Solved My girlfriend's computer has two viruses

Status
Not open for further replies.
I did not transfer over some of the lines as they were redundant from last time.

It is not up to you to exclude log entries. Please post the entire Combofix log.
 
ComboFix 12-03-22.01 - Nicole 03/28/2012 16:15:04.9.4 - x64
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.6077.4525 [GMT -5:00]
Running from: c:\users\Nicole\Documents\Downloads\ComboFix.exe
Command switches used :: c:\users\Nicole\Desktop\cfscript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
- REDUCED FUNCTIONALITY MODE -
.
FILE ::
"C:\user.js"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\0c572bb179cde750a8df677364
c:\0c572bb179cde750a8df677364\$shtdwn$.req
c:\0c572bb179cde750a8df677364\1028\eula.rtf
c:\0c572bb179cde750a8df677364\1028\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\1031\eula.rtf
c:\0c572bb179cde750a8df677364\1031\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\1033\eula.rtf
c:\0c572bb179cde750a8df677364\1033\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\1036\eula.rtf
c:\0c572bb179cde750a8df677364\1036\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\1040\eula.rtf
c:\0c572bb179cde750a8df677364\1040\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\1041\eula.rtf
c:\0c572bb179cde750a8df677364\1041\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\1042\eula.rtf
c:\0c572bb179cde750a8df677364\1042\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\1046\eula.rtf
c:\0c572bb179cde750a8df677364\1046\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\1049\eula.rtf
c:\0c572bb179cde750a8df677364\1049\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\2052\eula.rtf
c:\0c572bb179cde750a8df677364\2052\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\3082\eula.rtf
c:\0c572bb179cde750a8df677364\3082\HotFixInstallerUI.dll
c:\0c572bb179cde750a8df677364\DHtmlHeader.html
c:\0c572bb179cde750a8df677364\header.bmp
c:\0c572bb179cde750a8df677364\HotFixInstaller.exe
c:\0c572bb179cde750a8df677364\ParameterInfo.xml
c:\0c572bb179cde750a8df677364\VS90SP1-KB2251487.msp
c:\0c572bb179cde750a8df677364\watermark.bmp
C:\e5176b4be44ced2d25f828d6e97a
c:\e5176b4be44ced2d25f828d6e97a\$shtdwn$.req
c:\e5176b4be44ced2d25f828d6e97a\1028\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1028\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\1031\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1031\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\1033\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1033\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\1036\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1036\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\1040\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1040\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\1041\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1041\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\1042\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1042\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\1046\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1046\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\1049\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\1049\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\2052\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\2052\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\3082\eula.rtf
c:\e5176b4be44ced2d25f828d6e97a\3082\HotFixInstallerUI.dll
c:\e5176b4be44ced2d25f828d6e97a\DHtmlHeader.html
c:\e5176b4be44ced2d25f828d6e97a\header.bmp
c:\e5176b4be44ced2d25f828d6e97a\HotFixInstaller.exe
c:\e5176b4be44ced2d25f828d6e97a\ParameterInfo.xml
c:\e5176b4be44ced2d25f828d6e97a\VS90SP1-KB2251487.msp
c:\e5176b4be44ced2d25f828d6e97a\watermark.bmp
C:\found.000
c:\found.000\dir0000.chk\b[8].gif
c:\found.000\dir0000.chk\beacon[2].js
c:\found.000\dir0000.chk\dk[3].js
c:\found.000\dir0000.chk\dref=http%253A%252F%252Fwww.mevio[1].js
c:\found.000\dir0000.chk\elie-saab-10511-2[1].jpg
c:\found.000\dir0000.chk\elie-saab-10511-5[1].jpg
c:\found.000\dir0000.chk\happy-socks03header[1].jpg
c:\found.000\dir0000.chk\img[2].js
c:\found.000\dir0000.chk\impCACNUKP5.js
c:\found.000\dir0000.chk\MevioBPFX[1].swf
c:\found.000\dir0000.chk\tntwo[2].js
C:\found.001.
c:\found.001.\dir0000.chk\26\9C5BDd01
c:\found.001.\dir0000.chk\D5\F04FAd01
c:\found.001.\dir0001.chk\14\3C689d01
c:\found.001.\dir0001.chk\97\66531d01
c:\found.001.\dir0002.chk\73\252B3d01
c:\found.001.\dir0002.chk\84\1B39Ad01
c:\found.001.\dir0003.chk\79\2407Fd01
c:\found.001.\dir0003.chk\83\E422Ad01
c:\found.001.\dir0004.chk\B2\CC636d01
c:\found.001.\dir0004.chk\BD\47AEAd01
c:\found.001.\dir0004.chk\F3\51E7Cd01
c:\found.001.\dir0005.chk\06\DC571d01
c:\found.001.\dir0005.chk\4C\D3363d01
c:\found.001.\dir0005.chk\54\E76A4d01
c:\found.001.\dir0005.chk\E0\6A2FEd01
c:\found.001.\dir0006.chk\B88B8d01
c:\found.001.\dir0007.chk\9FD4Ad01
c:\found.001.\dir0008.chk\E841Bd01
c:\found.001.\file0000.chk
c:\found.001.\file0001.chk
c:\program files (x86)\Conduit
c:\program files (x86)\Conduit\Community Alerts\Alert.dll
c:\program files (x86)\v-Grabber
c:\program files (x86)\v-Grabber\appicon.ico
c:\program files (x86)\v-Grabber\converter\ffmpeg.exe
c:\program files (x86)\v-Grabber\imageformats\qjpeg4.dll
c:\program files (x86)\v-Grabber\libgcc_s_dw2-1.dll
c:\program files (x86)\v-Grabber\libstdc++-6.dll
c:\program files (x86)\v-Grabber\mingwm10.dll
c:\program files (x86)\v-Grabber\phonon4.dll
c:\program files (x86)\v-Grabber\QtCore4.dll
c:\program files (x86)\v-Grabber\QtGui4.dll
c:\program files (x86)\v-Grabber\QtNetwork4.dll
c:\program files (x86)\v-Grabber\QtWebKit4.dll
c:\program files (x86)\v-Grabber\youtubeDL.exe
c:\programdata\Babylon
C:\user.js
c:\users\Nicole\AppData\Local\Babylon
c:\users\Nicole\AppData\Local\temp
c:\users\Nicole\AppData\Local\temp\._msige61\0x0402.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0403.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0404.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0405.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0406.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0407.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0408.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0409.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x040a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x040b.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x040c.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x040d.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x040e.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0410.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0411.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0412.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0413.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0414.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0415.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0416.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0418.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0419.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x041a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x041b.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x041d.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x041e.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x041f.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0421.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0422.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0424.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0426.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0427.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x042a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0804.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0809.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x080a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0816.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0c01.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0c0a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x0c1a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x100a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x140a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x180a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x1c0a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x200a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x240a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x280a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x2c0a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x300a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x340a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x380a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\0x3c0a.ini
c:\users\Nicole\AppData\Local\temp\._msige61\10250.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1026.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1027.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1028.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1029.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1030.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1031.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1032.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1033.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1034.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1035.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1036.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1037.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1038.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1040.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1041.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1042.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1043.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1044.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1045.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1046.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1048.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1049.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1050.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1051.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1053.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1054.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1055.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1057.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1058.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1060.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1062.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1063.mst
c:\users\Nicole\AppData\Local\temp\._msige61\1066.mst
c:\users\Nicole\AppData\Local\temp\._msige61\11274.mst
c:\users\Nicole\AppData\Local\temp\._msige61\12298.mst
c:\users\Nicole\AppData\Local\temp\._msige61\13322.mst
c:\users\Nicole\AppData\Local\temp\._msige61\14346.mst
c:\users\Nicole\AppData\Local\temp\._msige61\15370.mst
c:\users\Nicole\AppData\Local\temp\._msige61\2052.mst
c:\users\Nicole\AppData\Local\temp\._msige61\2057.mst
c:\users\Nicole\AppData\Local\temp\._msige61\2058.mst
c:\users\Nicole\AppData\Local\temp\._msige61\2070.mst
c:\users\Nicole\AppData\Local\temp\._msige61\3073.mst
c:\users\Nicole\AppData\Local\temp\._msige61\3082.mst
c:\users\Nicole\AppData\Local\temp\._msige61\3098.mst
c:\users\Nicole\AppData\Local\temp\._msige61\4106.mst
c:\users\Nicole\AppData\Local\temp\._msige61\5130.mst
c:\users\Nicole\AppData\Local\temp\._msige61\6154.mst
c:\users\Nicole\AppData\Local\temp\._msige61\7178.mst
c:\users\Nicole\AppData\Local\temp\._msige61\8202.mst
c:\users\Nicole\AppData\Local\temp\._msige61\9226.mst
c:\users\Nicole\AppData\Local\temp\._msige61\Google Earth.msi
c:\users\Nicole\AppData\Local\temp\._msige61\GoogleEarth.exe
 
c:\users\Nicole\AppData\Local\temp\._msige61\LocalAppData\Google\Custom Buttons\toolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\drivers.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\earthflashsol.exe
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\earthps.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\ge_expat.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\google_earth.ico
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\googleearth.exe
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\googleearth.exe.local
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\googleearth_free.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\gpl.txt
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\gpsbabel.exe
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\ImporterGlobalSettings.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\ImporterUISettings.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\kh20
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\kml_file.ico
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\kmz_file.ico
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\ar.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\bg.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\ca.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\cs.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\da.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\de.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\el.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\en.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\es-419.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\es.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\fa.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\fi.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\fil.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\fr.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\he.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\hi.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\hr.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\hu.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\id.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\it.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\ja.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\ko.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\lt.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\lv.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\nl.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\no.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\pl.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\pt-PT.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\pt.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\ro.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\ru.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\sk.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\sl.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\sr.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\sv.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\th.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\tr.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\uk.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\vi.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\zh-Hans.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\zh-Hant-HK.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\lang\zh-Hant.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\msvcp100.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\msvcr100.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\PCOptimizations.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\Plugins\npgeinprocessplugin.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\Plugins\npgeinprocessplugin.exp
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\Plugins\npgeinprocessplugin.lib
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\Plugins\npgeinprocessplugin.pdb
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\application.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\balloons.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\builtin_webdata.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\cursor_crosshair_inverse.png
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\cursor_crosshair_thick.png
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\default_myplaces.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\doppler.txt
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\effects.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\aircraft\f16.acf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\aircraft\sr22.acf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\generic.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\genius_maxfighter_f16u.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\logitech_attack3.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\logitech_extreme_3d.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\logitech_force_3d.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\logitech_freedom.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\saitek_cyborg_evo.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\saitek_x52.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\speed_link_black_hawk.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\speed_link_black_widow.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\speed_link_cougar_flightstick.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\speed_link_dark_tornado.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\controller\xbox_360.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\flightsim.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\hud\generic.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\hud\sr22.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\keyboard\generic.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\keyboard\sr22.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\flightsim\planet\earth.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\leftpanel-common.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\leftpanel-layer.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\localshapes.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\navcontrols.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\notifications.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\progress.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\renderui.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\search.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\spin_icon.png
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\startinglocations-nonmac.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\startinglocations.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\statusbar.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\terrainmgr.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\tmcontrols.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\toolbar.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\tourcontrols.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\unknown_plugin.png
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\userpalette.kml
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\res\webbrowser.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_common.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off_overlay.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off_overlay.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off_overlay.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off_overlay.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off_overlay.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off_overlay.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off_overlay.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_off_overlay.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on_overlay.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on_overlay.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on_overlay.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on_overlay.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on_overlay.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on_overlay.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on_overlay.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_ground_sun_on_overlay.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_off.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_off.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_off.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_off.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_off.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_off.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_off.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_off.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_on.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_on.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_on.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_on.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_on.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_on.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_on.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\atmosphere_sky_sun_on.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_no_atmosphere.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_no_atmosphere.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_no_atmosphere.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_no_atmosphere.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_no_atmosphere.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_no_atmosphere.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_sun_no_atmosphere.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_sun_no_atmosphere.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_sun_no_atmosphere.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_sun_no_atmosphere.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_sun_no_atmosphere.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\fade_sun_no_atmosphere.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\ground_overlay_no_atmosphere.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\ground_overlay_no_atmosphere.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\ground_overlay_no_atmosphere.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\ground_overlay_no_atmosphere.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\ground_overlay_no_atmosphere.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\ground_overlay_no_atmosphere.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\ground_overlay_no_atmosphere.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\ground_overlay_no_atmosphere.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on_overlay.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on_overlay.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on_overlay.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on_overlay.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on_overlay.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on_overlay.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on_overlay.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_ground_sun_on_overlay.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_sky_sun_on.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_sky_sun_on.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_sky_sun_on.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_sky_sun_on.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_sky_sun_on.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\mars_atmosphere_sky_sun_on.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\precipitation_double_cone.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\precipitation_double_cone.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\precipitation_double_cone.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\precipitation_double_cone.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\precipitation_double_cone.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\precipitation_double_cone.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbillboard.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbillboard.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbillboard.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbillboard.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbillboard.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbillboard.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbranch.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbranch.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbranch.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbranch.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbranch.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stbranch.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stcommonobjects.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stfrond.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stfrond.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stfrond.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stfrond.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stfrond.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stfrond.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafcard.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafcard.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafcard.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafcard.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafcard.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafcard.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafmesh.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafmesh.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafmesh.asd
 
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafmesh.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafmesh.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\stleafmesh.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\watersurface.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\watersurface.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\watersurface.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\watersurface.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\watersurface.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\watersurface.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\watersurface.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\shaders\watersurface.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\uninstall.ico
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\client\wavdest.ax
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\drivers.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\earthps.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\ge_expat.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\geplugin.exe
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\google_earth.ico
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\googleearth.exe.local
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\googleearth_free.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\gpl.txt
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\ImporterGlobalSettings.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\ImporterUISettings.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\kh20
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\ar.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\bg.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\ca.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\cs.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\da.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\de.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\el.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\en.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\es-419.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\es.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\fa.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\fi.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\fil.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\fr.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\he.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\hi.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\hr.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\hu.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\id.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\it.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\ja.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\ko.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\lt.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\lv.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\nl.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\no.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\pl.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\pt-PT.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\pt.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\ro.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\ru.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\sk.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\sl.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\sr.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\sv.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\th.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\tr.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\uk.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\vi.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\zh-Hans.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\zh-Hant-HK.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\lang\zh-Hant.qm
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\msvcp100.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\msvcr100.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\npgeplugin.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\PCOptimizations.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\plugin_ax.dll
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\application.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\balloons.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\builtin_webdata.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\cursor_crosshair_inverse.png
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\cursor_crosshair_thick.png
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\doppler.txt
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\effects.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\aircraft\f16.acf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\aircraft\sr22.acf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\generic.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\genius_maxfighter_f16u.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\logitech_attack3.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\logitech_extreme_3d.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\logitech_force_3d.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\logitech_freedom.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\saitek_cyborg_evo.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\saitek_x52.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\speed_link_black_hawk.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\speed_link_black_widow.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\speed_link_cougar_flightstick.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\speed_link_dark_tornado.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\controller\xbox_360.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\flightsim.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\hud\generic.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\hud\sr22.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\keyboard\generic.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\keyboard\sr22.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\flightsim\planet\earth.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\leftpanel-common.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\leftpanel-layer.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\localshapes.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\navcontrols.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\notifications.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\progress.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\renderui.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\search.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\spin_icon.png
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\statusbar.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\terrainmgr.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\tmcontrols.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\toolbar.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\tourcontrols.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\unknown_plugin.png
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\userpalette.kml
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\res\webbrowser.rcc
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_common.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off_overlay.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off_overlay.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off_overlay.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off_overlay.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off_overlay.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off_overlay.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off_overlay.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_off_overlay.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on_overlay.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on_overlay.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on_overlay.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on_overlay.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on_overlay.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on_overlay.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on_overlay.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_ground_sun_on_overlay.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_off.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_off.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_off.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_off.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_off.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_off.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_off.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_off.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_on.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_on.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_on.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_on.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_on.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_on.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_on.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\atmosphere_sky_sun_on.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_no_atmosphere.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_no_atmosphere.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_no_atmosphere.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_no_atmosphere.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_no_atmosphere.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_no_atmosphere.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_sun_no_atmosphere.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_sun_no_atmosphere.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_sun_no_atmosphere.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_sun_no_atmosphere.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_sun_no_atmosphere.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\fade_sun_no_atmosphere.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\ground_overlay_no_atmosphere.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\ground_overlay_no_atmosphere.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\ground_overlay_no_atmosphere.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\ground_overlay_no_atmosphere.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\ground_overlay_no_atmosphere.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\ground_overlay_no_atmosphere.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\ground_overlay_no_atmosphere.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\ground_overlay_no_atmosphere.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on_overlay.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on_overlay.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on_overlay.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on_overlay.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on_overlay.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on_overlay.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on_overlay.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_ground_sun_on_overlay.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_sky_sun_on.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_sky_sun_on.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_sky_sun_on.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_sky_sun_on.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_sky_sun_on.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\mars_atmosphere_sky_sun_on.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\precipitation_double_cone.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\precipitation_double_cone.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\precipitation_double_cone.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\precipitation_double_cone.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\precipitation_double_cone.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\precipitation_double_cone.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbillboard.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbillboard.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbillboard.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbillboard.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbillboard.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbillboard.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbranch.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbranch.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbranch.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbranch.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbranch.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stbranch.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stcommonobjects.ini
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stfrond.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stfrond.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stfrond.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stfrond.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stfrond.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stfrond.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafcard.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafcard.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafcard.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafcard.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafcard.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafcard.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafmesh.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafmesh.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafmesh.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafmesh.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafmesh.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\stleafmesh.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\watersurface.arbfp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\watersurface.arbvp1
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\watersurface.asd
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\watersurface.cfg
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\watersurface.glslesf
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\watersurface.glslesv
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\watersurface.ps_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\shaders\watersurface.vs_2_0
c:\users\Nicole\AppData\Local\temp\._msige61\program files\Google\Google Earth\plugin\uninstall.ico
c:\users\Nicole\AppData\Local\temp\._msige61\Setup.ini
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\CER\client.css
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\CER\img\Autodesk_logo_blue_TY.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\CER\img\connecting.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\ADRInstRes.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\CER\exampleDesc.htm
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\CER\thankYou.htm
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\senddmpRes.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\404.html
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\css\style.css
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\autodesk-design-review-2012-name.png
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\autodesk-logo.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\background-left.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\background-right.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\category-left.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\category-right.gif
 
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\footer.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\item-hover.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\item-idle.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\message-left.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\InfoLink\images\message-right.gif
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\en-US\SetupRes\Infotainment\Images\DesignRev_install.png
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup.exe
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup.ini
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\adrsetup.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\CIPUtil.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\LiteHtml.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\mapfile.mlm
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\MC3.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\MC3Res.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\mfc90u.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\Microsoft.VC90.CRT.manifest
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\Microsoft.VC90.MFC.manifest
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\msvcm90.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\msvcp90.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\msvcr90.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\ProdDep_UserDep.mc3
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\ProdDep_UserInd.mc3
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\ProdInd_UserDep.mc3
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\ProdInd_UserInd.mc3
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\senddmp.exe
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\Setup.exe
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\SetupAcadUi.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\SetupCtrls.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\SetupUi.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\UPI.dll
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\Setup\upiconfig.xml
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\SetupRes\deploy.mst
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\SetupRes\DesignRev_install.png
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\SetupRes\eval.msi
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\SetupRes\gpo.mst
c:\users\Nicole\AppData\Local\temp\_AI28C4.tmp\SetupRes\TopBanner.png
c:\users\Nicole\AppData\Local\temp\~Qil1831.tmp
c:\users\Nicole\AppData\Local\temp\AdobeARM.log
c:\users\Nicole\AppData\Local\temp\ArmUI.ini
c:\users\Nicole\AppData\Local\temp\Autodesk Design Review 2012.log
c:\users\Nicole\AppData\Local\temp\Av-test.txt
c:\users\Nicole\AppData\Local\temp\d3294.mst
c:\users\Nicole\AppData\Local\temp\etilqs_evCi8d7RVft9cDy
c:\users\Nicole\AppData\Local\temp\etilqs_FMWrpzCFc2cG3nY
c:\users\Nicole\AppData\Local\temp\etilqs_kqBUStRHw6Uk7v8
c:\users\Nicole\AppData\Local\temp\etilqs_p7ZpetiqwR4gr9N
c:\users\Nicole\AppData\Local\temp\etilqs_SEUXJ5cWnlBoIW8
c:\users\Nicole\AppData\Local\temp\geColladaModelCacheLock
c:\users\Nicole\AppData\Local\temp\geIconCacheLock
c:\users\Nicole\AppData\Local\temp\GoogleUpdateSetup.exe2668477
c:\users\Nicole\AppData\Local\temp\is2FE3.tmp
c:\users\Nicole\AppData\Local\temp\jusched.log
c:\users\Nicole\AppData\Local\temp\LEX1DEC.tmp
c:\users\Nicole\AppData\Local\temp\ms3953.tmp
c:\users\Nicole\AppData\Local\temp\MSIb35ad.LOG
c:\users\Nicole\AppData\Local\temp\Nicole.bmp
c:\users\Nicole\AppData\Local\temp\WKS1CE2.tmp
c:\users\Nicole\AppData\Local\temp\WKS48B5.tmp
c:\users\Nicole\AppData\Local\temp\WKS48B6.tmp
c:\users\Nicole\AppData\Local\temp\WKS48B7.tmp
c:\users\Nicole\AppData\Local\temp\wmplog00.sqm
c:\users\Nicole\AppData\Local\temp\wmplog01.sqm
c:\users\Nicole\AppData\Local\temp\wmplog02.sqm
c:\users\Nicole\AppData\Local\temp\wmplog03.sqm
c:\users\Nicole\AppData\Local\temp\wmplog04.sqm
c:\users\Nicole\AppData\Local\temp\wmplog05.sqm
c:\users\Nicole\AppData\Local\temp\wmplog06.sqm
c:\users\Nicole\AppData\Roaming\Babylon
.
.
((((((((((((((((((((((((( Files Created from 2012-02-28 to 2012-03-28 )))))))))))))))))))))))))))))))
.
.
2012-03-28 21:20 . 2012-03-28 21:21 -------- d-----w- c:\users\Nicole\AppData\Local\Temp
2012-03-28 21:17 . 2012-03-28 21:17 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2012-03-28 21:17 . 2012-03-28 21:17 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-03-28 21:17 . 2012-03-28 21:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-03-28 21:17 . 2012-03-28 21:17 -------- d-----w- c:\users\AppData\AppData\Local\temp
2012-03-24 06:12 . 2012-03-24 06:12 -------- d-----w- c:\users\Nicole\AppData\Roaming\com.socialbox.socialbox
2012-03-23 20:07 . 2012-03-23 20:07 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8592EBD0-50CA-4A4A-BCCE-A5AC4E1E79C8}\offreg.dll
2012-03-23 19:50 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8592EBD0-50CA-4A4A-BCCE-A5AC4E1E79C8}\mpengine.dll
2012-03-22 15:06 . 2012-03-22 15:06 -------- d-----w- c:\program files (x86)\ESET
2012-03-21 08:04 . 2012-03-21 08:04 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-03-17 03:16 . 2012-01-12 14:28 57976 ----a-r- c:\windows\system32\drivers\SBREDrv.sys
2012-03-17 02:42 . 2012-03-17 02:42 -------- d-----w- c:\users\Nicole\AppData\Local\VS Revo Group
2012-03-17 00:47 . 2012-03-17 00:47 -------- d-----w- c:\users\Nicole\AppData\Roaming\SUPERAntiSpyware.com
2012-03-17 00:45 . 2012-03-17 00:47 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-03-17 00:45 . 2012-03-17 00:45 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-03-15 19:27 . 2012-03-15 19:27 -------- d-----w- c:\program files\iPod
2012-03-15 19:27 . 2012-03-15 19:28 -------- d-----w- c:\program files\iTunes
2012-03-15 19:27 . 2012-03-15 19:28 -------- d-----w- c:\program files (x86)\iTunes
2012-03-15 00:20 . 2012-03-15 00:20 -------- d-----w- c:\users\Nicole\AppData\Roaming\DVDVideoSoft
2012-03-15 00:20 . 2012-03-15 00:20 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
2012-03-15 00:20 . 2012-03-15 00:20 -------- d-----w- c:\program files (x86)\DVDVideoSoft
2012-03-15 00:10 . 2012-03-24 17:56 -------- d-----w- c:\program files (x86)\FoxTabVideoConverter
2012-03-12 22:15 . 2012-03-12 22:15 -------- d-----w- c:\program files (x86)\AWS
2012-03-12 18:34 . 2010-02-18 13:49 225280 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-03-12 18:34 . 2010-02-18 11:59 29696 ----a-w- c:\windows\system32\drivers\tunnel.sys
2012-03-03 03:10 . 2012-03-03 03:20 -------- d-----w- C:\Fonts, new
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-10 15:39 . 2011-07-14 15:45 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-02-23 16:23 . 2012-01-04 06:11 41184 ----a-w- c:\windows\avastSS.scr
2012-02-23 16:23 . 2012-01-04 06:11 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-02-23 16:23 . 2012-01-02 22:32 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-02-23 16:12 . 2012-01-04 06:12 817496 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-23 16:12 . 2012-01-04 06:12 335704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-02-23 16:10 . 2012-01-04 06:12 43864 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-02-23 16:10 . 2012-01-04 06:12 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-02-23 16:10 . 2012-01-04 06:12 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-02-23 16:10 . 2012-01-04 06:12 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-23 14:18 . 2011-01-17 07:35 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-01-19 15:22 . 2012-01-19 15:22 45936 ----a-r- c:\windows\system32\SBBD.EXE
2012-01-04 08:15 . 2011-04-30 16:28 416 ----a-w- c:\programdata\Microsoft\MSDN\9.0\1033\ResourceCache.dll
2012-01-03 14:25 . 2012-02-18 18:37 404992 ----a-w- c:\windows\system32\drivers\afd.sys
.
.
 
((((((((((((((((((((((((((((( SnapShot_2012-03-24_17.59.17 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-21 03:20 . 2012-03-24 17:58 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-01-21 03:20 . 2012-03-28 21:19 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-02-02 18:37 . 2012-03-24 17:58 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-02-02 18:37 . 2012-03-28 21:19 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-01-21 03:20 . 2012-03-24 17:58 65536 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-21 03:20 . 2012-03-28 21:19 65536 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-21 02:23 . 2012-03-28 21:21 52606 c:\windows\system32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 15:45 . 2012-03-28 21:21 76042 c:\windows\system32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2011-01-17 04:22 . 2012-03-28 21:21 11700 c:\windows\system32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1475235829-1360834442-158596274-1000_UserData.bin
+ 2011-11-22 04:57 . 2011-11-22 04:57 68880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
+ 2011-11-22 03:31 . 2011-11-22 03:31 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
- 2012-01-02 04:05 . 2012-01-02 04:05 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
+ 2012-03-27 08:05 . 2012-03-27 08:05 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-02-20 09:09 . 2012-02-20 09:09 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-01-02 04:04 . 2012-01-02 04:04 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
+ 2012-03-27 08:09 . 2012-03-27 08:09 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-03-27 08:04 . 2012-03-27 08:04 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-02-20 09:08 . 2012-02-20 09:08 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-02-20 09:08 . 2012-02-20 09:08 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-03-27 08:04 . 2012-03-27 08:04 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-03-27 04:53 . 2012-03-27 04:53 65536 c:\windows\Installer\{7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
+ 2012-03-27 04:53 . 2012-03-27 04:53 65536 c:\windows\Installer\{7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2012-03-27 04:53 . 2012-03-27 04:53 65536 c:\windows\Installer\{7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2012-03-27 04:53 . 2012-03-27 04:53 65536 c:\windows\Installer\{7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2012-03-27 04:53 . 2012-03-27 04:53 65536 c:\windows\Installer\{7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}\googleearth.exe1_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2012-03-27 04:53 . 2012-03-27 04:53 65536 c:\windows\Installer\{7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}\googleearth.exe_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2012-03-27 04:53 . 2012-03-27 04:53 65536 c:\windows\Installer\{7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}\ARPPRODUCTICON.exe
+ 2012-03-27 08:22 . 2012-03-27 08:22 10240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\f137c53afae3903f20eba1fa0f8f8dad\System.Xml.Serialization.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 70656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml.Hosting\d4c98757d64684477081d5f200e875c1\System.Xaml.Hosting.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\ef151d5b49d8b0d0052d05fc56d25107\System.Windows.Presentation.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Routing\8295dbd8d0d3dbbfac33aa7dc15c8d29\System.Web.Routing.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\2b458d13f6e3900827854507ba765d2e\System.Web.DynamicData.Design.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\c5b08a1a9a7a97922af50f30b5e32268\System.Web.ApplicationServices.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Abstract#\46c50dbb9de3e13078242f8b3b32e4fe\System.Web.Abstractions.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 13824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\f0042f79d36bedda0e99e2892bb02fe7\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2012-03-27 08:19 . 2012-03-27 08:19 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\5b53a87f7799ee5454e4fb8faece3a82\System.AddIn.Contract.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 47616 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Workflow.#\64fd2fd1812f2536afaec66752707952\Microsoft.Workflow.Compiler.ni.exe
+ 2012-03-27 08:15 . 2012-03-27 08:15 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\a4e98103e5d36bf22ef19c64442543f2\Microsoft.VisualC.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\cbd21f19057f07ec2cb55b2bef91f344\dfsvc.ni.exe
+ 2012-03-27 08:13 . 2012-03-27 08:13 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\52890eb2a4f8d822bff7e9cddc713fb5\Accessibility.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\8dd565cc0b374e1eec73cf7eaba91e92\UIAutomationProvider.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\31c9ef760d04c92e17106dae1a9091f4\System.Xaml.Hosting.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\077e75015456f75a0495f65cfcf140cb\System.Windows.Presentation.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\205067fe0e5c75891b489719b799c79d\System.Web.Routing.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\d1525e7fd8ba4234de86defa5b38e677\System.Web.DynamicData.Design.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\22a9aa847a8e4e651a35b63270ce8999\System.Web.ApplicationServices.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\931f8d259c4bde5078375e82897db92f\System.Web.Abstractions.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\fdeb5ca04943da59f732d3001d6a0df0\System.ServiceModel.Channels.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\5ab20ea5fd89e0e8ba9e93e297cea012\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\9688786618bf6390637c283b5bd1c9b3\System.AddIn.Contract.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\974157f629303efea6fc23e6578901ba\Microsoft.Workflow.Compiler.ni.exe
+ 2012-03-27 08:24 . 2012-03-27 08:24 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\6ffc3ac04451b4978519218fd266403e\Microsoft.VisualC.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\8cbc15b63aa3f06453f1aaa8659cf809\Accessibility.ni.dll
- 2012-03-24 17:58 . 2012-03-24 17:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-03-28 21:19 . 2012-03-28 21:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-03-28 21:19 . 2012-03-28 21:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-03-24 17:58 . 2012-03-24 17:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-03-27 08:34 . 2012-03-27 08:34 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\6bafe185b3d23de57ec689035642fe43\System.Xml.Serialization.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\592252ee904bd41f99cd1d19909b548c\dfsvc.ni.exe
+ 2011-01-17 13:22 . 2012-03-28 20:16 344680 c:\windows\system32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2006-11-02 12:46 . 2012-03-28 08:48 254696 c:\windows\system32\perfc009.dat
- 2011-04-16 08:26 . 2012-03-24 17:57 338188 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-04-16 08:26 . 2012-03-28 21:18 338188 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-11-22 04:57 . 2011-11-22 04:57 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
+ 2011-11-22 03:31 . 2011-11-22 03:31 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-11-22 03:31 . 2011-11-22 03:31 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
 
+ 2012-03-27 08:05 . 2012-03-27 08:05 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-03-27 08:04 . 2012-03-27 08:04 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2011-09-25 08:13 . 2012-03-27 08:04 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-09-25 08:13 . 2012-02-20 09:08 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-09-25 08:13 . 2012-02-20 09:08 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-09-25 08:13 . 2012-03-27 08:04 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-03-27 08:09 . 2012-03-27 08:09 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-03-27 08:04 . 2012-03-27 08:04 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-02-20 09:08 . 2012-02-20 09:08 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2011-09-25 08:13 . 2012-02-20 09:08 109568 c:\windows\assembly\temp\DHBFF53RDF\System.EnterpriseServices.Wrapper.dll
+ 2012-02-20 09:09 . 2012-02-20 09:09 269672 c:\windows\assembly\temp\4NPH06KAUX\System.Transactions.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 553984 c:\windows\assembly\NativeImages_v4.0.30319_64\XamlBuildTask\ce782fd1260cae5ae699b71e0d812d83\XamlBuildTask.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 462336 c:\windows\assembly\NativeImages_v4.0.30319_64\WsatConfig\eac69863f449fe367f746d5f0a350679\WsatConfig.ni.exe
+ 2012-03-27 08:22 . 2012-03-27 08:22 336896 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\d05858dd730eef93a5e4a3cc88dd4ec3\WindowsFormsIntegration.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\b2a2a1fb4e1313088250b334b3af2a15\UIAutomationTypes.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\89414bab411eb27c7c181df81b4d36a5\UIAutomationProvider.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\cd55f47d44c3695862bc047b8e86fcd3\UIAutomationClient.ni.dll
+ 2012-03-27 08:16 . 2012-03-27 08:16 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\910d557d55f4fc7bb51ace0546bd3c50\System.Xml.Linq.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\dcb9e1eaa1491094f79c3288b8c78830\System.Windows.Input.Manipulations.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 244736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\cbbafa4beae62e36534fe49eb2018c0b\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 314880 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.RegularE#\ebfbacf10670251b2db61f2cbca08af3\System.Web.RegularExpressions.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 451072 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\ae212f98035c56e3afef587327872f59\System.Web.Entity.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\fc1fc26fb70875a7316ce94536e2bf57\System.Web.Entity.Design.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 973824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\4f6f5611091cf04590731745a34de340\System.Web.DynamicData.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 331264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\5a490156ae434d704b39404e9647f08f\System.Web.DataVisualization.Design.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\922f3f17f5112441e77f9d3d56d5b753\System.Transactions.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\73874670b92afbde73b23e8a1200eede\System.ServiceProcess.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\909c8d76773648809478644ac50a21eb\System.ServiceModel.Routing.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 587776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\7bb3d57e54fb2ce288cfe4cacd43a893\System.ServiceModel.Activation.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\26db69101f5bcf148fd962f00c0e78dd\System.ServiceModel.Channels.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\878946615037b9d5f09916c598420dc1\System.Security.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\73cc698ccc98e37f53cdbff3687a921c\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 995328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\2da997f0d78859f06d72fcc61fc1a36f\System.Runtime.Remoting.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 311296 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Cach#\c64bdda4c5b1008a50130456a416e688\System.Runtime.Caching.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\8064e773b9addf027658899e27e94c7b\System.Numerics.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\a46d5472536da900435885b28a19eda8\System.Net.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\ae0089b9135614de304ebe288fa6fca8\System.Messaging.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\3ad050d3f47352421e05b7707ddd3524\System.Management.Instrumentation.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\87efa405cd384d2c47380467fcd7ea86\System.IO.Log.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\50ccc897ad714e66f750ca1e51e0ffde\System.IdentityModel.Selectors.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\7b06b84cb3b99a3ab22adb2a3f6376e6\System.EnterpriseServices.Wrapper.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\cbc3e5d028dd347a294096f068a053d4\System.Dynamic.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 289792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\af04fce546a43c407b9ede1a77f272b6\System.Drawing.Design.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\1ae0a8a9eb92ccaf900f5911740b2c3c\System.DirectoryServices.Protocols.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\9edded64312f5cbae54a093eca246aaa\System.Device.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 662528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\18dc9d6390f0fbbd47581cb3ea6567c6\System.Data.Services.Design.ni.dll
+ 2012-03-27 08:19 . 2012-03-27 08:19 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\db296a100034c7dee5f80219f0542df7\System.Data.DataSetExtensions.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\0f771cbf8b32ae1618f4cd4266337b3c\System.Configuration.Install.ni.dll
+ 2012-03-27 08:19 . 2012-03-27 08:19 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\501ad39b1ef6f43e8dc92a4efa7c35ea\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-03-27 08:19 . 2012-03-27 08:19 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\f8c6e4854178bb4d928c8aec1c04648d\System.AddIn.ni.dll
+ 2012-03-27 08:19 . 2012-03-27 08:19 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\3503e3c2a87db97b720c0ed8a5d59f61\System.Activities.DurableInstancing.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\30cf4fc2c247cf490879f5436c63017c\SMSvcHost.ni.exe
+ 2012-03-27 08:17 . 2012-03-27 08:17 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\b4f75962376771b6b6d39279d780abba\SMDiagnostics.ni.dll
+ 2012-03-27 08:16 . 2012-03-27 08:16 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\eaca48940ac6976d39d5de4d5b42fed6\PresentationFramework.Royale.ni.dll
+ 2012-03-27 08:16 . 2012-03-27 08:16 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\bdb41ce9ab6d561ddb8107255daaee30\PresentationFramework.Luna.ni.dll
+ 2012-03-27 08:16 . 2012-03-27 08:16 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\78310f7eef84b5f9ca4bf32798bd77f9\PresentationFramework.Aero.ni.dll
+ 2012-03-27 08:16 . 2012-03-27 08:16 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\64b86aebea22fd357f22384757caed3f\PresentationFramework.Classic.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 364544 c:\windows\assembly\NativeImages_v4.0.30319_64\MSBuild\fe507be01e652c9d1577ed3c82bc0725\MSBuild.ni.exe
+ 2012-03-27 08:15 . 2012-03-27 08:15 422400 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\74e3ccf716987a1e60238d0a118bf422\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\16bf3be602620d349b25e6c2d08199a3\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 851456 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Uti#\ef49e94c2b9e293e658979ba193686c7\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 353792 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Fra#\f03be672b1993e4a2dee05f0c99cf27a\Microsoft.Build.Framework.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\f6b9abf9cd43524102ad9be82b7136d0\CustomMarshalers.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 661504 c:\windows\assembly\NativeImages_v4.0.30319_64\ComSvcConfig\3c87931e06af65974a92146167d898f3\ComSvcConfig.ni.exe
+ 2012-03-27 08:34 . 2012-03-27 08:34 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\fd0c917972edf6f2a05c090627030608\XamlBuildTask.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\5f644edb4fd9228b50499b597b20f8d6\WsatConfig.ni.exe
+ 2012-03-27 08:34 . 2012-03-27 08:34 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\d5a18f2355101b19f23ff2f31d1d1e17\WindowsFormsIntegration.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\9562374f940f41cdc64d88268d543f0b\UIAutomationTypes.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\641eec5b274fe3972d02892607f9b650\UIAutomationClient.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\295b3156b838ca161a64a5456522438b\System.Xml.Linq.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\0b68854406b775365c6d91e87813c2dc\System.Windows.Input.Manipulations.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\01defe5a0bf7227f37645625367393ab\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\0613bd8bf52bb05610bc85ae9b950e9f\System.Web.RegularExpressions.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\6e30f0637c198b8ddac89379ae0cc3b4\System.Web.Extensions.Design.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 335360 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\f2a8d54def527c06078b2ea3ca364e21\System.Web.Entity.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\66538729163731ccf2afebcfa705931a\System.Web.Entity.Design.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 712192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\934f6270b71946989b09dabf37692d9d\System.Web.DynamicData.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\e0738a758f95ad36a1ca4ea4fe014383\System.Web.DataVisualization.Design.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\5e3cf00b80c0aecd8392f1702d2d0f28\System.Transactions.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\bf0b3689dd5e261097f2feb2ed0103e8\System.ServiceProcess.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 432640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\eed602a6dac854f70fa1bb181b2179de\System.ServiceModel.Activation.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d3d9c582c7cd77f17fd93167dc462242\System.ServiceModel.Routing.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\c1127f26363bea39c40707b9ddb6bbb9\System.Security.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\7b17528dffe47d9b17be6086a575a516\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\e86e6094904541b5f9cf7df0709349d2\System.Runtime.Remoting.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 244736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\a89c27bacba019eeed438f67b8544b78\System.Runtime.Caching.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\3ce3d5b8126cda36b3dbd3535f249890\System.Numerics.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\965e2749489298cc85387f44f76a40f2\System.Net.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\f5333e6e06a2d476f93b0880c5e7fd14\System.Messaging.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\1bff2d3e952c2160ba0c790d2342a601\System.Management.Instrumentation.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\e6cb98078120266f5310adf0f45aa7df\System.IO.Log.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\22dadf930ad449894633480562d6c913\System.IdentityModel.Selectors.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\d0d8c27be9116224e42260292e21cad5\System.EnterpriseServices.Wrapper.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\d0d8c27be9116224e42260292e21cad5\System.EnterpriseServices.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\cbb6e9a9b075d9f6fa303e3eef4c0ffd\System.Dynamic.ni.dll
+ 2012-03-27 08:08 . 2012-03-27 08:08 224768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\0654fb77b7eb669edbe5309614f56609\System.Drawing.Design.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\e25cc7918b583b3beffcad52920eae29\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\a3be39ae9813098aa81430dd507d22ca\System.DirectoryServices.Protocols.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\4975f93d2055b33bd7a91d6f05628e2a\System.Device.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 508928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\35a9933c9a009b623b4332a4e1daf245\System.Data.Services.Design.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\42d3d301d2adef24edeb3b775fbe3a4b\System.Data.DataSetExtensions.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bab886a18699bab842769c5ce486c332\System.Configuration.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\e844f0d4cf703c2e97515ed020331b76\System.Configuration.Install.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\a92c1bd4d32fbbc54134fc40d2f97389\System.ComponentModel.Composition.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\9b418b211d6207feafcdc27027d26036\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\a4cfba8e3500f8387fe5924b940983be\System.AddIn.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\520d0ed9f48c121fbe79bda6fc176b74\System.Activities.DurableInstancing.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\98ec8a39382e6eee39845bd4759ecf04\SMSvcHost.ni.exe
+ 2012-03-27 08:24 . 2012-03-27 08:24 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\3b905cdec5960d51e5bdc7030b005c09\SMDiagnostics.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\94d89db071d382d9ba0bc6381669b85f\PresentationFramework.Classic.ni.dll
+ 2012-03-27 08:08 . 2012-03-27 08:08 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\8b8a5c194aacfb2102d4e26b75a84e03\PresentationFramework.Aero.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\443c3fae1f6f0588a542ddc1c02c1be1\PresentationFramework.Royale.ni.dll
+ 2012-03-27 08:08 . 2012-03-27 08:08 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\273034086c19b92034c9f2896724ac33\PresentationFramework.Luna.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\265875f162e9c2ffefca67188cee8faa\MSBuild.ni.exe
+ 2012-03-27 08:24 . 2012-03-27 08:24 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\7f9de9ccc957ffd9008c63c9ecb4e2dd\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5958d9610eb58adb2b62153492a7c27e\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 631296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\861156abd2fbeb15a72e479fb140c9b9\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\03c15533eddd91753b86895c6bfd59aa\Microsoft.Build.Framework.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 136192 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\dda5a6b2ff35b701c4585b7845101391\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\e3e1fd8ccf76e9eb0147484fb8dd773a\CustomMarshalers.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 475136 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\e9dee8646a22abf1626514f0f14fcdd9\ComSvcConfig.ni.exe
+ 2012-03-27 08:24 . 2012-03-27 08:24 851968 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\cd00df3ad31231170f909bd387c2164e\AspNetMMCExt.ni.dll
+ 2006-11-02 12:46 . 2012-03-28 08:48 1031944 c:\windows\system32\perfh009.dat
+ 2011-11-22 03:31 . 2011-11-22 03:31 3512072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
+ 2011-11-22 04:57 . 2011-11-22 04:57 4970768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
+ 2011-11-22 04:57 . 2011-11-22 04:57 1455376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
+ 2011-11-22 04:57 . 2011-11-22 04:57 1515792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
+ 2011-11-22 04:57 . 2011-11-22 04:57 9793280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
+ 2011-11-22 03:31 . 2011-11-22 03:31 3512072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2011-11-22 03:31 . 2011-11-22 03:31 5201168 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-11-22 03:31 . 2011-11-22 03:31 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-11-22 03:31 . 2011-11-22 03:31 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
 
+ 2012-03-27 08:05 . 2012-03-27 08:05 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-03-27 08:09 . 2012-03-27 08:09 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 5200656 c:\windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-01-02 04:05 . 2012-01-02 04:05 5200656 c:\windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-03-27 08:10 . 2012-03-27 08:10 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-01-02 04:04 . 2012-01-02 04:04 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-03-27 08:04 . 2012-03-27 08:04 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-02-20 09:08 . 2012-02-20 09:08 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-03-27 08:05 . 2012-03-27 08:05 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2012-02-20 09:09 . 2012-02-20 09:09 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-03-27 08:04 . 2012-03-27 08:04 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-03-27 08:04 . 2012-03-27 08:04 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-02-20 09:08 . 2012-02-20 09:08 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-03-27 04:53 . 2012-03-27 04:53 1325568 c:\windows\Installer\2ab2678.msi
+ 2012-02-20 09:08 . 2012-02-20 09:08 2975064 c:\windows\assembly\temp\5HAWOG2G26\System.Data.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\02198c29552545c7d7e7a95ab39488e5\WindowsBase.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\d1d48cd30cd275b06fad70778798cae7\UIAutomationClientsideProviders.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\ecdcf3d1d7bc90546464d70a4bee843d\System.Xml.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\3a9670f473f8f9291ca256d9a15fc281\System.Xaml.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 1601024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\7c63d28d59e41ae8e5bb5b8e50841e21\System.WorkflowServices.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 2887168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Run#\e4b0b5a166ae5bcbf921d0ae8f461f33\System.Workflow.Runtime.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 5909504 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\0d94daa82d426e57c7084542bf36d25c\System.Workflow.ComponentModel.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 3743744 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\ea6ba9a3cc1b2640d807ef23e02fef02\System.Workflow.Activities.ni.dll
+ 2012-03-27 08:22 . 2012-03-27 08:22 5627904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\455d5edfdc989057a8fea7bc88a02ef6\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 2287104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\97b05378b616e023221f9c6072239168\System.Web.Services.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 2964480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\53ceacfb78d2a4a0497e5c06df4feec0\System.Web.Mobile.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 1100800 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\cdc1f95ddc4c4cf20630490b7a1ab044\System.Web.Extensions.Design.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 3805184 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\8562144b72380768c1489a7b1a584fc4\System.Web.Extensions.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 5599232 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\f119a8e910ca7aee618c10112191db26\System.Web.DataVisualization.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\561e5a115d6d7ade93236df74d61af84\System.Speech.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 1506816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\8b0750707e418bbea8a7eed272890585\System.ServiceModel.Web.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\4606cac0ba2d406b4ddefca21a3db1eb\System.ServiceModel.Activities.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\28b5d075cf252a24a6b007ff5941dce1\System.ServiceModel.Discovery.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\1a361129f93a8190d8797b7c680baecc\System.Runtime.Serialization.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\2c57eff357f1bc56d0367f04adcf6d76\System.Runtime.DurableInstancing.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\7668fa73a73410f2e00d341a8684e28a\System.Printing.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\2280764a011295483642b17fe5d2b1f7\System.Management.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\a77730a57cc54142f1ecbb1e85060e5f\System.IdentityModel.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\7b06b84cb3b99a3ab22adb2a3f6376e6\System.EnterpriseServices.ni.dll
+ 2012-03-27 08:16 . 2012-03-27 08:16 2290176 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\5b5fe518d1a632afaae9f24dd18cee2f\System.Drawing.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 1217024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\60390cb3abc6f1d85a572c156d39fc02\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\5eaf17b571cf9fb6f159a0c92d6244ab\System.DirectoryServices.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 2402816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\0ce1b3a9a0192c2cdb16d848e78e6688\System.Deployment.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\ca4a0bde02b2eb73d2e9f22925719ecf\System.Data.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\657b967b5fd7819f273f5704197ce97e\System.Data.SqlXml.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 2703360 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\b5d6361ffc4e2ab8b2fa989e65267668\System.Data.Services.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 1799168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\930a4b48234d358f2758f075be0684c5\System.Data.Services.Client.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 1498112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\f1e8508072fb84206550bc497dc5b49c\System.Data.OracleClient.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 3386880 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\0ba3ab7e136a52fcba260ad7893ede32\System.Data.Linq.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 1750528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity.#\463d0d0f836d6286345ae0e7a980d609\System.Data.Entity.Design.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\c24ce44b45c0e0c0961a9755f192eb3a\System.Configuration.ni.dll
+ 2012-03-27 08:19 . 2012-03-27 08:19 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\5a66bc1859e864d87b81e31438a5f07d\System.ComponentModel.Composition.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\f25d1dde40ef0128d9e5163d142bd2e2\System.Activities.ni.dll
+ 2012-03-27 08:19 . 2012-03-27 08:19 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\26671ab09e54e0ecfd23012e32cb6383\System.Activities.Presentation.ni.dll
+ 2012-03-27 08:19 . 2012-03-27 08:19 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\e9f6686e336507594e33cad6ed7814cd\System.Activities.Core.Presentation.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 4233216 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\9c49a7b6fb133a307e3804ca7ba35d16\ReachFramework.ni.dll
+ 2012-03-27 08:16 . 2012-03-27 08:16 2056192 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\68d02e44d8b1f23c21a116119fbb65d0\PresentationUI.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 1891328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationBuildTa#\2876e05f3ce0df4f38abe04c9bec2e8c\PresentationBuildTasks.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\53ef621a3a345e33b31fcc8614f70da6\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\1903f5de0c7c33993c55319d4fc3062e\Microsoft.VisualBasic.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\15b88fefd6d638f01856a68c14e2ab9b\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\2d92f0cffe052f601c1bca1f52425fef\Microsoft.Transactions.Bridge.ni.dll
+ 2012-03-27 08:21 . 2012-03-27 08:21 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\0fbfc1087f7622c5b6b06f88fce1a45e\Microsoft.JScript.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:15 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\83f53b455553f5ad67e756f6762dc3b4\Microsoft.CSharp.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 6004736 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build\5417f88ad5b4444a5f1e744fcd8ac9cc\Microsoft.Build.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 3820544 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\ff91cc20786f3ccd7f8efd9c32b969e7\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 2521088 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Eng#\0220591dc78673b4efa66d7848de3f54\Microsoft.Build.Engine.ni.dll
+ 2012-03-27 08:13 . 2012-03-27 08:13 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\ea41875cd4720b16a0a164e1d266c374\AspNetMMCExt.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\ef8c44c3c8766f219f576faab54c8dc7\WindowsBase.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\0f5df23e9f268e9ff4c8033f9865a12a\UIAutomationClientsideProviders.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 9091584 c:\windows\assembly\NativeImages_v4.0.30319_32\System\2c59490afc22def906d3ca96e1207ff9\System.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\19e79fc0f95c93b0244c7b287e254871\System.Xml.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\ae31d46211440b11a9e66c3ba1a4e7ff\System.Xaml.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 1223168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\4dca8783493d21bc2cbbdd5ad65819a1\System.WorkflowServices.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 1971712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\7a4b5fe58999d11fd532120d6f75f6da\System.Workflow.Runtime.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 4462080 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\257e00af8ec6389753a9f66ef1711eea\System.Workflow.ComponentModel.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 2871808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\bf2865f9411bf7887ec8377c5642d307\System.Workflow.Activities.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\d6c84e888c7f465844a8ae0e6470e05c\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1925632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\b6139cfbdbdc57c3ff421204292f4041\System.Web.Services.ni.dll
+ 2012-03-27 08:34 . 2012-03-27 08:34 2334208 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\cd802595d26f321d11da210aeedd35cc\System.Web.Mobile.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 3127296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\4cefa390fdd82b25aab99c33cc49e3c0\System.Web.Extensions.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 4535808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\b18af03d37654b9593c660d0ba6968c6\System.Web.DataVisualization.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\90de8ba8101001c8845439cd5f9a76eb\System.Speech.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 1393152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\8c12f469cbd6b8d9718c64a4b2c96d47\System.ServiceModel.Activities.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\746651ce870c2f9cd43bc7246154f81a\System.ServiceModel.Discovery.ni.dll
+ 2012-03-27 08:26 . 2012-03-27 08:26 1086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\60ada6691ab37a75d25670eab4e32c5f\System.ServiceModel.Web.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\a14816d568ee8c7cc9f9923d979d682d\System.Runtime.Serialization.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\d6b9e13a40ed53cfc10e04c023c62a49\System.Runtime.DurableInstancing.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\1141220aff69c63f638ab64e5b0186bc\System.Printing.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\dfd9cbfccfadcf84406398a9d83ab4f4\System.Management.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\2a4589aeec877df58cbbcd633bc18fb6\System.IdentityModel.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 1653248 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\aa90407cafb9b4a0dc5e3fdff170fee9\System.Drawing.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\6bd4a77663c0e708e0827be849906fdc\System.DirectoryServices.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\84d9ec8b14f9731797c51d31cae12d87\System.Deployment.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\4a1e0e4ec906686357466a5881de605e\System.Data.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 2549760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\67ccf8c95fb30e4dcbe3f1eae1f72d00\System.Data.SqlXml.ni.dll
+ 2012-03-27 08:26 . 2012-03-27 08:26 2025984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\546dc84f7a98dd07602ebe6dca6fda7f\System.Data.Services.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 1344000 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\4b28434c73ac4229c7ae7c4f0598e25f\System.Data.Services.Client.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\c8b5d26c88a0f00cfb079bf421298076\System.Data.OracleClient.ni.dll
+ 2012-03-27 08:08 . 2012-03-27 08:08 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\f5cc7fbaadd22a9278512102cd30eb3a\System.Data.Linq.ni.dll
+ 2012-03-27 08:26 . 2012-03-27 08:26 1424384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\f58605285e9bf14f17c39f28d5621628\System.Data.Entity.Design.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 7069696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\7292b3e639a6202cf7eaf1f7ed271249\System.Core.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 4129792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\7bbd2b637fbe2a5b17a16cd4fcc3c3ca\System.Activities.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\a479b22107e8fe08689d840a3a1a77e9\System.Activities.Presentation.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 1547264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\819fccf9934ef29a6078d4accbf9ea0c\System.Activities.Core.Presentation.ni.dll
+ 2012-03-27 08:25 . 2012-03-27 08:25 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\073c60e5566fdaab702636f1474233b0\ReachFramework.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1640448 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\7194eb8e3da784ae30566a64569314a4\PresentationUI.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1479168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\f021e82fdaaf18ca99ff997f6552f947\PresentationBuildTasks.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\98a34a54d598b40f2f287d64dccdf4b2\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\9150a80d10ec86440aa59f6fe4b73f9d\Microsoft.VisualBasic.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\1ae1a98af2c7d3e68c7525bf1395fa61\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\fb09c8733a8ef9292079399b25d5d973\Microsoft.Transactions.Bridge.ni.dll
+ 2012-03-27 08:33 . 2012-03-27 08:33 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\8b1e797d9c7f5ef773c150e15b07a087\Microsoft.JScript.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\a263b12a7f89cd41ef8ea216dcd1e854\Microsoft.CSharp.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 4248064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\faa09803e406df761fee15f3cb4390bb\Microsoft.Build.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 2877440 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\f54f6b0d404f8063e75770dd0f138827\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 1931264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\4bfe4b4fa5d4fccdcbfc10ff609e6a28\Microsoft.Build.Engine.ni.dll
+ 2011-04-16 08:26 . 2012-03-24 22:39 51050024 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1475235829-1360834442-158596274-1000-8192.dat
+ 2011-03-04 18:28 . 2011-03-04 18:28 23081472 c:\windows\Installer\50e6328.msp
+ 2011-03-04 18:28 . 2011-03-04 18:28 23081472 c:\windows\Installer\50e6320.msp
+ 2011-03-04 18:28 . 2011-03-04 18:28 23081472 c:\windows\Installer\4a983a.msp
+ 2011-11-22 05:42 . 2011-11-22 05:42 33189888 c:\windows\Installer\3579abe.msp
+ 2012-03-27 08:06 . 2012-03-27 08:06 11880448 c:\windows\assembly\NativeImages_v4.0.30319_64\System\a9e29e892ad68ac0b88f0480746a0d0b\System.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 17291264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\f850dba642b0cc845d9a7d8ac300e243\System.Windows.Forms.ni.dll
+ 2012-03-27 08:17 . 2012-03-27 08:17 15761920 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\2605cdaf34cca062227586a12c495d24\System.Web.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 24551424 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\bd433ada9b2565b666331b5b1276538a\System.ServiceModel.ni.dll
+ 2012-03-27 08:18 . 2012-03-27 08:18 13300736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\a947e015cf07f17b4e06ef4b1120bf6f\System.Design.ni.dll
+ 2012-03-27 08:20 . 2012-03-27 08:20 18480128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\9aca7097fc620da8481516b2d4e3fede\System.Data.Entity.ni.dll
+ 2012-03-27 08:14 . 2012-03-27 08:14 10440704 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\e91a0d844afdda429e0fbd9814f41134\System.Core.ni.dll
+ 2012-03-27 08:16 . 2012-03-27 08:16 24406528 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\8a4ac50c706da226242a99b871c9f981\PresentationFramework.ni.dll
+ 2012-03-27 08:15 . 2012-03-27 08:16 15907328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\b0adff19c63ba3b4be1cae43567af15d\PresentationCore.ni.dll
+ 2012-03-27 08:06 . 2012-03-27 08:06 19355648 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\d9d8d4f8fc868d07be41d4ffb46d7364\mscorlib.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:08 13138944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\7390d789557549200e474b9bbeca3d1a\System.Windows.Forms.ni.dll
+ 2012-03-27 08:24 . 2012-03-27 08:24 12079104 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\3c5ebc7acef28749f02bbc1f1c24f51f\System.Web.ni.dll
+ 2012-03-27 08:26 . 2012-03-27 08:26 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\c43869b44f633a3ad003a0ad9e79b273\System.ServiceModel.ni.dll
+ 2012-03-27 08:08 . 2012-03-27 08:08 10999296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\eaf249a4249af9de189417d3b973042a\System.Design.ni.dll
+ 2012-03-27 08:26 . 2012-03-27 08:26 13345792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\b642a4ad94ff1e027a128b9796878372\System.Data.Entity.ni.dll
+ 2012-03-27 08:08 . 2012-03-27 08:08 18000384 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e48a8a41e50ee180c6ca9c50e4575f42\PresentationFramework.ni.dll
+ 2012-03-27 08:08 . 2012-03-27 08:08 11450880 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\9dee5fd0cf53fc233a7fc20edf8e66ed\PresentationCore.ni.dll
+ 2012-03-27 08:07 . 2012-03-27 08:07 14413824 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\44ae9f9afb2373055136d57ac6db3f96\mscorlib.ni.dll
 
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{C4B8BAB4-1667-11DF-A242-BA9455D89593}]
c:\program files (x86)\simppulltoolbar\auxi\simppulltoolbAu.dll [BU]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!)"="c:\progra~2\Yahoo!\MESSEN~1\YahooMessenger.exe" [2012-01-04 6497592]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-04-27 39408]
"Weather"="c:\program files (x86)\AWS\WeatherBug\Weather.exe" [2011-10-05 1652736]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-03-07 4785536]
"ChromeFrameHelper"="c:\users\Nicole\AppData\Local\Google\Chrome\Application\19.0.1077.3\chrome_frame_helper.exe" [2012-03-23 96752]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2011-12-09 74752]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-02-23 4031368]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-07 421736]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2011-10-14 291896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-03-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-27 20:39]
.
2012-03-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-27 20:39]
.
2012-03-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475235829-1360834442-158596274-1000Core.job
- c:\users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-16 03:49]
.
2012-03-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475235829-1360834442-158596274-1000UA.job
- c:\users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-16 03:49]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-02-23 16:23 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.yahoo.com/
mStart Page = hxxp://www.yahoo.com/?ilc=8
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 24.217.0.5 24.217.201.67 24.247.15.53
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Other Running Processes ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
c:\program files (x86)\Secunia\PSI\PSIA.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Secunia\PSI\sua.exe
c:\program files (x86)\Yahoo!\Messenger\ymsgr_tray.exe
.
**************************************************************************
.
Completion time: 2012-03-28 16:24:50 - machine was rebooted
ComboFix-quarantined-files.txt 2012-03-28 21:24
ComboFix2.txt 2012-03-24 18:04
ComboFix3.txt 2012-03-22 01:26
.
Pre-Run: 519,093,501,952 bytes free
Post-Run: 520,125,612,032 bytes free
.
- - End Of File - - A92BD519CA51BE6ADA509A910C8D0549
 
Thank you. She should be running a lot better. Was she using the system while I've been helping you- looks like she might have picked up some new processes?

Please run this Custom CFScript:

  • [1]. Close any open browsers.
    [2]. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
    [3]. Open notepad> click on Format> Uncheck 'Word Wrap> and copy/paste the text in the code below into it:
Code:
File::
Folder::
c:\users\Nicole\AppData\Local\Temp
c:\windows\system32\config\systemprofile\AppData\Local\temp
c:\users\Public\AppData\Local\temp
c:\users\Default\AppData\Local\temp
c:\users\AppData\AppData\Local\temp
Registry::
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{C4B8BAB4-1667-11DF-A242-BA9455D89593}]
Clearjavacache::
Save this as CFScript.txt, in the same location as ComboFix.exe
CFScriptB-4.gif


Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it will produce a log for you at C:\ComboFix.txt . Please paste into to your next reply.
====================
Make sure this is removed- there was still a registry entry.
====================
One more scan: if it's still on the system, run Eset again. If not:
To run the Eset Online Virus Scan:
If you use Internet Explorer:
  1. Open the ESETOnlineScan
  2. Skip to #4 to "Continue with the directions"

    If you are using a browser other than Internet Explorer
  3. Open Eset Smart Installer
    [o] Click on the esetsmartinstaller_enu.exelink and save to the desktop.
    [o] Double click on the desktop icon to run.
    [o] After successful installation of the ESET Smart Installer, the ESET Online Scanner will be launched in a new Window
  4. Continue with the directions.
  5. Check 'Yes I accept terms of use.'
  6. Click Start button
  7. Accept any security warnings from your browser.
    esetonlinescannersettings_thumb.jpg
  8. Uncheck 'Remove found threats'
  9. Check 'Scan archives/
  10. Leave remaining settings as is.
  11. Press the Start button.
  12. ESET will then download updates for itself, install itself, and begin scanning your computer. Please wait for the scan to finish.
  13. When the scan completes, press List of found threats
  14. Push Export of text file and save the file to your desktop using a unique name, such as ESETScan. Paste this log in your next reply.
  15. Push the Back button, then Finish
NOTE: If no malware is found then no log will be produced. Let me know if this is the case.
================================
Please advise of any unresolved problems.
 
ComboFix 12-03-30.06 - Nicole 03/30/2012 15:36:50.10.4 - x64
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.6077.4506 [GMT -5:00]
Running from: c:\users\Nicole\Documents\Downloads\ComboFix.exe
Command switches used :: c:\users\Nicole\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\AppData\AppData\Local\temp
c:\users\Default\AppData\Local\temp
c:\users\Nicole\AppData\Local\Temp
c:\users\Nicole\AppData\Local\Temp\AdobeARM.log
c:\users\Nicole\AppData\Local\Temp\Cookies\5JMMH5AB.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\9PGMIPZC.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\E4KVL018.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\index.dat
c:\users\Nicole\AppData\Local\Temp\Cookies\J0F36NZ1.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\JT9ZU1A8.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\N1LQS706.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\OWROJ39T.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\PIR9I3VL.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\REER5UNC.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\TUAMEZ2C.txt
c:\users\Nicole\AppData\Local\Temp\Cookies\V0UAWD8D.txt
c:\users\Nicole\AppData\Local\Temp\CR_BDF03.tmp\SETUP_PATCH.PACKED.7Z
c:\users\Nicole\AppData\Local\Temp\CRX_75DAF8CB7768\crl-set
c:\users\Nicole\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json
c:\users\Nicole\AppData\Local\Temp\History\History.IE5\desktop.ini
c:\users\Nicole\AppData\Local\Temp\History\History.IE5\index.dat
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\122710_msg_pc2pc_mktg_01[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\30s[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\37s[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\anim_loading_sm_082208[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\API_COSBrendaMSNBC_banner_300x250_FINAL_2012[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\bc_2.0.5[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\bg_controller[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\client_ad[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\com_sprte[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\desktop.ini
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\edgeworld_80x80_yahoo[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\ewtrack_v[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\games_sprite_201109071720[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\get[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\GetPlayerConfiguration[1].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\GetPlayerConfiguration[2].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\hlp12_1[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\imp[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\imp[2].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\imp[3].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\index[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\mat_boy_fbchat_6envelope_cwgengeoblulnk_genradio_na_99158_022712_yahoo_234x60[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\niftybase_201203151115[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\ourworld-86x86[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\PA_Kinetic_FSH_234x60[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\PA_Kinetic_FSH_234x60[2].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\PA_Kinetic_FSH_234x60[3].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\RadioPlayer[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\trackingOff[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\visit[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\xml;[1].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\yimPlayer[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BCACC8H9\yplayer[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\desktop.ini
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\062811_orion_mobile_234x60_01[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\062811_orion_mobile_234x60_04[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\122710_msg_pc2pc_hb_05[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\33s[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\bannerInc[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\bg_left[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\bouncing-balls-80[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\chrimsonrose11[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\client_ad[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\client_ad[2].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\client_ad[3].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\client_ad[4].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\clientad_rotator_090324[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\combo[1].css
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\crossdomain[1].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\crossdomain[2].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\DartShellPlayer7_5_09[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\desktop.ini
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\DocumentDotWrite[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\dot[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\ewtrack_9[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\EWTRACK_TIME[1]
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\glossyberry[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\gr10-swfo22[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\imp[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\jshelper[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\mat_boy_flash_fadevegas_vsgeoblulnk_na_vpblubtn_99156_022812_yahoo_234x60[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\PlayerLogin[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\script44[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\smiley_16px[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\wrapper[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\yahoo_398x208_Pool[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\ybangch16_1[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\OHYTJZY9\yql[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\AC_RunActiveContent[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\auto-anime-hykl-c0a368c[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\bg_center[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\client_ad[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\client_ad[2].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\client_ad[3].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\client_ad[4].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[1].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[10].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[2].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[3].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[4].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[5].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[6].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[7].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[8].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\crossdomain[9].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\DartShell7_5[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\desktop.ini
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\eolas[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\ewtrack_onload[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\get[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\img[2].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\imp[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\insider_msg_yahoo_com[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\nopic_32[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\notification[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\PA_Kinetic_FSH_234x60[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\PA_Kinetic_FSH_234x60[2].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\user-match[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\y_games[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\yahoo-dom-event[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\U6LREGQ4\ylc_1.9[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\120123_22_UTV_HSI_Home_234x60[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\32s[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\38s[1].png
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\bg_right[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\ca[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\carousel_091007[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\client_ad[2].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\client_ad[3].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\client_ad[4].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\client_ad[5].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\client_ad[6].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\combo[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\combo[2].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\crossdomain[1].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\desktop.ini
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\ewtrack[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\ewtrack_wesupport[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\glossyberry[1].css
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\gr10-swfo22_201105121000[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\imp[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\imp[2].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\imp[3].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\imp[4].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\menuarodwn8_dim_1[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\niftybase_201203151750[1].css
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\PA_Kinetic_FSH_234x60[1].swf
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\spacer[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\trackingCalls[1].js
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\twitter_16_20101207[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\vitality[1].htm
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\xml;[1].xml
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\yahoo_80x80_Pool[1].jpg
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\ybang_feed[1].gif
c:\users\Nicole\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZQCHAO4D\ylogo24[1].png
 
c:\users\Public\AppData\Local\temp
.
.
((((((((((((((((((((((((( Files Created from 2012-02-28 to 2012-03-30 )))))))))))))))))))))))))))))))
.
.
2012-03-30 20:44 . 2012-03-30 20:44 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2012-03-29 15:57 . 2012-03-29 16:03 -------- d-----w- C:\HijackThis
2012-03-24 06:12 . 2012-03-24 06:12 -------- d-----w- c:\users\Nicole\AppData\Roaming\com.socialbox.socialbox
2012-03-23 20:07 . 2012-03-23 20:07 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8592EBD0-50CA-4A4A-BCCE-A5AC4E1E79C8}\offreg.dll
2012-03-23 19:50 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8592EBD0-50CA-4A4A-BCCE-A5AC4E1E79C8}\mpengine.dll
2012-03-22 15:06 . 2012-03-22 15:06 -------- d-----w- c:\program files (x86)\ESET
2012-03-21 08:04 . 2012-03-21 08:04 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-03-17 03:16 . 2012-01-12 14:28 57976 ----a-r- c:\windows\system32\drivers\SBREDrv.sys
2012-03-17 02:42 . 2012-03-17 02:42 -------- d-----w- c:\users\Nicole\AppData\Local\VS Revo Group
2012-03-17 00:47 . 2012-03-17 00:47 -------- d-----w- c:\users\Nicole\AppData\Roaming\SUPERAntiSpyware.com
2012-03-17 00:45 . 2012-03-17 00:47 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-03-17 00:45 . 2012-03-17 00:45 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-03-15 19:27 . 2012-03-15 19:27 -------- d-----w- c:\program files\iPod
2012-03-15 19:27 . 2012-03-15 19:28 -------- d-----w- c:\program files\iTunes
2012-03-15 19:27 . 2012-03-15 19:28 -------- d-----w- c:\program files (x86)\iTunes
2012-03-15 00:20 . 2012-03-15 00:20 -------- d-----w- c:\users\Nicole\AppData\Roaming\DVDVideoSoft
2012-03-15 00:20 . 2012-03-15 00:20 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
2012-03-15 00:20 . 2012-03-15 00:20 -------- d-----w- c:\program files (x86)\DVDVideoSoft
2012-03-15 00:10 . 2012-03-24 17:56 -------- d-----w- c:\program files (x86)\FoxTabVideoConverter
2012-03-12 22:15 . 2012-03-12 22:15 -------- d-----w- c:\program files (x86)\AWS
2012-03-12 18:34 . 2010-02-18 13:49 225280 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-03-12 18:34 . 2010-02-18 11:59 29696 ----a-w- c:\windows\system32\drivers\tunnel.sys
2012-03-03 03:10 . 2012-03-03 03:20 -------- d-----w- C:\Fonts, new
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-10 15:39 . 2011-07-14 15:45 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-02-23 16:23 . 2012-01-04 06:11 41184 ----a-w- c:\windows\avastSS.scr
2012-02-23 16:23 . 2012-01-04 06:11 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-02-23 16:23 . 2012-01-02 22:32 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-02-23 16:12 . 2012-01-04 06:12 817496 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-23 16:12 . 2012-01-04 06:12 335704 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-02-23 16:10 . 2012-01-04 06:12 43864 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-02-23 16:10 . 2012-01-04 06:12 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-02-23 16:10 . 2012-01-04 06:12 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-02-23 16:10 . 2012-01-04 06:12 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-23 14:18 . 2011-01-17 07:35 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-01-19 15:22 . 2012-01-19 15:22 45936 ----a-r- c:\windows\system32\SBBD.EXE
2012-01-04 08:15 . 2011-04-30 16:28 416 ----a-w- c:\programdata\Microsoft\MSDN\9.0\1033\ResourceCache.dll
2012-01-03 14:25 . 2012-02-18 18:37 404992 ----a-w- c:\windows\system32\drivers\afd.sys
.
.
((((((((((((((((((((((((((((( SnapShot_2012-03-28_21.20.16 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-21 03:20 . 2012-03-30 20:46 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-01-21 03:20 . 2012-03-28 21:19 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-02-02 18:37 . 2012-03-28 21:19 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-02-02 18:37 . 2012-03-30 20:46 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-21 03:20 . 2012-03-30 20:46 65536 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-01-21 03:20 . 2012-03-28 21:19 65536 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-21 02:23 . 2012-03-30 20:48 52622 c:\windows\system32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 15:45 . 2012-03-30 20:48 76186 c:\windows\system32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2011-01-17 04:22 . 2012-03-30 20:48 11816 c:\windows\system32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1475235829-1360834442-158596274-1000_UserData.bin
+ 2012-03-30 20:46 . 2012-03-30 20:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-03-28 21:19 . 2012-03-28 21:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-03-30 20:46 . 2012-03-30 20:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-03-28 21:19 . 2012-03-28 21:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-01-17 13:22 . 2012-03-30 20:13 345968 c:\windows\system32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2006-11-02 12:46 . 2012-03-30 08:40 268436 c:\windows\system32\perfc009.dat
+ 2011-04-16 08:26 . 2012-03-30 20:44 338188 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2011-04-16 08:26 . 2012-03-28 21:18 338188 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2006-11-02 12:46 . 2012-03-30 08:40 1071382 c:\windows\system32\perfh009.dat
+ 2011-04-16 08:26 . 2012-03-30 20:45 51050024 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1475235829-1360834442-158596274-1000-8192.dat
- 2011-04-16 08:26 . 2012-03-24 22:39 51050024 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1475235829-1360834442-158596274-1000-8192.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{C4B8BAB4-1667-11DF-A242-BA9455D89593}]
c:\program files (x86)\simppulltoolbar\auxi\simppulltoolbAu.dll [BU]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!)"="c:\progra~2\Yahoo!\MESSEN~1\YahooMessenger.exe" [2012-01-04 6497592]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-04-27 39408]
"Weather"="c:\program files (x86)\AWS\WeatherBug\Weather.exe" [2011-10-05 1652736]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-03-07 4785536]
"ChromeFrameHelper"="c:\users\Nicole\AppData\Local\Google\Chrome\Application\19.0.1084.1\chrome_frame_helper.exe" [2012-03-28 96752]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2011-12-09 74752]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-02-23 4031368]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-07 421736]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2011-10-14 291896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-03-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-27 20:39]
.
2012-03-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-27 20:39]
.
2012-03-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475235829-1360834442-158596274-1000Core.job
- c:\users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-16 03:49]
.
2012-03-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475235829-1360834442-158596274-1000UA.job
- c:\users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-16 03:49]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-02-23 16:23 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.yahoo.com/
mStart Page = hxxp://www.yahoo.com/?ilc=8
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 24.217.0.5 24.217.201.67 24.247.15.53
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Other Running Processes ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
c:\program files (x86)\Secunia\PSI\PSIA.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Secunia\PSI\sua.exe
c:\windows\SysWOW64\WerFault.exe
c:\program files (x86)\Yahoo!\Messenger\ymsgr_tray.exe
.
**************************************************************************
.
Completion time: 2012-03-30 15:52:55 - machine was rebooted
ComboFix-quarantined-files.txt 2012-03-30 20:52
ComboFix2.txt 2012-03-28 21:24
ComboFix3.txt 2012-03-24 18:04
ComboFix4.txt 2012-03-22 01:26
.
Pre-Run: 514,377,723,904 bytes free
Post-Run: 514,138,005,504 bytes free
.
- - End Of File - - 35C160E3E4EC82DE36B21A7F2798DE93
 
Okay, there was activity. Perhaps you can set her up with a good maintenance program:
Delete temporary internet files and Cookies
Disc Cleanup
Defrag
Error Check

The first 2 should be run weekly, the next 2 monthly. Run the security scans in between. Uninstall any programs not being used.

Last 2 scans:
1. Update and repeat the Eset online scan.
----------------
2. First, set up a Directory for HijackThis as follows:
Right click Taskbar> Explore> My Computer> Local Drive (C)> File> New> Folder> Name folder HijackThis
Exit Explorer
You now have a folder C:\HijackThis
-----------------------------------------
Download HijackThis http://download.bleepingcomputer.com/hijackthis/HijackThis.zipand save to your desktop.
  • Click on the HJT icon> 'Extract all files'> Extraction Wizard> Click on Browse to right of dialogue box that says 'Select a folder'
  • Extract it to the directory on your hard drive you created C:\HijackThis.
  • Then navigate to that directory and double-click on the hijackthis.exe file.
  • When started click on the Scan button and then the Save Log button to create a log of your information.
  • The log file and then the log will open in notepad. Be sure to click on Format> Uncheck Word Wrap when you open Notepad
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Come back here to this thread and paste (Ctrl+V) the log in your next reply.

NOTE: Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.
=========================================
Are you getting into Normal mode now okay?
Are there any remaining problems we haven't resolved?
 
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:54:48 PM, on 3/30/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\Nicole\AppData\Local\Google\Chrome\Application\19.0.1084.1\chrome_frame_helper.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?ilc=8
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: YSPManager - {25BC7718-0BFA-40EA-B381-4B2D9732D686} - C:\Program Files (x86)\Yahoo!\Search Protection\ysp.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Updater For Simppull Toolbar - {C4B8BAB4-1667-11DF-A242-BA9455D89593} - C:\Program Files (x86)\simppulltoolbar\auxi\simppulltoolbAu.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Weather] C:\Program Files (x86)\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [ChromeFrameHelper] "C:\Users\Nicole\AppData\Local\Google\Chrome\Application\19.0.1084.1\chrome_frame_helper.exe" --startup
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Users\Nicole\AppData\Local\Google\Chrome\Application\19.0.1084.1\npchrome_frame.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 8664 bytes
 
When you try to run the Eset scan, are you disabling Avast? If Yes, update the program and save to the desktop"

Boot into Safe Mode with Networking
  • Restart your computer and start pressing the F8 key on your keyboard.
  • Select the Safe Mode with Networking option when the Windows Advanced Options menu appears, and then press ENTER.

Now try running the Eset scan. Remember to uncheck the option to remove what it finds
-----------------------------------------------
If still won't run, try this one in Normal Mode- remember to disable AV:

Download 32bit TrendMicro HouseCall
  1. Click Download HouseCall to begin.
    Note: HouseCall requires a small download before it can scan your computer.This will prevent compatibility issues.
  2. Choose to save a a copy of the launcher, [bHousecallLauncher.exe[/b]).
  3. Allow update if offered.
  4. Select the Quick Scan option,
  5. Follow any prompts to save log. Include in next reply.
========================================
Please reopen HijackThis to '\'do system scan only.' Check each of the following if present>

O2 - BHO: YSPManager - {25BC7718-0BFA-40EA-B381-4B2D9732D686} - C:\Program Files (x86)\Yahoo!\Search Protection\ysp.dll
O2 - BHO: Updater For Simppull Toolbar - {C4B8BAB4-1667-11DF-A242-BA9455D89593} - C:\Program Files (x86)\simppulltoolbar\auxi\simppulltoolbAu.dll (file missing)


Close all Windows except for HijackThis, then click on "Fix all."
=================================
Please check in both Add/Remove Programs and the Startup Menu and make sure no entries for any of the following remain:
Freecause Shopping >> Shop to Win 2
Updater For Simppull Toolbar >> simppulltoolbar
BluePhone Toolbar
Ask.com

=================================
Please report on how system is doing.
 
Currently running the ESET in safe mode. I am on another computer and wanted to let you know I ran hijackthis again and found those two things you wanted me to look for. I removed them and looked for the other programs and did not find them.
 
Okay. We need to make sure the virus scan is clean. A lot of entries have been removed from this system.

We also have to get you back in to running in Normal Mode. Don't know if that's a malware or setting problem.
 
Latest ESET scan:


C:\Qoobox\Quarantine\C\Program Files (x86)\FoxTabVideoConverter\VideoConverter.exe.vir a variant of Win32/InstallCore.A application
 
The file from Eset showing 'Qoobox' was quarantined in Combofix. It is not active in the system.

What is the status of this>
We also have to get you back in to running in Normal Mode. Don't know if that's a malware or setting problem.
 
I started the computer back up in normal mode. seems to be sluggish and it keeps pausing. No matter what I am trying to do, it seems to have to try and catch up with itself all the time.
 
There are a lot of extra programs, files and logs on the system now. I', going to have you remove the tools, then evaluate the system again:

Removing all of the tools we used and the files and folders they created
  • Uninstall ComboFix and all Backups of the files it deleted
  • Click START> then RUN
  • Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
    CF_Uninstall-1.jpg
  • Download OTCleanIt by OldTimer and save it to your Desktop.
  • Double click OTCleanIt.exe.
  • Click the CleanUp! button.
  • Select Yes when the "Begin cleanup Process?" prompt appears.
  • If you are prompted to Reboot during the cleanup, select Yes.
  • The tool will delete itself once it finishes.
-----
Note: If you receive a warning from your firewall or other security programs regarding OTC attempting to contact the internet, please allow it to do so.

Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
------------------------------------------
  • You should now set a new Restore Point and remove the old restore points to prevent infection from any previous Restore Points.
  • Go to Start > All Programs > Accessories > System Tools
  • Click "System Restore".
  • Choose "Create a Restore Point" on the first screen then click "Next".
  • Give the Restore Point a name> click "Create".
  • Go back and follow the path to > System Tools.
    [*]Choose Disc Cleanup
    [*]Click "OK" to select the partition or drive you want.
    [*]Click the "More Options" Tab.
    [*]Click "Clean Up" in the System Restore section to remove all previous Restore Points except the newly created one.


Empty the Recycle Bin

Your lady friend had a lot of processes on this system that have been removed, so we need to be sure that there aren't a gazillion files sitting in the trash!
==========================================
TFC (Temp File Cleaner)

Download TFC to your desktop
  • Open the file and close any other windows.
  • It will close all programs itself when run, make sure to let it run uninterrupted.
  • Click the Start button to begin the process. The program should not take long to finish its job
  • Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

TFC only cleans temp folders. TFC will not clean URL history, prefetch, or cookies. Depending on how often someone cleans their temp folders, their system hardware, and how many accounts are present, it can take anywhere from a few seconds to a minute or more. TFC will completely clear all temp files where other temp file cleaners may fail. TFC requires a reboot immediately after running. Be sure to save any unsaved work before running TFC.

TFC (Temp File Cleaner) will clear out all temp folders for all user accounts (temp, IE temp, java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder.
===================================
Check the system out for a couple of days- see how it runs. It is possible that some files were corrupted by the malware we removed. Let me know.
 
Status
Not open for further replies.
Back