Jump to content

Need Help


Recommended Posts

I'm infected with something and the traditional MBAM, Spybot scans won't work. They run then immediately are disabled. If I try to restart the program I receive the following prompt: "Windows cannot access the specified device, path, or file..." I tried to create a log with HiJack This, but the same thing happened. I followed the steps for RootRepeal on this website, the same thing happened. My search engine has been hijacked and I'm not using the infected PC to post this. It has a Windows XP operating system and I use Internet Explorer as my web browser. I'm not sure if this helps, but when I downloaded RootRepeal I did it in SafeMode with Networking and still experienced the same problem. Not sure what to do...

Link to post
Share on other sites

Please save this file to your desktop. Click on Start->Run, and copy-paste the following command (the bolded text) into the "Open" box, and click OK.

"%userprofile%\desktop\win32kdiag.exe" -f -r

When it's finished, there will be a log called Win32kDiag.txt on your desktop.

Please open it with notepad and post the contents here.

You may have to download this program and transfer it to your infected PC. If it doesn't run properly, then rename it as you download it to your flash drive (or other removable media) and replace the name I've highlighted in red in the above command to launch the program.

If this is not clear tell me and I will expand upon it.

Link to post
Share on other sites

Negster, I really appreciate your help on this one. I downloaded the program from the infect PC in Normal Operating mode. I did change the program name before I saved it to my desktop. I don't think it went all the way through, but this is what I got:

Running from: C:\Documents and Settings\Joe Doering\desktop\dkjeter.exe

Log file at : C:\Documents and Settings\Joe Doering\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...

Found mount point : C:\WINDOWS\$hf_mig$\KB918899\KB918899

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB922760\KB922760

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB925454\KB925454

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB928090\KB928090

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB931768\KB931768

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB933566\KB933566

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB937143\KB937143

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB939653\KB939653

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB942615\KB942615

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB944533\KB944533

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\addins\addins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP108.tmp\ZAP108.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP18A.tmp\ZAP18A.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP292.tmp\ZAP292.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAA.tmp\ZAPAA.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAB.tmp\ZAPAB.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBE.tmp\ZAPBE.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC0.tmp\ZAPC0.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCB.tmp\ZAPCB.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Config\Config

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Debug\UserMode\UserMode

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ftpcache\ftpcache

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\chsime\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\CHTIME\Applets\Applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp98\imejp98

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imjp8_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\dicts\dicts

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\shared\res\res

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109511090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109711090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109910090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109B10090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100A0C00000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\classes\classes

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\trustlib\trustlib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Minidump\Minidump

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\msapps\msinfo\msinfo

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\mui\mui

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\QHEADLES\QHEADLES

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\QSIGNOFF\QSIGNOFF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\UserDumps\UserDumps

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\BATCH\BATCH

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\System\News\News

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PIF\PIF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\security\logs\logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\0eaed8d713d78954a90c813a5e2c5934\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\10\policy\policy

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\51\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\51\policy\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\52\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\52\policy\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\60\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\70\70

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\f0c43c883b45dd5bc3e231479dfed214\f0c43c883b45dd5bc3e231479dfed214

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\eventlog.dll

Link to post
Share on other sites

Nevermind, it just finished. This is what came back:

Running from: C:\Documents and Settings\Joe Doering\desktop\dkjeter.exe

Log file at : C:\Documents and Settings\Joe Doering\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...

Found mount point : C:\WINDOWS\$hf_mig$\KB918899\KB918899

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB922760\KB922760

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB925454\KB925454

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB928090\KB928090

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB931768\KB931768

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB933566\KB933566

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB937143\KB937143

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB939653\KB939653

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB942615\KB942615

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB944533\KB944533

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\addins\addins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP108.tmp\ZAP108.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP18A.tmp\ZAP18A.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP292.tmp\ZAP292.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAA.tmp\ZAPAA.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAB.tmp\ZAPAB.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBE.tmp\ZAPBE.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC0.tmp\ZAPC0.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPCB.tmp\ZAPCB.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Config\Config

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Debug\UserMode\UserMode

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ftpcache\ftpcache

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\chsime\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\CHTIME\Applets\Applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp98\imejp98

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imjp8_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\dicts\dicts

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\shared\res\res

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109511090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109711090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109910090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109B10090400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100A0C00000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC\12.0.4518\12.0.4518

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\classes\classes

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\trustlib\trustlib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Minidump\Minidump

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\msapps\msinfo\msinfo

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\mui\mui

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\QHEADLES\QHEADLES

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\QSIGNOFF\QSIGNOFF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\UserDumps\UserDumps

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\BATCH\BATCH

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\System\News\News

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PIF\PIF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\security\logs\logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\0eaed8d713d78954a90c813a5e2c5934\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\10\policy\policy

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\51\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\51\policy\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\52\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\52\policy\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\60\msft\msft

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\backup\asms\70\70

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\f0c43c883b45dd5bc3e231479dfed214\f0c43c883b45dd5bc3e231479dfed214

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\eventlog.dll

[1] 2008-04-13 20:11:53 56320 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\eventlog.dll (Microsoft Corporation)

[1] 2004-08-04 04:00:00 61952 C:\WINDOWS\system32\eventlog.dll ()

[2] 2004-08-04 04:00:00 55808 C:\WINDOWS\system32\logevent.dll (Microsoft Corporation)

Found mount point : C:\WINDOWS\twain_32\PA207\PA207

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\twain_32\ZS211\ZS211

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp

Mount point destination : \Device\__max++>\^

Finished!

Link to post
Share on other sites

You're welcome!

Download The Avenger by Swandog46:

http://swandog46.geekstogo.com/avenger2/download.php

  • Unzip/extract it to a folder on your desktop.
  • Double click on avenger.exe to launch Avenger.
  • Click OK.
  • Make sure that the box next to "Scan for rootkits" is checked and that the box next to Automatically "Disable any rootkits found" is not checked.

Copy and Paste the text in the Code Box into the Avenger's "Input Script here" Box:

Files to move:
C:\WINDOWS\system32\logevent.dll | C:\WINDOWS\system32\eventlog.dll

  • Click the Execute button.
  • You will be prompted with "Are you sure you want to execute the current script?"
  • Click "Yes"
  • You will now be asked First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?.
  • Click "Yes".
  • Your PC will reboot.
  • After your PC has completed the necessary reboot, a log should automatically open.
  • If it the log does not automatically open, then it can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt)
  • Please post the Avenger log in your next reply.

Reboot

Next, download this Antirootkit Program to a folder that you create such as C:\ARK.

Disable the active protection component of your antivirus by following the directions that apply here:

http://www.bleepingcomputer.com/forums/topic114351.html

Next, please perform a rootkit scan:

  • Double-click the randomly name EXE located in the C:\ARK folder that you just downloaded to run the program.
  • When the program opens, it will automatically initiate a very fast scan (quick scan) of common rootkit hiding places.
  • When the "quick" scan is finished (a few seconds), if the program alerts you of rootkit activity
    then select Copy, to copy the quick scan log to the Windows clipboard
  • Open Notepad or a similar text editor
  • Paste the clipboard contents into a text file by clicking Edit | Paste or Ctl V
  • Exit the Program (do not perform a complete scan)
  • Save the Scan log as ARKQuick.txt and post it in your next reply.

Please download Combofix from:

from HERE

I want you to rename Combofix.exe as you download it to pepper.exe

Notes:

  • It is very important that save the newly renamed EXE file to your desktop.
  • You must rename Combofixe.exe as you download it and not after it is on your computer.
    You may have to modify your browser settings if you use Firefox, so you can rename Combofix.exe as you download it. To do that:
    • Open Firefox
    • Click Tools -> Options -> Main
    • Under the downloads section check the button that says "Always ask me where to save files".
    • Click OK

    [*]For Internet Explorer:

    • Choose to save, not open the file
    • When prompted - save the file to your desktop, and rename it anything with an .exe extension on the end.

Here is a tutorial that describes how to download, install and run Combofix more thoroughly. Please review it and follow the prompts to install Recovery Console - if you have not done that already (if your OS is Vista - then you don't need to install the recovery console):

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Very Important! Temporarily disable your antivirus and antimalware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix and even remove onboard components so it is rendered ineffective:

http://www.bleepingcomputer.com/forums/topic114351.html

Also, disable your firewall!

You can enable the Window firewall in the interim, until the scan is complete.

Note: The above tutorial does not tell you to rename Combofix as I have instructed you to do in the above instructions, so make sure you complete the renaming step before launching Combofix.

Running Combofix

In the event you already have Combofix, please delete it as this is a new version.

  • Close any open browsers.
  • Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix.

1. Double click on the renamed combofix.exe & follow the prompts.

2. When finished, it will produce a logfile located at C:\ComboFix.txt

Please post C:\Avenger.txt, ARKQuick.txt, and C:\ComboFix.txt in your next reply.

Link to post
Share on other sites

Negster, I posted each log below in the order you requested.

C:\Avenger.txt:

Logfile of The Avenger Version 2.0, © by Swandog46

http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.

Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

No rootkits found!

File move operation "C:\WINDOWS\system32\logevent.dll|C:\WINDOWS\system32\eventlog.dll" completed successfully.

Completed script processing.

*******************

Finished! Terminate.

C:\ARK.txt:

GMER 1.0.15.15087 - http://www.gmer.net

Rootkit quick scan 2009-09-22 20:34:33

Windows 5.1.2600 Service Pack 2

Running: e8cqmn90.exe; Driver: C:\DOCUME~1\JOEDOE~1\LOCALS~1\Temp\pwtdypog.sys

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)

AttachedDevice \Driver\Tcpip \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)

AttachedDevice \Driver\Tcpip \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)

AttachedDevice \Driver\Tcpip \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)

AttachedDevice \Driver\Tcpip \Device\RawIp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 EABFiltr.sys (QLB PS/2 Keyboard filter driver/Hewlett-Packard Company)

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 EABFiltr.sys (QLB PS/2 Keyboard filter driver/Hewlett-Packard Company)

---- EOF - GMER 1.0.15 ----

ComboFix is an incredibly long text, I'll try to paste it in the next post. If that doesn't work, I'll break it off into sections...

Link to post
Share on other sites

ComboFix 09-09-22.02 - Joe Doering 09/22/2009 20:40.2.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.382.114 [GMT -4:00]

Running from: c:\documents and settings\Joe Doering\Desktop\pepper.exe

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\All Users\Application Data\usad.vbs

c:\documents and settings\All Users\Documents\doxybynaq.exe

c:\documents and settings\Joe Doering\Application Data\eqywi.bin

c:\documents and settings\Joe Doering\Application Data\fodyqov.dl

c:\documents and settings\Joe Doering\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusPro_2010.lnk

c:\documents and settings\Joe Doering\Cookies\azugebu.scr

c:\documents and settings\Joe Doering\Cookies\ewawygyve.ban

c:\documents and settings\Joe Doering\Cookies\ijyzuwiby.inf

c:\documents and settings\Joe Doering\Cookies\ycirybyjos.db

c:\documents and settings\Joe Doering\Local Settings\Application Data\tuqam.exe

c:\documents and settings\Joe Doering\Local Settings\Temporary Internet Files\emyf.db

c:\documents and settings\Joe Doering\Local Settings\Temporary Internet Files\pukolati.dl

c:\documents and settings\Joe Doering\Start Menu\Programs\AntivirusPro_2010

c:\documents and settings\Joe Doering\Start Menu\Programs\AntivirusPro_2010\AntivirusPro_2010.lnk

c:\documents and settings\Joe Doering\Start Menu\Programs\AntivirusPro_2010\Uninstall.lnk

c:\program files\Common Files\evij.vbs

c:\program files\Common Files\gakoz.dll

c:\program files\Common Files\omosyfij.bin

c:\windows\010112010146118114.lso

c:\windows\dukis.bin

c:\windows\gopikity.scr

c:\windows\Installer\385ce2b.msp

c:\windows\Installer\385ce2d.msp

c:\windows\Installer\6e4998.msi

c:\windows\Installer\6e49b7.msi

c:\windows\Installer\6e49b8.msi

c:\windows\kri746.dat

c:\windows\msa.exe

c:\windows\msb.exe

c:\windows\system32\drivers\Sonyhcp.dll

c:\windows\system32\drivers\UACdrwtsnmvrj.sys

c:\windows\system32\drivers\UACpduhersmbt.sys

c:\windows\system32\hesaluwema.exe

c:\windows\system32\hokuhuniv.scr

c:\windows\system32\iniasd.txt

c:\windows\system32\kri746.dat

c:\windows\system32\net.net

c:\windows\system32\SKYNETehgonvkl.dat

c:\windows\system32\SKYNETgmuoluvw.dll

c:\windows\system32\SKYNETkakyptvk.dat

c:\windows\system32\SKYNETovmeyeee.dll

c:\windows\system32\UACboexmuybwu.dll

c:\windows\system32\UAChdhlnanpyx.db

c:\windows\system32\UAChgopndemdm.db

c:\windows\system32\UACjixuxdjyql.dll

c:\windows\system32\UACmjxwlotnba.dll

c:\windows\system32\UACmrpnyomlrq.dll

c:\windows\system32\UACnrcxpyipjb.dat

c:\windows\system32\UACrdjjwrqttk.dll

c:\windows\system32\UACviturwugle.dll

c:\windows\system32\UACwhsojkctlt.dat

c:\windows\system32\UACympjdabiqp.dll

c:\windows\system32\wisdstr.exe

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226ED}

-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226EE}

((((((((((((((((((((((((( Files Created from 2009-08-23 to 2009-09-23 )))))))))))))))))))))))))))))))

.

2009-09-23 00:33 . 2009-09-23 00:33 -------- d-----w- C:\ARP

2009-09-22 23:30 . 2009-09-22 23:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion

2009-09-22 23:21 . 2009-09-22 23:22 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Canon

2009-09-22 23:17 . 2009-09-22 23:25 -------- d-----w- c:\documents and settings\All Users\Application Data\CanonIJPLM

2009-09-22 23:15 . 2004-08-04 03:01 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys

2009-09-22 23:15 . 2004-08-04 03:01 25856 ----a-w- c:\windows\system32\dllcache\usbprint.sys

2009-09-22 23:14 . 2009-09-22 23:14 -------- d-----w- c:\program files\Common Files\CANON

2009-09-22 23:12 . 2009-09-22 23:12 -------- d--h--w- c:\documents and settings\All Users\Application Data\CanonBJ

2009-09-22 23:11 . 2008-02-26 05:00 230912 ----a-w- c:\windows\system32\CNMLM9I.DLL

2009-09-22 23:11 . 2009-09-22 23:11 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information

2009-09-22 23:11 . 2008-02-08 15:38 200704 ----a-w- c:\windows\system32\CNC190L.DLL

2009-09-22 23:11 . 2007-03-15 14:12 188416 ----a-w- c:\windows\system32\CNC190O.DLL

2009-09-22 23:11 . 2007-11-09 11:59 1323008 ----a-w- c:\windows\system32\CNC190C.DLL

2009-09-22 23:11 . 2007-11-09 11:58 98304 ----a-w- c:\windows\system32\CNC190I.DLL

2009-09-22 23:11 . 2009-09-22 23:11 -------- d--h--w- c:\program files\CanonBJ

2009-09-22 23:10 . 2009-09-22 23:16 -------- d-----w- c:\program files\Canon

2009-09-22 17:26 . 2009-09-23 00:22 0 ----a-w- c:\windows\win32k.sys

2009-09-14 20:27 . 2004-08-04 13:00 4224 ----a-w- c:\windows\system32\drivers\beep.sys

2009-09-14 20:27 . 2004-08-04 13:00 4224 ----a-w- c:\windows\system32\dllcache\beep.sys

2009-09-14 18:46 . 2009-09-14 18:46 16235 ----a-w- c:\windows\system32\afybepyre.dat

2009-09-08 20:27 . 2009-09-08 20:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Search Engine Commando

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-09-22 23:38 . 2007-02-06 20:29 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\AdobeUM

2009-09-22 18:19 . 2008-04-05 05:39 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2009-09-22 14:48 . 2007-02-11 15:40 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Azureus

2009-09-19 14:14 . 2006-10-02 00:53 -------- d-----w- c:\program files\AIM

2009-09-18 12:21 . 2007-12-07 01:16 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Camfrog

2009-09-14 20:31 . 2009-03-26 20:29 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)

2009-08-17 15:28 . 2009-08-17 15:28 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Logs

2009-08-17 15:20 . 2009-08-17 14:59 94208 ----a-w- c:\windows\DUMP6cb5.tmp

2009-08-17 15:19 . 2009-08-17 14:59 94208 ----a-w- c:\windows\DUMP6f44.tmp

2009-08-17 15:17 . 2009-08-17 14:59 94208 ----a-w- c:\windows\DUMP6939.tmp

2009-08-17 14:57 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6cf2.tmp

2009-08-17 14:56 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6ac0.tmp

2009-08-17 14:54 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6b6c.tmp

2009-08-17 14:53 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6baa.tmp

2009-08-17 14:52 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6bda.tmp

2009-08-17 14:50 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6b1e.tmp

2009-08-17 14:49 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6bd9.tmp

2009-08-17 14:48 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6b1d.tmp

2009-08-17 14:47 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6c56.tmp

2009-08-17 14:45 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP659f.tmp

2009-08-17 14:43 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6afe.tmp

2009-08-17 14:42 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6aa0.tmp

2009-08-17 14:40 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6cb4.tmp

2009-08-14 18:05 . 2007-07-24 10:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple

2009-08-14 17:51 . 2009-08-14 17:50 -------- d-----w- c:\program files\iTunes

2009-08-14 17:51 . 2009-08-14 17:50 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

2009-08-14 17:50 . 2009-08-14 17:50 -------- d-----w- c:\program files\iPod

2009-08-14 17:50 . 2009-04-05 05:41 -------- d-----w- c:\program files\Common Files\Apple

2009-08-14 17:47 . 2009-08-14 17:46 -------- d-----w- c:\program files\QuickTime

2009-08-13 15:17 . 2007-02-12 13:36 -------- d-----w- c:\program files\DivX

2009-08-12 20:38 . 2006-10-04 16:48 96960 ----a-w- c:\documents and settings\Joe Doering\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-08-11 13:45 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP614a.tmp

2009-08-11 13:44 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP610b.tmp

2009-08-11 13:43 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6735.tmp

2009-08-11 13:41 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP60cd.tmp

2009-08-11 07:29 . 2009-08-11 07:29 -------- d-----w- c:\program files\MSBuild

2009-08-11 07:28 . 2009-08-11 07:28 -------- d-----w- c:\program files\Reference Assemblies

2009-08-11 07:21 . 2009-08-11 07:21 -------- d-----w- c:\program files\MSXML 6.0

2009-08-03 21:07 . 2008-08-31 17:52 -------- d-----w- c:\program files\Microsoft Silverlight

2009-08-03 04:32 . 2009-08-03 04:30 -------- d-----w- c:\program files\StoryLines

2009-08-03 02:26 . 2006-02-09 13:31 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Apple Computer

2009-07-09 16:16 . 2009-04-05 05:42 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys

2009-07-09 16:16 . 2009-04-05 05:42 2060288 ----a-w- c:\windows\system32\usbaaplrc.dll

2009-06-29 16:12 . 2004-08-04 08:00 827392 ----a-w- c:\windows\system32\wininet.dll

2009-06-29 16:12 . 2004-08-04 08:00 78336 ----a-w- c:\windows\system32\ieencode.dll

2009-06-29 16:12 . 2004-08-04 08:00 17408 ------w- c:\windows\system32\corpol.dll

2009-04-07 15:43 . 2006-10-01 21:53 67688 ----a-w- c:\program files\mozilla firefox\components\jar50.dll

2009-04-07 15:43 . 2006-10-01 21:53 54368 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll

2009-04-07 15:43 . 2009-03-27 15:06 34944 ----a-w- c:\program files\mozilla firefox\components\myspell.dll

2009-04-07 15:43 . 2009-03-27 15:06 46712 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll

2009-04-07 15:43 . 2006-10-01 21:53 172136 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll

2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll

2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll

.

------- Sigcheck -------

[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\qmgr.dll

[-] 2007-03-29 . CC431E6DEAAD867A583EE5E804EE4CF2 . 409600 . . [6.7.2600.3109] . . c:\windows\system32\qmgr.dll

[-] 2007-03-29 . CC431E6DEAAD867A583EE5E804EE4CF2 . 409600 . . [6.7.2600.3109] . . c:\windows\system32\bits\qmgr.dll

[-] 2007-03-29 . CC431E6DEAAD867A583EE5E804EE4CF2 . 409600 . . [6.7.2600.3109] . . c:\windows\system32\dllcache\qmgr.dll

[-] 2007-03-29 . 65E23953D337574E549B1EF34FE0B1DA . 409600 . . [6.7.2600.3109] . . c:\windows\$hf_mig$\KB923845\SP2QFE\qmgr.dll

[7] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\$NtUninstallKB923845$\qmgr.dll

.

((((((((((((((((((((((((((((( SnapShot@2009-06-18_22.13.56 )))))))))))))))))))))))))))))))))))))))))

.

+ 2006-12-02 04:46 . 2006-12-02 04:46 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll

+ 2009-07-11 23:41 . 2009-07-11 23:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll

+ 2009-09-22 23:11 . 2006-11-06 16:13 98304 c:\windows\twain_32\MP190 series\softfare.dll

+ 2009-09-22 23:11 . 2006-01-12 14:22 73728 c:\windows\twain_32\MP190 series\RSTCOL.DLL

+ 2009-09-22 23:11 . 2007-11-07 12:02 38646 c:\windows\twain_32\MP190 series\IPM.DAT

+ 2009-09-22 23:11 . 2007-05-15 20:26 77824 c:\windows\twain_32\MP190 series\IJFSHLIB.DLL

+ 2009-09-22 23:11 . 2006-04-13 15:43 53248 c:\windows\twain_32\MP190 series\HSL.DLL

+ 2009-09-22 23:11 . 2008-02-13 14:07 49224 c:\windows\twain_32\MP190 series\CNC190P.DAT

+ 2009-09-22 23:11 . 2007-06-05 17:15 86016 c:\windows\twain_32\MP190 series\CAPS.DLL

+ 2009-09-22 23:11 . 2005-04-15 15:34 57344 c:\windows\twain_32\MP190 series\BaLCo.dll

+ 2009-09-22 23:11 . 2006-11-29 14:39 73728 c:\windows\twain_32\MP190 series\AG.DLL

- 2004-08-04 08:00 . 2004-08-04 08:00 50176 c:\windows\system32\utilman.exe

+ 2004-08-04 08:00 . 2006-10-04 08:48 50176 c:\windows\system32\utilman.exe

- 2004-08-04 08:00 . 2004-08-04 08:00 35840 c:\windows\system32\umandlg.dll

+ 2004-08-04 08:00 . 2006-10-04 13:33 35840 c:\windows\system32\umandlg.dll

+ 2008-07-30 01:10 . 2008-07-30 01:10 26112 c:\windows\system32\TsWpfWrp.exe

- 2006-02-09 19:21 . 2008-07-09 07:38 26488 c:\windows\system32\spupdsvc.exe

+ 2006-02-09 19:21 . 2007-11-30 11:18 26488 c:\windows\system32\spupdsvc.exe

+ 2009-08-11 07:28 . 2008-07-06 12:06 89088 c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll

+ 2009-09-22 23:11 . 2008-02-26 05:00 69632 c:\windows\system32\spool\prtprocs\w32x86\CNMPP9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 27136 c:\windows\system32\spool\prtprocs\w32x86\CNMPD9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 11264 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMW39I.DLL

+ 2009-09-22 23:11 . 2008-02-25 08:48 51024 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMVS9I.EXE

+ 2009-09-22 23:11 . 2008-02-26 05:00 13824 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMVS9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 77312 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMSR9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 44032 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMSQ9I.DLL

+ 2009-09-22 23:11 . 2008-02-25 08:47 18768 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMSE9I.EXE

+ 2009-09-22 23:11 . 2008-02-26 05:00 47616 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMSD9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 12288 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMPI9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 00:00 30320 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMP29I.DAT

+ 2009-09-22 23:11 . 2008-02-26 00:00 27140 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMP19I.DAT

+ 2009-09-22 23:11 . 2008-02-26 00:00 23280 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMP09I.DAT

+ 2009-09-22 23:11 . 2008-02-26 05:00 27136 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMOP9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 59904 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMLH9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 10240 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMFU9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 29184 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMEI9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 98816 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMCP9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 11264 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMBU9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 33280 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMBS9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 11264 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMBM9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 11264 c:\windows\system32\spool\drivers\w32x86\3\CNMW39I.DLL

+ 2009-09-22 23:11 . 2008-02-25 08:48 51024 c:\windows\system32\spool\drivers\w32x86\3\CNMVS9I.EXE

+ 2009-09-22 23:11 . 2008-02-26 05:00 13824 c:\windows\system32\spool\drivers\w32x86\3\CNMVS9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 77312 c:\windows\system32\spool\drivers\w32x86\3\CNMSR9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 44032 c:\windows\system32\spool\drivers\w32x86\3\CNMSQ9I.DLL

+ 2009-09-22 23:11 . 2008-02-25 08:47 18768 c:\windows\system32\spool\drivers\w32x86\3\CNMSE9I.EXE

+ 2009-09-22 23:11 . 2008-02-26 05:00 47616 c:\windows\system32\spool\drivers\w32x86\3\CNMSD9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 12288 c:\windows\system32\spool\drivers\w32x86\3\CNMPI9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 00:00 30320 c:\windows\system32\spool\drivers\w32x86\3\CNMP29I.DAT

+ 2009-09-22 23:11 . 2008-02-26 00:00 27140 c:\windows\system32\spool\drivers\w32x86\3\CNMP19I.DAT

+ 2009-09-22 23:11 . 2008-02-26 00:00 23280 c:\windows\system32\spool\drivers\w32x86\3\CNMP09I.DAT

+ 2009-09-22 23:11 . 2008-02-26 05:00 27136 c:\windows\system32\spool\drivers\w32x86\3\CNMOP9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 59904 c:\windows\system32\spool\drivers\w32x86\3\CNMLH9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 10240 c:\windows\system32\spool\drivers\w32x86\3\CNMFU9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 29184 c:\windows\system32\spool\drivers\w32x86\3\CNMEI9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 98816 c:\windows\system32\spool\drivers\w32x86\3\CNMCP9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 11264 c:\windows\system32\spool\drivers\w32x86\3\CNMBU9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 33280 c:\windows\system32\spool\drivers\w32x86\3\CNMBS9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 11264 c:\windows\system32\spool\drivers\w32x86\3\CNMBM9I.DLL

- 2008-07-09 07:02 . 2008-07-09 07:38 17272 c:\windows\system32\spmsg.dll

+ 2008-07-09 07:02 . 2007-11-30 11:18 17272 c:\windows\system32\spmsg.dll

+ 2008-07-29 23:59 . 2008-07-29 23:59 43544 c:\windows\system32\PresentationHostProxy.dll

- 2004-08-04 08:00 . 2009-04-29 04:56 44544 c:\windows\system32\pngfilt.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 44544 c:\windows\system32\pngfilt.dll

+ 2004-08-07 13:10 . 2009-08-12 01:11 82118 c:\windows\system32\perfc009.dat

+ 2004-08-04 08:00 . 2006-10-04 08:48 53760 c:\windows\system32\narrator.exe

- 2004-08-04 08:00 . 2004-08-04 08:00 53760 c:\windows\system32\narrator.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 15360 c:\windows\system32\mui\0409\mscorees.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 15360 c:\windows\system32\mui\0409\mscorees.dll

+ 2007-05-08 21:08 . 2007-05-08 21:08 86728 c:\windows\system32\msxml6r.dll

+ 2007-08-13 22:54 . 2009-06-29 16:12 52224 c:\windows\system32\msfeedsbs.dll

- 2007-08-13 22:54 . 2009-04-29 04:55 52224 c:\windows\system32\msfeedsbs.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 83968 c:\windows\system32\mscories.dll

- 2004-08-04 08:00 . 2004-08-04 08:00 72704 c:\windows\system32\magnify.exe

+ 2004-08-04 08:00 . 2006-10-04 08:48 72704 c:\windows\system32\magnify.exe

+ 2004-08-04 08:00 . 2009-06-29 16:12 27648 c:\windows\system32\jsproxy.dll

- 2004-08-04 08:00 . 2009-04-29 04:55 27648 c:\windows\system32\jsproxy.dll

+ 2008-07-29 23:24 . 2008-07-29 23:24 97800 c:\windows\system32\infocardapi.dll

- 2007-08-13 22:39 . 2009-04-28 09:05 13824 c:\windows\system32\ieudinit.exe

+ 2007-08-13 22:39 . 2009-06-29 11:07 13824 c:\windows\system32\ieudinit.exe

- 2004-08-04 08:00 . 2009-04-29 04:55 44544 c:\windows\system32\iernonce.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 44544 c:\windows\system32\iernonce.dll

- 2004-08-04 08:00 . 2009-04-28 09:05 70656 c:\windows\system32\ie4uinit.exe

+ 2004-08-04 08:00 . 2009-06-29 11:07 70656 c:\windows\system32\ie4uinit.exe

+ 2008-07-29 23:24 . 2008-07-29 23:24 11264 c:\windows\system32\icardres.dll

+ 2007-08-13 22:36 . 2009-06-29 16:12 63488 c:\windows\system32\icardie.dll

- 2007-08-13 22:36 . 2009-04-29 04:55 63488 c:\windows\system32\icardie.dll

+ 2004-08-04 08:00 . 2009-06-16 14:55 82432 c:\windows\system32\fontsub.dll

+ 2008-07-30 01:10 . 2008-07-30 01:10 73720 c:\windows\system32\dxva2.dll

+ 2009-08-14 17:43 . 2009-07-09 16:16 39424 c:\windows\system32\DRVSTORE\usbaapl_872A2434B7205D4BD84BBE53811BDCE15F347D5B\usbaapl.sys

+ 2009-08-14 17:44 . 2009-07-09 16:16 17408 c:\windows\system32\DRVSTORE\netaapl_F433E854B3FF3BEE74986FDE8E16A64162342BFF\netaapl.sys

+ 2009-08-14 17:51 . 2009-03-19 20:32 23400 c:\windows\system32\DRVSTORE\GEARAspiWD_F475AF659D36685632E9BD97B57E9D9661FF3FFD\x86\GEARAspiWDM.sys

+ 2009-04-05 05:48 . 2009-03-19 20:32 23400 c:\windows\system32\drivers\GEARAspiWDM.sys

+ 2006-10-04 08:48 . 2006-10-04 08:48 50176 c:\windows\system32\dllcache\utilman.exe

+ 2006-10-04 13:33 . 2006-10-04 13:33 35840 c:\windows\system32\dllcache\umandlg.dll

- 2006-06-23 11:25 . 2009-04-29 04:56 44544 c:\windows\system32\dllcache\pngfilt.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 44544 c:\windows\system32\dllcache\pngfilt.dll

+ 2006-10-04 08:48 . 2006-10-04 08:48 53760 c:\windows\system32\dllcache\narrator.exe

- 2008-04-05 03:25 . 2009-04-29 04:55 52224 c:\windows\system32\dllcache\msfeedsbs.dll

+ 2008-04-05 03:25 . 2009-06-29 16:12 52224 c:\windows\system32\dllcache\msfeedsbs.dll

+ 2006-10-04 08:48 . 2006-10-04 08:48 72704 c:\windows\system32\dllcache\magnify.exe

- 2006-06-23 11:25 . 2009-04-29 04:55 27648 c:\windows\system32\dllcache\jsproxy.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 27648 c:\windows\system32\dllcache\jsproxy.dll

- 2008-04-05 03:24 . 2009-04-28 09:05 13824 c:\windows\system32\dllcache\ieudinit.exe

+ 2008-04-05 03:24 . 2009-06-29 11:07 13824 c:\windows\system32\dllcache\ieudinit.exe

- 2007-08-13 22:39 . 2009-04-29 04:55 44544 c:\windows\system32\dllcache\iernonce.dll

+ 2007-08-13 22:39 . 2009-06-29 16:12 44544 c:\windows\system32\dllcache\iernonce.dll

- 2007-08-13 22:45 . 2009-04-29 04:55 78336 c:\windows\system32\dllcache\ieencode.dll

+ 2007-08-13 22:45 . 2009-06-29 16:12 78336 c:\windows\system32\dllcache\ieencode.dll

- 2007-08-13 22:39 . 2009-04-28 09:05 70656 c:\windows\system32\dllcache\ie4uinit.exe

+ 2007-08-13 22:39 . 2009-06-29 11:07 70656 c:\windows\system32\dllcache\ie4uinit.exe

+ 2008-04-05 03:24 . 2009-06-29 16:12 63488 c:\windows\system32\dllcache\icardie.dll

- 2008-04-05 03:24 . 2009-04-29 04:55 63488 c:\windows\system32\dllcache\icardie.dll

+ 2009-06-16 14:55 . 2009-06-16 14:55 82432 c:\windows\system32\dllcache\fontsub.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 89088 c:\windows\system32\dllcache\filterpipelineprintproc.dll

- 2007-08-13 22:42 . 2007-08-13 22:42 17408 c:\windows\system32\dllcache\corpol.dll

+ 2007-08-13 22:42 . 2009-06-29 16:12 17408 c:\windows\system32\dllcache\corpol.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 96760 c:\windows\system32\dfshim.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 96760 c:\windows\system32\dfshim.dll

- 2006-02-09 13:24 . 2006-02-09 13:26 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat

+ 2006-02-09 13:24 . 2009-08-17 15:00 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat

- 2006-02-09 13:24 . 2006-02-09 13:26 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat

+ 2006-02-09 13:24 . 2009-08-17 15:00 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat

+ 2006-02-09 13:24 . 2009-08-17 15:00 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat

- 2006-02-09 13:24 . 2006-02-09 13:26 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat

+ 2009-09-22 23:11 . 2008-02-14 11:56 49664 c:\windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP190_series\RES\DLL\IJInstUS.dll

+ 2009-09-22 23:11 . 2008-02-14 11:56 38912 c:\windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP190_series\RES\DLL\IJInstJP.dll

+ 2008-07-30 03:40 . 2008-07-30 03:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

+ 2008-07-30 03:40 . 2008-07-30 03:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe

+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll

+ 2008-07-30 03:40 . 2008-07-30 03:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe

+ 2008-07-30 03:40 . 2008-07-30 03:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe

+ 2008-07-30 03:40 . 2008-07-30 03:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe

+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe

+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe

+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe

+ 2008-07-30 01:10 . 2008-07-30 01:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

+ 2008-07-29 23:59 . 2008-07-29 23:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll

+ 2008-07-30 01:10 . 2008-07-30 01:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll

+ 2008-07-29 23:32 . 2008-07-29 23:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe

+ 2008-07-29 23:16 . 2008-07-29 23:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll

+ 2008-07-29 23:16 . 2008-07-29 23:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll

+ 2008-07-29 23:16 . 2008-07-29 23:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll

+ 2008-07-29 23:16 . 2008-07-29 23:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL

- 2007-10-24 06:47 . 2007-10-24 06:47 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL

+ 2008-07-25 15:17 . 2008-07-25 15:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll

+ 2008-11-25 08:59 . 2008-11-25 08:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe

+ 2006-02-09 19:21 . 2006-02-09 19:21 20480 c:\windows\Installer\cfc0d.msi

+ 2007-02-05 02:44 . 2007-02-05 02:44 48128 c:\windows\Installer\63571.msi

+ 2008-07-30 01:07 . 2008-07-30 01:07 23040 c:\windows\Installer\38385c4.msp

+ 2009-08-11 07:25 . 2009-08-11 07:25 88576 c:\windows\Installer\37c7d0b.msi

+ 2008-08-31 17:52 . 2008-08-31 17:52 55296 c:\windows\Installer\1a3daa.msi

+ 2009-08-20 15:03 . 2009-08-20 15:03 23558 c:\windows\Installer\{AC76BA86-7AD7-5676-5A64-7E8A45000001}\ARPPRODUCTICON.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 35088 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\oisicon.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 35088 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\oisicon.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 18704 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\mspicons.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 18704 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\mspicons.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 20240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\cagicon.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 20240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\cagicon.exe

+ 2006-10-27 01:09 . 2006-10-27 01:09 48448 c:\windows\Installer\$PatchCache$\Managed\00002119410000000000000000F01FEC\12.0.4518\PUBTRAP.DLL

+ 2009-07-29 07:02 . 2009-04-29 04:56 44544 c:\windows\ie7updates\KB972260-IE7\pngfilt.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 52224 c:\windows\ie7updates\KB972260-IE7\msfeedsbs.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 27648 c:\windows\ie7updates\KB972260-IE7\jsproxy.dll

+ 2009-07-29 07:02 . 2009-04-28 09:05 13824 c:\windows\ie7updates\KB972260-IE7\ieudinit.exe

+ 2009-07-29 07:02 . 2009-04-29 04:55 44544 c:\windows\ie7updates\KB972260-IE7\iernonce.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 78336 c:\windows\ie7updates\KB972260-IE7\ieencode.dll

+ 2009-07-29 07:02 . 2009-04-28 09:05 70656 c:\windows\ie7updates\KB972260-IE7\ie4uinit.exe

+ 2009-07-29 07:02 . 2009-04-29 04:55 63488 c:\windows\ie7updates\KB972260-IE7\icardie.dll

+ 2009-07-29 07:02 . 2004-08-04 08:00 35328 c:\windows\ie7updates\KB972260-IE7\corpol.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\i386\filterpipelineprintproc.dll

+ 2009-08-12 14:02 . 2009-08-12 14:02 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa442ef87ae99b3ade185599249d\UIAutomationProvider.ni.dll

+ 2009-08-12 18:48 . 2009-08-12 18:48 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794d1f4ed6e120fbb02e436491cb\System.Windows.Presentation.ni.dll

+ 2009-08-12 18:39 . 2009-08-12 18:39 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca1747c1ea18a3b639b302bca8df93\System.Web.DynamicData.Design.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll

+ 2009-08-12 01:13 . 2009-08-12 01:13 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe

+ 2009-08-12 01:12 . 2009-08-12 01:12 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee41b59be62ecbd59613b\Microsoft.Vsa.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2eab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d470d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d6543b9fcc6\dfsvc.ni.exe

+ 2009-08-12 17:23 . 2009-08-12 17:23 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01e5128805759121ea6c\Accessibility.ni.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe

+ 2009-08-11 07:29 . 2009-08-11 07:29 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

+ 2009-07-15 07:02 . 2005-10-17 21:14 80896 c:\windows\$NtUninstallKB961371$\fontsub.dll

+ 2009-08-12 01:10 . 2004-08-04 08:00 50176 c:\windows\$NtUninstallKB925720$\utilman.exe

+ 2009-08-12 01:10 . 2004-08-04 08:00 35840 c:\windows\$NtUninstallKB925720$\umandlg.dll

+ 2009-08-12 01:10 . 2004-08-04 08:00 53760 c:\windows\$NtUninstallKB925720$\narrator.exe

+ 2009-08-12 01:10 . 2004-08-04 08:00 72704 c:\windows\$NtUninstallKB925720$\magnify.exe

+ 2009-07-15 07:04 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB973346\update\spcustom.dll

+ 2009-07-15 07:04 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB973346\spmsg.dll

+ 2009-07-29 07:02 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB972260-IE7\update\spcustom.dll

+ 2009-07-29 07:02 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB972260-IE7\spmsg.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 44544 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\pngfilt.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 52224 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\msfeedsbs.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 27648 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\jsproxy.dll

+ 2009-06-29 11:25 . 2009-06-29 11:25 13824 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieudinit.exe

+ 2009-06-29 16:23 . 2009-06-29 16:23 44544 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\iernonce.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 78336 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieencode.dll

+ 2009-06-29 11:25 . 2009-06-29 11:25 70656 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ie4uinit.exe

+ 2009-06-29 16:23 . 2009-06-29 16:23 63488 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\icardie.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 17408 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\corpol.dll

+ 2009-07-15 07:04 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971633\update\spcustom.dll

+ 2009-07-15 07:04 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971633\spmsg.dll

+ 2009-07-15 07:02 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB961371\update\spcustom.dll

+ 2009-07-15 07:02 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB961371\spmsg.dll

+ 2009-06-16 14:43 . 2009-06-16 14:43 81920 c:\windows\$hf_mig$\KB961371\SP3QFE\fontsub.dll

+ 2009-06-16 14:36 . 2009-06-16 14:36 81920 c:\windows\$hf_mig$\KB961371\SP3GDR\fontsub.dll

+ 2009-06-16 14:45 . 2009-06-16 14:45 81920 c:\windows\$hf_mig$\KB961371\SP2QFE\fontsub.dll

+ 2009-08-12 01:13 . 2007-11-30 11:18 26488 c:\windows\$hf_mig$\KB961118\update\spcustom.dll

+ 2009-08-12 01:13 . 2007-11-30 11:18 17272 c:\windows\$hf_mig$\KB961118\spmsg.dll

+ 2009-08-12 01:10 . 2005-10-12 23:16 22752 c:\windows\$hf_mig$\KB925720\update\spcustom.dll

+ 2009-08-12 01:10 . 2005-10-12 23:16 14048 c:\windows\$hf_mig$\KB925720\spmsg.dll

+ 2006-10-04 10:40 . 2006-10-04 10:40 50176 c:\windows\$hf_mig$\KB925720\SP2QFE\utilman.exe

+ 2006-10-04 14:05 . 2006-10-04 14:05 35840 c:\windows\$hf_mig$\KB925720\SP2QFE\umandlg.dll

+ 2006-10-04 10:40 . 2006-10-04 10:40 53760 c:\windows\$hf_mig$\KB925720\SP2QFE\narrator.exe

+ 2006-10-04 10:40 . 2006-10-04 10:40 72704 c:\windows\$hf_mig$\KB925720\SP2QFE\magnify.exe

+ 2009-08-11 07:36 . 2009-08-11 07:36 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll

+ 2009-09-22 23:11 . 2007-01-26 15:44 4608 c:\windows\twain_32\MP190 series\USDRESUS.DLL

+ 2009-09-22 23:11 . 2007-01-26 15:44 4096 c:\windows\twain_32\MP190 series\USDRESJP.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 9216 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNML29I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 9216 c:\windows\system32\spool\drivers\w32x86\3\CNML29I.DLL

+ 2008-07-30 03:40 . 2008-07-30 03:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe

+ 2009-08-11 07:31 . 2009-08-11 07:31 5632 c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

- 2008-01-24 03:30 . 2008-01-24 03:30 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

- 2008-01-24 03:31 . 2008-01-24 03:31 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

+ 2007-11-07 06:19 . 2007-11-07 06:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll

+ 2007-11-07 06:19 . 2007-11-07 06:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll

+ 2007-11-07 01:23 . 2007-11-07 01:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll

+ 2009-09-22 23:11 . 2007-02-06 21:00 258048 c:\windows\twain_32\MP190 series\USIP.DLL

+ 2009-09-22 23:11 . 2007-11-07 10:28 524288 c:\windows\twain_32\MP190 series\TPM.DLL

+ 2009-09-22 23:11 . 2005-02-02 18:34 118784 c:\windows\twain_32\MP190 series\SCRPRMV.DLL

+ 2009-09-22 23:11 . 2007-11-07 10:27 147456 c:\windows\twain_32\MP190 series\SCANINTF.DLL

+ 2009-09-22 23:11 . 2006-12-13 11:28 122880 c:\windows\twain_32\MP190 series\MC2.DLL

+ 2009-09-22 23:11 . 2004-06-07 12:58 290816 c:\windows\twain_32\MP190 series\libBLC.dll

+ 2009-09-22 23:11 . 2004-08-26 17:07 114688 c:\windows\twain_32\MP190 series\ITLIB32.DLL

+ 2009-09-22 23:11 . 2007-11-07 10:27 135168 c:\windows\twain_32\MP190 series\IPM.DLL

+ 2009-09-22 23:11 . 2007-11-07 10:27 184320 c:\windows\twain_32\MP190 series\IOP.DLL

+ 2009-09-22 23:11 . 2007-03-19 14:06 143360 c:\windows\twain_32\MP190 series\CUBS.DLL

+ 2009-09-22 23:11 . 2005-08-24 15:51 126976 c:\windows\twain_32\MP190 series\CFine2.dll

+ 2008-07-30 01:26 . 2008-07-30 01:26 301568 c:\windows\system32\XPSViewer\XPSViewer.exe

+ 2009-08-11 07:28 . 2008-07-06 12:06 575488 c:\windows\system32\xpsshhdr.dll

+ 2006-10-24 16:30 . 2006-10-24 16:30 276992 c:\windows\system32\WMPhoto.dll

+ 2006-10-24 16:29 . 2006-10-24 16:29 352256 c:\windows\system32\WindowsCodecsExt.dll

+ 2006-10-24 16:30 . 2006-10-24 16:30 716288 c:\windows\system32\WindowsCodecs.dll

- 2004-08-04 08:00 . 2009-04-29 04:56 233472 c:\windows\system32\webcheck.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 233472 c:\windows\system32\webcheck.dll

- 2004-08-04 08:00 . 2009-04-29 04:56 105984 c:\windows\system32\url.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 105984 c:\windows\system32\url.dll

+ 2008-07-29 23:59 . 2008-07-29 23:59 161296 c:\windows\system32\UIAutomationCore.dll

+ 2004-08-04 08:00 . 2009-06-16 14:55 119808 c:\windows\system32\t2embed.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 147456 c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll

+ 2009-08-11 07:28 . 2008-07-06 10:50 597504 c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

+ 2009-09-22 23:11 . 2008-02-26 05:00 391168 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMUR9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 309760 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMUB9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 444928 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMSM9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 814592 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMSB9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 102912 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMPV9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 165888 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMLR9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 552448 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMDR9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 243200 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMD59I.DLL

+ 2009-08-11 07:28 . 2008-03-13 04:52 761344 c:\windows\system32\spool\drivers\w32x86\3\unires.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 744960 c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 373248 c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 198656 c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 765440 c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll

+ 2009-09-22 23:11 . 2008-02-26 05:00 391168 c:\windows\system32\spool\drivers\w32x86\3\CNMUR9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 309760 c:\windows\system32\spool\drivers\w32x86\3\CNMUB9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 444928 c:\windows\system32\spool\drivers\w32x86\3\CNMSM9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 814592 c:\windows\system32\spool\drivers\w32x86\3\CNMSB9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 102912 c:\windows\system32\spool\drivers\w32x86\3\CNMPV9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 165888 c:\windows\system32\spool\drivers\w32x86\3\CNMLR9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 552448 c:\windows\system32\spool\drivers\w32x86\3\CNMDR9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 243200 c:\windows\system32\spool\drivers\w32x86\3\CNMD59I.DLL

+ 2006-08-24 20:15 . 2006-08-24 20:15 150808 c:\windows\system32\rgb9rast_2.dll

+ 2008-02-27 05:47 . 2009-09-22 17:24 191364 c:\windows\system32\Restore\rstrlog.dat

+ 2009-08-11 07:28 . 2008-07-06 12:06 117760 c:\windows\system32\prntvpt.dll

+ 2008-07-29 23:59 . 2008-07-29 23:59 781344 c:\windows\system32\PresentationNative_v0300.dll

+ 2008-07-30 00:35 . 2008-07-30 00:35 326160 c:\windows\system32\PresentationHost.exe

+ 2008-07-29 23:59 . 2008-07-29 23:59 105016 c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll

+ 2006-10-24 16:30 . 2006-10-24 16:30 412160 c:\windows\system32\photometadatahandler.dll

+ 2004-08-07 13:10 . 2009-08-12 01:11 466266 c:\windows\system32\perfh009.dat

- 2004-08-04 08:00 . 2004-08-04 08:00 215552 c:\windows\system32\osk.exe

+ 2004-08-04 08:00 . 2006-10-04 08:48 215552 c:\windows\system32\osk.exe

- 2004-08-04 08:00 . 2009-04-29 04:56 102912 c:\windows\system32\occache.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 102912 c:\windows\system32\occache.dll

- 2004-08-04 08:00 . 2009-04-29 04:56 671232 c:\windows\system32\mstime.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 671232 c:\windows\system32\mstime.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 193024 c:\windows\system32\msrating.dll

- 2004-08-04 08:00 . 2009-04-29 04:56 193024 c:\windows\system32\msrating.dll

- 2004-08-04 08:00 . 2009-04-29 04:56 477696 c:\windows\system32\mshtmled.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 477696 c:\windows\system32\mshtmled.dll

+ 2007-08-13 22:54 . 2009-06-29 16:12 459264 c:\windows\system32\msfeeds.dll

- 2007-08-13 22:54 . 2009-04-29 04:55 459264 c:\windows\system32\msfeeds.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 158720 c:\windows\system32\mscorier.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 158720 c:\windows\system32\mscorier.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 282112 c:\windows\system32\mscoree.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 282112 c:\windows\system32\mscoree.dll

+ 2007-08-13 22:34 . 2009-06-29 16:12 268288 c:\windows\system32\iertutil.dll

- 2007-08-13 22:34 . 2009-04-29 04:55 268288 c:\windows\system32\iertutil.dll

- 2004-08-04 08:00 . 2009-04-29 04:55 385024 c:\windows\system32\iedkcs32.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 385024 c:\windows\system32\iedkcs32.dll

+ 2007-07-11 16:27 . 2009-06-29 16:12 380928 c:\windows\system32\ieapfltr.dll

+ 2004-08-04 08:00 . 2009-06-29 08:33 161792 c:\windows\system32\ieakui.dll

- 2004-08-04 08:00 . 2009-04-25 05:26 161792 c:\windows\system32\ieakui.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 230400 c:\windows\system32\ieaksie.dll

- 2004-08-04 08:00 . 2009-04-29 04:55 230400 c:\windows\system32\ieaksie.dll

- 2004-08-04 08:00 . 2009-04-29 04:55 153088 c:\windows\system32\ieakeng.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 153088 c:\windows\system32\ieakeng.dll

+ 2008-07-29 23:24 . 2008-07-29 23:24 622080 c:\windows\system32\icardagt.exe

+ 2004-08-07 13:02 . 2009-08-11 13:12 366504 c:\windows\system32\FNTCACHE.DAT

- 2004-08-04 08:00 . 2009-04-29 04:55 133120 c:\windows\system32\extmgr.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 133120 c:\windows\system32\extmgr.dll

+ 2008-07-30 01:10 . 2008-07-30 01:10 493048 c:\windows\system32\evr.dll

- 2004-08-04 08:00 . 2009-04-29 04:55 214528 c:\windows\system32\dxtrans.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 214528 c:\windows\system32\dxtrans.dll

- 2004-08-04 08:00 . 2009-04-29 04:55 347136 c:\windows\system32\dxtmsft.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 347136 c:\windows\system32\dxtmsft.dll

+ 2009-08-14 17:51 . 2008-04-17 16:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_F475AF659D36685632E9BD97B57E9D9661FF3FFD\x86\GEARAspi.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 575488 c:\windows\system32\dllcache\xpsshhdr.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 827392 c:\windows\system32\dllcache\wininet.dll

- 2006-06-23 11:25 . 2009-04-29 04:56 827392 c:\windows\system32\dllcache\wininet.dll

+ 2007-08-13 22:54 . 2009-06-29 16:12 233472 c:\windows\system32\dllcache\webcheck.dll

- 2007-08-13 22:54 . 2009-04-29 04:56 233472 c:\windows\system32\dllcache\webcheck.dll

- 2007-08-13 22:44 . 2009-04-29 04:56 105984 c:\windows\system32\dllcache\url.dll

+ 2007-08-13 22:44 . 2009-06-29 16:12 105984 c:\windows\system32\dllcache\url.dll

+ 2009-06-16 14:55 . 2009-06-16 14:55 119808 c:\windows\system32\dllcache\t2embed.dll

+ 2009-08-11 07:28 . 2008-07-06 10:50 597504 c:\windows\system32\dllcache\printfilterpipelinesvc.exe

+ 2006-10-04 08:48 . 2006-10-04 08:48 215552 c:\windows\system32\dllcache\osk.exe

- 2007-08-13 22:44 . 2009-04-29 04:56 102912 c:\windows\system32\dllcache\occache.dll

+ 2007-08-13 22:44 . 2009-06-29 16:12 102912 c:\windows\system32\dllcache\occache.dll

- 2006-06-23 11:25 . 2009-04-29 04:56 671232 c:\windows\system32\dllcache\mstime.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 671232 c:\windows\system32\dllcache\mstime.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 193024 c:\windows\system32\dllcache\msrating.dll

- 2006-06-23 11:25 . 2009-04-29 04:56 193024 c:\windows\system32\dllcache\msrating.dll

- 2006-06-23 11:25 . 2009-04-29 04:56 477696 c:\windows\system32\dllcache\mshtmled.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 477696 c:\windows\system32\dllcache\mshtmled.dll

+ 2008-04-05 03:25 . 2009-06-29 16:12 459264 c:\windows\system32\dllcache\msfeeds.dll

- 2008-04-05 03:25 . 2009-04-29 04:55 459264 c:\windows\system32\dllcache\msfeeds.dll

+ 2007-08-13 22:43 . 2009-06-29 08:35 634632 c:\windows\system32\dllcache\iexplore.exe

+ 2008-04-05 03:25 . 2009-06-29 16:12 268288 c:\windows\system32\dllcache\iertutil.dll

- 2008-04-05 03:25 . 2009-04-29 04:55 268288 c:\windows\system32\dllcache\iertutil.dll

+ 2007-08-13 22:39 . 2009-06-29 16:12 385024 c:\windows\system32\dllcache\iedkcs32.dll

- 2007-08-13 22:39 . 2009-04-29 04:55 385024 c:\windows\system32\dllcache\iedkcs32.dll

+ 2008-04-05 03:24 . 2009-06-29 16:12 380928 c:\windows\system32\dllcache\ieapfltr.dll

- 2007-08-13 21:56 . 2009-04-25 05:26 161792 c:\windows\system32\dllcache\ieakui.dll

+ 2007-08-13 21:56 . 2009-06-29 08:33 161792 c:\windows\system32\dllcache\ieakui.dll

- 2007-08-13 22:39 . 2009-04-29 04:55 230400 c:\windows\system32\dllcache\ieaksie.dll

+ 2007-08-13 22:39 . 2009-06-29 16:12 230400 c:\windows\system32\dllcache\ieaksie.dll

- 2007-08-13 22:39 . 2009-04-29 04:55 153088 c:\windows\system32\dllcache\ieakeng.dll

+ 2007-08-13 22:39 . 2009-06-29 16:12 153088 c:\windows\system32\dllcache\ieakeng.dll

- 2006-06-23 11:25 . 2009-04-29 04:55 133120 c:\windows\system32\dllcache\extmgr.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 133120 c:\windows\system32\dllcache\extmgr.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 214528 c:\windows\system32\dllcache\dxtrans.dll

- 2006-06-23 11:25 . 2009-04-29 04:55 214528 c:\windows\system32\dllcache\dxtrans.dll

+ 2006-06-23 11:25 . 2009-06-29 16:12 347136 c:\windows\system32\dllcache\dxtmsft.dll

- 2006-06-23 11:25 . 2009-04-29 04:55 347136 c:\windows\system32\dllcache\dxtmsft.dll

+ 2007-08-13 22:39 . 2009-06-29 16:12 124928 c:\windows\system32\dllcache\advpack.dll

- 2007-08-13 22:39 . 2009-04-29 04:55 124928 c:\windows\system32\dllcache\advpack.dll

+ 2009-09-22 23:11 . 2008-02-14 12:07 598360 c:\windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP190_series\DelDrv.exe

- 2004-08-04 08:00 . 2009-04-29 04:55 124928 c:\windows\system32\advpack.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 124928 c:\windows\system32\advpack.dll

+ 2008-07-30 03:40 . 2008-07-30 03:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe

+ 2008-07-30 03:40 . 2008-07-30 03:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi

+ 2008-07-29 22:47 . 2008-07-29 22:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

+ 2008-07-29 22:47 . 2008-07-29 22:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll

+ 2008-07-30 03:15 . 2008-07-30 03:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat

+ 2008-07-30 03:40 . 2008-07-30 03:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll

+ 2008-07-30 03:40 . 2008-07-30 03:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll

+ 2008-07-30 00:35 . 2008-07-30 00:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll

+ 2008-07-29 23:59 . 2008-07-29 23:59 132120 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll

+ 2008-07-30 01:10 . 2008-07-30 01:10 806928 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll

+ 2008-07-29 23:16 . 2008-07-29 23:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe

+ 2008-07-29 23:16 . 2008-07-29 23:16 966656 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll

+ 2008-07-29 23:16 . 2008-07-29 23:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

+ 2008-07-29 23:16 . 2008-07-29 23:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll

+ 2008-07-29 23:16 . 2008-07-29 23:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe

+ 2008-07-29 23:16 . 2008-07-29 23:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll

+ 2008-07-29 23:16 . 2008-07-29 23:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll

+ 2008-07-29 23:24 . 2008-07-29 23:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

+ 2008-07-29 23:16 . 2008-07-29 23:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe

+ 2008-11-25 08:59 . 2008-11-25 08:59 436040 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll

+ 2008-11-25 08:59 . 2008-11-25 08:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 392184 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll

+ 2008-11-25 08:59 . 2008-11-25 08:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll

+ 2008-11-25 08:59 . 2008-11-25 08:59 990032 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe

+ 2008-07-25 15:16 . 2008-07-25 15:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe

- 2007-10-24 06:47 . 2007-10-24 06:47 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll

Link to post
Share on other sites

+ 2009-03-30 15:34 . 2009-03-30 15:34 152576 c:\windows\Installer\f5aaeb7.msi

+ 2007-05-09 07:05 . 2007-05-09 07:05 470528 c:\windows\Installer\c643a38.msi

+ 2006-02-09 20:03 . 2006-02-09 20:03 916480 c:\windows\Installer\c2535.msi

+ 2007-02-05 03:09 . 2007-02-05 03:09 390656 c:\windows\Installer\ad015.msi

+ 2007-10-15 03:44 . 2007-10-15 03:44 324608 c:\windows\Installer\8d37f32.msp

+ 2007-10-15 03:46 . 2007-10-15 03:46 324608 c:\windows\Installer\8d37f2c.msp

+ 2007-02-07 08:01 . 2007-02-07 08:01 428544 c:\windows\Installer\7e18fc7.msi

+ 2007-02-07 08:01 . 2007-02-07 08:01 428544 c:\windows\Installer\7e18fc0.msi

+ 2009-07-01 13:51 . 2009-07-01 13:51 331264 c:\windows\Installer\7227060.msi

+ 2007-02-05 02:45 . 2007-02-05 02:45 501248 c:\windows\Installer\6359c.msi

+ 2007-02-05 02:44 . 2007-02-05 02:44 501248 c:\windows\Installer\63588.msi

+ 2007-02-05 02:44 . 2007-02-05 02:44 506880 c:\windows\Installer\63583.msi

+ 2007-02-05 02:44 . 2007-02-05 02:44 516608 c:\windows\Installer\6357c.msi

+ 2007-02-05 02:44 . 2007-02-05 02:44 513024 c:\windows\Installer\63576.msi

+ 2007-02-05 02:43 . 2007-02-05 02:43 501248 c:\windows\Installer\63559.msi

+ 2009-08-20 15:03 . 2009-08-20 15:03 289792 c:\windows\Installer\4f72539.msi

+ 2008-11-14 18:17 . 2008-11-14 18:17 432640 c:\windows\Installer\4673285.msi

+ 2006-02-10 01:22 . 2006-02-10 01:22 430080 c:\windows\Installer\3debef.msi

+ 2009-08-11 07:31 . 2009-08-11 07:31 648192 c:\windows\Installer\385ce13.msi

+ 2008-07-30 01:23 . 2008-07-30 01:23 250880 c:\windows\Installer\38385cd.msp

+ 2008-07-30 01:28 . 2008-07-30 01:28 278016 c:\windows\Installer\38385cb.msp

+ 2008-07-29 23:40 . 2008-07-29 23:40 291840 c:\windows\Installer\38385c9.msp

+ 2009-08-11 07:29 . 2009-08-11 07:29 137728 c:\windows\Installer\38385c3.msi

+ 2008-07-29 21:35 . 2008-07-29 21:35 553472 c:\windows\Installer\37c7d10.msp

+ 2008-07-29 21:33 . 2008-07-29 21:33 506368 c:\windows\Installer\37c7d0e.msp

+ 2008-07-29 21:37 . 2008-07-29 21:37 911360 c:\windows\Installer\37c7d0d.msp

+ 2005-04-30 05:54 . 2005-04-30 05:54 340480 c:\windows\Installer\37761.msi

+ 2005-04-30 05:34 . 2005-04-30 05:34 589312 c:\windows\Installer\376d7.msi

+ 2005-04-30 05:29 . 2005-04-30 05:29 226304 c:\windows\Installer\37697.msi

+ 2005-04-30 05:29 . 2005-04-30 05:29 227328 c:\windows\Installer\37691.msi

+ 2007-04-11 05:46 . 2007-04-11 05:46 678912 c:\windows\Installer\2a8e8c1.msi

+ 2009-06-05 16:04 . 2009-06-05 16:04 122880 c:\windows\Installer\2a7d435.msi

+ 2008-12-13 13:58 . 2008-12-13 13:58 754688 c:\windows\Installer\272478c.msp

+ 2009-08-12 01:10 . 2009-08-12 01:10 972800 c:\windows\Installer\2724779.msi

+ 2007-08-15 04:04 . 2007-08-15 04:04 431104 c:\windows\Installer\24039a5.msi

+ 2009-06-07 16:48 . 2009-06-07 16:48 301056 c:\windows\Installer\20ed332.msi

+ 2005-04-30 05:08 . 2005-04-30 05:08 227840 c:\windows\Installer\18586.msi

+ 2009-07-29 07:00 . 2009-07-29 07:00 248832 c:\windows\Installer\177ac641.msi

+ 2009-05-26 22:53 . 2009-05-26 22:53 579072 c:\windows\Installer\15e1d2d.msp

+ 2004-08-07 13:04 . 2004-08-07 13:04 264704 c:\windows\Installer\11a3e.msi

+ 2009-08-14 17:51 . 2009-08-14 17:51 102400 c:\windows\Installer\{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}\iTunesIco.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 888080 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\wordicon.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 888080 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\wordicon.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 272648 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pubs.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 272648 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pubs.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 922384 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pptico.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 922384 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pptico.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 845584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\outicon.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 845584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\outicon.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 217864 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\misc.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 217864 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\misc.exe

+ 2009-07-29 07:02 . 2009-04-29 04:56 827392 c:\windows\ie7updates\KB972260-IE7\wininet.dll

+ 2009-07-29 07:02 . 2009-04-29 04:56 233472 c:\windows\ie7updates\KB972260-IE7\webcheck.dll

+ 2009-07-29 07:02 . 2009-04-29 04:56 105984 c:\windows\ie7updates\KB972260-IE7\url.dll

+ 2009-07-29 07:02 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB972260-IE7\spuninst\updspapi.dll

+ 2009-07-29 07:02 . 2008-07-08 13:02 231288 c:\windows\ie7updates\KB972260-IE7\spuninst\spuninst.exe

+ 2009-07-29 07:02 . 2009-04-29 04:56 102912 c:\windows\ie7updates\KB972260-IE7\occache.dll

+ 2009-07-29 07:02 . 2009-04-29 04:56 671232 c:\windows\ie7updates\KB972260-IE7\mstime.dll

+ 2009-07-29 07:02 . 2009-04-29 04:56 193024 c:\windows\ie7updates\KB972260-IE7\msrating.dll

+ 2009-07-29 07:02 . 2009-04-29 04:56 477696 c:\windows\ie7updates\KB972260-IE7\mshtmled.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 459264 c:\windows\ie7updates\KB972260-IE7\msfeeds.dll

+ 2009-07-29 07:02 . 2009-04-25 05:27 636088 c:\windows\ie7updates\KB972260-IE7\iexplore.exe

+ 2009-07-29 07:02 . 2009-04-29 04:55 268288 c:\windows\ie7updates\KB972260-IE7\iertutil.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 385024 c:\windows\ie7updates\KB972260-IE7\iedkcs32.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 383488 c:\windows\ie7updates\KB972260-IE7\ieapfltr.dll

+ 2009-07-29 07:02 . 2009-04-25 05:26 161792 c:\windows\ie7updates\KB972260-IE7\ieakui.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 230400 c:\windows\ie7updates\KB972260-IE7\ieaksie.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 153088 c:\windows\ie7updates\KB972260-IE7\ieakeng.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 133120 c:\windows\ie7updates\KB972260-IE7\extmgr.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 214528 c:\windows\ie7updates\KB972260-IE7\dxtrans.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 347136 c:\windows\ie7updates\KB972260-IE7\dxtmsft.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 124928 c:\windows\ie7updates\KB972260-IE7\advpack.dll

+ 2009-08-11 07:28 . 2008-03-13 04:52 761344 c:\windows\Driver Cache\i386\unires.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 744960 c:\windows\Driver Cache\i386\unidrvui.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 373248 c:\windows\Driver Cache\i386\unidrv.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 198656 c:\windows\Driver Cache\i386\mxdwdui.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 765440 c:\windows\Driver Cache\i386\mxdwdrv.dll

+ 2009-08-12 17:21 . 2009-08-12 17:21 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2ef5bc3a2edd7570bb23886a4f32294a\WsatConfig.ni.exe

+ 2009-08-12 14:02 . 2009-08-12 14:02 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6a818099f0386e2356ae94f886a2196f\WindowsFormsIntegration.ni.dll

+ 2009-08-12 14:02 . 2009-08-12 14:02 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\a6d9503962d47c722231c1478f180695\UIAutomationTypes.ni.dll

+ 2009-08-12 14:01 . 2009-08-12 14:01 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\5c028c3d8db6c0f0277673ea4a2d89fb\UIAutomationClient.ni.dll

+ 2009-08-12 18:50 . 2009-08-12 18:50 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c338a470b14851ce5987bb0f0869c310\System.Xml.Linq.ni.dll

+ 2009-08-12 18:38 . 2009-08-12 18:38 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\bb77ea11f46ab438b2b7ed7c180011a1\System.Web.Routing.ni.dll

+ 2009-08-12 18:48 . 2009-08-12 18:48 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6ee255220d90dcbe80c990e443051cc5\System.Web.RegularExpressions.ni.dll

+ 2009-08-12 18:47 . 2009-08-12 18:47 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\58f62044fa702ea6f936071aa5520baa\System.Web.Extensions.Design.ni.dll

+ 2009-08-12 18:39 . 2009-08-12 18:39 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\79c29ac85dd57dd485ab60118ac292ff\System.Web.Entity.ni.dll

+ 2009-08-12 18:39 . 2009-08-12 18:40 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d3d65e34fa60f0b6c72ca0d12ec89933\System.Web.Entity.Design.ni.dll

+ 2009-08-12 18:39 . 2009-08-12 18:39 548864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\faadb3ddad52414f74aa0f62b23efd18\System.Web.DynamicData.ni.dll

+ 2009-08-12 18:37 . 2009-08-12 18:37 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\00ec08741a765c707bd9169346064a81\System.Web.Abstractions.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5a555c9ae6984c40157cf940bb519f7c\System.Transactions.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ea3366939280c1715f1c620e33ee3c8a\System.ServiceProcess.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\1c8df2da33222c048d683017f2095f04\System.Security.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bfd6e16d8c3589cd2bd3f8d46f0a5402\System.Runtime.Serialization.Formatters.Soap.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\519d9c618341b136f9b963ffb7495308\System.Net.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\8642fdfbf02a6cb6f01169fe6fdb5d11\System.Management.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1d3fbbd23ce1e8637ef4f40a8d23cd32\System.Management.Instrumentation.ni.dll

+ 2009-08-12 17:17 . 2009-08-12 17:17 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7c367a96b10d626ec8cbf8149272d845\System.IO.Log.ni.dll

+ 2009-08-12 17:17 . 2009-08-12 17:17 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\68e71147704ef0d34d9a4bece7767fc5\System.IdentityModel.Selectors.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.Wrapper.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.ni.dll

+ 2009-08-12 13:57 . 2009-08-12 13:57 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\18bbe2b6717e7f1d1dd672526e9889ee\System.Drawing.Design.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c434a07332ce490711c27fd0edb7562f\System.DirectoryServices.Protocols.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8b3bb7a2c2f3ffe94c866283f1cd5957\System.DirectoryServices.AccountManagement.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a4b887f476fa4b8746a93a9fc2208560\System.Data.Services.Client.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1cf3acad6553d6c59df576794f4e8bd6\System.Data.Services.Design.ni.dll

+ 2009-08-12 18:34 . 2009-08-12 18:34 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\392de34573f9f8ec885714f2f3e7f07f\System.Data.Entity.Design.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\1db495ff00bbd14df4af6680c4de0653\System.Data.DataSetExtensions.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\b82c00e2d24305ad6cb08556e3779b75\System.Configuration.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\de514e484e49b04b016949d57ffac03e\System.Configuration.Install.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ce984d754e3c0b6be4504b785cc43574\System.AddIn.ni.dll

+ 2009-08-12 17:21 . 2009-08-12 17:21 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\045dd501b7257b1cc26083538ae69045\SMSvcHost.ni.exe

+ 2009-08-12 17:21 . 2009-08-12 17:21 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9790551187e294b4ed3aaa1c221891c7\SMDiagnostics.ni.dll

+ 2009-08-12 17:21 . 2009-08-12 17:21 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\10a0c9707876fc1f65e64b811a28b020\ServiceModelReg.ni.exe

+ 2009-08-12 13:52 . 2009-08-12 13:52 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f475294d8c7dc2dd4febeef27bc0417e\PresentationFramework.Classic.ni.dll

+ 2009-08-12 13:52 . 2009-08-12 13:52 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8003abaf6bcf70f7eb620d06837e897b\PresentationFramework.Luna.ni.dll

+ 2009-08-12 13:52 . 2009-08-12 13:52 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\59a67874d8d8475faa5be1d993083d12\PresentationFramework.Aero.ni.dll

+ 2009-08-12 13:53 . 2009-08-12 13:53 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c980c9a5051d723c6ec2a78a3d0e2b3\PresentationFramework.Royale.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\6d38e317128608bc4516ea46ab94590e\MSBuild.ni.exe

+ 2009-08-12 17:21 . 2009-08-12 17:21 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1820d6a012fc0e16c3e1d29d973cd2d0\Microsoft.Transactions.Bridge.Dtc.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\55b9eff9e23359faed4351386c062238\Microsoft.Build.Utilities.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4217124db1ea5de5f1a1f3eea75e8d32\Microsoft.Build.Utilities.v3.5.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\96825c34d7e1f7df1923ff2123bed8da\Microsoft.Build.Engine.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\9b321ebf67587237f576df6104a32588\Microsoft.Build.Conversion.v3.5.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9bea05938bee3555c5aa8763d89a68f9\CustomMarshalers.ni.dll

+ 2009-08-12 17:21 . 2009-08-12 17:21 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\12629e2f3e315459bee67cbbaac85cb2\ComSvcConfig.ni.exe

+ 2009-08-12 17:23 . 2009-08-12 17:23 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b5b2feadc3943e3976daebc0bcd2b5e2\AspNetMMCExt.ni.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 385024 c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 167936 c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 139264 c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 507904 c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 540672 c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 335872 c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll

+ 2009-08-12 01:12 . 2009-08-12 01:12 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 131072 c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll

+ 2009-08-12 01:12 . 2009-08-12 01:12 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 688128 c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

- 2008-01-24 03:30 . 2008-01-24 03:30 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 569344 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll

- 2008-01-24 03:30 . 2008-01-24 03:30 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 966656 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 233472 c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 143360 c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll

+ 2009-08-11 07:28 . 2009-08-11 07:28 430080 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 286720 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll

+ 2009-08-11 07:37 . 2009-08-11 07:37 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

+ 2009-08-11 07:37 . 2009-08-11 07:37 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

+ 2009-08-12 01:12 . 2009-08-12 01:12 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 114688 c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll

+ 2009-08-12 01:12 . 2009-08-12 01:12 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 684032 c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 229376 c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 667648 c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

+ 2009-08-11 07:28 . 2009-08-11 07:28 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 864256 c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 163840 c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 397312 c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 139264 c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 196608 c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 598016 c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

+ 2009-08-11 07:28 . 2009-08-11 07:28 397312 c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 802816 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 733184 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 106496 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll

- 2008-01-24 03:31 . 2008-01-24 03:31 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

- 2008-01-24 03:32 . 2008-01-24 03:32 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll

+ 2009-08-11 07:28 . 2009-08-11 07:28 163840 c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll

+ 2009-08-11 07:21 . 2006-10-16 20:10 379184 c:\windows\$NtUninstallWIC$\spuninst\updspapi.dll

+ 2009-08-11 07:21 . 2006-10-16 20:10 221488 c:\windows\$NtUninstallWIC$\spuninst\spuninst.exe

+ 2009-07-15 07:04 . 2008-07-08 13:02 382840 c:\windows\$NtUninstallKB973346$\spuninst\updspapi.dll

+ 2009-07-15 07:04 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB973346$\spuninst\spuninst.exe

+ 2009-07-15 07:04 . 2008-07-09 07:38 382840 c:\windows\$NtUninstallKB971633$\spuninst\updspapi.dll

+ 2009-07-15 07:04 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971633$\spuninst\spuninst.exe

+ 2009-07-15 07:02 . 2005-10-17 21:14 118272 c:\windows\$NtUninstallKB961371$\t2embed.dll

+ 2009-07-15 07:02 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB961371$\spuninst\updspapi.dll

+ 2009-07-15 07:02 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB961371$\spuninst\spuninst.exe

+ 2009-08-12 01:12 . 2007-11-30 11:18 382840 c:\windows\$NtUninstallKB961118$\spuninst\updspapi.dll

+ 2009-08-12 01:12 . 2007-11-30 11:18 231288 c:\windows\$NtUninstallKB961118$\spuninst\spuninst.exe

+ 2009-08-12 01:10 . 2005-10-12 23:16 371424 c:\windows\$NtUninstallKB925720$\spuninst\updspapi.dll

+ 2009-08-12 01:10 . 2005-10-12 23:16 213216 c:\windows\$NtUninstallKB925720$\spuninst\spuninst.exe

+ 2009-08-12 01:10 . 2004-08-04 08:00 215552 c:\windows\$NtUninstallKB925720$\osk.exe

+ 2009-07-15 07:04 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB973346\update\updspapi.dll

+ 2009-07-15 07:04 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB973346\update\update.exe

+ 2009-07-15 07:04 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB973346\spuninst.exe

+ 2009-07-29 07:02 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB972260-IE7\update\updspapi.dll

+ 2009-07-29 07:02 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB972260-IE7\update\update.exe

+ 2009-07-29 07:02 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB972260-IE7\spuninst.exe

+ 2009-06-29 16:23 . 2009-06-29 16:23 828928 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\wininet.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 233472 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\webcheck.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 105984 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\url.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 102912 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\occache.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 671232 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mstime.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 193024 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\msrating.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 477696 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mshtmled.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 459264 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\msfeeds.dll

+ 2009-06-29 07:25 . 2009-06-29 07:25 634632 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\iexplore.exe

+ 2009-06-29 16:23 . 2009-06-29 16:23 268288 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\iertutil.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 388608 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\iedkcs32.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 380928 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieapfltr.dll

+ 2009-06-29 07:23 . 2009-06-29 07:23 161792 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieakui.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 230400 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieaksie.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 153088 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieakeng.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 132608 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\extmgr.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 214528 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\dxtrans.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 347136 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\dxtmsft.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 124928 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\advpack.dll

+ 2009-07-15 07:04 . 2008-07-09 07:38 382840 c:\windows\$hf_mig$\KB971633\update\updspapi.dll

+ 2009-07-15 07:04 . 2008-07-09 07:38 755576 c:\windows\$hf_mig$\KB971633\update\update.exe

+ 2009-07-15 07:04 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971633\spuninst.exe

+ 2009-07-15 07:02 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB961371\update\updspapi.dll

+ 2009-07-15 07:02 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB961371\update\update.exe

+ 2009-07-15 07:02 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB961371\spuninst.exe

+ 2009-06-16 14:43 . 2009-06-16 14:43 119808 c:\windows\$hf_mig$\KB961371\SP3QFE\t2embed.dll

+ 2009-06-16 14:36 . 2009-06-16 14:36 119808 c:\windows\$hf_mig$\KB961371\SP3GDR\t2embed.dll

+ 2009-06-16 14:45 . 2009-06-16 14:45 119808 c:\windows\$hf_mig$\KB961371\SP2QFE\t2embed.dll

+ 2009-08-12 01:13 . 2007-11-30 11:18 382840 c:\windows\$hf_mig$\KB961118\update\updspapi.dll

+ 2009-08-12 01:13 . 2007-11-30 11:18 755576 c:\windows\$hf_mig$\KB961118\update\update.exe

+ 2009-08-12 01:13 . 2007-11-30 11:18 231288 c:\windows\$hf_mig$\KB961118\spuninst.exe

+ 2009-08-12 01:10 . 2005-10-12 23:16 371424 c:\windows\$hf_mig$\KB925720\update\updspapi.dll

+ 2009-08-12 01:10 . 2005-10-12 23:16 716000 c:\windows\$hf_mig$\KB925720\update\update.exe

+ 2009-08-12 01:10 . 2005-10-12 23:16 213216 c:\windows\$hf_mig$\KB925720\spuninst.exe

+ 2006-10-04 10:40 . 2006-10-04 10:40 215552 c:\windows\$hf_mig$\KB925720\SP2QFE\osk.exe

+ 2009-09-22 23:11 . 2007-11-07 10:29 1175552 c:\windows\twain_32\MP190 series\SGUI.DLL

+ 2009-09-22 23:11 . 2007-11-07 10:27 1040384 c:\windows\twain_32\MP190 series\SGRES_US.DLL

+ 2009-09-22 23:11 . 2007-11-07 10:27 1011712 c:\windows\twain_32\MP190 series\SGRES_JP.DLL

+ 2009-09-22 23:11 . 2006-12-01 09:24 1159168 c:\windows\twain_32\MP190 series\SGCFLTR.DLL

+ 2009-09-22 23:11 . 2008-02-21 11:29 3724256 c:\windows\twain_32\MP190 series\CNC190.DAT

+ 2009-08-11 07:28 . 2008-07-06 12:06 1676288 c:\windows\system32\xpssvcs.dll

+ 2004-08-04 08:00 . 2004-08-04 08:00 1326080 c:\windows\system32\webfldrs.msi

- 2004-08-04 08:00 . 2009-04-29 04:56 1159680 c:\windows\system32\urlmon.dll

+ 2004-08-04 08:00 . 2009-06-29 16:12 1159680 c:\windows\system32\urlmon.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll

+ 2009-08-11 07:28 . 2008-07-06 21:36 2936832 c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll

+ 2009-08-11 07:28 . 2008-07-06 21:36 2936832 c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll

+ 2009-09-22 23:11 . 2008-02-26 05:00 2627072 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMUI9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 1599488 c:\windows\system32\spool\drivers\w32x86\canonmp190_series7b78\CNMCB9I.DLL

+ 2009-08-11 07:28 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll

+ 2009-09-22 23:11 . 2008-02-26 05:00 2627072 c:\windows\system32\spool\drivers\w32x86\3\CNMUI9I.DLL

+ 2009-09-22 23:11 . 2008-02-26 05:00 1599488 c:\windows\system32\spool\drivers\w32x86\3\CNMCB9I.DLL

+ 2004-08-04 08:00 . 2009-06-03 19:27 1290752 c:\windows\system32\quartz.dll

+ 2008-08-30 00:06 . 2008-08-30 00:06 1350664 c:\windows\system32\msxml6.dll

+ 2004-08-04 08:00 . 2009-07-19 13:33 3597824 c:\windows\system32\mshtml.dll

+ 2007-08-13 22:54 . 2009-07-19 13:32 6067200 c:\windows\system32\ieframe.dll

+ 2007-02-12 20:10 . 2009-06-29 08:33 2452872 c:\windows\system32\ieapfltr.dat

+ 2009-08-14 17:43 . 2009-07-09 16:16 2060288 c:\windows\system32\DRVSTORE\usbaapl_872A2434B7205D4BD84BBE53811BDCE15F347D5B\usbaaplrc.dll

+ 2009-08-14 17:44 . 2009-07-09 16:16 1419232 c:\windows\system32\DRVSTORE\netaapl_F433E854B3FF3BEE74986FDE8E16A64162342BFF\wdfcoinstaller01005.dll

+ 2009-08-11 07:28 . 2008-07-06 12:06 1676288 c:\windows\system32\dllcache\xpssvcs.dll

- 2006-07-25 20:42 . 2009-04-29 04:56 1159680 c:\windows\system32\dllcache\urlmon.dll

+ 2006-07-25 20:42 . 2009-06-29 16:12 1159680 c:\windows\system32\dllcache\urlmon.dll

+ 2007-10-29 22:43 . 2009-06-03 19:27 1290752 c:\windows\system32\dllcache\quartz.dll

+ 2006-07-28 11:30 . 2009-07-19 13:33 3597824 c:\windows\system32\dllcache\mshtml.dll

+ 2008-04-05 03:24 . 2009-07-19 13:32 6067200 c:\windows\system32\dllcache\ieframe.dll

+ 2008-04-05 03:24 . 2009-06-29 08:33 2452872 c:\windows\system32\dllcache\ieapfltr.dat

+ 2008-07-30 03:40 . 2008-07-30 03:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe

+ 2008-07-29 22:47 . 2008-07-29 22:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll

+ 2008-07-29 22:47 . 2008-07-29 22:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll

+ 2008-07-30 03:40 . 2008-07-30 03:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe

+ 2008-12-05 23:35 . 2008-12-05 23:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll

+ 2008-07-30 01:10 . 2008-07-30 01:10 2637840 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll

+ 2008-07-30 01:10 . 2008-07-30 01:10 4883464 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll

+ 2008-12-06 00:12 . 2008-12-06 00:12 5931008 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll

- 2007-10-24 06:47 . 2007-10-24 06:47 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

+ 2008-07-25 15:17 . 2008-07-25 15:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

+ 2008-11-25 08:59 . 2008-11-25 08:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll

+ 2008-11-25 08:59 . 2008-11-25 08:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 3149824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll

+ 2008-07-25 15:17 . 2008-07-25 15:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll

+ 2008-11-25 08:59 . 2008-11-25 08:59 5813576 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

+ 2008-11-25 08:59 . 2008-11-25 08:59 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

+ 2008-07-25 15:16 . 2008-07-25 15:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll

+ 2007-05-25 16:08 . 2007-05-25 16:08 9609728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp

+ 2006-10-01 21:53 . 2006-10-01 21:53 3485184 c:\windows\Installer\f41aca.msi

+ 2009-01-08 01:25 . 2009-01-08 01:25 5046784 c:\windows\Installer\e7dbf32.msp

+ 2009-02-25 23:08 . 2009-02-25 23:08 8311808 c:\windows\Installer\d7e4d58.msp

+ 2009-03-28 13:50 . 2009-03-28 13:50 5025792 c:\windows\Installer\d7e4d46.msp

+ 2008-11-13 07:57 . 2008-11-13 07:57 5099520 c:\windows\Installer\cd0fb1c.msp

+ 2008-10-20 15:18 . 2008-10-20 15:18 6474240 c:\windows\Installer\cd0fb09.msp

+ 2007-11-22 23:23 . 2007-11-22 23:23 5051904 c:\windows\Installer\c84441.msp

+ 2008-02-25 19:08 . 2008-02-25 19:08 5050368 c:\windows\Installer\c7971.msp

+ 2007-04-09 02:32 . 2007-04-09 02:32 5131264 c:\windows\Installer\c643a5d.msp

+ 2007-03-31 02:21 . 2007-03-31 02:21 3886080 c:\windows\Installer\c643a0c.msp

+ 2007-03-31 02:17 . 2007-03-31 02:17 9589248 c:\windows\Installer\c6439f8.msp

+ 2008-02-15 12:54 . 2008-02-15 12:54 9736192 c:\windows\Installer\9ba647.msp

+ 2008-03-17 21:55 . 2008-03-17 21:55 5049344 c:\windows\Installer\9ba622.msp

+ 2007-06-17 05:18 . 2007-06-17 05:18 5050368 c:\windows\Installer\8e4f0b7.msp

+ 2007-05-29 02:01 . 2007-05-29 02:01 4597760 c:\windows\Installer\8e4f0a4.msp

+ 2007-06-01 19:54 . 2007-06-01 19:54 9626624 c:\windows\Installer\8e4f01f.msp

+ 2007-10-15 03:43 . 2007-10-15 03:43 5749760 c:\windows\Installer\8d37f0c.msp

+ 2007-01-29 23:23 . 2007-01-29 23:23 3361280 c:\windows\Installer\8a1493.msp

+ 2009-08-14 17:51 . 2009-08-14 17:51 4945408 c:\windows\Installer\876578b.msi

+ 2009-08-14 17:47 . 2009-08-14 17:47 8992256 c:\windows\Installer\8765458.msi

+ 2009-08-14 17:44 . 2009-08-14 17:44 3295232 c:\windows\Installer\87651c7.msi

+ 2008-01-28 23:09 . 2008-01-28 23:09 5055488 c:\windows\Installer\7e8fa9.msp

+ 2008-08-20 18:37 . 2008-08-20 18:37 5107712 c:\windows\Installer\7cf00a.msp

+ 2008-11-20 19:48 . 2008-11-20 19:48 5097472 c:\windows\Installer\7c0ce.msp

+ 2007-02-20 04:23 . 2007-02-20 04:23 9278464 c:\windows\Installer\7bd056e.msi

+ 2009-04-24 16:28 . 2009-04-24 16:28 4450816 c:\windows\Installer\69825e8.msp

+ 2008-04-11 22:08 . 2008-04-11 22:08 6302720 c:\windows\Installer\64e7c7.msp

+ 2008-04-26 00:14 . 2008-04-26 00:14 5052928 c:\windows\Installer\64e7b0.msp

+ 2008-04-18 18:56 . 2008-04-18 18:56 6215680 c:\windows\Installer\64e79d.msp

+ 2007-02-05 02:45 . 2007-02-05 02:45 1652736 c:\windows\Installer\63597.msi

+ 2007-02-05 02:45 . 2007-02-05 02:45 1652736 c:\windows\Installer\63592.msi

+ 2007-02-05 02:45 . 2007-02-05 02:45 1652736 c:\windows\Installer\6358d.msi

+ 2007-02-05 02:44 . 2007-02-05 02:44 1640960 c:\windows\Installer\63568.msi

+ 2007-02-05 02:43 . 2007-02-05 02:43 2022912 c:\windows\Installer\63563.msi

+ 2007-02-05 02:43 . 2007-02-05 02:43 1713152 c:\windows\Installer\6355e.msi

+ 2007-02-05 02:43 . 2007-02-05 02:43 2397184 c:\windows\Installer\63554.msi

+ 2009-02-07 03:31 . 2009-02-07 03:31 5047808 c:\windows\Installer\6031c94.msp

+ 2007-10-25 03:23 . 2007-10-25 03:23 1563136 c:\windows\Installer\5ca309.msi

+ 2009-08-20 17:27 . 2009-08-20 17:27 1665024 c:\windows\Installer\57ab6eb.msi

+ 2007-02-27 21:13 . 2007-02-27 21:13 3358720 c:\windows\Installer\5216f91.msp

+ 2008-10-20 15:19 . 2008-10-20 15:19 5100032 c:\windows\Installer\46732aa.msp

+ 2007-03-31 02:20 . 2007-03-31 02:20 5800960 c:\windows\Installer\41041323.msp

+ 2007-03-27 20:15 . 2007-03-27 20:15 8395776 c:\windows\Installer\41041310.msp

+ 2008-09-02 15:42 . 2008-09-02 15:42 5104640 c:\windows\Installer\3f8e6a.msp

+ 2008-12-13 13:57 . 2008-12-13 13:57 8397824 c:\windows\Installer\385ce21.msp

+ 2008-07-29 23:26 . 2008-07-29 23:26 1043456 c:\windows\Installer\38385cc.msp

+ 2008-07-30 00:37 . 2008-07-30 00:37 2679808 c:\windows\Installer\38385ca.msp

+ 2008-07-30 01:15 . 2008-07-30 01:15 3697664 c:\windows\Installer\38385c8.msp

+ 2008-07-29 23:34 . 2008-07-29 23:34 1448448 c:\windows\Installer\38385c7.msp

+ 2008-07-30 00:22 . 2008-07-30 00:22 4137984 c:\windows\Installer\38385c6.msp

+ 2008-07-29 23:18 . 2008-07-29 23:18 3376640 c:\windows\Installer\38385c5.msp

+ 2008-07-29 21:45 . 2008-07-29 21:45 2543616 c:\windows\Installer\37c7d14.msp

+ 2008-07-29 21:29 . 2008-07-29 21:29 2926080 c:\windows\Installer\37c7d13.msp

+ 2008-07-29 21:41 . 2008-07-29 21:41 6487040 c:\windows\Installer\37c7d12.msp

+ 2008-07-29 21:39 . 2008-07-29 21:39 3403264 c:\windows\Installer\37c7d11.msp

+ 2008-07-29 21:43 . 2008-07-29 21:43 1013248 c:\windows\Installer\37c7d0f.msp

+ 2008-07-29 21:31 . 2008-07-29 21:31 6083072 c:\windows\Installer\37c7d0c.msp

+ 2005-04-30 05:42 . 2005-04-30 05:42 5864960 c:\windows\Installer\376e6.msp

+ 2005-04-30 05:32 . 2005-04-30 05:32 1346048 c:\windows\Installer\376c7.msi

+ 2005-04-30 05:29 . 2005-04-30 05:29 4866560 c:\windows\Installer\3768a.msi

+ 2005-04-30 05:27 . 2005-04-30 05:27 1096192 c:\windows\Installer\37670.msi

+ 2005-04-30 05:27 . 2005-04-30 05:27 1102848 c:\windows\Installer\375ed.msi

+ 2005-04-30 05:26 . 2005-04-30 05:26 1094656 c:\windows\Installer\37569.msi

+ 2005-04-30 05:16 . 2005-04-30 05:16 2247680 c:\windows\Installer\37547.msi

+ 2007-02-13 01:43 . 2007-02-13 01:43 1880576 c:\windows\Installer\36f15a.msi

+ 2007-02-13 01:40 . 2007-02-13 01:40 1646080 c:\windows\Installer\36f155.msi

+ 2007-02-13 01:39 . 2007-02-13 01:39 5938688 c:\windows\Installer\36f151.msi

+ 2007-03-24 19:57 . 2007-03-24 19:57 5135360 c:\windows\Installer\2ef063a.msp

+ 2007-03-27 20:14 . 2007-03-27 20:14 5566464 c:\windows\Installer\2ef0627.msp

+ 2005-04-30 04:55 . 2005-04-30 04:55 3975680 c:\windows\Installer\2ed8d.msi

+ 2009-04-05 05:47 . 2009-04-05 05:47 1659392 c:\windows\Installer\2c2240de.msi

+ 2009-04-05 05:43 . 2009-04-05 05:43 1549312 c:\windows\Installer\2c223e79.msi

+ 2008-10-05 08:12 . 2008-10-05 08:12 4784128 c:\windows\Installer\2991f33.msp

+ 2007-10-01 01:12 . 2007-10-01 01:12 5052416 c:\windows\Installer\27a5e04.msp

+ 2007-07-26 15:27 . 2007-07-26 15:27 5053440 c:\windows\Installer\24039b7.msp

+ 2007-07-21 17:26 . 2007-07-21 17:26 7574016 c:\windows\Installer\240399d.msp

+ 2008-06-05 17:56 . 2008-06-05 17:56 5111808 c:\windows\Installer\1ffb765.msp

+ 2004-08-07 13:05 . 2004-08-07 13:05 3443712 c:\windows\Installer\1c9f6.msi

+ 2008-07-16 03:12 . 2008-07-16 03:12 1298432 c:\windows\Installer\1a3db0.msp

+ 2009-05-26 22:54 . 2009-05-26 22:54 4192768 c:\windows\Installer\165e6976.msp

+ 2009-07-02 20:23 . 2009-07-02 20:23 5027328 c:\windows\Installer\165e695e.msp

+ 2009-01-15 08:35 . 2009-01-15 08:35 4830720 c:\windows\Installer\1643e8.msp

+ 2009-05-04 11:46 . 2009-05-04 11:46 8299008 c:\windows\Installer\15e1d7d.msp

+ 2009-05-04 11:47 . 2009-05-04 11:47 9124864 c:\windows\Installer\15e1d69.msp

+ 2009-04-24 16:30 . 2009-04-24 16:30 2583552 c:\windows\Installer\15e1d55.msp

+ 2009-05-07 13:17 . 2009-05-07 13:17 5026816 c:\windows\Installer\15e1d40.msp

+ 2009-04-24 16:29 . 2009-04-24 16:29 9013760 c:\windows\Installer\15e1d1a.msp

+ 2008-04-11 22:48 . 2008-04-11 22:48 6774272 c:\windows\Installer\14680719.msp

+ 2008-07-16 23:01 . 2008-07-16 23:01 5110272 c:\windows\Installer\14680704.msp

+ 2007-10-28 15:53 . 2007-10-28 15:53 5047808 c:\windows\Installer\11e80d.msp

+ 2007-09-01 01:58 . 2007-09-01 01:58 5054976 c:\windows\Installer\110bf9d.msp

+ 2007-02-05 02:52 . 2009-07-15 07:05 1172240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\xlicons.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 1172240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\xlicons.exe

- 2007-02-05 02:52 . 2009-06-17 07:17 1165584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\accicons.exe

+ 2007-02-05 02:52 . 2009-07-15 07:05 1165584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\accicons.exe

+ 2009-07-29 07:02 . 2009-04-29 04:56 1159680 c:\windows\ie7updates\KB972260-IE7\urlmon.dll

+ 2009-07-29 07:02 . 2009-04-29 04:56 3596288 c:\windows\ie7updates\KB972260-IE7\mshtml.dll

+ 2009-07-29 07:02 . 2009-04-29 04:55 6066176 c:\windows\ie7updates\KB972260-IE7\ieframe.dll

+ 2009-07-29 07:02 . 2008-07-09 14:25 2455488 c:\windows\ie7updates\KB972260-IE7\ieapfltr.dat

+ 2005-04-30 05:34 . 2005-04-30 05:34 2220544 c:\windows\Hewlett-Packard\Setup Files\HP Software Update\{77C7D65D-7F07-4F6B-95DE-3D893B08E7FF}\HP Software Update.msi

+ 2006-02-09 22:06 . 2006-02-09 22:06 6525952 c:\windows\Downloaded Installations\Odyssey Client.msi

+ 2006-02-09 20:03 . 2006-02-09 20:03 1863168 c:\windows\Downloaded Installations\{6D2F1926-BD77-486A-A418-91BE87F9993B}\HMTCDWizard.msi

+ 2009-08-12 01:12 . 2009-08-12 01:12 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\14cd5f4b61d35f9b76327d6be9853755\WindowsBase.ni.dll

+ 2009-08-12 14:01 . 2009-08-12 14:01 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\f3c7957351aec85f526a3350c9718b1e\UIAutomationClientsideProviders.ni.dll

+ 2009-08-11 07:39 . 2009-08-11 07:39 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP275.tmp\System.dll

+ 2009-08-11 07:34 . 2009-08-11 07:34 7867392 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP192.tmp\System.dll

+ 2009-08-12 01:12 . 2009-08-12 01:12 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\System\80978a322d7dd39f0a71be1251ae395a\System.ni.dll

+ 2009-08-12 14:01 . 2009-08-12 14:01 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\773a9786013451d3baaeff003dc4230f\System.Xml.ni.dll

+ 2009-08-12 18:50 . 2009-08-12 18:50 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\ac1750e78d79520dcf19195772eff1b6\System.WorkflowServices.ni.dll

+ 2009-08-12 18:50 . 2009-08-12 18:50 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\d265da36954fcb4cb7ad5adc693ea0f2\System.Workflow.Runtime.ni.dll

+ 2009-08-12 18:49 . 2009-08-12 18:49 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\693a8fbe6f7ad6e4e429052da4317e59\System.Workflow.ComponentModel.ni.dll

+ 2009-08-12 18:49 . 2009-08-12 18:49 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\cc99fbbac0b6e4e9ca62093e49b0c16b\System.Workflow.Activities.ni.dll

+ 2009-08-12 18:48 . 2009-08-12 18:48 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b57bb002a655920cbfa2bee29d1e22b7\System.Web.Services.ni.dll

+ 2009-08-12 18:48 . 2009-08-12 18:48 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\81197e32ec931f439b3114e9031b65d6\System.Web.Mobile.ni.dll

+ 2009-08-12 18:40 . 2009-08-12 18:40 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\7f64c9d25471b72e1e957bdfe67947c8\System.Web.Extensions.ni.dll

+ 2009-08-12 13:58 . 2009-08-12 13:58 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\63cf639b6e0a3c25c1643c85016e7422\System.Speech.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\340cad17fe57947eacbc8fa2cea780da\System.ServiceModel.Web.ni.dll

+ 2009-08-12 17:17 . 2009-08-12 17:17 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\034c91b133dee73d452652c52767b5ea\System.Runtime.Serialization.ni.dll

+ 2009-08-12 13:58 . 2009-08-12 13:58 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\646ab52eef343380aa002c220dc31e13\System.Printing.ni.dll

+ 2009-08-12 17:17 . 2009-08-12 17:17 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c2de8479e54852f56996f79bc93acb13\System.IdentityModel.ni.dll

+ 2009-08-12 13:57 . 2009-08-12 13:57 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3da96ee075bab9202626ae44c18d226c\System.Drawing.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\543aced762f6b0c3f8e037955941afc6\System.DirectoryServices.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\a6b58624486714fa71e5e35186850ff0\System.Deployment.ni.dll

+ 2009-08-12 13:55 . 2009-08-12 13:55 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c70731047b0022638b3f9fb158948a03\System.Data.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\826b09ab0d0e36f4d631b4cd335df511\System.Data.SqlXml.ni.dll

+ 2009-08-12 18:35 . 2009-08-12 18:35 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\956a513dcbd44d5a6801840ef2b0b47b\System.Data.Services.ni.dll

+ 2009-08-12 13:55 . 2009-08-12 13:55 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\0bbec79460b1137df5313f9baf7b246f\System.Data.Linq.ni.dll

+ 2009-08-12 18:34 . 2009-08-12 18:34 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6479f975b105808a8d9e7a7fdc762551\System.Data.Entity.ni.dll

+ 2009-08-12 13:55 . 2009-08-12 13:55 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\47d87251e93256c635eb73403b8db33e\System.Core.ni.dll

+ 2009-08-12 13:54 . 2009-08-12 13:54 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4bfb3048bf200a6a8592d1b4ba861a7f\ReachFramework.ni.dll

+ 2009-08-12 13:54 . 2009-08-12 13:54 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\6bafb1a2a73794ddb9761cb321c9e7e2\PresentationUI.ni.dll

+ 2009-08-12 01:12 . 2009-08-12 01:12 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\e634bc4c4a00635a0a254febab0e2e2c\PresentationBuildTasks.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\1c86afc399d0fdd8e069266ffbe748d1\Microsoft.VisualBasic.ni.dll

+ 2009-08-12 17:21 . 2009-08-12 17:21 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6b2f62f5e981913fce1d223f645d9ddf\Microsoft.Transactions.Bridge.ni.dll

+ 2009-08-12 18:36 . 2009-08-12 18:36 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b261961046545831aa60963e84905968\Microsoft.JScript.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\bd241492d96db39f20e758c13c845033\Microsoft.Build.Tasks.ni.dll

+ 2009-08-12 17:24 . 2009-08-12 17:24 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a47100d8f4574bed2d49d83d0ab8964e\Microsoft.Build.Tasks.v3.5.ni.dll

+ 2009-08-12 17:23 . 2009-08-12 17:23 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6cfe582681724965fb817e8ece5f0909\Microsoft.Build.Engine.ni.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 1245184 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll

+ 2009-08-11 07:37 . 2009-08-11 07:37 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

+ 2009-08-11 07:37 . 2009-08-11 07:37 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 1630208 c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 1138688 c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

+ 2009-08-12 01:12 . 2009-08-12 01:12 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll

+ 2009-08-11 07:39 . 2009-08-11 07:39 5931008 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

+ 2009-08-11 07:31 . 2009-08-11 07:31 2879488 c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll

+ 2009-08-11 07:39 . 2009-08-11 07:39 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

+ 2009-08-11 07:37 . 2009-08-11 07:37 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

+ 2009-08-11 07:29 . 2009-08-11 07:29 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll

+ 2009-08-11 07:36 . 2009-08-11 07:36 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

+ 2009-07-15 07:04 . 2008-12-20 22:43 1287680 c:\windows\$NtUninstallKB971633$\quartz.dll

+ 2009-06-29 16:23 . 2009-06-29 16:23 1163264 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\urlmon.dll

+ 2009-07-19 13:31 . 2009-07-19 13:31 3600384 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mshtml.dll

+ 2009-07-19 13:31 . 2009-07-19 13:31 6070784 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieframe.dll

+ 2009-06-29 08:33 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieapfltr.dat

+ 2009-06-03 19:12 . 2009-06-03 19:12 1291264 c:\windows\$hf_mig$\KB971633\SP3QFE\quartz.dll

+ 2009-06-03 19:09 . 2009-06-03 19:09 1291264 c:\windows\$hf_mig$\KB971633\SP3GDR\quartz.dll

+ 2009-06-03 19:24 . 2009-06-03 19:24 1291264 c:\windows\$hf_mig$\KB971633\SP2QFE\quartz.dll

+ 2006-02-09 13:30 . 2005-04-30 05:08 11333632 c:\windows\system32\config\systemprofile\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150020}\J2SE Runtime Environment 5.0 Update 2.msi

+ 2008-10-20 15:22 . 2008-10-20 15:22 11758592 c:\windows\Installer\cd0fb56.msp

+ 2008-10-20 15:21 . 2008-10-20 15:21 11937280 c:\windows\Installer\cd0fb43.msp

+ 2008-10-20 15:16 . 2008-10-20 15:16 13211648 c:\windows\Installer\cd0fb30.msp

+ 2008-02-25 19:07 . 2008-02-25 19:07 11772416 c:\windows\Installer\c79bb.msp

+ 2008-01-28 22:09 . 2008-01-28 22:09 11896320 c:\windows\Installer\c79a8.msp

+ 2008-01-28 22:10 . 2008-01-28 22:10 14201344 c:\windows\Installer\c7994.msp

+ 2007-04-22 00:16 . 2007-04-22 00:16 12490752 c:\windows\Installer\c643a4a.msp

+ 2007-03-31 02:22 . 2007-03-31 02:22 10125824 c:\windows\Installer\c643a32.msp

+ 2007-03-31 02:19 . 2007-03-31 02:19 10893312 c:\windows\Installer\c643a1f.msp

+ 2008-01-28 22:07 . 2008-01-28 22:07 19034624 c:\windows\Installer\9ba635.msp

+ 2007-06-01 19:55 . 2007-06-01 19:55 10824704 c:\windows\Installer\8e4f0d0.msp

+ 2007-07-11 07:09 . 2007-07-11 07:09 15256576 c:\windows\Installer\8e4f091.msp

+ 2007-06-01 19:53 . 2007-06-01 19:53 10255360 c:\windows\Installer\8e4f032.msp

+ 2007-10-15 03:43 . 2007-10-15 03:43 12743168 c:\windows\Installer\8d37f1d.msp

+ 2007-10-15 03:43 . 2007-10-15 03:43 21981184 c:\windows\Installer\8d37ee7.msp

+ 2008-08-11 15:51 . 2008-08-11 15:51 15916544 c:\windows\Installer\7ceff7.msp

+ 2008-08-11 15:49 . 2008-08-11 15:49 22457344 c:\windows\Installer\7cefe4.msp

+ 2008-04-11 22:07 . 2008-04-11 22:07 13257728 c:\windows\Installer\64e7dc.msp

+ 2007-02-05 02:52 . 2007-02-05 02:52 12836352 c:\windows\Installer\6395a.msi

+ 2008-09-24 17:05 . 2008-09-24 17:05 16381440 c:\windows\Installer\4673297.msp

+ 2008-07-30 03:20 . 2008-07-30 03:20 11767296 c:\windows\Installer\3f8e57.msp

+ 2008-07-30 03:18 . 2008-07-30 03:18 11933184 c:\windows\Installer\3f8e44.msp

+ 2008-05-21 05:30 . 2008-05-21 05:30 14308864 c:\windows\Installer\27ebb686.msp

+ 2008-12-13 14:21 . 2008-12-13 14:21 10473472 c:\windows\Installer\2724781.msp

+ 2009-08-03 16:22 . 2009-08-03 16:22 15705600 c:\windows\Installer\1bba3cc3.msp

+ 2005-04-30 05:07 . 2005-04-30 05:07 19204096 c:\windows\Installer\18580.msp

+ 2009-05-04 11:49 . 2009-05-04 11:49 10955776 c:\windows\Installer\15e1db5.msp

+ 2008-07-03 15:36 . 2008-07-03 15:36 11937792 c:\windows\Installer\1468073f.msp

+ 2008-07-03 15:37 . 2008-07-03 15:37 11759104 c:\windows\Installer\1468072c.msp

+ 2007-02-07 13:54 . 2007-02-07 13:54 11771904 c:\windows\Installer\13d0a9c.msi

+ 2009-02-25 23:05 . 2009-02-25 23:05 11840000 c:\windows\Installer\121fea51.msp

+ 2009-02-25 23:07 . 2009-02-25 23:07 11646464 c:\windows\Installer\121fea3e.msp

+ 2005-04-30 05:39 . 2005-04-30 05:39 20034560 c:\windows\Downloaded Installations\{EA6652A6-343E-4645-AF84-0BACF426C950}\iTunes.msi

+ 2009-08-12 14:00 . 2009-08-12 14:00 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\63406259e94d5c0ff5b79401dfe113ce\System.Windows.Forms.ni.dll

+ 2009-08-12 18:37 . 2009-08-12 18:37 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\3963ce03d445a8619abbf388d590134b\System.Web.ni.dll

+ 2009-08-12 17:22 . 2009-08-12 17:22 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\4146033013edebd7e0cb604e504ebfee\System.ServiceModel.ni.dll

+ 2009-08-12 13:56 . 2009-08-12 13:56 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8ee220bc3cce4f7bbd7818946519ed7f\System.Design.ni.dll

+ 2009-08-12 13:51 . 2009-08-12 13:51 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96e710f47c601cba3f2348a8d11ddede\PresentationFramework.ni.dll

+ 2009-08-12 01:13 . 2009-08-12 01:13 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\956375d487cbef36165b3250030e3574\PresentationCore.ni.dll

+ 2009-08-11 07:39 . 2009-08-11 07:39 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6d667f19d687361886990f3ca0f49816\mscorlib.ni.dll

+ 2007-10-15 03:43 . 2007-10-15 03:43 229852160 c:\windows\Installer\8d37ee0.msp

.

-- Snapshot reset to current date --

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2008-12-16 3528440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2007-06-01 185896]

"VX1000"="c:\windows\vVX1000.exe" [2007-04-10 709992]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]

"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-10-26 652624]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-09-14 1603152]

c:\documents and settings\All Users\Start Menu\Programs\Startup\

Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP]

@=""

[HKLM\~\startupfolder\C:^Documents and Settings^Joe Doering^Start Menu^Programs^Startup^Skyscape smARTupdate.lnk]

path=c:\documents and settings\Joe Doering\Start Menu\Programs\Startup\Skyscape smARTupdate.lnk

backup=c:\windows\pss\Skyscape smARTupdate.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Azureus\\Azureus.exe"=

"c:\\WINDOWS\\system32\\dpvsetup.exe"=

"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [6/5/2009 12:05 PM 24652]

R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [12/15/2004 11:18 AM 200192]

S3 PAC207;CIF USB Camera;c:\windows\system32\DRIVERS\PFC027.SYS --> c:\windows\system32\DRIVERS\PFC027.SYS [?]

S3 PAC7302;PAC7302 VGA USB Camera;c:\windows\system32\drivers\PAC7302.SYS [9/11/2008 9:43 PM 457856]

.

Contents of the 'Scheduled Tasks' folder

2009-09-19 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

.

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.google.com

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

mStart Page = hxxp://www.google.com

uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=presario&pf=laptop

uInternet Settings,ProxyOverride = *.local

uSearchURL,(Default) = hxxp://www.google.com/keyword/%s

IE: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html

IE: &Google Search - c:\program files\google\GoogleToolbar2.dll/cmsearch.html

IE: &Translate English Word - c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html

IE: &Yahoo! Search - file:///c:\program files\Yahoo!\Common/ycsrch.htm

IE: Backward Links - c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html

IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar2.dll/cmcache.html

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Similar Pages - c:\program files\google\GoogleToolbar2.dll/cmsimilar.html

IE: Translate Page into English - c:\program files\google\GoogleToolbar2.dll/cmtrans.html

IE: Yahoo! &Dictionary - file:///c:\program files\Yahoo!\Common/ycdict.htm

IE: Yahoo! &Maps - file:///c:\program files\Yahoo!\Common/ycmap.htm

IE: Yahoo! &SMS - file:///c:\program files\Yahoo!\Common/ycsms.htm

TCP: {B96E07F0-AA41-457E-BF8C-03529849D1FB} = 207.69.188.185,207.69.188.186

DPF: {3C648A72-C49A-48EF-9F90-68EF13293F97} - hxxp://www.toledo.noris.xmlsweb.com/XMLSearch/XMLCache.CAB

FF - ProfilePath - c:\documents and settings\Joe Doering\Application Data\Mozilla\Firefox\Profiles\4h45epds.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.camfrog.com/search.php?q=

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: keyword.URL - hxxp://search.camfrog.com/search.php?q=

FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll

.

- - - - ORPHANS REMOVED - - - -

BHO-{558AFF9C-2C35-424F-B7EB-C9CA0DDDC06E} - (no file)

HKLM-Run-OneCareUI - c:\program files\Microsoft Windows OneCare Live\winssnotify.exe

HKLM-Run-LogitechCommunicationsManager - c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

HKLM-Run-LogitechQuickCamRibbon - c:\program files\Logitech\QuickCam10\QuickCam10.exe

HKLM-Run-BM0ade429f - c:\windows\system32\heukrgni.dll

Notify-jkkigge - (no file)

AddRemove-AV Care - c:\program files\AV Care\Uninstall.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-09-22 20:54

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(792)

c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2792)

c:\windows\system32\WININET.dll

c:\windows\system32\ieframe.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Other Running Processes ------------------------

.

c:\windows\system32\ati2evxx.exe

c:\windows\system32\ati2evxx.exe

c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Canon\IJPLM\ijplmsvc.exe

c:\program files\Common Files\LightScribe\LSSrvc.exe

c:\windows\system32\wscntfy.exe

.

**************************************************************************

.

Completion time: 2009-09-23 21:09 - machine was rebooted

ComboFix-quarantined-files.txt 2009-09-23 01:08

ComboFix2.txt 2009-06-18 22:19

Pre-Run: 9,147,338,752 bytes free

Post-Run: 9,252,614,144 bytes free

Current=6 Default=6 Failed=5 LastKnownGood=3 Sets=1,2,3,5,6

1478 --- E O F --- 2009-08-12 01:13

Link to post
Share on other sites

Good job!

Remove Viewpoint Manager from Add/Remove programs. It is adware related foistware that is bundled with AOL and some other programs or preinstalled. Same goes for Bonjour which comes bundled with itunes and has no clear purpose.

We have some more items to clean up that we will manually specify for deletion by using a Combofix script.

It is important that you follow the next set of instructions precisely.

Open Notepad by hitting Start -> run, typing notepad into the Open: box, and then clicking OK.

On the Notepad menu, choose "Format" and make sure that Word Wrap is unchecked (disabled).

Copy/paste the text in the code box below into Notepad.

Save this to your desktop as CFScript.txt by selecting File -> Save as.

Very Important: Disable ALL security program active protection components at this time including any and all antispyware and antivirus monitor/guards you have running!!

Also, disable any task(s) scheduled to run automatically upon reboot, such as chkdsk, Windows Updates or any scanners. Then re-enable after you get the new Combofix report.

Referring to the picture below, drag CFScript.txt into ComboFix.exe (pepper.exe)

CFScriptB-4.gif

This will cause ComboFix to run again.

Please post back the log that is opens when it finishes.

KillAll::

Folder::
c:\Program Files\Bonjour
c:\program files\Viewpoint

Driver::
Viewpoint Manager Service

Registry::
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=-

File::
c:\windows\system32\afybepyre.dat

Now, launch MBAM, update it, and perform a quick scan.

Remove all threats found, reboot if required and post the log back here in your next reply along with C:\Combofix.txt.

Link to post
Share on other sites

Negster, again, I appreciate all you and this forum are doing for me. Here are the logs you requested. Also, I couldn't load my MBAM so I redownloaded it, updated, then ran quick scan...

C:\ComboFix.txt:

ComboFix 09-09-22.02 - Joe Doering 09/22/2009 23:05.3.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.382.143 [GMT -4:00]

Running from: c:\documents and settings\Joe Doering\Desktop\pepper.exe

Command switches used :: c:\documents and settings\Joe Doering\Desktop\CFScript.txt

FILE ::

"c:\windows\system32\afybepyre.dat"

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\windows\system32\afybepyre.dat

.

((((((((((((((((((((((((( Files Created from 2009-08-23 to 2009-09-23 )))))))))))))))))))))))))))))))

.

2009-09-23 00:33 . 2009-09-23 00:33 -------- d-----w- C:\ARP

2009-09-22 23:30 . 2009-09-22 23:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion

2009-09-22 23:21 . 2009-09-22 23:22 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Canon

2009-09-22 23:17 . 2009-09-22 23:25 -------- d-----w- c:\documents and settings\All Users\Application Data\CanonIJPLM

2009-09-22 23:15 . 2004-08-04 03:01 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys

2009-09-22 23:15 . 2004-08-04 03:01 25856 ----a-w- c:\windows\system32\dllcache\usbprint.sys

2009-09-22 23:14 . 2009-09-22 23:14 -------- d-----w- c:\program files\Common Files\CANON

2009-09-22 23:12 . 2009-09-22 23:12 -------- d--h--w- c:\documents and settings\All Users\Application Data\CanonBJ

2009-09-22 23:11 . 2008-02-26 05:00 230912 ----a-w- c:\windows\system32\CNMLM9I.DLL

2009-09-22 23:11 . 2009-09-22 23:11 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information

2009-09-22 23:11 . 2008-02-08 15:38 200704 ----a-w- c:\windows\system32\CNC190L.DLL

2009-09-22 23:11 . 2007-03-15 14:12 188416 ----a-w- c:\windows\system32\CNC190O.DLL

2009-09-22 23:11 . 2007-11-09 11:59 1323008 ----a-w- c:\windows\system32\CNC190C.DLL

2009-09-22 23:11 . 2007-11-09 11:58 98304 ----a-w- c:\windows\system32\CNC190I.DLL

2009-09-22 23:11 . 2009-09-22 23:11 -------- d--h--w- c:\program files\CanonBJ

2009-09-22 23:10 . 2009-09-22 23:16 -------- d-----w- c:\program files\Canon

2009-09-22 17:26 . 2009-09-23 00:22 0 ----a-w- c:\windows\win32k.sys

2009-09-14 20:27 . 2004-08-04 13:00 4224 ----a-w- c:\windows\system32\dllcache\beep.sys

2009-09-14 20:27 . 2004-08-04 13:00 4224 ------w- c:\windows\system32\drivers\beep.sys

2009-09-08 20:27 . 2009-09-08 20:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Search Engine Commando

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-09-23 02:53 . 2006-02-10 14:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Viewpoint

2009-09-22 23:38 . 2007-02-06 20:29 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\AdobeUM

2009-09-22 18:19 . 2008-04-05 05:39 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2009-09-22 14:48 . 2007-02-11 15:40 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Azureus

2009-09-19 14:14 . 2006-10-02 00:53 -------- d-----w- c:\program files\AIM

2009-09-18 12:21 . 2007-12-07 01:16 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Camfrog

2009-09-14 20:31 . 2009-03-26 20:29 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)

2009-08-17 15:28 . 2009-08-17 15:28 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Logs

2009-08-17 15:20 . 2009-08-17 14:59 94208 ----a-w- c:\windows\DUMP6cb5.tmp

2009-08-17 15:19 . 2009-08-17 14:59 94208 ----a-w- c:\windows\DUMP6f44.tmp

2009-08-17 15:17 . 2009-08-17 14:59 94208 ----a-w- c:\windows\DUMP6939.tmp

2009-08-17 14:57 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6cf2.tmp

2009-08-17 14:56 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6ac0.tmp

2009-08-17 14:54 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6b6c.tmp

2009-08-17 14:53 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6baa.tmp

2009-08-17 14:52 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6bda.tmp

2009-08-17 14:50 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6b1e.tmp

2009-08-17 14:49 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6bd9.tmp

2009-08-17 14:48 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6b1d.tmp

2009-08-17 14:47 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6c56.tmp

2009-08-17 14:45 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP659f.tmp

2009-08-17 14:43 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6afe.tmp

2009-08-17 14:42 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6aa0.tmp

2009-08-17 14:40 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6cb4.tmp

2009-08-14 18:05 . 2007-07-24 10:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple

2009-08-14 17:51 . 2009-08-14 17:50 -------- d-----w- c:\program files\iTunes

2009-08-14 17:51 . 2009-08-14 17:50 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

2009-08-14 17:50 . 2009-08-14 17:50 -------- d-----w- c:\program files\iPod

2009-08-14 17:50 . 2009-04-05 05:41 -------- d-----w- c:\program files\Common Files\Apple

2009-08-14 17:47 . 2009-08-14 17:46 -------- d-----w- c:\program files\QuickTime

2009-08-13 15:17 . 2007-02-12 13:36 -------- d-----w- c:\program files\DivX

2009-08-12 20:38 . 2006-10-04 16:48 96960 ----a-w- c:\documents and settings\Joe Doering\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-08-11 13:45 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP614a.tmp

2009-08-11 13:44 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP610b.tmp

2009-08-11 13:43 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP6735.tmp

2009-08-11 13:41 . 2006-02-09 13:22 94208 ----a-w- c:\windows\DUMP60cd.tmp

2009-08-11 07:29 . 2009-08-11 07:29 -------- d-----w- c:\program files\MSBuild

2009-08-11 07:28 . 2009-08-11 07:28 -------- d-----w- c:\program files\Reference Assemblies

2009-08-11 07:21 . 2009-08-11 07:21 -------- d-----w- c:\program files\MSXML 6.0

2009-08-03 21:07 . 2008-08-31 17:52 -------- d-----w- c:\program files\Microsoft Silverlight

2009-08-03 04:32 . 2009-08-03 04:30 -------- d-----w- c:\program files\StoryLines

2009-08-03 02:26 . 2006-02-09 13:31 -------- d-----w- c:\documents and settings\Joe Doering\Application Data\Apple Computer

2009-07-09 16:16 . 2009-04-05 05:42 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys

2009-07-09 16:16 . 2009-04-05 05:42 2060288 ----a-w- c:\windows\system32\usbaaplrc.dll

2009-06-29 16:12 . 2004-08-04 08:00 827392 ------w- c:\windows\system32\wininet.dll

2009-06-29 16:12 . 2004-08-04 08:00 78336 ----a-w- c:\windows\system32\ieencode.dll

2009-06-29 16:12 . 2004-08-04 08:00 17408 ------w- c:\windows\system32\corpol.dll

2009-04-07 15:43 . 2006-10-01 21:53 67688 ----a-w- c:\program files\mozilla firefox\components\jar50.dll

2009-04-07 15:43 . 2006-10-01 21:53 54368 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll

2009-04-07 15:43 . 2009-03-27 15:06 34944 ----a-w- c:\program files\mozilla firefox\components\myspell.dll

2009-04-07 15:43 . 2009-03-27 15:06 46712 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll

2009-04-07 15:43 . 2006-10-01 21:53 172136 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll

2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll

2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll

.

((((((((((((((((((((((((((((( SnapShot_2009-09-23_00.54.45 )))))))))))))))))))))))))))))))))))))))))

.

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2008-12-16 3528440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2007-06-01 185896]

"VX1000"="c:\windows\vVX1000.exe" [2007-04-10 709992]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]

"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-10-26 652624]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-09-14 1603152]

c:\documents and settings\All Users\Start Menu\Programs\Startup\

Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP]

@=""

[HKLM\~\startupfolder\C:^Documents and Settings^Joe Doering^Start Menu^Programs^Startup^Skyscape smARTupdate.lnk]

path=c:\documents and settings\Joe Doering\Start Menu\Programs\Startup\Skyscape smARTupdate.lnk

backup=c:\windows\pss\Skyscape smARTupdate.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Azureus\\Azureus.exe"=

"c:\\WINDOWS\\system32\\dpvsetup.exe"=

"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [12/15/2004 11:18 AM 200192]

S3 PAC207;CIF USB Camera;c:\windows\system32\DRIVERS\PFC027.SYS --> c:\windows\system32\DRIVERS\PFC027.SYS [?]

S3 PAC7302;PAC7302 VGA USB Camera;c:\windows\system32\drivers\PAC7302.SYS [9/11/2008 9:43 PM 457856]

.

Contents of the 'Scheduled Tasks' folder

2009-09-19 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

.

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.google.com

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

mStart Page = hxxp://www.google.com

uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=presario&pf=laptop

uSearchURL,(Default) = hxxp://www.google.com/keyword/%s

IE: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html

IE: &Google Search - c:\program files\google\GoogleToolbar2.dll/cmsearch.html

IE: &Translate English Word - c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html

IE: &Yahoo! Search - file:///c:\program files\Yahoo!\Common/ycsrch.htm

IE: Backward Links - c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html

IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar2.dll/cmcache.html

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Similar Pages - c:\program files\google\GoogleToolbar2.dll/cmsimilar.html

IE: Translate Page into English - c:\program files\google\GoogleToolbar2.dll/cmtrans.html

IE: Yahoo! &Dictionary - file:///c:\program files\Yahoo!\Common/ycdict.htm

IE: Yahoo! &Maps - file:///c:\program files\Yahoo!\Common/ycmap.htm

IE: Yahoo! &SMS - file:///c:\program files\Yahoo!\Common/ycsms.htm

TCP: {B96E07F0-AA41-457E-BF8C-03529849D1FB} = 207.69.188.185,207.69.188.186

DPF: {3C648A72-C49A-48EF-9F90-68EF13293F97} - hxxp://www.toledo.noris.xmlsweb.com/XMLSearch/XMLCache.CAB

FF - ProfilePath - c:\documents and settings\Joe Doering\Application Data\Mozilla\Firefox\Profiles\4h45epds.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.camfrog.com/search.php?q=

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: keyword.URL - hxxp://search.camfrog.com/search.php?q=

FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-09-22 23:16

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************

.

--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(796)

c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(4052)

c:\windows\system32\WININET.dll

c:\windows\system32\ieframe.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Other Running Processes ------------------------

.

c:\windows\system32\ati2evxx.exe

c:\windows\system32\ati2evxx.exe

c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

c:\program files\Canon\IJPLM\ijplmsvc.exe

c:\program files\Common Files\LightScribe\LSSrvc.exe

c:\windows\system32\wscntfy.exe

.

**************************************************************************

.

Completion time: 2009-09-23 23:28 - machine was rebooted

ComboFix-quarantined-files.txt 2009-09-23 03:26

ComboFix2.txt 2009-09-23 01:09

ComboFix3.txt 2009-06-18 22:19

Pre-Run: 9,174,306,816 bytes free

Post-Run: 9,162,276,864 bytes free

Current=6 Default=6 Failed=5 LastKnownGood=3 Sets=1,2,3,5,6

196 --- E O F --- 2009-08-12 01:13

Link to post
Share on other sites

MBAM LOG:

Malwarebytes' Anti-Malware 1.41

Database version: 2845

Windows 5.1.2600 Service Pack 2

9/22/2009 11:37:55 PM

mbam-log-2009-09-22 (23-37-55).txt

Scan type: Quick Scan

Objects scanned: 100784

Time elapsed: 5 minute(s), 43 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 1

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\system32\oqvnjkzp.exe (Trojan.Agent) -> Quarantined and deleted successfully.

C:\WINDOWS\win32k.sys (Trojan.Dropper) -> Quarantined and deleted successfully.

Link to post
Share on other sites

OK Good job! I like to do a complete system scan with a very good online scanner before wrapping things up.

Please perform a scan with the ESET online virus scanner. You can expect some detections in Combofix's quarantine (Qoobox) and system volume information. They will not represent active malware so don't worry:

http://www.eset.com/onlinescan/index.php

  • ESET recommends disabling your resident antivirus's auto-protection feature before beginning the scan to avoid conflicts and system hangs. Please disable your antivirus's Guard and any antispyware or HIPS programs you are running.
  • Use Internet Explorer to navigate to the scanner website because you must approve install an ActiveX add-on to complete the scan.
  • Check the "Yes, I accept the terms of use" box.
  • Click "Start"
  • Check the boxes the following two boxes:
    • enable "Remove found threats"
    • Scan unwanted applications

    [*]Click the Scan button to begin scanning.

    [*]When the scan is done the log is automatically saved. To retrieve it

    • Close the ESET scan Window.
    • Now open a run line by clicking Start >> Run...
    • Copy/paste "C:\Program Files\EsetOnlineScanner\log.txt" ino the Open box:
    • The Scan results will now display in Notepad

    [*]Please copy and paste the ESET scan report that can be found in this location

    C:\Program Files\EsetOnlineScanner\log.txt into your next reply

Note to Vista users and anyone with restrictive IE security settings: Depending on your security settings, you may have to allow cookies and put the ESET website, www.eset.com, into the trusted zone of Internet Explorer if the scan has problems starting (in Vista this is a necessity as IE runs in Protected mode).

To do that, on the Internet Explorer menu click Tools => Internet Options => Security => Trusted Sites => Sites. Then uncheck "Require server verification for all sites in this zone" checkbox at the bottom of the dialog. Add the above www.eset.com url to the list of trusted sites, by inserting it in the blank box and clicking the Add button, then click Close. For cookies, choose the IE7 Privacy tab and add the above eset.com url to the exceptions list for cookie blocking.

Link to post
Share on other sites

Wow, hahaha...it found 36 threats. I think it only cleaned 35. Here's the log:

ESETSmartInstaller@High as CAB hook log:

OnlineScanner.ocx - registred OK

# version=6

# iexplore.exe=7.00.6000.16876 (vista_gdr.090625-2339)

# OnlineScanner.ocx=1.0.0.6050

# api_version=3.0.2

# EOSSerial=6e4adb2448a1f140adce813f7a3467cf

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2009-09-23 01:27:12

# local_time=2009-09-23 09:27:12 (-0500, Eastern Daylight Time)

# country="United States"

# lang=1033

# osver=5.1.2600 NT Service Pack 2

# scanned=69120

# found=36

# cleaned=35

# scan_time=2799

C:\Documents and Settings\Joe Doering\Local Settings\Application Data\Identities\{445BA929-0754-421E-B2F9-D5F440A69141}\Microsoft\Outlook Express\Hotmail - Inbox.dbx multiple threats (unable to clean) 00000000000000000000000000000000 I

C:\QooBox\Quarantine\C\Program Files\driver\driver.dll.vir Win32/Tinxy.AF trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\Program Files\driver\driver.sys.vir Win32/TrojanProxy.Small.NDY trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\kri746.dat.vir Win32/Small.EJX trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\msa.exe.vir Win32/TrojanDownloader.FakeAlert.AGL trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\msb.exe.vir a variant of Win32/Kryptik.ADD trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\kri746.dat.vir Win32/Small.EJX trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\mcenspc.dll.vir a variant of Win32/Kryptik.OY trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\SKYNETgmuoluvw.dll.vir Win32/Olmarik.KW trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\SKYNETovmeyeee.dll.vir Win32/Olmarik.KW trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\UACjixuxdjyql.dll.vir Win32/Olmarik.KI trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\UACympjdabiqp.dll.vir Win32/Olmarik.KI trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\wisdstr.exe.vir Win32/Adware.Antivirus2010 application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\UACdrwtsnmvrj.sys.vir a variant of Win32/Olmarik.HI trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\UACpduhersmbt.sys.vir a variant of Win32/Olmarik.HI trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\QooBox\Quarantine\C\WINDOWS\system32\wbem\proquota.exe.vir Win32/TrojanDownloader.Bredolab.AA trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP660\A0076167.dll Win32/Tinxy.AF trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP660\A0076168.sys Win32/TrojanProxy.Small.NDY trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP660\A0076171.dll a variant of Win32/Kryptik.OY trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP660\A0076172.exe Win32/TrojanDownloader.Bredolab.AA trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP733\A0085973.exe probably a variant of Win32/Adware.WinFixer.AB application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP733\A0085975.exe a variant of Win32/Adware.VirusRemover application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP733\A0085980.sys Win32/Olmarik.KW trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP757\A0088381.sys a variant of Win32/UltimateDefender.A trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP757\A0088388.exe Win32/Adware.Antivirus2010 application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP757\A0088411.dll Win32/TrojanDownloader.FakeAlert.AGF trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092656.dll a variant of Win32/Kryptik.YQ trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092686.exe Win32/TrojanDownloader.FakeAlert.AGL trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092687.exe a variant of Win32/Kryptik.ADD trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092689.sys a variant of Win32/Olmarik.HI trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092690.sys a variant of Win32/Olmarik.HI trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092693.dll Win32/Olmarik.KW trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092694.dll Win32/Olmarik.KW trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092696.dll Win32/Olmarik.KI trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092701.dll Win32/Olmarik.KI trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP768\A0092702.exe Win32/Adware.Antivirus2010 application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

Link to post
Share on other sites

Good job! :)

All those ESET detections were expected except the one in Hotmail. You should prune your emails and delete those from unknown senders and of the others, save only those you need to retain.

We have a few steps to finish up now.

You should update your version of the Sun Java Platform (JRE) to the newest version which is Java Runtime Environment (JRE) 6 Update 16, if you have not done that already.

You can check your currently installed JRE version here.

If you find you need to update to Java Runtime Environment (JRE) 6 Update 16, then follow these steps (otherwise proceed to "Clear the Java Cache"):

1. Download the latest JRE version at the http://java.sun.com/javase/downloads/index.jsp Sun Microsystem's website

2. Select the option that says: "JRE 6 Update 16

This special release provides a few key fixes", and click Download button.

3. Select your platform: Windows, in the pull down menu.

4. Check the box that says: "I agree to the Java SE Runtime Environment 6 with JavaFX License Agreement."

5. Click Continue.

6. Under the Windows Platform - Java SE Runtime Environment 6 Update 16 section, click on the link to download the Windows Offline Installation and save the installer to your desktop.

7. Close any programs you may have running - especially your web browser.

8. Next, remove all older versions of the Sun Java Platform using the Control Panel's Add/Remove Program feature (as they may contain security vulnerabilities).

9. Reboot your system

10. Then from your desktop double-click on jre-6u16-windows-i586-p.exe to install the newest version of the Sun Java Platform

12. Ifhe Yahoo Toolbar is prechecked for installation be sure to UNCHECK it, if you do not care to have it, or already have it installed - it is not part of the JRE install and totally unnecessary.

13. You may verify that the current version installed properly by clicking http://java.com/en/download/installed.jsp here.

Clear the Java cache:

After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)

  • On the General tab, under Temporary Internet Files, click the Settings button.
  • Next, click on the Delete Files button
  • There are two options in the window to clear the cache - Leave BOTH Checked
    • Applications and Applets
    • Trace and Log Files

    [*]Click OK on Delete Temporary Files Window

    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.

    [*] Click OK to leave the Temporary Files Window

    [*]Click OK to leave the Java Control Panel.

-

If I asked you to download and run an ARK (Antirootkit program, then please uninstall it by doing the following:

  • Delete the contents of the folder C:\ARK
  • Delete the C:\ARK folder

Let's remove Combofix and all its associated files including those in quarantine:

Click start -> run, then copy and paste the following line into the Open box and click OK.

"%userprofile%\desktop\pepper.exe" /u

This will do the following:

  • Uninstall Combofix and all its associated files and folders.
  • It will flush your system restore points and create a new restore point.
  • It will rehide your system files and folders
  • Reset your system clock

---

Here are some additional measures you should take to keep your system in good working order and ensure your continued security.

1. Scan your system for outdated versions of commonly used software applications that may also cause your PC be vulnerable, using the Secunia Online Software Inspector (OSI). This is very important because recent statistics confirm that an overwhelming majority of infections are aquired through application not Operating System flaws. Commonly used programs like Quicktime, Java, and Adobe Acrobat Reader, itunes, and many others are commonly targeted today. You can make your computer much more secure if you update to the most current versions of these programs and any others that Secunia alerts you to.

Just click the "Start Scanner" button to get a listing of all outdated and possibly insecure resident programs.

Note: If your firewall prompts you about access, allow it.

2. Keep MBAM as an on demand scanner because I highly recommend it, and the quick scan will find most all active malware in minutes.

3. You can reduce your startups by downloading Malwarebyte's StartUp Lite and saving it to a convenient location. Just double-click StartUpLite.exe. Then, check the options you would like based on the descriptions provided, then select continue. This will free up system resources because nonessential background programs will no longer be running when you start up your computer.

4. Download and install SpywareBlaster:

http://www.javacoolsoftware.com/spywareblaster.html

Update it and the enable protection for all unprotected items.

You will have to update the free version manually about once a month by clicking the Updates button. You can refer to the Calendar of Updates Website to see when SpywareBlaster and other programs that do not autoupdate have new definitions or program updates available.

You should visit the Windows Updates website, and obtain the most current Operating System updates/patches, and Internet Explorer released versions.

The easiest and fastest way to obtain Windows Updates is by clicking Control Panel -> Windows Updates.

Finally, please follow the suggestions offered by Tony Klein in How did I get infected in the first place. so you can maintain a safe and secure computing environment.

Happy Surfing!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.