\ehRecObj.ni.dll
    - 2011-06-18 15:33 . 2011-06-18 15:33 2002432 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\0a25c2bbadeb72e06aa2802c467882af\ehiVidCtl.ni.dll
    + 2011-09-22 01:46 . 2011-09-22 01:46 2002432 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\0a25c2bbadeb72e06aa2802c467882af\ehiVidCtl.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 2002432 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\010ac6266e27f7d2fa33894ec4741645\ehiVidCtl.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 2885120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\98e0dc72b212c67832a3ab534793f196\ehiProxy.ni.dll
    - 2011-06-18 15:32 . 2011-06-18 15:32 2885120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\520d978bf705fe2387d818ee69e2fe43\ehiProxy.ni.dll
    + 2011-09-21 03:37 . 2011-09-21 03:37 2885120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\520d978bf705fe2387d818ee69e2fe43\ehiProxy.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 1039872 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiPlay\a0e13fcedfd3edbc2b31061df9e7103c\ehiPlay.ni.dll
    - 2011-06-18 15:33 . 2011-06-18 15:33 1039872 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiPlay\406ac64462bcc8db7d2a5364c355de25\ehiPlay.ni.dll
    + 2011-09-22 01:46 . 2011-09-22 01:46 1039872 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiPlay\406ac64462bcc8db7d2a5364c355de25\ehiPlay.ni.dll
    + 2011-10-16 17:03 . 2011-10-16 17:03 3039232 c:\windows\assembly\NativeImages_v2.0.50727_64\ehepg\51f89ed8312bfbd2e4b432063c6b94a5\ehepg.ni.dll
    + 2011-09-22 00:51 . 2011-09-22 00:51 3039232 c:\windows\assembly\NativeImages_v2.0.50727_64\ehepg\1730bf5a48bb393bc6d8bd60f00ce27b\ehepg.ni.dll
    + 2011-10-16 16:54 . 2011-10-16 16:54 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\fd2c727bcef2e019eb96c1145f423701\WindowsBase.ni.dll
    + 2011-09-25 15:13 . 2011-09-25 15:13 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\9afe86eee3ddf79c5f6cf5d85873c464\WindowsBase.ni.dll
    + 2011-09-26 00:55 . 2011-09-26 00:55 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\e0b47647df7bf34058ed16ae08b5d36f\UIAutomationClientsideProviders.ni.dll
    + 2011-10-16 17:23 . 2011-10-16 17:23 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\0bb1ae8e8223cb3155fdc02c81b9c0f6\UIAutomationClientsideProviders.ni.dll
    + 2011-10-16 16:54 . 2011-10-16 16:54 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\f9c36ea806e77872dce891c77b68fac3\System.ni.dll
    + 2011-09-21 02:02 . 2011-09-21 02:02 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\b9ea0d414c4861120bfb7365d8ec0939\System.ni.dll
    + 2011-10-16 16:57 . 2011-10-16 16:57 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c1c06a392871267db27f7cbc40e1c4fb\System.Xml.ni.dll
    + 2011-09-22 00:05 . 2011-09-22 00:05 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\4c3cda96b8f12220da20f2f8d1b9439c\System.Xml.ni.dll
    + 2011-09-26 00:55 . 2011-09-26 00:55 1316864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\cb4f77127908a815e9288162fa0153d1\System.WorkflowServices.ni.dll
    + 2011-10-16 17:23 . 2011-10-16 17:23 1316864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\6dabb1ffbb64fc70a68dab460e675d2d\System.WorkflowServices.ni.dll
    + 2011-09-26 00:55 . 2011-09-26 00:55 1911296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\a167617a58fd061722b5bc033903e089\System.Workflow.Runtime.ni.dll
    + 2011-10-16 16:57 . 2011-10-16 16:57 1911296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\32259fbfebf9a97e29e33871a93f5d8d\System.Workflow.Runtime.ni.dll
    + 2011-10-16 16:57 . 2011-10-16 16:57 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\83db549eedd1bce50ec47994f82b22b7\System.Workflow.ComponentModel.ni.dll
    + 2011-09-26 00:54 . 2011-09-26 00:54 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\5734cc1ce5f85aca912fd92584f3b3a7\System.Workflow.ComponentModel.ni.dll
    + 2011-09-26 00:45 . 2011-09-26 00:45 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\32aeeece2a23ac0ef310b99c941b6d39\System.Workflow.Activities.ni.dll
    + 2011-10-16 16:57 . 2011-10-16 16:57 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\2d2634b61157090f267aac490a552d03\System.Workflow.Activities.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\6b88a2bf58d8529fc33f8f3437a7ff06\System.Web.Services.ni.dll
    + 2011-09-22 00:06 . 2011-09-22 00:06 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\5534465ace7f8b214a31a34f56280602\System.Web.Services.ni.dll
    + 2011-09-26 00:45 . 2011-09-26 00:45 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\d7f692ee424e8847828383ddbbf278eb\System.Web.Mobile.ni.dll
    + 2011-10-16 17:23 . 2011-10-16 17:23 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\961b365e93e523044c1825e244f4372f\System.Web.Mobile.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\a366c18bbc8075ca50f763097f32e94e\System.Web.Extensions.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\684d0ef675fd640a30bdf94ad4911bb5\System.Web.Extensions.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 1917952


    Continued...
    KenBrown2, Nov 8, 2011
    #26

  7. KenBrown2 Newcomer, in training

    Final!!

    c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\4fe82e4b4223298eae15d094a32f9298\System.Speech.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\44b6cec3e6f65ffdf524a5fb2786e0d9\System.Speech.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 1651200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ecfad34a8e869b6d7ed9d3ead3a0e97d\System.ServiceModel.Web.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 1651200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\18be706a5ab335aaceb714f528901fe1\System.ServiceModel.Web.ni.dll
    + 2011-09-25 15:09 . 2011-09-25 15:09 2346496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\9ea6cff5cccb649eb8ad7cc6e3f03c88\System.Runtime.Serialization.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 2346496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\4b4c359912c1241246f50a4c47dbab3c\System.Runtime.Serialization.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\92bcdd721183b527543af031f307d31f\System.Printing.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\8400b1072cb176c6f5e62909bae1ac51\System.Printing.ni.dll
    + 2011-09-25 15:12 . 2011-09-25 15:12 8365056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\8e2ea4d70513035f74a9604fa511754b\System.Management.Automation.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 8365056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\0ea6852e2bacda9371e60589ca813cd3\System.Management.Automation.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\dbcb4baf3d2ed9e62645bd332fc221f2\System.IdentityModel.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\21c45e88bbc379aaed3baadd0bd14a8b\System.IdentityModel.ni.dll
    + 2011-09-22 00:05 . 2011-09-22 00:05 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d8d83838f9840bde901df516ba3de588\System.Drawing.ni.dll
    + 2011-10-16 16:56 . 2011-10-16 16:56 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\367c4043efc2f32d843cb588b0dc97fc\System.Drawing.ni.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\e7a30fe59a12045d837f4ebaf83fc222\System.DirectoryServices.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\2abf48d164deefdf200182a3bdadfbeb\System.DirectoryServices.ni.dll
    + 2011-09-22 00:06 . 2011-09-22 00:06 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\dc9e5e32218f8a3d2f21d89511335713\System.Deployment.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\4e0e6e88d80780d87bb74e72d5bb1230\System.Deployment.ni.dll
    + 2011-10-16 16:55 . 2011-10-16 16:55 6621696 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\9e53d9921c4bb153f1ffbe1ae0e1b615\System.Data.ni.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 6621696 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\7ae4f4dbbfd301d5b5f3897b6ea433bf\System.Data.ni.dll
    + 2011-09-22 00:05 . 2011-09-22 00:05 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\d6ae6d71281689587705eaed351b01d4\System.Data.SqlXml.ni.dll
    + 2011-10-16 17:14 . 2011-10-16 17:14 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\a4889e54d14864db8f08aa20e4a7736a\System.Data.SqlXml.ni.dll
    + 2011-10-16 17:22 . 2011-10-16 17:22 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\f4a17d0040e3f75d243f4ec1c644cea4\System.Data.Services.ni.dll
    + 2011-09-26 00:44 . 2011-09-26 00:44 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\d09008a7155891e7f521ce175cef05ca\System.Data.Services.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 1119232 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\9ecfa46a2c92f6493f030b02966f0ced\System.Data.OracleClient.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 1119232 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\9354bcdb983f56cecddb68035849d9a0\System.Data.OracleClient.ni.dll
    + 2011-10-16 16:56 . 2011-10-16 16:56 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\e7424f28e09b19df2dcce8c1ebb1e78f\System.Data.Linq.ni.dll
    + 2011-09-21 02:03 . 2011-09-21 02:03 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\1e810a1e96c671534217557954e7c999\System.Data.Linq.ni.dll
    + 2011-10-16 17:21 . 2011-10-16 17:21 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\619b6d874f92baf012a63329d05af051\System.Data.Entity.ni.dll
    + 2011-09-26 00:43 . 2011-09-26 00:43 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\2e9a7977c1be792554d57c8ecd0e6d87\System.Data.Entity.ni.dll
    + 2011-10-16 16:55 . 2011-10-16 16:55 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\a272814095d94aad779e9d07b2e877c9\System.Core.ni.dll
    + 2011-09-21 02:02 . 2011-09-21 02:02 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\045ff9d980dcb3ffeac2a0868161215e\System.Core.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 2146816 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\b0d7aa182cb0028c92896d58ef4529da\ReachFramework.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 2146816 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\afd2adfd3c5547a55b5cfddf362c6417\ReachFramework.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7d6eba2dd1fabc7539b153845b95afa9\PresentationUI.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\30efb8cc2564a09e296fe28653ab377c\PresentationUI.ni.dll
    + 2011-09-26 00:42 . 2011-09-26 00:42 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\7ad481b1a2b26bd253f0befb765b2cf1\PresentationBuildTasks.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\05ffe0aaa7e9d46ba1603656fb1ac025\PresentationBuildTasks.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 2538496 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\699c5770ad3d5e67bae2e172b0781d9a\Narrator.ni.exe
    + 2011-09-26 00:41 . 2011-09-26 00:41 2538496 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\25fc1b1a3f51770139156021ba97251f\Narrator.ni.exe
    + 2011-10-16 17:19 . 2011-10-16 17:19 1536512 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\dc38366e3458237ab394a5082b2f17fe\MMCEx.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 1536512 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\3398454f934691efb9798bb493d2f440\MMCEx.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 6340096 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\7a21126b43da3012cdf81aefc8af03d7\MIGUIControls.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 6340096 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\5c89b0298570e4d1a8443ccb7aca4a1e\MIGUIControls.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 1711616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\b67478ec034fdf811a748f1b6b5b1c95\Microsoft.VisualBasic.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 1711616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7785435dab38ed94b6a0a608e91c6cda\Microsoft.VisualBasic.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\570eaca98d76305811de424f100ecf2c\Microsoft.Transactions.Bridge.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\031dada967314b31703307bd10697079\Microsoft.Transactions.Bridge.ni.dll
    + 2011-09-26 00:41 . 2011-09-26 00:41 1704448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b008b1b107c6ccdb8ab234437713b3fa\Microsoft.PowerShell.GPowerShell.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 3722752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7d0d44c4dac29fee4fa2ec95495225e2\Microsoft.PowerShell.Editor.ni.dll
    + 2011-09-25 15:13 . 2011-09-25 15:13 1609728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\602fed46db569c67500d5d6b00abaeeb\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2011-09-25 15:13 . 2011-09-25 15:13 3722752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\5d659bc7dce6e73b36f5bb6ed60caccf\Microsoft.PowerShell.Editor.ni.dll
    + 2011-10-16 17:19 . 2011-10-16 17:19 1704448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\45940afe22941c4117712a2205bc9763\Microsoft.PowerShell.GPowerShell.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 1609728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\342a1097ed96cd02202482afc52449c0\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2011-09-25 15:10 . 2011-09-25 15:10 5486080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\8ddf5b45effdcc461ade1bebf18397ed\Microsoft.MediaCenter.UI.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 5486080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\842503edef3ebd8bf3c191140118b94b\Microsoft.MediaCenter.UI.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\f7c07195d1967d7cc102fa4e8a8b9251\Microsoft.JScript.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\d827704baef0f300ed2bbee9fb6cf431\Microsoft.JScript.ni.dll
    + 2011-09-25 15:12 . 2011-09-25 15:12 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\6f69588091b002fc0e8fc5682daf77af\Microsoft.Ink.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\5e7d10bc7fc82ee30a5b696f4b0b4dc9\Microsoft.Ink.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\e696d9164bbb978ea5208643ea66e2e6\Microsoft.Build.Tasks.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 1873408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\cf25827006f4021a68411e023afa3b2c\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-10-16 17:18 . 2011-10-16 17:18 1873408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a8f4947810fb41497af7167b9dd8f957\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-09-25 15:11 . 2011-09-25 15:11 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\251635230ec27ea672ef0bfd1db926c2\Microsoft.Build.Tasks.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 1778176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e7e696376682ecf6d7a5522757ca790b\Microsoft.Build.Engine.ni.dll
    + 2011-10-16 17:16 . 2011-10-16 17:16 1778176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\83e03901d0f3ea0247df30ba82d40855\Microsoft.Build.Engine.ni.dll
    + 2011-09-22 00:05 . 2011-09-22 00:05 4383232 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\6c2e31e01fbee47bb7dfe4488d0b7468\DriversHQ.DriverDetective.Client.ni.exe
    + 2011-10-16 17:14 . 2011-10-16 17:14 4383232 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\27f71cc2e88c4e2bed75d3b2035aabc3\DriversHQ.DriverDetective.Client.ni.exe
    + 2011-08-10 14:50 . 2011-05-04 11:53 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2011-06-18 00:19 . 2011-01-20 11:09 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2011-10-15 13:58 . 2011-07-08 11:52 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2011-06-18 00:19 . 2011-03-29 10:52 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2011-06-18 00:19 . 2011-03-29 10:52 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2011-10-15 13:58 . 2011-07-08 11:53 4550656
    c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2011-11-04 07:29 . 2011-11-04 07:29 12275200 c:\windows\SysWOW64\mshtml.dll
    + 2006-11-02 12:33 . 2011-11-04 07:47 10989568 c:\windows\system32\SMI\Store\Machine\schema.dat
    - 2006-11-02 12:33 . 2011-06-18 18:23 10989568 c:\windows\system32\SMI\Store\Machine\schema.dat
    + 2011-11-04 07:29 . 2011-11-04 07:29 17781760 c:\windows\system32\mshtml.dll
    + 2006-11-02 12:35 . 2011-10-16 13:48 50086344 c:\windows\system32\mrt.exe
    + 2011-11-04 07:29 . 2011-11-04 07:29 10886144 c:\windows\system32\ieframe.dll
    + 2011-10-15 13:58 . 2011-07-08 11:52 10020688 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
    + 2011-07-11 21:33 . 2011-07-11 21:33 23254016 c:\windows\Installer\62f79.msp
    + 2011-05-19 03:06 . 2011-05-19 03:06 38672896 c:\windows\Installer\489e7.msp
    + 2011-01-31 10:45 . 2011-01-31 10:45 11135488 c:\windows\Installer\18c65.msp
    + 2011-06-08 04:39 . 2011-06-08 04:39 19798016 c:\windows\Installer\18c64.msp
    + 2010-09-23 07:03 . 2010-09-23 07:03 20460984 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32.dll
    + 2011-10-16 13:43 . 2011-10-16 13:43 11872768 c:\windows\assembly\NativeImages_v4.0.30319_64\System\c9d45f7c0deab777cea3e4fe77c02031\System.ni.dll
    + 2011-10-16 15:45 . 2011-10-16 15:45 17290752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\7850c7a1f97fc3980b67ed7d31416aea\System.Windows.Forms.ni.dll
    + 2011-10-16 15:51 . 2011-10-16 15:51 24551936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\41ff109cc439d1cdb05465f9101261c3\System.ServiceModel.ni.dll
    + 2011-10-16 15:48 . 2011-10-16 15:48 18480128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\f0634b66ceb548b635218f02f1101f18\System.Data.Entity.ni.dll
    + 2011-10-16 15:37 . 2011-10-16 15:37 10439168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\06e5638d1925f6cf87ff8fad1ef06d75\System.Core.ni.dll
    + 2011-10-16 15:42 . 2011-10-16 15:42 24406528 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\9b5148ac4ab43aa07d5dbcfbe54ceaf5\PresentationFramework.ni.dll
    + 2011-10-16 15:40 . 2011-10-16 15:40 15907328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\ffb7c7fb374f445e39f7224134ebca02\PresentationCore.ni.dll
    + 2011-10-16 13:43 . 2011-10-16 13:43 19348992 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\e0e5fbe72e8813a135fc878ff32b4bee\mscorlib.ni.dll
    + 2011-10-16 13:45 . 2011-10-16 13:45 13138432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\2de8b7360d6a58fa7fd1b451fa88dde6\System.Windows.Forms.ni.dll
    + 2011-10-16 16:01 . 2011-10-16 16:01 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\559ebac0a85ae55da09827b8048f77bd\System.ServiceModel.ni.dll
    + 2011-10-16 16:00 . 2011-10-16 16:00 13346816 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\78afce4e1bd3d345ef1fff004659191c\System.Data.Entity.ni.dll
    + 2011-10-16 13:47 . 2011-10-16 13:47 18000384 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\813a0913bea1269e48613509609e72b4\PresentationFramework.ni.dll
    + 2011-10-16 13:46 . 2011-10-16 13:46 11450880 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\8244412387a82c0acd3d63622e22cef5\PresentationCore.ni.dll
    + 2011-10-16 13:44 . 2011-10-16 13:44 14407680 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a774bd593b8420bae4a8cf1d46af3ba2\mscorlib.ni.dll
    + 2011-10-16 16:43 . 2011-10-16 16:43 10597888 c:\windows\assembly\NativeImages_v2.0.50727_64\System\f12d03e6dad70f35e012254871553713\System.ni.dll
    + 2011-09-21 01:59 . 2011-09-21 01:59 10597888 c:\windows\assembly\NativeImages_v2.0.50727_64\System\b008f0ff2d87b56ea30f138e32aec2eb\System.ni.dll
    + 2011-09-21 02:23 . 2011-09-21 02:23 17377792 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\db6376c76598554f7daee0e8accba1e6\System.Windows.Forms.ni.dll
    + 2011-10-16 16:51 . 2011-10-16 16:51 17377792 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\5cb03828bc75159bc60c7ba3b192f63d\System.Windows.Forms.ni.dll
    + 2011-09-21 02:21 . 2011-09-21 02:21 15225856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\9f87d3f915300b5051f29bf76b3c1874\System.Web.ni.dll
    + 2011-10-16 16:59 . 2011-10-16 16:59 15225856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\9d8f4ec5694b056b4b4b79f11c6b3b95\System.Web.ni.dll
    + 2011-09-21 02:25 . 2011-09-21 02:25 23813632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\e1c770109a7a73190440f600bcf205ee\System.ServiceModel.ni.dll
    + 2011-10-16 17:02 . 2011-10-16 17:02 23813632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\08b309e856a0be5fd3e19fa2f15a671f\System.ServiceModel.ni.dll
    + 2011-10-16 17:07 . 2011-10-16 17:07 11254784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\f20cd853902d31f596cb77e1fb0a5011\System.Management.Automation.ni.dll
    + 2011-09-25 14:42 . 2011-09-25 14:42 11254784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\9fc8a6b51c78cdcbb9ac8c1a4fcde9e0\System.Management.Automation.ni.dll
    + 2011-09-21 02:22 . 2011-09-21 02:22 13718528 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\65bc655515d76c3b195cbc59cc9c033d\System.Design.ni.dll
    + 2011-10-16 16:50 . 2011-10-16 16:50 13718528 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\53d32ce36522b35c6617583803e46428\System.Design.ni.dll
    + 2011-09-26 01:08 . 2011-09-26 01:08 13758976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\640116247a8de50592526f7dead06015\System.Data.Entity.ni.dll
    + 2011-10-16 17:11 . 2011-10-16 17:11 13758976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\0359dddfa810980ea79ff603f8977974\System.Data.Entity.ni.dll
    + 2011-10-16 16:47 . 2011-10-16 16:47 19176960 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\9571673404921b0e6a53a4d1d00891a2\PresentationFramework.ni.dll
    + 2011-09-26 01:04 . 2011-09-26 01:04 19176960 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\0663fb78a637caeb02ad253e76cdfd80\PresentationFramework.ni.dll
    + 2011-09-25 14:48 . 2011-09-25 14:48 16513536 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\fc3d6eb248aee0bbcd2f8c686f73df78\PresentationCore.ni.dll
    + 2011-10-16 16:45 . 2011-10-16 16:45 16513536 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\6cc39b5515d14c1670b7a1a47b947420\PresentationCore.ni.dll
    + 2011-09-21 01:58 . 2011-09-21 01:58 15564800 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\ee787c7dd39d956a9fdeddc8b5fde80e\mscorlib.ni.dll
    - 2011-06-18 14:13 . 2011-06-18 14:14 15564800 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\ee787c7dd39d956a9fdeddc8b5fde80e\mscorlib.ni.dll
    + 2011-10-16 16:42 . 2011-10-16 16:42 15564800 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\897e1f6e4749dcdf03064150aa556c8c\mscorlib.ni.dll
    + 2011-10-16 17:05 . 2011-10-16 17:05 15825920 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\e1807995ad54a8ec2aaef6e7fdd35371\ehshell.ni.dll
    + 2011-09-22 01:47 . 2011-09-22 01:47 15825920 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\bb249c873f8577188d3922a092b8fa09\ehshell.ni.dll
    + 2011-09-22 00:06 . 2011-09-22 00:06 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c50d9d540acecdef29c31201e203a331\System.Windows.Forms.ni.dll
    + 2011-10-16 16:56 . 2011-10-16 16:56 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1363115565fff5a641243a48f396f107\System.Windows.Forms.ni.dll
    + 2011-10-16 17:15 . 2011-10-16 17:15 11804672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\e00630ec1e225a2376fdd430645e20f7\System.Web.ni.dll
    + 2011-09-22 00:07 . 2011-09-22 00:07 11804672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\5aa9131000876de66160ff713b543d99\System.Web.ni.dll
    + 2011-09-25 15:09 . 2011-09-25 15:09 17404416 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\beab37721e12fef7fc1e8f2ff130fa31\System.ServiceModel.ni.dll
    + 2011-10-16 17:17 . 2011-10-16 17:17 17404416 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\6b2ee1fdc6a182722db04af9c3cd10c3\System.ServiceModel.ni.dll
    + 2011-09-22 00:24 . 2011-09-22 00:24 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7217cd3af229159188896c01174b11f9\System.Design.ni.dll
    + 2011-10-16 16:56 . 2011-10-16 16:56 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\0e8e3007e61a2ba9454600dce8193b65\System.Design.ni.dll
    + 2011-10-16 16:55 . 2011-10-16 16:55 14328832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94f892556ec9fa7a508fc9d214ceaedf\PresentationFramework.ni.dll
    + 2011-09-26 00:40 . 2011-09-26 00:41 14328832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\180849cb54aab0bc77a229c41f967c90\PresentationFramework.ni.dll
    + 2011-09-25 15:15 . 2011-09-25 15:15 12216832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\cbe5fbb2e20534d89c0588cc05418840\PresentationCore.ni.dll
    + 2011-10-16 16:54 . 2011-10-16 16:54 12216832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53f949f4664bb316f9b7a00d73a6e290\PresentationCore.ni.dll
    + 2011-09-21 02:02 . 2011-09-21 02:02 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f6deb187f24bb3185841092b89fbfdbb\mscorlib.ni.dll
    - 2011-06-18 14:25 . 2011-06-18 14:25 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f6deb187f24bb3185841092b89fbfdbb\mscorlib.ni.dll
    + 2011-10-16 16:53 . 2011-10-16 16:53 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll
    + 2011-04-07 03:12 . 2011-04-07 03:12 194340864 c:\windows\Installer\48a08.msp
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{59c6f12b-f004-43e5-9997-08f2123119b6}]
    2011-04-26 02:39 81920 ----a-w- c:\program files (x86)\oovootoolbar\oovootoolbarX.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
    "{59c6f12b-f004-43e5-9997-08f2123119b6}"= "c:\program files (x86)\oovootoolbar\oovootoolbarX.dll" [2011-04-26 81920]
    .
    [HKEY_CLASSES_ROOT\clsid\{59c6f12b-f004-43e5-9997-08f2123119b6}]
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
    "SmileboxTray"="c:\users\Owner\AppData\Roaming\Smilebox\SmileboxTray.exe" [2011-09-29 313160]
    "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-11-30 68856]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
    "Trigger New Acer AlaunchX"="c:\acer\Preload\Command\AlaunchX\AppInRun.exe" [2008-07-17 8192]
    "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576]
    "hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-03-13 81920]
    "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
    "New Acer AlaunchX"="c:\acer\Preload\Command\AlaunchX\LaunchAlaunchX.exe" [2008-07-17 200704]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableLUA"= 0 (0x0)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
    "aux1"=wdmaud.drv
    .
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-05 135664]
    R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
    R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-05 135664]
    R3 NETw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw5v64.sys [x]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
    R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
    R4 atashost;WebEx Service Host for Support Center;c:\windows\SysWOW64\atashost.exe [2009-03-06 20376]
    R4 ETService;Empowering Technology Service;c:\program files\GATEWAY\Gateway Recovery Management\Service\ETService.exe [2008-06-11 24576]
    S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
    S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
    S1 aswSnx;aswSnx; [x]
    S1 aswSP;aswSP; [x]
    S2 aswFsBlk;aswFsBlk; [x]
    S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
    S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2008-01-21 27648]
    S3 CAXHWAZL;CAXHWAZL;c:\windows\system32\DRIVERS\CAXHWAZL.sys [x]
    S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
    S3 NETwNv64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETwNv64.sys [x]
    S3 O2MDRDR;O2MDRDR;c:\windows\system32\DRIVERS\o2mdx64.sys [x]
    S3 O2SDRDR;O2SDRDR;c:\windows\system32\DRIVERS\o2sdx64.sys [x]
    S3 yukonx64;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk60x64.sys [x]
    .
    .
    --- Other Services/Drivers In Memory ---
    .
    *Deregistered* - aswMBR
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-11-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-05 03:30]
    .
    2011-11-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-05 03:30]
    .
    .
    --------- x86-64 -----------
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
    @="{472083B0-C522-11CF-8763-00608CC02F24}"
    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
    2011-09-06 21:45 134384 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-07-10 1560360]
    "IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-07-21 182808]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-12 151064]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-12 209432]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-12 182808]
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.livingston.org/
    uLocal Page = c:\windows\system32\blank.htm
    mStart Page = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=2&o=vp64&d=1008&m=mc7801u
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
    IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
    CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
    FF - ProfilePath - c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\
    FF - prefs.js: browser.search.selectedEngine - Bing
    FF - prefs.js: browser.startup.homepage - www.google.com
    FF - prefs.js: keyword.URL - hxxp://www.oovoostart.com/s/?src=FF-Address&site=Bing&cfg=2-201-0-0&engine_id=1&provider_id=1&product_id=201&country=US&q=
    FF - prefs.js: network.proxy.http - 127.0.0.1
    FF - prefs.js: network.proxy.http_port - 56364
    FF - prefs.js: network.proxy.type - 1
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
    FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
    FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
    FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
    FF - Ext: ooVooToolbar: {59c6f12b-f004-43e5-9997-08f2123119b6} - %profile%\extensions\{59c6f12b-f004-43e5-9997-08f2123119b6}
    .
    - - - - ORPHANS REMOVED - - - -
    .
    BHO-{37153479-1976-43c3-a1ee-557513977b64} - (no file)
    Toolbar-{37153479-1976-43c3-a1ee-557513977b64} - (no file)
    WebBrowser-{37153479-1976-43C3-A1EE-557513977B64} - (no file)
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10t_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10t_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10t.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10t.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10t.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10t.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
    @="Shockwave Flash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
    @Denied: (A 2) (Everyone)
    @=""
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
    @="FlashBroker"
    .
    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    Completion time: 2011-11-08 22:13:18
    ComboFix-quarantined-files.txt 2011-11-09 03:13
    ComboFix2.txt 2011-06-18 22:17
    ComboFix3.txt 2011-06-18 18:35
    .
    Pre-Run: 68,113,747,968 bytes free
    Post-Run: 69,535,797,248 bytes free
    .
    - - End Of File - - CC64D06BC8FC0CED2761A07E26E830E8



    rkill

    This log file is located at C:\rkill.log.
    Please post this only if requested to by the person helping you.
    Otherwise you can close this log when you wish.

    Rkill was run on 11/08/2011 at 22:19:21.
    Operating System: Windows (TM) Vista Home Premium


    Processes terminated by Rkill or while it was running:

    C:\Program Files (x86)\WinRAR\RarExtLoader.exe
    C:\Windows\SysWOW64\rundll32.exe


    Rkill completed on 11/08/2011 at 22:19:27.
    KenBrown2, Nov 8, 2011
    #27

  8. Broni Malware Annihilator

    Looks good.

    How is computer doing?

    Download OTL to your Desktop.

    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • Click the Scan All Users checkbox.
    • Under the Custom Scan box paste this in:


    netsvcs
    drivers32
    %SYSTEMDRIVE%\*.*
    %systemroot%\Fonts\*.com
    %systemroot%\Fonts\*.dll
    %systemroot%\Fonts\*.ini
    %systemroot%\Fonts\*.ini2
    %systemroot%\Fonts\*.exe
    %systemroot%\system32\spool\prtprocs\w32x86\*.*
    %systemroot%\REPAIR\*.bak1
    %systemroot%\REPAIR\*.ini
    %systemroot%\system32\*.jpg
    %systemroot%\*.jpg
    %systemroot%\*.png
    %systemroot%\*.scr
    %systemroot%\*._sy
    %APPDATA%\Adobe\Update\*.*
    %ALLUSERSPROFILE%\Favorites\*.*
    %APPDATA%\Microsoft\*.*
    %PROGRAMFILES%\*.*
    %APPDATA%\Update\*.*
    %systemroot%\*. /mp /s
    CREATERESTOREPOINT
    %systemroot%\System32\config\*.sav
    %PROGRAMFILES%\bak. /s
    %systemroot%\system32\bak. /s
    %ALLUSERSPROFILE%\Start Menu\*.lnk /x
    %systemroot%\system32\config\systemprofile\*.dat /x
    %systemroot%\*.config
    %systemroot%\system32\*.db
    %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
    %USERPROFILE%\Desktop\*.exe
    %PROGRAMFILES%\Common Files\*.*
    %systemroot%\*.src
    %systemroot%\install\*.*
    %systemroot%\system32\DLL\*.*
    %systemroot%\system32\HelpFiles\*.*
    %systemroot%\system32\rundll\*.*
    %systemroot%\winn32\*.*
    %systemroot%\Java\*.*
    %systemroot%\system32\test\*.*
    %systemroot%\system32\Rundll32\*.*
    %systemroot%\AppPatch\Custom\*.*
    %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
    %PROGRAMFILES%\PC-Doctor\Downloads\*.*
    %PROGRAMFILES%\Internet Explorer\*.tmp
    %PROGRAMFILES%\Internet Explorer\*.dat
    %USERPROFILE%\My Documents\*.exe
    %USERPROFILE%\*.exe
    %systemroot%\ADDINS\*.*
    %systemroot%\assembly\*.bak2
    %systemroot%\Config\*.*
    %systemroot%\REPAIR\*.bak2
    %systemroot%\SECURITY\Database\*.sdb /x
    %systemroot%\SYSTEM\*.bak2
    %systemroot%\Web\*.bak2
    %systemroot%\Driver Cache\*.*
    %PROGRAMFILES%\Mozilla Firefox\0*.exe
    %ProgramFiles%\Microsoft Common\*.*
    %ProgramFiles%\TinyProxy.
    %USERPROFILE%\Favorites\*.url /x
    %systemroot%\system32\*.bk
    %systemroot%\*.te
    %systemroot%\system32\system32\*.*
    %ALLUSERSPROFILE%\*.dat /x
    %systemroot%\system32\drivers\*.rmv
    dir /b "%systemroot%\system32\*.exe" | find /i " " /c
    dir /b "%systemroot%\*.exe" | find /i " " /c
    %PROGRAMFILES%\Microsoft\*.*
    %systemroot%\System32\Wbem\proquota.exe
    %PROGRAMFILES%\Mozilla Firefox\*.dat
    %USERPROFILE%\Cookies\*.txt /x
    %SystemRoot%\system32\fonts\*.*
    %systemroot%\system32\winlog\*.*
    %systemroot%\system32\Language\*.*
    %systemroot%\system32\Settings\*.*
    %systemroot%\system32\*.quo
    %SYSTEMROOT%\AppPatch\*.exe
    %SYSTEMROOT%\inf\*.exe
    %SYSTEMROOT%\Installer\*.exe
    %systemroot%\system32\config\*.bak2
    %systemroot%\system32\Computers\*.*
    %SystemRoot%\system32\Sound\*.*
    %SystemRoot%\system32\SpecialImg\*.*
    %SystemRoot%\system32\code\*.*
    %SystemRoot%\system32\draft\*.*
    %SystemRoot%\system32\MSSSys\*.*
    %ProgramFiles%\Javascript\*.*
    %systemroot%\pchealth\helpctr\System\*.exe /s
    %systemroot%\Web\*.exe
    %systemroot%\system32\msn\*.*
    %systemroot%\system32\*.tro
    %AppData%\Microsoft\Installer\msupdates\*.*
    %ProgramFiles%\Messenger\*.*
    %systemroot%\system32\systhem32\*.*
    %systemroot%\system\*.exe
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
    /md5start
    /md5stop


    • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows: OTL.txt and Extras.txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them back here.
    Broni, Nov 8, 2011
    #28

  9. KenBrown2 Newcomer, in training

    The computer seems to running well now. I haven't had any issues getting into windows whenever I have had to reboot, and the internet seems to be working pretty smooth. I will let you know if anything abnormal occurs.

    Here is the OTL.txt file...There was no Attach.txt file though.

    OTL


    OTL logfile created on: 11/9/2011 12:16:46 AM - Run 2
    OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Owner\Desktop
    64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    3.87 Gb Total Physical Memory | 2.18 Gb Available Physical Memory | 56.32% Memory free
    7.91 Gb Paging File | 6.31 Gb Available in Paging File | 79.81% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 144.04 Gb Total Space | 64.81 Gb Free Space | 44.99% Space Free | Partition Type: NTFS
    Drive D: | 144.04 Gb Total Space | 143.73 Gb Free Space | 99.78% Space Free | Partition Type: NTFS
    Drive E: | 148.54 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF
    Drive F: | 1.87 Gb Total Space | 1.74 Gb Free Space | 93.19% Space Free | Partition Type: FAT

    Computer Name: OWNER-PC | User Name: Owner | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2011/11/09 00:14:56 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
    PRC - [2011/09/06 16:45:30 | 003,722,416 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
    PRC - [2011/09/06 16:45:28 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe


    ========== Modules (No Company Name) ==========


    ========== Win32 Services (SafeList) ==========

    SRV:64bit: - [2011/09/06 16:45:28 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
    SRV:64bit: - [2008/06/11 13:18:30 | 000,024,576 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe -- (ETService)
    SRV:64bit: - [2007/10/17 10:37:22 | 000,412,672 | ---- | M] (Conexant Systems, Inc.) [Disabled | Stopped] -- C:\Windows\SysNative\DRIVERS\xaudio64.exe -- (XAudioService)
    SRV - [2010/09/17 20:14:22 | 000,460,144 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe -- (FlipShare Service)
    SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
    SRV - [2010/01/30 00:40:16 | 001,043,584 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
    SRV - [2009/04/07 14:34:40 | 000,642,856 | ---- | M] (Cisco Systems, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe -- (nmservice)
    SRV - [2009/03/29 23:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
    SRV - [2009/03/06 11:59:12 | 000,020,376 | ---- | M] (WebEx Communications, Inc.) [Disabled | Stopped] -- C:\Windows\SysWOW64\atashost.exe -- (atashost)
    SRV - [2008/11/04 02:41:00 | 000,437,248 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\XAudio64.dll -- (HsfXAudioService)
    SRV - [2008/07/20 19:45:06 | 000,354,840 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
    SRV - [2008/05/05 17:25:46 | 000,165,416 | ---- | M] (WildTangent, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Gateway Games\Gateway Game Console\GameConsoleService.exe -- (GameConsoleService)
    SRV - [2007/02/12 03:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Disabled | Stopped] -- C:\Program Files (x86)\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)


    ========== Driver Services (SafeList) ==========

    DRV:64bit: - [2011/09/06 16:38:18 | 000,601,944 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
    DRV:64bit: - [2011/09/06 16:38:16 | 000,301,912 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
    DRV:64bit: - [2011/09/06 16:36:41 | 000,058,200 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
    DRV:64bit: - [2011/09/06 16:36:41 | 000,042,328 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
    DRV:64bit: - [2011/09/06 16:36:30 | 000,065,368 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
    DRV:64bit: - [2011/09/06 16:36:14 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
    DRV:64bit: - [2010/10/25 23:28:39 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd)
    DRV:64bit: - [2010/10/18 04:15:18 | 007,959,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\NETwNv64.sys -- (NETwNv64) ___ Intel(R)
    DRV:64bit: - [2010/09/28 15:44:52 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)
    DRV:64bit: - [2009/09/30 19:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
    DRV:64bit: - [2009/05/18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
    DRV:64bit: - [2009/04/07 14:33:08 | 000,033,072 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\purendis.sys -- (purendis)
    DRV:64bit: - [2009/04/07 14:33:06 | 000,031,536 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\pnarp.sys -- (pnarp)
    DRV:64bit: - [2008/11/17 15:50:30 | 004,751,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\NETw5v64.sys -- (NETw5v64) Intel(R)
    DRV:64bit: - [2008/11/04 02:40:46 | 000,010,240 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\xaudio64.sys -- (XAudio)
    DRV:64bit: - [2008/10/15 07:57:50 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\CAX_DPV.sys -- (HSF_DPV)
    DRV:64bit: - [2008/10/15 07:53:44 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\CAXHWAZL.sys -- (CAXHWAZL)
    DRV:64bit: - [2008/10/15 07:52:24 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\CAX_CNXT.sys -- (winachsf)
    DRV:64bit: - [2008/07/28 22:44:20 | 000,314,880 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
    DRV:64bit: - [2008/07/20 19:44:54 | 000,402,456 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\iaStor.sys -- (iaStor)
    DRV:64bit: - [2008/07/15 03:39:24 | 000,062,296 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\o2mdx64.sys -- (O2MDRDR)
    DRV:64bit: - [2008/07/10 21:29:08 | 007,912,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\igdkmd64.sys -- (igfx)
    DRV:64bit: - [2008/07/10 04:52:38 | 000,325,680 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)
    DRV:64bit: - [2008/06/29 16:52:44 | 000,126,976 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R)
    DRV:64bit: - [2008/06/26 18:24:20 | 000,020,520 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UVCFTR_S.SYS -- (UVCFTR)
    DRV:64bit: - [2008/06/11 20:29:30 | 000,051,800 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\o2sdx64.sys -- (O2SDRDR)
    DRV:64bit: - [2008/04/29 03:00:00 | 000,392,192 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)
    DRV:64bit: - [2008/01/20 21:47:25 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\serscan.sys -- (StillCam)
    DRV:64bit: - [2008/01/20 21:46:57 | 000,286,720 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\VSTAZL6.SYS -- (HSFHWAZL)
    DRV:64bit: - [2008/01/20 21:46:55 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus)
    DRV:64bit: - [2007/07/26 05:00:00 | 000,053,488 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\PxHlpa64.sys -- (PxHlpa64)
    DRV:64bit: - [2006/06/18 09:27:24 | 000,017,024 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\mdmxsdk.sys -- (mdmxsdk)
    DRV - [2008/06/11 13:13:24 | 000,017,952 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\int15_64.sys -- (int15)


    ========== Standard Registry (SafeList) ==========


    ========== Internet Explorer ==========

    IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=2&o=vp64&d=1008&m=mc7801u
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=2&o=vp64&d=1008&m=mc7801u
    IE - HKLM\..\URLSearchHook: {37153479-1976-43c3-a1ee-557513977b64} - No CLSID value found

    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.livingston.org/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = ED 4E 79 01 33 D3 49 45 BC E6 1F 22 01 79 39 64 [binary data]
    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

    ========== FireFox ==========

    FF - prefs.js..browser.search.selectedEngine: "Bing"
    FF - prefs.js..browser.startup.homepage: "www.google.com"
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
    FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323
    FF - prefs.js..extensions.enabledItems: {59c6f12b-f004-43e5-9997-08f2123119b6}:2.5.0.3
    FF - prefs.js..keyword.URL: "http://www.oovoostart.com/s/?src=FF-Address&site=Bing&cfg=2-201-0-0&engine_id=1&provider_id=1&product_id=201&country=US&q="
    FF - prefs.js..network.proxy.http: "127.0.0.1"
    FF - prefs.js..network.proxy.http_port: 56364
    FF - prefs.js..network.proxy.type: 1

    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
    FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/07/01 22:12:03 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/07/17 18:18:22 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/11/28 23:41:00 | 000,000,000 | ---D | M]

    [2010/07/30 23:21:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Extensions
    [2011/11/08 22:06:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions
    [2010/08/08 23:06:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
    [2011/07/01 22:12:12 | 000,000,000 | ---D | M] (Coupons.com Community Toolbar) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{37153479-1976-43c3-a1ee-557513977b64}
    [2011/04/25 21:39:52 | 000,000,000 | ---D | M] (ooVoo Toolbar) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{59c6f12b-f004-43e5-9997-08f2123119b6}
    [2011/04/04 22:00:29 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
    [2011/04/25 21:40:05 | 000,002,014 | ---- | M] () -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\c8nzy25t.default\searchplugins\bing-zugo.xml
    [2011/05/13 20:07:55 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
    [2010/10/24 18:42:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
    [2011/07/01 22:02:49 | 000,466,944 | ---- | M] (Catalina Marketing Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\NPcol400.dll
    [2011/03/18 12:33:21 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll
    [2010/10/24 18:42:12 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
    [2011/03/18 12:33:22 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll

    O1 HOSTS File: ([2011/11/08 22:09:08 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
    O1 - Hosts: 127.0.0.1 localhost
    O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg64.dll (Google Inc.)
    O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
    O2 - BHO: (no name) - {37153479-1976-43c3-a1ee-557513977b64} - No CLSID value found.
    O2 - BHO: (ooVoo Toolbar) - {59c6f12b-f004-43e5-9997-08f2123119b6} - C:\Program Files (x86)\oovootoolbar\oovootoolbarX.dll ()
    O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
    O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
    O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    O3 - HKLM\..\Toolbar: (no name) - {37153479-1976-43c3-a1ee-557513977b64} - No CLSID value found.
    O3 - HKLM\..\Toolbar: (ooVoo Toolbar) - {59c6f12b-f004-43e5-9997-08f2123119b6} - C:\Program Files (x86)\oovootoolbar\oovootoolbarX.dll ()
    O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
    O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
    O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
    O4 - HKLM..\Run: [Trigger New Acer AlaunchX] c:\ACER\Preload\Command\AlaunchX\AppInRun.exe (Acer Inc.)
    O4 - HKCU..\Run: [SmileboxTray] C:\Users\Owner\AppData\Roaming\Smilebox\SmileboxTray.exe (Smilebox, Inc.)
    O4 - HKLM..\RunOnce: [New Acer AlaunchX] c:\ACER\Preload\Command\AlaunchX\LaunchAlaunchX.exe (Acer Inc.)
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
    O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O8:64bit: - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.)
    O8 - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.)
    O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
    O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
    O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
    O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos-beta/OnlineScanner.cab (OnlineScanner Control)
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
    O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
    O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
    O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
    O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.16.0.cab (SysInfo Class)
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7C7D86A6-5962-483F-89BB-ED5F19941C31}: DhcpNameServer = 167.206.245.130 167.206.245.129
    O18:64bit: - Protocol\Handler\livecall - No CLSID value found
    O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
    O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
    O18:64bit: - Protocol\Handler\msnim - No CLSID value found
    O18:64bit: - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\amd64\puresp4.dll (Cisco Systems, Inc.)
    O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
    O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
    O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
    O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
    O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
    O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img20.jpg
    O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img20.jpg
    O32 - HKLM CDRom: AutoRun - 1
    O34 - HKLM BootExecute: (autocheck autochk *)
    O35:64bit: - HKLM\..comfile [open] -- "%1" %*
    O35:64bit: - HKLM\..exefile [open] -- "%1" %*
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
    O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
    O37 - HKLM\...com [@ = ComFile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*


    Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
    Drivers32: msacm.clmp3enc - C:\Program Files (x86)\CyberLink\Power2Go\CLMP3Enc.ACM (CyberLink Corp.)
    Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
    Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
    Drivers32: vidc.3IV2 - C:\Windows\SysWow64\3ivxVfWCodec.dll (3ivx Technologies Pty. Ltd.)
    Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

    CREATERESTOREPOINT
    Restore point Set: OTL Restore Point

    ========== Files/Folders - Created Within 30 Days ==========

    [2011/11/09 00:14:50 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
    [2011/11/08 22:13:21 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\temp
    [2011/11/08 17:31:24 | 004,286,253 | R--- | C] (Swearware) -- C:\Users\Owner\Desktop\ComboFix.exe
    [2011/11/08 17:31:23 | 001,916,416 | ---- | C] (AVAST Software) -- C:\Users\Owner\Desktop\aswMBR.exe
    [2011/11/07 20:11:46 | 000,601,944 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
    [2011/11/07 20:11:46 | 000,254,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
    [2011/11/07 20:07:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
    [2011/11/07 20:07:03 | 000,301,912 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
    [2011/11/07 20:07:03 | 000,042,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
    [2011/11/07 20:07:03 | 000,024,408 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
    [2011/11/07 20:07:02 | 000,065,368 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
    [2011/11/07 20:07:02 | 000,058,200 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
    [2011/11/07 20:06:44 | 000,199,304 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
    [2011/11/07 20:06:44 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
    [2011/11/07 20:04:10 | 009,435,312 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Owner\Desktop\mbam-setup-1.51.0.1200.exe
    [2011/11/07 20:04:10 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Owner\Desktop\dds.scr
    [2011/11/06 22:15:05 | 000,000,000 | ---D | C] -- C:\_OTL
    [2011/10/23 21:10:41 | 000,000,000 | ---D | C] -- C:\Users\Owner\Desktop\FlashDrive_Backup(10-23-11)

    ========== Files - Modified Within 30 Days ==========

    [2011/11/09 00:16:03 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    [2011/11/09 00:14:56 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
    [2011/11/09 00:14:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
    [2011/11/08 22:09:08 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
    [2011/11/08 21:45:57 | 000,757,970 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
    [2011/11/08 21:45:57 | 000,644,118 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
    [2011/11/08 21:45:57 | 000,117,992 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
    [2011/11/08 18:15:05 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
    [2011/11/08 18:15:05 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
    [2011/11/08 18:15:05 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    [2011/11/08 17:36:57 | 617,993,845 | ---- | M] () -- C:\Windows\MEMORY.DMP
    [2011/11/08 16:44:24 | 001,008,092 | ---- | M] () -- C:\Users\Owner\Desktop\rkill.com
    [2011/11/08 16:42:12 | 004,286,253 | R--- | M] (Swearware) -- C:\Users\Owner\Desktop\ComboFix.exe
    [2011/11/08 16:41:28 | 001,916,416 | ---- | M] (AVAST Software) -- C:\Users\Owner\Desktop\aswMBR.exe
    [2011/11/07 22:45:01 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
    [2011/11/07 20:11:46 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
    [2011/11/07 20:07:04 | 000,001,798 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
    [2011/11/07 20:02:00 | 000,302,592 | ---- | M] () -- C:\Users\Owner\Desktop\x16w8n6q.exe
    [2011/11/07 20:01:38 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Owner\Desktop\dds.scr
    [2011/11/05 14:20:40 | 000,001,919 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
    [2011/11/04 02:37:05 | 000,000,975 | ---- | M] () -- C:\Users\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
    [2011/11/04 02:30:03 | 000,008,798 | ---- | M] () -- C:\Windows\SysWow64\icrav03.rat
    [2011/11/04 02:30:03 | 000,008,798 | ---- | M] () -- C:\Windows\SysNative\icrav03.rat
    [2011/11/04 02:30:03 | 000,001,988 | ---- | M] () -- C:\Windows\SysWow64\ticrf.rat
    [2011/11/04 02:30:03 | 000,001,988 | ---- | M] () -- C:\Windows\SysNative\ticrf.rat
    [2011/11/04 02:29:16 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
    [2011/11/04 02:29:06 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
    [2011/11/03 19:57:51 | 000,002,651 | ---- | M] () -- C:\Users\Owner\Desktop\Word.lnk
    [2011/10/22 12:39:36 | 000,029,184 | ---- | M] () -- C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [2011/10/16 11:40:52 | 000,305,984 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

    ========== Files Created - No Company Name ==========

    [2011/11/08 17:31:23 | 001,008,092 | ---- | C] () -- C:\Users\Owner\Desktop\rkill.com
    [2011/11/07 20:07:04 | 000,001,798 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
    [2011/11/07 20:04:10 | 051,515,288 | ---- | C] () -- C:\Users\Owner\Desktop\setup_av_free.exe
    [2011/11/07 20:04:10 | 000,302,592 | ---- | C] () -- C:\Users\Owner\Desktop\x16w8n6q.exe
    [2011/11/04 02:36:08 | 000,000,981 | ---- | C] () -- C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    [2011/11/04 02:29:16 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
    [2011/11/04 02:29:06 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
    [2011/06/18 13:11:36 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
    [2011/06/18 13:11:36 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
    [2011/06/18 13:11:36 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
    [2011/06/18 13:11:36 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
    [2011/06/18 13:11:36 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
    [2010/11/28 23:29:04 | 000,206,165 | ---- | C] () -- C:\Windows\hpoins46.dat
    [2010/10/11 23:21:08 | 000,000,680 | ---- | C] () -- C:\Users\Owner\AppData\Local\d3d9caps.dat
    [2010/10/11 23:18:57 | 000,000,034 | -H-- | C] () -- C:\Windows\SysWow64\Converter_sysquict.dat
    [2010/10/11 22:19:22 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
    [2010/07/30 23:21:49 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
    [2010/07/29 11:18:08 | 008,892,928 | ---- | C] () -- C:\ProgramData\atscie.msi
    [2010/05/13 21:36:23 | 000,029,184 | ---- | C] () -- C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [2010/01/29 16:21:20 | 000,000,532 | ---- | C] () -- C:\Windows\hpomdl46.dat
    [2009/09/19 10:53:50 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
    [2009/09/19 10:52:56 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
    [2009/09/19 10:52:13 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
    [2009/05/12 19:25:35 | 000,166,615 | ---- | C] () -- C:\Windows\hpoins31.dat
    [2008/11/30 10:12:27 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
    [2008/09/03 11:56:39 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
    [2008/08/21 21:49:18 | 002,192,024 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin
    [2008/08/21 21:49:18 | 000,147,172 | ---- | C] () -- C:\Windows\SysWow64\igfcg550.bin
    [2008/08/21 21:49:16 | 000,495,376 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin
    [2008/06/17 04:23:21 | 000,001,691 | ---- | C] () -- C:\Windows\hpomdl31.dat
    [2008/02/19 01:33:34 | 000,446,352 | ---- | C] () -- C:\Windows\SysWow64\OpenQuicktimeLib.dll
    [2008/01/20 21:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
    [2006/11/02 10:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
    [2006/11/02 07:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
    [2006/11/02 07:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
    [2006/11/02 07:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
    [2006/11/02 04:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin

    ========== LOP Check ==========

    [2011/05/15 22:46:36 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Catalina Marketing Corp
    [2010/10/25 23:33:39 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\DAEMON Tools Lite
    [2010/10/18 23:17:35 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\ImgBurn
    [2011/04/25 21:40:20 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\ooVoo Details
    [2011/04/09 21:22:14 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Red Kawa
    [2011/10/04 21:41:06 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Smilebox
    [2009/06/01 21:09:50 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\WildTangent
    [2011/11/07 22:45:02 | 000,032,636 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

    ========== Purity Check ==========



    ========== Custom Scans ==========


    < %SYSTEMDRIVE%\*.* >
    [2009/04/11 01:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr
    [2008/09/03 12:52:07 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
    [2011/11/08 22:13:19 | 000,266,331 | ---- | M] () -- C:\ComboFix.txt
    [2008/11/30 09:05:47 | 000,000,000 | ---- | M] () -- C:\detestfrag.txt
    [2010/10/12 00:13:40 | 000,000,000 | ---- | M] () -- C:\foo.txt
    [2008/09/03 12:57:50 | 000,000,165 | ---- | M] () -- C:\Labelprint.log
    [2010/10/11 23:47:13 | 000,001,015 | R--- | M] () -- C:\logFile.xsl
    [2011/11/06 23:00:53 | 000,116,632 | ---- | M] () -- C:\OTL2.Txt
    [2011/11/07 00:24:20 | 000,116,632 | ---- | M] () -- C:\OTL3.Txt
    [2011/11/08 18:14:39 | 171,962,367 | -HS- | M] () -- C:\pagefile.sys
    [2008/10/04 03:27:41 | 000,000,163 | ---- | M] () -- C:\power2go.log
    [2011/11/08 22:19:27 | 000,000,452 | ---- | M] () -- C:\rkill.log
    [2011/03/05 22:10:09 | 000,000,268 | -H-- | M] () -- C:\sqmdata00.sqm
    [2011/03/07 21:37:59 | 000,000,268 | -H-- | M] () -- C:\sqmdata01.sqm
    [2011/03/13 21:40:45 | 000,000,268 | -H-- | M] () -- C:\sqmdata02.sqm
    [2011/03/27 22:03:10 | 000,000,268 | -H-- | M] () -- C:\sqmdata03.sqm
    [2011/04/02 20:27:42 | 000,000,268 | -H-- | M] () -- C:\sqmdata04.sqm
    [2011/05/08 20:48:42 | 000,000,268 | -H-- | M] () -- C:\sqmdata05.sqm
    [2011/09/06 22:47:30 | 000,000,268 | -H-- | M] () -- C:\sqmdata06.sqm
    [2011/10/05 20:54:29 | 000,000,268 | -H-- | M] () -- C:\sqmdata07.sqm
    [2010/07/14 23:44:39 | 000,000,172 | -H-- | M] () -- C:\sqmdata08.sqm
    [2010/08/09 22:38:24 | 000,000,268 | -H-- | M] () -- C:\sqmdata09.sqm
    [2010/09/02 23:04:16 | 000,000,268 | -H-- | M] () -- C:\sqmdata10.sqm
    [2010/09/22 21:26:50 | 000,000,268 | -H-- | M] () -- C:\sqmdata11.sqm
    [2010/10/08 01:39:01 | 000,000,268 | -H-- | M] () -- C:\sqmdata12.sqm
    [2010/10/27 10:34:35 | 000,000,268 | -H-- | M] () -- C:\sqmdata13.sqm
    [2010/11/10 02:13:53 | 000,000,268 | -H-- | M] () -- C:\sqmdata14.sqm
    [2010/11/26 01:29:01 | 000,000,268 | -H-- | M] () -- C:\sqmdata15.sqm
    [2010/12/04 13:39:26 | 000,000,268 | -H-- | M] () -- C:\sqmdata16.sqm
    [2010/12/13 18:48:28 | 000,000,268 | -H-- | M] () -- C:\sqmdata17.sqm
    [2011/02/05 21:03:06 | 000,000,268 | -H-- | M] () -- C:\sqmdata18.sqm
    [2011/03/01 00:50:56 | 000,000,268 | -H-- | M] () -- C:\sqmdata19.sqm
    [2011/03/05 22:10:09 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
    [2011/03/07 21:37:59 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
    [2011/03/13 21:40:45 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
    [2011/03/27 22:03:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
    [2011/04/02 20:27:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
    [2011/05/08 20:48:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
    [2011/09/06 22:47:30 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
    [2011/10/05 20:54:29 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
    [2010/07/14 23:44:39 | 000,000,172 | -H-- | M] () -- C:\sqmnoopt08.sqm
    [2010/08/09 22:38:24 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
    [2010/09/02 23:04:16 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
    [2010/09/22 21:26:50 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm
    [2010/10/08 01:39:01 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
    [2010/10/27 10:34:35 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
    [2010/11/10 02:13:53 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
    [2010/11/26 01:29:01 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
    [2010/12/04 13:39:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
    [2010/12/13 18:48:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
    [2011/02/05 21:03:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
    [2011/03/01 00:50:56 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
    [2011/06/18 17:26:06 | 000,065,860 | ---- | M] () -- C:\TDSSKiller.2.5.5.0_18.06.2011_18.24.36_log.txt

    < %systemroot%\Fonts\*.com >
    [2006/11/02 10:06:41 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
    [2006/11/02 10:06:41 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
    [2006/11/02 10:06:41 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
    [2010/04/17 11:25:32 | 000,037,665 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont

    < %systemroot%\Fonts\*.dll >

    < %systemroot%\Fonts\*.ini >
    [2006/09/18 16:35:48 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini

    < %systemroot%\Fonts\*.ini2 >

    < %systemroot%\Fonts\*.exe >

    < %systemroot%\system32\spool\prtprocs\w32x86\*.* >

    < %systemroot%\REPAIR\*.bak1 >

    < %systemroot%\REPAIR\*.ini >

    < %systemroot%\system32\*.jpg >

    < %systemroot%\*.jpg >

    < %systemroot%\*.png >

    < %systemroot%\*.scr >
    [2011/09/06 16:45:29 | 000,041,184 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr

    < %systemroot%\*._sy >

    < %APPDATA%\Adobe\Update\*.* >

    < %ALLUSERSPROFILE%\Favorites\*.* >

    < %APPDATA%\Microsoft\*.* >

    < %PROGRAMFILES%\*.* >
    [2008/01/20 22:21:59 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

    < %APPDATA%\Update\*.* >

    < %systemroot%\*. /mp /s >

    < %systemroot%\System32\config\*.sav >

    < %PROGRAMFILES%\bak. /s >

    < %systemroot%\system32\bak. /s >

    < %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

    < %systemroot%\system32\config\systemprofile\*.dat /x >

    < %systemroot%\*.config >

    < %systemroot%\system32\*.db >

    < %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
    [2011/11/04 02:37:05 | 000,000,286 | -HS- | M] () -- C:\Users\Owner\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

    < %USERPROFILE%\Desktop\*.exe >
    [2011/11/08 16:41:28 | 001,916,416 | ---- | M] (AVAST Software) -- C:\Users\Owner\Desktop\aswMBR.exe
    [2011/11/08 16:42:12 | 004,286,253 | R--- | M] (Swearware) -- C:\Users\Owner\Desktop\ComboFix.exe
    [2011/06/16 20:51:24 | 009,435,312 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Owner\Desktop\mbam-setup-1.51.0.1200.exe
    [2011/11/09 00:14:56 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
    [2011/06/20 18:50:26 | 000,879,028 | ---- | M] () -- C:\Users\Owner\Desktop\SecurityCheck.exe
    [2010/12/30 22:26:14 | 051,515,288 | ---- | M] () -- C:\Users\Owner\Desktop\setup_av_free.exe
    [2011/06/20 18:54:56 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\TFC.exe
    [2010/10/27 00:59:30 | 282,427,301 | ---- | M] (UBCD4Win Team - Benjamin Burrows ) -- C:\Users\Owner\Desktop\UBCD4WinV360.exe
    [2011/11/07 20:02:00 | 000,302,592 | ---- | M] () -- C:\Users\Owner\Desktop\x16w8n6q.exe

    < %PROGRAMFILES%\Common Files\*.* >

    < %systemroot%\*.src >

    < %systemroot%\install\*.* >

    < %systemroot%\system32\DLL\*.* >

    < %systemroot%\system32\HelpFiles\*.* >

    < %systemroot%\system32\rundll\*.* >

    < %systemroot%\winn32\*.* >

    < %systemroot%\Java\*.* >

    < %systemroot%\system32\test\*.* >

    < %systemroot%\system32\Rundll32\*.* >

    < %systemroot%\AppPatch\Custom\*.* >

    < %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

    < %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

    < %PROGRAMFILES%\Internet Explorer\*.tmp >

    < %PROGRAMFILES%\Internet Explorer\*.dat >

    < %USERPROFILE%\My Documents\*.exe >

    < %USERPROFILE%\*.exe >

    < %systemroot%\ADDINS\*.* >

    < %systemroot%\assembly\*.bak2 >

    < %systemroot%\Config\*.* >

    < %systemroot%\REPAIR\*.bak2 >

    < %systemroot%\SECURITY\Database\*.sdb /x >
    [2011/06/10 21:51:05 | 000,008,192 | ---- | M] () -- C:\Windows\SECURITY\Database\edb.chk
    [2011/06/10 21:50:36 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edb.log
    [2010/04/17 11:41:32 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbres00001.jrs
    [2010/04/17 11:41:32 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbres00002.jrs
    [2011/06/10 21:50:36 | 001,056,768 | ---- | M] () -- C:\Windows\SECURITY\Database\tmp.edb

    < %systemroot%\SYSTEM\*.bak2 >

    < %systemroot%\Web\*.bak2 >

    < %systemroot%\Driver Cache\*.* >

    < %PROGRAMFILES%\Mozilla Firefox\0*.exe >

    < %ProgramFiles%\Microsoft Common\*.* >

    < %ProgramFiles%\TinyProxy. >

    < %USERPROFILE%\Favorites\*.url /x >
    [2008/11/30 08:50:14 | 000,000,402 | -HS- | M] () -- C:\Users\Owner\Favorites\desktop.ini

    < %systemroot%\system32\*.bk >

    < %systemroot%\*.te >

    < %systemroot%\system32\system32\*.* >

    < %ALLUSERSPROFILE%\*.dat /x >
    [2010/07/29 11:18:10 | 008,892,928 | ---- | M] () -- C:\ProgramData\atscie.msi
    [2010/11/28 23:49:01 | 000,001,999 | ---- | M] () -- C:\ProgramData\hpzinstall.log

    < %systemroot%\system32\drivers\*.rmv >

    < dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

    < dir /b "%systemroot%\*.exe" | find /i " " /c >

    < %PROGRAMFILES%\Microsoft\*.* >

    < %systemroot%\System32\Wbem\proquota.exe >

    < %PROGRAMFILES%\Mozilla Firefox\*.dat >

    < %USERPROFILE%\Cookies\*.txt /x >

    < %SystemRoot%\system32\fonts\*.* >

    < %systemroot%\system32\winlog\*.* >

    < %systemroot%\system32\Language\*.* >

    < %systemroot%\system32\Settings\*.* >

    < %systemroot%\system32\*.quo >

    < %SYSTEMROOT%\AppPatch\*.exe >

    < %SYSTEMROOT%\inf\*.exe >

    < %SYSTEMROOT%\Installer\*.exe >

    < %systemroot%\system32\config\*.bak2 >

    < %systemroot%\system32\Computers\*.* >

    < %SystemRoot%\system32\Sound\*.* >

    < %SystemRoot%\system32\SpecialImg\*.* >

    < %SystemRoot%\system32\code\*.* >

    < %SystemRoot%\system32\draft\*.* >

    < %SystemRoot%\system32\MSSSys\*.* >

    < %ProgramFiles%\Javascript\*.* >

    < %systemroot%\pchealth\helpctr\System\*.exe /s >

    < %systemroot%\Web\*.exe >

    < %systemroot%\system32\msn\*.* >

    < %systemroot%\system32\*.tro >

    < %AppData%\Microsoft\Installer\msupdates\*.* >

    < %ProgramFiles%\Messenger\*.* >

    < %systemroot%\system32\systhem32\*.* >

    < %systemroot%\system\*.exe >

    < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

    < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >


    < End of report >
    KenBrown2, Nov 9, 2011
    #29

  10. Broni Malware Annihilator

    Good news :)

    1. Update your Java version here: http://www.java.com/en/download/installed.jsp

    Note 1: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.

    Note 2: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. If you don't want to run another extra service, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and restart your computer.

    2. Now, we need to remove old Java version and its remnants...

    Download JavaRa to your desktop and unzip it to its own folder
    • Run JavaRa.exe (Vista users! Right click on JavaRa.exe, click Run As Administrator), pick the language of your choice and click Select. Then click Remove Older Versions.
    • Accept any prompts.

    ====================================================================

    Run OTL
    • Under the Custom Scans/Fixes box at the bottom, paste in the following

      Code:
      :OTL
IE - HKLM\..\URLSearchHook: {37153479-1976-43c3-a1ee-557513977b64} - No CLSID value found
FF - prefs.js..network.proxy.http_port: 56364
O2 - BHO: (no name) - {37153479-1976-43c3-a1ee-557513977b64} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {37153479-1976-43c3-a1ee-557513977b64} - No CLSID value found.

:Commands
[purity]
[emptytemp]
[emptyflash]
[Reboot]
    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot the PC when it is done
    • You will get a log that shows the results of the fix. Please post it.

    ====================================================================

    Last scans....

    1. Download Security Check from HERE, and save it to your Desktop.
    • Double-click SecurityCheck.exe
    • Follow the onscreen instructions inside of the black box.
    • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

      NOTE SecurityCheck may produce some false warning(s), so leave the results reading to me.


    2. Download Temp File Cleaner (TFC)
    • Double click on TFC.exe to run the program.
    • Click on Start button to begin cleaning process.
    • TFC will close all running programs, and it may ask you to restart computer.


    3. Please run a free online scan with the ESET Online Scanner

    • Disable your antivirus program
    • Tick the box next to YES, I accept the Terms of Use
    • Click Start
    • Accept any security warnings from your browser.
    • Check Scan archives
    • Click Start
    • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    • When the scan completes, click on List of found threats
    • Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
    • NOTE. If Eset won't find any threats, it won't produce any log.
    Broni, Nov 9, 2011
    #30

  11. KenBrown2 Newcomer, in training

    System is running very well. The only strange thing that happened, is something about the scheduled java updator. I have gotten two messages saying that the process has stopped. Other than that, everything is good!

    OTL

    All processes killed
    ========== OTL ==========
    Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{37153479-1976-43c3-a1ee-557513977b64} deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{37153479-1976-43c3-a1ee-557513977b64}\ not found.
    Prefs.js: 56364 removed from network.proxy.http_port
    Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{37153479-1976-43c3-a1ee-557513977b64}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{37153479-1976-43c3-a1ee-557513977b64}\ not found.
    Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{37153479-1976-43c3-a1ee-557513977b64} deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{37153479-1976-43c3-a1ee-557513977b64}\ not found.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: AppData
    ->Temp folder emptied: 0 bytes

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 67 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes

    User: Owner
    ->Temp folder emptied: 235809 bytes
    ->Temporary Internet Files folder emptied: 20139525 bytes
    ->Java cache emptied: 534206 bytes
    ->FireFox cache emptied: 10161061 bytes
    ->Flash cache emptied: 17097 bytes

    User: Public
    ->Temp folder emptied: 0 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 5733 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
    RecycleBin emptied: 887314 bytes

    Total Files Cleaned = 31.00 mb


    [EMPTYFLASH]

    User: All Users

    User: AppData

    User: Default

    User: Default User

    User: Owner
    ->Flash cache emptied: 0 bytes

    User: Public

    Total Flash Files Cleaned = 0.00 mb


    OTL by OldTimer - Version 3.2.31.0 log created on 11092011_015703

    Files\Folders moved on Reboot...
    C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat moved successfully.
    C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\SuggestedSites.dat moved successfully.
    C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZLF8NEMQ\topic173061-2[1].htm moved successfully.

    Registry entries deleted on Reboot...



    Checkup

    Results of screen317's Security Check version 0.99.24
    Windows Vista x64 (UAC is disabled!)
    Out of date service pack!!
    Internet Explorer 9
    ``````````````````````````````
    Antivirus/Firewall Check:
    Windows Firewall Enabled!
    avast! Free Antivirus
    ESET Online Scanner v3
    WMI entry may not exist for antivirus; attempting automatic update.
    ```````````````````````````````
    Anti-malware/Other Utilities Check:
    Malwarebytes' Anti-Malware
    Java(TM) 6 Update 29
    Java(TM) 6 Update 5
    Java(TM) 6 Update 7
    Out of date Java installed!
    Adobe Flash Player ( 10.1.53.64) Flash Player Out of Date!
    Mozilla Firefox (3.6.8) Firefox Out of Date!
    ````````````````````````````````
    Process Check:
    objlist.exe by Laurent
    Alwil Software Avast5 AvastSvc.exe
    ``````````End of Log````````````
    KenBrown2, Nov 9, 2011
    #31

  12. Broni Malware Annihilator

    Broni, Nov 9, 2011
    #32

  13. KenBrown2 Newcomer, in training

    Ok, both old versions of Java have been uninstalled, and the weekly scheduler has been stopped from updating.

    As for the ESET, it did not produce a log. Should it have?
    KenBrown2, Nov 9, 2011
    #33

  14. Broni Malware Annihilator

    Your computer is clean [IMG]

    1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point, using following OTL script:

    Run OTL

    • Under the Custom Scans/Fixes box at the bottom, paste in the following:

    Code:
    :OTL
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[Reboot]
    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot the PC when it is done
    • Post resulting log.

    2. Now, we'll remove all tools, we used during our cleaning process

    Clean up with OTL:

    • Double-click OTL.exe to start the program.
    • Close all other programs apart from OTL as this step will require a reboot
    • On the OTL main screen, press the CLEANUP button
    • Say Yes to the prompt and then allow the program to reboot your computer.

    If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.

    3. Make sure, Windows Updates are current.

    4. If any Trojan was listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

    5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

    6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

    7. Run Temporary File Cleaner (TFC) weekly.

    8. Download and install Secunia Personal Software Inspector (PSI): http://secunia.com/vulnerability_scanning/personal/. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

    9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
    The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

    10. (Windows XP only) Run defrag at your convenience.

    11. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

    12. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

    13. Please, let me know, how your computer is doing.
    Broni, Nov 9, 2011
    #34

  15. KenBrown2 Newcomer, in training

    Broni,

    I'm still with you! I have just been away the past few days. I am going to address the things explained in your post tonight or tomorrow.

    Thank you so much for all of your help! You're freaking awesome.

    Ken
    KenBrown2, Nov 13, 2011
    #35

  16. Broni Malware Annihilator

    Thank you :)
    Broni, Nov 13, 2011
    #36
Page 2 of 2