Please Help...

  1. #1
    jaycee231 is offline Junior Member

    Please Help...

    My IE 8 keeps freezing, can't close it, needs reboot on computer if I don't want to wait 15 mins for it to close properly.

    Also, can you see from these logs or have any idea if someone is "sharing" my internet connection? Or point me to what I can do to find out and block them?

    •Malwarebytes (MBAM)

    Malwarebytes' Anti-Malware 1.51.2.1300
    Malwarebytes : Free anti-malware, anti-virus and spyware removal download

    Database version: 8205

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 8.0.6001.18702

    11/20/2011 10:48:32 PM
    mbam-log-2011-11-20 (22-48-31).txt

    Scan type: Quick scan
    Objects scanned: 189205
    Time elapsed: 14 minute(s), 2 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)


    •GMER

    GMER 1.0.15.15641 - GMER - Rootkit Detector and Remover
    Rootkit scan 2011-11-20 23:04:25
    Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e ST380819AS rev.8.04
    Running: GMER.exe; Driver: C:\DOCUME~1\JULIEG~1\LOCALS~1\Temp\uxtdypog.sys


    ---- System - GMER 1.0.15 ----

    SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwOpenProcess [0xA934DF3C]
    SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateProcess [0xA934DFE4]
    SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateThread [0xA934E080]
    SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory [0xA934E11C]

    ---- User code sections - GMER 1.0.15 ----

    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes JMP 3E2154D5 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!SetWindowsHookExW 7E42820F 5 Bytes JMP 3E2E9AD1 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!CallNextHookEx 7E42B3C6 5 Bytes JMP 3E2DD10D C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!CreateWindowExW 7E42D0A3 5 Bytes JMP 3E2EDB44 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!UnhookWindowsHookEx 7E42D5F3 5 Bytes JMP 3E25464E C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!DialogBoxIndirectParamW 7E432072 5 Bytes JMP 3E3E5397 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!MessageBoxIndirectA 7E43A082 5 Bytes JMP 3E3E52C9 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!DialogBoxParamA 7E43B144 5 Bytes JMP 3E3E5334 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!MessageBoxExW 7E450838 5 Bytes JMP 3E3E519A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!MessageBoxExA 7E45085C 5 Bytes JMP 3E3E51FC C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!DialogBoxIndirectParamA 7E456D7D 5 Bytes JMP 3E3E53FA C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] USER32.dll!MessageBoxIndirectW 7E4664D5 5 Bytes JMP 3E3E525E C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 3E2EDBA0 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] ole32.dll!OleLoadFromStream 7752981B 5 Bytes JMP 3E3E56FF C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes JMP 3E2154D5 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!CreateWindowExW 7E42D0A3 5 Bytes JMP 3E2EDB44 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!DialogBoxIndirectParamW 7E432072 5 Bytes JMP 3E3E5397 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!MessageBoxIndirectA 7E43A082 5 Bytes JMP 3E3E52C9 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!DialogBoxParamA 7E43B144 5 Bytes JMP 3E3E5334 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!MessageBoxExW 7E450838 5 Bytes JMP 3E3E519A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!MessageBoxExA 7E45085C 5 Bytes JMP 3E3E51FC C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!DialogBoxIndirectParamA 7E456D7D 5 Bytes JMP 3E3E53FA C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2692] USER32.dll!MessageBoxIndirectW 7E4664D5 5 Bytes JMP 3E3E525E C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
    .text C:\WINDOWS\system32\SearchIndexer.exe[3120] kernel32.dll!WriteFile 7C810E27 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation)

    ---- User IAT/EAT - GMER 1.0.15 ----

    IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[2660] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [451F1ACB] C:\Program Files\Internet Explorer\xpshims.dll (Internet Explorer Compatibility Shims for XP/Microsoft Corporation)

    ---- Devices - GMER 1.0.15 ----

    AttachedDevice \FileSystem\Ntfs \Ntfs AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
    AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
    AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
    AttachedDevice \FileSystem\Fastfat \Fat AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )

    Device \FileSystem\Cdfs \Cdfs DLAIFS_M.SYS (Drive Letter Access Component/Sonic Solutions)

    ---- EOF - GMER 1.0.15 ----


    •MBRCheck

    aswMBR version 0.9.8.978 Copyright(c) 2011 AVAST Software
    Run date: 2011-11-20 23:07:52
    -----------------------------
    23:07:52.218 OS Version: Windows 5.1.2600 Service Pack 3
    23:07:52.218 Number of processors: 1 586 0x409
    23:07:52.218 ComputerName: JULIE UserName:
    23:07:52.500 Initialize success
    23:08:27.671 The log file has been saved successfully to "C:\Documents and Settings\Julie Gagnon\Desktop\aswMBR.txt"


    aswMBR version 0.9.8.978 Copyright(c) 2011 AVAST Software
    Run date: 2011-11-20 23:07:52
    -----------------------------
    23:07:52.218 OS Version: Windows 5.1.2600 Service Pack 3
    23:07:52.218 Number of processors: 1 586 0x409
    23:07:52.218 ComputerName: JULIE UserName:
    23:07:52.500 Initialize success
    23:08:27.671 The log file has been saved successfully to "C:\Documents and Settings\Julie Gagnon\Desktop\aswMBR.txt"
    23:09:04.828 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
    23:09:04.828 Disk 0 Vendor: ST380819AS 8.04 Size: 76293MB BusType: 3
    23:09:06.843 Disk 0 MBR read successfully
    23:09:06.843 Disk 0 MBR scan
    23:09:06.843 Disk 0 unknown MBR code
    23:09:06.843 Disk 0 scanning sectors +156232125
    23:09:06.906 Disk 0 scanning C:\WINDOWS\system32\drivers
    23:09:14.218 Service scanning
    23:09:15.203 Modules scanning
    23:09:19.062 Module: C:\WINDOWS\system32\ntdll.dll **SUSPICIOUS**
    23:09:19.062 Disk 0 trace - called modules:
    23:09:19.093 ntkrnlpa.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll pciide.sys PCIIDEX.SYS
    23:09:19.093 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x82954030]
    23:09:19.593 3 CLASSPNP.SYS[f84f5fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x8299c030]
    23:09:19.593 Scan finished successfully
    23:09:31.703 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Julie Gagnon\Desktop\MBR.dat"
    23:09:31.703 The log file has been saved successfully to "C:\Documents and Settings\Julie Gagnon\Desktop\aswMBR.txt"


    •DDS(2 logs)

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-08-26.01)
    .
    Microsoft Windows XP Professional
    Boot Device: \Device\Harddisk0\DP(2)0x2738a00-0x11d6d14600+2
    Install Date: 3/27/2006 9:08:54 PM
    System Uptime: 11/20/2011 9:56:10 PM (2 hours ago)
    .
    Motherboard: Dell Inc. | | 0JC474
    Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz | Microprocessor | 2793/800mhz
    .
    ==== Disk Partitions =========================
    .
    A: is Removable
    C: is FIXED (NTFS) - 71 GiB total, 33.497 GiB free.
    D: is CDROM (CDFS)
    E: is FIXED (FAT) - 0 GiB total, 0.031 GiB free.
    F: is FIXED (FAT32) - 3 GiB total, 0.526 GiB free.
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    RP1405: 9/21/2011 9:04:11 AM - Removed AVG Free 9.0
    RP1406: 9/21/2011 9:09:18 AM - Installed AVG Free 9.0
    RP1407: 9/21/2011 12:27:06 PM - Removed Ask Toolbar.
    RP1408: 9/21/2011 12:27:40 PM - Removed Bonjour
    RP1409: 9/21/2011 12:29:24 PM - Removed Safari
    RP1410: 9/21/2011 3:21:06 PM - Installed Sympatico(TM) Scan and Clean utility
    RP1411: 9/22/2011 3:27:58 PM - System Checkpoint
    RP1412: 9/23/2011 7:27:35 PM - System Checkpoint
    RP1413: 9/24/2011 12:19:53 PM - Installed AVG 2012
    RP1414: 9/24/2011 12:20:47 PM - Installed AVG 2012
    RP1415: 9/25/2011 1:26:39 PM - System Checkpoint
    RP1416: 10/1/2011 3:54:07 PM - System Checkpoint
    RP1417: 10/2/2011 3:00:22 AM - Software Distribution Service 3.0
    RP1418: 10/3/2011 3:47:13 AM - System Checkpoint
    RP1419: 10/10/2011 5:25:38 PM - Software Distribution Service 3.0
    RP1420: 10/11/2011 3:00:25 AM - Software Distribution Service 3.0
    RP1421: 10/12/2011 3:17:23 AM - System Checkpoint
    RP1422: 10/13/2011 3:00:30 AM - Software Distribution Service 3.0
    RP1423: 10/14/2011 3:49:36 AM - System Checkpoint
    RP1424: 10/15/2011 3:58:39 AM - System Checkpoint
    RP1425: 10/16/2011 4:58:38 AM - System Checkpoint
    RP1426: 10/17/2011 10:23:22 PM - System Checkpoint
    RP1427: 10/18/2011 11:00:28 PM - System Checkpoint
    RP1428: 10/20/2011 12:00:25 AM - System Checkpoint
    RP1429: 10/21/2011 12:58:58 AM - System Checkpoint
    RP1430: 10/22/2011 1:14:31 AM - System Checkpoint
    RP1431: 10/23/2011 1:21:58 AM - System Checkpoint
    RP1432: 10/24/2011 2:21:55 AM - System Checkpoint
    RP1433: 10/25/2011 3:34:34 AM - System Checkpoint
    RP1434: 10/26/2011 4:21:32 AM - System Checkpoint
    RP1435: 10/27/2011 5:21:32 AM - System Checkpoint
    RP1436: 10/28/2011 6:21:35 AM - System Checkpoint
    RP1437: 10/29/2011 7:19:33 AM - System Checkpoint
    RP1438: 10/30/2011 8:19:33 AM - System Checkpoint
    RP1439: 10/31/2011 10:17:17 AM - System Checkpoint
    RP1440: 11/1/2011 8:51:18 PM - System Checkpoint
    RP1441: 11/2/2011 9:16:22 PM - System Checkpoint
    RP1442: 11/3/2011 9:38:56 PM - System Checkpoint
    RP1443: 11/4/2011 9:42:51 PM - System Checkpoint
    RP1444: 11/5/2011 10:41:35 PM - System Checkpoint
    RP1445: 11/7/2011 12:06:19 AM - System Checkpoint
    RP1446: 11/8/2011 12:31:31 AM - System Checkpoint
    RP1447: 11/9/2011 1:25:56 AM - System Checkpoint
    RP1448: 11/9/2011 3:00:27 AM - Software Distribution Service 3.0
    RP1449: 11/10/2011 3:25:58 AM - System Checkpoint
    RP1450: 11/11/2011 3:00:21 AM - Software Distribution Service 3.0
    RP1451: 11/12/2011 3:25:27 AM - System Checkpoint
    RP1452: 11/13/2011 4:26:05 AM - System Checkpoint
    RP1453: 11/15/2011 11:54:37 PM - System Checkpoint
    RP1454: 11/17/2011 12:18:47 AM - System Checkpoint
    RP1455: 11/18/2011 1:18:51 AM - System Checkpoint
    RP1456: 11/19/2011 2:18:48 AM - System Checkpoint
    RP1457: 11/20/2011 2:42:36 AM - System Checkpoint
    .
    ==== Installed Programs ======================
    .
    Ad-Aware SE Personal
    Adobe Flash Player 11 ActiveX
    Adobe Photoshop Elements 6.0
    Adobe Reader 7.1.0
    Adobe Shockwave Player
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    AVG 2012
    AVG PC Tuneup 2011
    Bell Internet Service Advisor 3.7.44
    BlackBerry Device Software Updater
    Color Cop 5.4.3
    Compatibility Pack for the 2007 Office system
    Dell Digital Jukebox Driver
    Dell Driver Reset Tool
    Dell Network Assistant
    Dell Support Center (Support Software)
    Dell System Restore
    DellSupport
    FrostWire 5.0.8
    HijackThis 2.0.2
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Internet Explorer 7 (KB947864)
    HP Image Zone Express
    Intel(R) Graphics Media Accelerator Driver
    Intel(R) PRO Network Connections Drivers
    Intel(R) PROSet for Wired Connections
    Internet Explorer Default Page
    iPod for Windows 2005-09-23
    iTunes
    J2SE Runtime Environment 5.0 Update 10
    J2SE Runtime Environment 5.0 Update 11
    J2SE Runtime Environment 5.0 Update 3
    J2SE Runtime Environment 5.0 Update 6
    J2SE Runtime Environment 5.0 Update 9
    Java 2 Runtime Environment, SE v1.4.2_03
    Java Auto Updater
    Java(TM) 6 Update 19
    Java(TM) 6 Update 2
    Java(TM) 6 Update 3
    Java(TM) 6 Update 5
    Java(TM) 6 Update 7
    Java(TM) SE Runtime Environment 6 Update 1
    Junk Mail filter update
    jv16 PowerTools 2008
    Malwarebytes' Anti-Malware version 1.51.2.1300
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB2572067)
    Microsoft .NET Framework 1.1 Security Update (KB979906)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Application Error Reporting
    Microsoft Base Smart Card Cryptographic Service Provider Package
    Microsoft Choice Guard
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft IntelliPoint 6.1
    Microsoft IntelliType Pro 6.1
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Basic Edition 2003
    Microsoft Office File Validation Add-In
    Microsoft Office Live Add-in 1.5
    Microsoft Office Outlook Connector
    Microsoft Plus! Digital Media Edition Installer
    Microsoft Plus! Photo Story 2 LE
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    MobileMe Control Panel
    Mouse Suite for Desktop Computers
    Move Networks Media Player for Internet Explorer
    MSN
    MSVCRT
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 6.0 Parser (KB933579)
    QuickTime
    RealPlayer Basic
    Roxio DLA
    Roxio MyDVD LE
    Roxio RecordNow Audio
    Roxio RecordNow Copy
    Roxio RecordNow Data
    RPS CRT
    Security Update for CAPICOM (KB931906)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
    Security Update for Microsoft Windows (KB2564958)
    Security Update for Windows Internet Explorer 7 (KB928090)
    Security Update for Windows Internet Explorer 7 (KB929969)
    Security Update for Windows Internet Explorer 7 (KB931768)
    Security Update for Windows Internet Explorer 7 (KB933566)
    Security Update for Windows Internet Explorer 7 (KB937143)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB939653)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Internet Explorer 7 (KB963027)
    Security Update for Windows Internet Explorer 7 (KB969897)
    Security Update for Windows Internet Explorer 8 (KB2183461)
    Security Update for Windows Internet Explorer 8 (KB2360131)
    Security Update for Windows Internet Explorer 8 (KB2416400)
    Security Update for Windows Internet Explorer 8 (KB2482017)
    Security Update for Windows Internet Explorer 8 (KB2497640)
    Security Update for Windows Internet Explorer 8 (KB2510531)
    Security Update for Windows Internet Explorer 8 (KB2530548)
    Security Update for Windows Internet Explorer 8 (KB2544521)
    Security Update for Windows Internet Explorer 8 (KB2559049)
    Security Update for Windows Internet Explorer 8 (KB2586448)
    Security Update for Windows Internet Explorer 8 (KB969897)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB972260)
    Security Update for Windows Internet Explorer 8 (KB974455)
    Security Update for Windows Internet Explorer 8 (KB976325)
    Security Update for Windows Internet Explorer 8 (KB978207)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Internet Explorer 8 (KB982381)
    Security Update for Windows XP (KB2544893-v2)
    Security Update for Windows XP (KB2567053)
    Security Update for Windows XP (KB2592799)
    Segoe UI
    Sonic Activation Module
    Sonic Update Manager
    Spybot - Search & Destroy
    Spybot - Search & Destroy 1.5.2.20
    System Requirements Lab
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows Internet Explorer 8 (KB976749)
    Update for Windows Internet Explorer 8 (KB980182)
    Update for Windows Internet Explorer 8 (KB982632)
    Update for Windows XP (KB2641690)
    WebFldrs XP
    Windows Internet Explorer 7
    Windows Internet Explorer 8
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live ID Sign-in Assistant
    Windows Live Mail
    Windows Live Messenger
    Windows Live Photo Gallery
    Windows Live Sync
    Windows Live Upload Tool
    Windows Live Writer
    Windows Media Format 11 runtime
    Windows Media Player 10
    Windows Media Player 11
    Windows XP Service Pack 3
    WinZip 12.0
    .
    ==== Event Viewer Messages From Past Week ========
    .
    11/19/2011 6:40:35 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the IMAPI CD-Burning COM Service service to connect.
    11/19/2011 6:40:35 PM, error: Service Control Manager [7000] - The IMAPI CD-Burning COM Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    11/19/2011 6:40:04 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AVGIDSEH i8042prt
    11/19/2011 6:39:46 PM, error: Service Control Manager [7023] - The HID Input Service service terminated with the following error: The specified module could not be found.
    .
    ==== End Of File ===========================

    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 8.0.6001.18702
    Run by Julie Gagnon at 23:11:48 on 2011-11-20
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.53 [GMT -5:00]
    .
    AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\Microsoft IntelliType Pro\itype.exe
    C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\WINDOWS\system32\ICO.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\AVG\AVG2012\avgtray.exe
    C:\Program Files\DellSupport\DSAgnt.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe
    C:\WINDOWS\system32\ctfmon.exe
    svchost.exe
    C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\AVG\AVG2012\avgwdsvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\PSIService.exe
    C:\Program Files\Bell\Internet Service Advisor\ServicepointService.exe
    C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\AVG\AVG2012\avgui.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
    C:\Program Files\AVG\AVG2012\avgnsx.exe
    C:\Program Files\AVG\AVG2012\avgrsx.exe
    C:\Program Files\AVG\AVG2012\avgcsrvx.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.sympatico.ca/
    mURLSearchHooks: H - No File
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
    BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll
    BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL
    BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
    uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
    uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup
    uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
    uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\isuspm.exe" -scheduler
    uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    mRun: [igfxtray] c:\windows\system32\igfxtray.exe
    mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
    mRun: [igfxpers] c:\windows\system32\igfxpers.exe
    mRun: [RealTray] c:\program files\real\realplayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    mRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\isuspm.exe" -startup
    mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
    mRun: [DLA] c:\windows\system32\dla\DLACTRLW.EXE
    mRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb1 0.exe
    mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
    mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
    mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
    mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
    mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop elements 6.0\apdproxy.exe"
    mRun: [PMX Daemon] ICO.EXE
    mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [BISA.exe] "c:\program files\bell\internet service advisor\BISA.exe" /AUTORUN
    mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe"
    mRunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAFYARgBSAEUARQAtAFYASwBQAEMAQgAtADYAQg BXAEYATQAtAFQAUgBMAFEAUgAtAEIAUgBVAEgAUAAtAEMAUAA4 ADYARwA"&"inst=NwA3AC0ANAAwADcANgA4ADIAMAA5ADgALQB CAEEAKwAxAC0AWABMACsAMQAtAEYAUAA5ADIAKwA2AC0AQgBBA FIAOQBHACsAMQAtAFQAQgA5ACsAMgAtAEYATAArADkALQBYAE8 AMwA2ACsAMQAtAEYAOQBNADEAMABCACsAMgAtAFgATwA5ACsAM QAtAEYAOQBNADIAKwAxAC0ARABEAFQAKwA5ADQAMQAwAC0ARAB EADkAMABGACsAMQAtAFMAVAA5ADAARgBBAFAAUAArADEA"&"pr od=90"&"ver=9.0.894
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ado ber~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
    IE: &Search
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
    DPF: {00000055-9980-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/fhg.CAB
    DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
    DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
    DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} - hxxp://dlmanager.akamaitools.com.edgesuite.net/dlmanager/versions/activex/dlm-activex-2.0.5.1.cab
    DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} - hxxp://apps.corel.com/nos_dl_manager_dev/plugin/IEGetPlugin.ocx
    DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab
    DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://jaycee231.spaces.live.com//PhotoUpload/MsnPUpld.cab
    DPF: {55027008-315F-4F45-BBC3-8BE119764741} - hxxp://www.slide.com/uploader/SlideImageUploader.cab
    DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader3.cab
    DPF: {5CB1506E-1DEA-4E63-89A7-E40E52AEA1FD} - hxxp://fulfillment.puretracks.com/onager.cab
    DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader.cab
    DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - hxxp://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} - hxxp://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
    DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
    DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} - hxxp://pix.futureshop.ca/en/ImageUploader4.cab
    DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
    DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} - hxxp://web1.shutterfly.com/downloads/Uploader.cab
    DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} - hxxps://media.pineconeresearch.com/ActiveX/downloadcontrol.cab
    DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} - hxxp://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - hxxp://iwon.oberon-media.com/online/online2/bejeweled2/popcaploader_v6.cab
    DPF: {F127B9BA-89EA-4B04-9C67-2074A9DF61FD} - hxxp://walmart.pnimedia.com/upload/activex/v2_0_0_9/PCAXSetupv2.0.0.9.cab?
    DPF: {F137B9BA-89EA-4B04-9C67-2074A9DF61FD} - hxxp://costco.pnimedia.com/upload/activex/v2_0_0_11/PCAXSetupv2.0.0.11.cab?
    TCP: DhcpNameServer = 192.168.2.1
    TCP: Interfaces\{AC1D8B0E-B720-4C2A-973D-8724D840298D} : DhcpNameServer = 192.168.2.1
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll
    Notify: igfxcui - igfxdev.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-7-11 32592]
    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-7-11 229840]
    R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-8-8 40016]
    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-7-11 295248]
    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\AVGIDSAgent.exe [2011-9-12 5265248]
    R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2011-8-2 192776]
    R2 hnmwrlspkt;HomeNet Manager Wireless Protocol;c:\windows\system32\drivers\hnm_wrls_pkt. sys [2006-7-14 13824]
    R2 ServicepointService;ServicepointService;c:\program files\bell\internet service advisor\ServicepointService.exe [2011-9-21 689464]
    R2 wsppkt;Wireless Security Protocol;c:\windows\system32\drivers\wsp_pkt.sys [2006-7-14 13696]
    R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\driv ers\AVGIDSDriver.sys [2011-7-11 134608]
    R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\driv ers\AVGIDSFilter.sys [2011-7-11 24272]
    R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\ AVGIDSShim.sys [2011-7-11 16720]
    R3 NETDLWL;D-Link Air Wireless Adapter(DL) NT Driver;c:\windows\system32\drivers\NETDLWL.sys [2005-10-7 159104]
    S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\avgi dseh.sys --> c:\windows\system32\drivers\AVGIDSEH.Sys [?]
    .
    =============== Created Last 30 ================
    .
    .
    ==================== Find3M ====================
    .
    2011-11-19 23:45:12 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-10-10 14:22:41 692736 ----a-w- c:\windows\system32\inetcomm.dll
    2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll
    2011-09-26 15:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
    2011-09-26 15:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll
    2011-09-26 15:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll
    2011-09-13 10:30:10 32592 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
    2011-09-06 13:20:51 1858944 ----a-w- c:\windows\system32\win32k.sys
    2011-08-31 21:00:50 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-01-24 00:02:20 812344 -c--a-w- c:\program files\HJTInstall.exe
    .
    ============= FINISH: 23:14:42.87 ===============


    Thanks for your time and knowledge!~

    Julie

  2. #2
    broni is offline Senior Member
    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running tools or applying updates other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.


    ================================================== ===========

    if someone is "sharing" my internet connection?
    Please elaborate. What does make you think so?

    Please download ComboFix from Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"

    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG users: ComboFix will not run until AVG is uninstalled as a protective measure against the anti-virus. This is because AVG "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG first.
    Use AppRemover to uninstall it: Uninstall & Remove McAfee, Symantec, Norton, AVG, Avast & More Antivirus and Security Applications and Programs
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.



    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try one of the following:

    1. Run Combofix from Safe Mode (How to...)

    2. Delete Combofix file, download fresh one, but rename combofix.exe to yourname.exe BEFORE saving it to your desktop.
    Do NOT run it yet.

    Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

    There are 4 different versions. If one of them won't run then download and try to run the other one.

    Vista and Win7 users need to right click Rkill and choose Run as Administrator

    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    Rkill.com
    Rkill.scr
    Rkill.exe

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.


    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    If normal mode still doesn't work, run BOTH tools from safe mode.

    In case #2, please post BOTH logs, rKill and Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!

  3. #3
    jaycee231 is offline Junior Member
    ComboFix 11-11-21.01 - Julie Gagnon 11/21/2011 21:41:28.4.1 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.242 [GMT -5:00]
    Running from: c:\documents and settings\Julie Gagnon\Desktop\ComboFix.exe
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\documents and settings\All Users\Application Data\TEMP
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-10-22 to 2011-11-22 )))))))))))))))))))))))))))))))
    .
    .
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
    .
    2011-11-19 23:45 . 2011-05-17 20:30 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-10-10 14:22 . 2004-08-11 23:12 692736 ----a-w- c:\windows\system32\inetcomm.dll
    2011-09-28 07:06 . 2004-08-11 23:00 599040 ----a-w- c:\windows\system32\crypt32.dll
    2011-09-26 15:41 . 2008-07-29 23:59 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
    2011-09-26 15:41 . 2004-08-11 23:00 220160 ----a-w- c:\windows\system32\oleacc.dll
    2011-09-26 15:41 . 2004-08-11 23:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll
    2011-09-06 13:20 . 2004-08-11 23:00 1858944 ----a-w- c:\windows\system32\win32k.sys
    2011-08-31 21:00 . 2009-01-25 20:46 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-01-24 00:02 . 2009-01-24 00:02 812344 -c--a-w- c:\program files\HJTInstall.exe
    .
    .
    ------- Sigcheck -------
    Note: Unsigned files aren't necessarily malware.
    .
    [-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
    [-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
    [-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
    [-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0003\DriverFi les\i386\atapi.sys
    [-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0012\DriverFi les\i386\atapi.sys
    .
    [-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
    [-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
    [-] 2004-08-04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys
    .
    [-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys
    .
    [-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
    [-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
    [-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys
    .
    [-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
    [-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
    [-] 2004-08-04 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys
    .
    [-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
    [-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
    [-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
    [-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
    .
    [-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys
    .
    [-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
    [-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    [-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    [-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
    [-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
    [-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
    [-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    [-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
    [-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
    [-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
    [-] 2006-01-13 . 5562CC0A47B2AEF06D3417B733F3C195 . 360448 . . [5.1.2600.2827] . . c:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys
    .
    [-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
    [-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
    [-] 2004-08-04 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll
    .
    [-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
    [-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
    [-] 2004-08-04 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe
    .
    [-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
    [-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
    [-] 2005-08-22 . 36739B39267914BA69AD0610A0299732 . 197632 . . [5.1.2600.2743] . . c:\windows\$NtServicePackUninstall$\netman.dll
    [-] 2005-08-22 . 3516D8A18B36784B1005B950B84232E1 . 197632 . . [5.1.2600.2743] . . c:\windows\$hf_mig$\KB905414\SP2QFE\netman.dll
    .
    [-] 2008-04-14 00:11 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . c:\windows\ServicePackFiles\i386\comres.dll
    [-] 2008-04-14 00:11 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll
    [-] 2004-08-04 11:00 . 6728270CB7DBB776ED086F5AC4C82310 . 792064 . . [2001.12.4414.258] . . c:\windows\$NtServicePackUninstall$\comres.dll
    .
    [-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
    [-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
    [-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
    [-] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll
    .
    [-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
    [-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
    [-] 2009-02-09 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
    [-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
    [-] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
    [-] 2005-07-26 . C369DF215D352B6F3A0B8C3469AA34F8 . 398336 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
    [-] 2005-04-28 . DA383FB39A6F1C445F3AFC94B3EB1248 . 396288 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    .
    [-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
    [-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
    [-] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
    [-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
    [-] 2004-08-04 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe
    .
    [-] 2010-08-17 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
    [-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\spoolsv.exe
    [-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\dllcache\spoolsv.exe
    [-] 2008-04-14 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
    [-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    [-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe
    .
    [-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
    [-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
    [-] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
    .
    [-] 2010-08-23 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
    [-] 2010-08-23 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
    [-] 2010-08-23 . 736B12B725AEB2B07F0241A9F680CB10 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
    [-] 2008-04-14 . BD38D1EBE24A46BD3EDA059560AFBA12 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
    [-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
    [-] 2006-08-25 . B0124CB21D28B1C9F678B566B6B57D92 . 617472 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
    [-] 2006-08-25 . C4E80875C1CF1222FC5EFD0314AE5C01 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    [-] 2004-08-04 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
    [-] 2004-08-04 . 5AF68A5E44734A082442668E9C787743 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
    .
    [-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
    [-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
    [-] 2004-08-04 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    .
    [-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
    [-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    [-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
    [-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
    [-] 2008-07-07 20:23 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    [-] 2008-07-07 20:06 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
    [-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
    [-] 2005-07-26 04:20 . 95F5FEA4C6DE2C3F28784D0DCC8F0DD3 . 243200 . . [2001.12.4414.308] . . c:\windows\$hf_mig$\KB902400\SP2QFE\es.dll
    .
    [-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
    [-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
    [-] 2004-08-04 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll
    .
    [-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
    [-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
    [-] 2009-03-21 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
    [-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
    [-] 2007-04-16 . 09F7CB3687F86EDAA4CA081F7AB66C03 . 986112 . . [5.1.2600.3119] . . c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
    [-] 2007-04-16 . A01F9CA902A88F7CED06884174D6419D . 984576 . . [5.1.2600.3119] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
    [-] 2006-07-05 . 0FDD84928A5DDE2510761B7EC76CCEC9 . 985088 . . [5.1.2600.2945] . . c:\windows\$hf_mig$\KB917422\SP2QFE\kernel32.dll
    .
    [-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
    [-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
    [-] 2005-09-01 . 648BF0B4DDE4F7A1156DAE7174D36EFA . 19968 . . [5.1.2600.2751] . . c:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
    [-] 2005-09-01 . A1A688EE56CF3BBD24EDEB815D48E9BA . 19968 . . [5.1.2600.2751] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll
    .
    [-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
    [-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
    [-] 2004-08-04 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll
    .
    [-] 2011-10-03 . 4963CB503600FC3BCBDBFBA51FBA1FAC . 5971456 . . [8.00.6001.19154] . . c:\windows\system32\mshtml.dll
    [-] 2011-10-03 . 4963CB503600FC3BCBDBFBA51FBA1FAC . 5971456 . . [8.00.6001.19154] . . c:\windows\system32\dllcache\mshtml.dll
    [-] 2011-10-03 . 1240A6B7B470BED0AA6C9FEC7AB0EA26 . 5972992 . . [8.00.6001.23250] . . c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll
    [-] 2011-07-25 . 23B3C8E9F3F280180573569253CE98AB . 5969920 . . [8.00.6001.19120] . . c:\windows\ie8updates\KB2586448-IE8\mshtml.dll
    [-] 2011-07-25 . BCE7CCEBAD6C8955D2B4C3B246BD0E57 . 5971456 . . [8.00.6001.23216] . . c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll
    [-] 2011-05-30 . 22BA5235EA846EDA87F68A1DCC2BFCF9 . 5964800 . . [8.00.6001.19088] . . c:\windows\ie8updates\KB2559049-IE8\mshtml.dll
    [-] 2011-05-30 . D0B1DB576941CB0B6669B8752FFAC79A . 5967360 . . [8.00.6001.23181] . . c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll
    [-] 2011-02-22 . 3422847AA07E37076A87D0B7D5044DC6 . 5964800 . . [8.00.6001.23141] . . c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll
    [-] 2011-02-22 . C2EF2335F1B6C2BE20A67D9098F6C9A1 . 5962240 . . [8.00.6001.19046] . . c:\windows\ie8updates\KB2530548-IE8\mshtml.dll
    [-] 2010-12-20 . 1EDCEC5D649DBAC37ED9FFB5A14CEB0C . 5961216 . . [8.00.6001.19019] . . c:\windows\ie8updates\KB2497640-IE8\mshtml.dll
    [-] 2010-12-20 . 2A2C070EC691CE410533A1DA7AA3CD86 . 5962240 . . [8.00.6001.23111] . . c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll
    [-] 2010-11-06 . 864E69F32656A7121444BA0193D7B64B . 5960704 . . [8.00.6001.23091] . . c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll
    [-] 2010-11-06 . D7CCA87057901C87ED8CC40DDCC7FA1B . 5959168 . . [8.00.6001.18999] . . c:\windows\ie8updates\KB2482017-IE8\mshtml.dll
    [-] 2010-09-10 . DE41132DA8E5A3CD57201C6F2175EC05 . 5957120 . . [8.00.6001.18975] . . c:\windows\ie8updates\KB2416400-IE8\mshtml.dll
    [-] 2010-09-10 . 8A03CC037E6B7D1796192815231B0C3F . 5958656 . . [8.00.6001.23067] . . c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll
    [-] 2010-06-24 . 94DC7E938C57F3C3D1BC4A0F68FC5830 . 5954560 . . [8.00.6001.23037] . . c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll
    [-] 2010-06-24 . 4D7EF94795384CD2BBAAB078B7929FEA . 5951488 . . [8.00.6001.18939] . . c:\windows\ie8updates\KB2360131-IE8\mshtml.dll
    [-] 2010-05-06 . C7B7A88CC7D7ABA5C395145BF92F46F7 . 5950976 . . [8.00.6001.18928] . . c:\windows\ie8updates\KB2183461-IE8\mshtml.dll
    [-] 2010-05-06 . 9BE28F749A7FE7F8F177C6AA2E9DA609 . 5953024 . . [8.00.6001.23019] . . c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll
    [-] 2010-02-25 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904] . . c:\windows\ie8updates\KB982381-IE8\mshtml.dll
    [-] 2010-02-25 . 974772C74DA7C7A8E7C813A9908A845F . 5946880 . . [8.00.6001.22995] . . c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll
    [-] 2009-12-21 . BE6EEBEF636773A8E7A82214E81C563A . 5942784 . . [8.00.6001.18876] . . c:\windows\ie8updates\KB980182-IE8\mshtml.dll
    [-] 2009-12-21 . E6B64C6C729BBC38AB7CC92CE33F97A5 . 5945856 . . [8.00.6001.22967] . . c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
    [-] 2009-10-29 . C0F9AC6FAB2C788FFEE3E69585A0E93F . 5944320 . . [8.00.6001.22945] . . c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
    [-] 2009-10-29 . CBB1EF54B86EDB78649909DD1699E5CA . 5940736 . . [8.00.6001.18854] . . c:\windows\ie8updates\KB978207-IE8\mshtml.dll
    [-] 2009-10-22 . CDA69BC1C23B0EA033B989F67CB722FF . 5939712 . . [8.00.6001.18852] . . c:\windows\ie8updates\KB976325-IE8\mshtml.dll
    [-] 2009-10-22 . A6CF28C6E0B6D10098AB601D85EE55E8 . 5943296 . . [8.00.6001.22942] . . c:\windows\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll
    [-] 2009-08-29 . 0E49677EE57A928765FC47FFBACD5326 . 5940224 . . [8.00.6001.18828] . . c:\windows\ie8updates\KB976749-IE8\mshtml.dll
    [-] 2009-08-29 . B68F6E6C66D17D9EDABF3D5DA71046DA . 5942272 . . [8.00.6001.22918] . . c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll
    [-] 2009-07-19 . 5A32B43A48D6DCA339BF24105D9A028F . 5937152 . . [8.00.6001.18812] . . c:\windows\ie8updates\KB974455-IE8\mshtml.dll
    [-] 2009-07-19 . F25D866DD486AD30E05E5596CB363C3E . 5938176 . . [8.00.6001.22902] . . c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll
    [-] 2009-05-13 . EEAADAA744B20E68CF5EB4FBB4F8AFA9 . 5936128 . . [8.00.6001.18783] . . c:\windows\ie8updates\KB972260-IE8\mshtml.dll
    [-] 2009-05-13 . 1290E417BF806185CC7B2845E78A104E . 5936128 . . [8.00.6001.22873] . . c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll
    [-] 2009-04-29 . 2B4315EC9E3124408A2A5074C4B97700 . 3596288 . . [7.00.6000.16850] . . c:\windows\ie8\mshtml.dll
    [-] 2009-04-29 . C6FD770D518FB024245A0EE217D72BC1 . 3598336 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
    [-] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB969897-IE8\mshtml.dll
    [-] 2009-02-21 . 1BB754AB47B327DE8DBF2FA18C36357C . 3596800 . . [7.00.6000.21015] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
    [-] 2009-02-20 . C7C3E41CC2F6EB4A629FE2184136C098 . 3595264 . . [7.00.6000.16825] . . c:\windows\ie7updates\KB969897-IE7\mshtml.dll
    [-] 2009-01-17 . 3B413267DA8AE71C20E5EF3E54F74728 . 3594752 . . [7.00.6000.16809] . . c:\windows\ie7updates\KB963027-IE7\mshtml.dll
    [-] 2009-01-16 . CC9D001B7370B292C35B366CA05B12B4 . 3596288 . . [7.00.6000.20996] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
    [-] 2008-12-13 . 121EC39A64D64205A88C2C45B034B455 . 3593216 . . [7.00.6000.16788] . . c:\windows\ie7updates\KB961260-IE7\mshtml.dll
    [-] 2008-12-13 . C79FAD61CD4A26ED5AA8C16D991C6FBD . 3594752 . . [7.00.6000.20973] . . c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
    [-] 2008-10-17 . EACAEDEF6FA2A969DE5B36190D45396F . 3593216 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB960714-IE7\mshtml.dll
    [-] 2008-10-16 . B74F31A4BD83797D7A083F922169287D . 3595264 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
    [-] 2008-08-27 . 1AD035E04A7068EC2820B055A3131ED8 . 3593216 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\mshtml.dll
    [-] 2008-08-26 . 25CC085720EE3617FD1F8AB9E2F7CAB2 . 3594752 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    [-] 2008-06-24 . EC936148284F557F19C333178768109B . 3592192 . . [7.00.6000.16705] . . c:\windows\ie7updates\KB956390-IE7\mshtml.dll
    [-] 2008-06-23 . 28B8231CA8D55FC85E027A57C90F5C88 . 3594240 . . [7.00.6000.20861] . . c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    [-] 2008-04-24 . 8976CAB317105F7431B08EA32AB73C65 . 3591680 . . [7.00.6000.16674] . . c:\windows\ie7updates\KB953838-IE7\mshtml.dll
    [-] 2008-04-23 . 4D612FF5D3B7EEF200595AE6F95D5E68 . 3593728 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
    [-] 2008-04-14 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
    [-] 2008-03-01 . AB2C88167D78D71D93558ACECB24CC7A . 3591680 . . [7.00.6000.16640] . . c:\windows\ie7updates\KB950759-IE7\mshtml.dll
    [-] 2008-03-01 . 4EE273E2B09317C1217EF0DB91F93534 . 3593216 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
    [-] 2007-12-08 . A097C36412455F0C7E42377FAF8809B7 . 3592192 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\mshtml.dll
    [-] 2007-12-07 . 976C46ED4A75FC66D9C596778898CE1E . 3593216 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
    [-] 2007-10-30 . 54D8B404F17AA74C666F7F3AEF2AE459 . 3593216 . . [7.00.6000.20710] . . c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
    [-] 2007-10-30 . 8AB7ECF59D6EBBE986277B65ED4A40A1 . 3590656 . . [7.00.6000.16587] . . c:\windows\ie7updates\KB944533-IE7\mshtml.dll
    [-] 2007-08-20 . E267EE248CDA7667C19001C069DE867B . 3584512 . . [7.00.6000.16544] . . c:\windows\ie7updates\KB942615-IE7\mshtml.dll
    [-] 2007-08-20 . AA8A4BD78D24FCDB96DDAEE3756AA372 . 3592192 . . [7.00.6000.20661] . . c:\windows\$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll
    [-] 2007-07-19 . BD609A26B683332A0E0E1445C5724851 . 3583488 . . [7.00.6000.16525] . . c:\windows\ie7updates\KB939653-IE7\mshtml.dll
    [-] 2007-07-18 . 7CE243CFD47AD0DC431586CB8C542A11 . 3584000 . . [7.00.6000.20641] . . c:\windows\$hf_mig$\KB937143-IE7\SP2QFE\mshtml.dll
    [-] 2007-05-08 . 1D4E3B86C601A2497C99790CC4D7DF26 . 3584000 . . [7.00.6000.20591] . . c:\windows\$hf_mig$\KB933566-IE7\SP2QFE\mshtml.dll
    [-] 2007-05-08 . 5D90A7200F72DACE663EE78DE234FCC7 . 3583488 . . [7.00.6000.16481] . . c:\windows\ie7updates\KB937143-IE7\mshtml.dll
    [-] 2007-03-07 . 190E1AE9B973049B12A67BAD478C770C . 3581952 . . [7.00.6000.16441] . . c:\windows\ie7updates\KB933566-IE7\mshtml.dll
    [-] 2007-03-07 . DA297A862E5F093A07D37C05F608C686 . 3582976 . . [7.00.6000.20544] . . c:\windows\$hf_mig$\KB931768-IE7\SP2QFE\mshtml.dll
    [-] 2007-01-12 . 5D45318804A30CE9D6EA83066E84B4A7 . 3580416 . . [7.00.6000.16414] . . c:\windows\ie7updates\KB931768-IE7\mshtml.dll
    .
    [-] 2008-04-14 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusR untime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
    [-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
    [-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
    [-] 2004-08-04 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
    [-] 2004-08-04 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusR untime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
    [-] 2004-08-04 . 98EC447E00229AFD88D5161A25D065DA . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusR untime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
    .
    [-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
    [-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
    [-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
    [-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
    [-] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
    [-] 2008-06-20 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
    [-] 2008-06-20 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
    [-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
    .
    [-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
    [-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
    [-] 2004-08-04 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll
    .
    [-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
    [-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
    [-] 2004-08-04 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll
    .
    [-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
    [-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
    [-] 2004-08-04 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll
    .
    [-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
    [-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
    [-] 2004-08-04 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll
    .
    [-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
    [-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
    [-] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
    .
    [-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
    [-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
    [-] 2005-07-08 . 1418A3A6E76E5A2E3F5E43866E793A8B . 249344 . . [5.1.2600.2716] . . c:\windows\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    [-] 2005-07-08 . FB78839B36025AA286A51289ED28B73E . 249344 . . [5.1.2600.2716] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll
    .
    [-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
    [-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
    [-] 2007-03-08 . 7AA4F6C00405DFC4B70ED4214E7D687B . 578048 . . [5.1.2600.3099] . . c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
    [-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\$NtServicePackUninstall$\user32.dll
    [-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
    .
    [-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
    [-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
    [-] 2004-08-04 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe
    .
    [-] 2011-08-22 . 1A377838B4B468E37C3EEB5BAA24F925 . 916480 . . [8.00.6001.19131] . . c:\windows\system32\wininet.dll
    [-] 2011-08-22 . 1A377838B4B468E37C3EEB5BAA24F925 . 916480 . . [8.00.6001.19131] . . c:\windows\system32\dllcache\wininet.dll
    [-] 2011-08-22 . 19630AEBBFAEB06984CAB91848270AAF . 919552 . . [8.00.6001.23227] . . c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll
    [-] 2011-06-23 . AF4EDDC6C0446FCE5681B5DED52B8F0E . 916480 . . [8.00.6001.19098] . . c:\windows\ie8updates\KB2586448-IE8\wininet.dll
    [-] 2011-06-23 . 509CF67AE762A38E23A5455A0053853C . 919552 . . [8.00.6001.23192] . . c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll
    [-] 2011-04-25 . CC951C2212A200475A587A440E0AA804 . 916480 . . [8.00.6001.19072] . . c:\windows\ie8updates\KB2559049-IE8\wininet.dll
    [-] 2011-04-25 . 7F4F1697001B9E9A7924D219DC215903 . 919552 . . [8.00.6001.23165] . . c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll
    [-] 2011-02-22 . A9FA95F0D7F511959AC721E4843E5967 . 919552 . . [8.00.6001.23139] . . c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll
    [-] 2011-02-22 . F192D49EEFE297FA858B2C774BA2291D . 916480 . . [8.00.6001.19044] . . c:\windows\ie8updates\KB2530548-IE8\wininet.dll
    [-] 2010-12-20 . 88014D62B5E3CDB0AC67948D86C926C8 . 916480 . . [8.00.6001.19019] . . c:\windows\ie8updates\KB2497640-IE8\wininet.dll
    [-] 2010-12-20 . 5504B4ECCE892EB82CD2C5FA71940AC1 . 919552 . . [8.00.6001.23111] . . c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll
    [-] 2010-11-06 . 9357C4249F4810FB0E49C13387A8A77C . 919552 . . [8.00.6001.23084] . . c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll
    [-] 2010-11-06 . 306A2B05EA9846278113964DC6E2C940 . 916480 . . [8.00.6001.18992] . . c:\windows\ie8updates\KB2482017-IE8\wininet.dll
    [-] 2010-09-10 . 36FE8ABC59AAFBE20CBE54BC372F9429 . 916480 . . [8.00.6001.18968] . . c:\windows\ie8updates\KB2416400-IE8\wininet.dll
    [-] 2010-09-10 . 0555E190DCD06B8998E6DDCA42DAEB82 . 919552 . . [8.00.6001.23060] . . c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll
    [-] 2010-06-24 . 60237E50D575FBA9BEC9BC043F157149 . 919040 . . [8.00.6001.23037] . . c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll
    [-] 2010-06-24 . D3DEB6B2B424AC93DE3801EAEB21A9A5 . 916480 . . [8.00.6001.18939] . . c:\windows\ie8updates\KB2360131-IE8\wininet.dll
    [-] 2010-05-06 . 2D9C7B010409372C34F725DA5CCED083 . 916480 . . [8.00.6001.18923] . . c:\windows\ie8updates\KB2183461-IE8\wininet.dll
    [-] 2010-05-06 . C1490F68B44AF8B781F52F12F564625D . 919040 . . [8.00.6001.23014] . . c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll
    [-] 2010-02-25 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904] . . c:\windows\ie8updates\KB982381-IE8\wininet.dll
    [-] 2010-02-25 . 4458D59F2B0369F4D3B137541D284041 . 919040 . . [8.00.6001.22995] . . c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll
    [-] 2009-12-21 . FF4241C74E0C0A5AFFFE05F584213ECB . 916480 . . [8.00.6001.18876] . . c:\windows\ie8updates\KB980182-IE8\wininet.dll
    [-] 2009-12-21 . 5E1F666B8955FD77E65D65C4C4D882A3 . 916480 . . [8.00.6001.22967] . . c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
    [-] 2009-10-29 . 6AF52998B90F72FF2325D84D90EDA1CC . 916480 . . [8.00.6001.22945] . . c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
    [-] 2009-10-29 . 75240F6EDBCE7B85DF66874407D38A4F . 916480 . . [8.00.6001.18854] . . c:\windows\ie8updates\KB978207-IE8\wininet.dll
    [-] 2009-08-29 . CF0A5FE05BF614C24950D8FAEC1BC309 . 916480 . . [8.00.6001.18828] . . c:\windows\ie8updates\KB976325-IE8\wininet.dll
    [-] 2009-08-29 . 972B226BDAD71C55F3CC9A72BBF8F1C1 . 916480 . . [8.00.6001.22918] . . c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll
    [-] 2009-07-03 . 7E8A47A2E6561274B83E257CE74803FD . 915456 . . [8.00.6001.18806] . . c:\windows\ie8updates\KB974455-IE8\wininet.dll
    [-] 2009-07-03 . 38114DAB42FB2EB84D1726C42B8D80C5 . 915456 . . [8.00.6001.22896] . . c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll
    [-] 2009-05-13 . 366C72AF6970DB7BB39AB0142BF09DB5 . 915456 . . [8.00.6001.18783] . . c:\windows\ie8updates\KB972260-IE8\wininet.dll
    [-] 2009-05-13 . C0EB6850C8A02A154281749DC61FAF22 . 915456 . . [8.00.6001.22873] . . c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll
    [-] 2009-04-29 . 8E2D471157B0DF329D8D0EA5D83B0DDB . 827392 . . [7.00.6000.16850] . . c:\windows\ie8\wininet.dll
    [-] 2009-04-29 . 62CCA075F44015147B8971DAFFBCFF76 . 828928 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
    [-] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB969897-IE8\wininet.dll
    [-] 2009-03-03 . 28775945CCD53DEE280EF58DEA1A94C4 . 826368 . . [7.00.6000.16827] . . c:\windows\ie7updates\KB969897-IE7\wininet.dll
    [-] 2009-03-03 . C8667854873938CA13C986F16B0CD183 . 828416 . . [7.00.6000.21020] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
    [-] 2008-12-20 . 044E0A4E9FE97C0FB9AFE9C89E2A82E6 . 827904 . . [7.00.6000.20978] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
    [-] 2008-12-20 . A82935D32D0672E8FF4E91AE398E901C . 826368 . . [7.00.6000.16791] . . c:\windows\ie7updates\KB963027-IE7\wininet.dll
    [-] 2008-10-16 . 6741EAF7B7F110E803A6E38F6E5FA6B0 . 826368 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB961260-IE7\wininet.dll
    [-] 2008-10-16 . 0D5B75171FF51775B630A431B6C667E8 . 827904 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
    [-] 2008-08-26 . 77C192FE56A70D7FA0247BA0A6201C32 . 827904 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    [-] 2008-08-26 . EF8EBA98145BFA44E80D17A3B3453300 . 826368 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\wininet.dll
    [-] 2008-06-23 . 8C13D4A7479FA0A026EDA8ABCE82C0ED . 826368 . . [7.00.6000.16705] . . c:\windows\ie7updates\KB956390-IE7\wininet.dll
    [-] 2008-06-23 . C66402A06B83B036C195242C0C8CF83C . 827904 . . [7.00.6000.20861] . . c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    [-] 2008-04-23 . F6589BE784647CFDBC22EA51CCB1A57A . 826368 . . [7.00.6000.16674] . . c:\windows\ie7updates\KB953838-IE7\wininet.dll
    [-] 2008-04-23 . 41546B396A526918DA7995A02EA04E51 . 827392 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
    [-] 2008-04-14 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
    [-] 2008-03-01 . AD21461AEF8244EDEC2EF18E55E1DCF3 . 826368 . . [7.00.6000.16640] . . c:\windows\ie7updates\KB950759-IE7\wininet.dll
    [-] 2008-03-01 . 6316C2F0C61271C8ABDFF7429174879E . 827392 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
    [-] 2007-12-07 . 806D274C9A6C3AAEA5EAE8E4AF841E04 . 824832 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\wininet.dll
    [-] 2007-12-07 . B5B411BB229AE6EAD7652A32ED47BFB9 . 825344 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
    [-] 2007-10-10 . 30C1E0F34AD2972C72A01DB5C74AB065 . 824832 . . [7.00.6000.16574] . . c:\windows\ie7updates\KB944533-IE7\wininet.dll
    [-] 2007-10-10 . 0E5D918F87EFA7D2424D66B499C7EB04 . 825344 . . [7.00.6000.20696] . . c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
    [-] 2007-08-20 . 774435E499D8E9643EC961A6103C361F . 824832 . . [7.00.6000.16544] . . c:\windows\ie7updates\KB942615-IE7\wininet.dll
    [-] 2007-08-20 . 357D54BF94FE9D6D8505A96B5C2A3BCA . 825344 . . [7.00.6000.20661] . . c:\windows\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll
    [-] 2007-06-27 . D6ED5E042C5207553E7F5E842918137F . 824320 . . [7.00.6000.20627] . . c:\windows\$hf_mig$\KB937143-IE7\SP2QFE\wininet.dll
    [-] 2007-06-27 . 8068CBB58FE60CC95AEB2CFF70178208 . 823808 . . [7.00.6000.16512] . . c:\windows\ie7updates\KB939653-IE7\wininet.dll
    [-] 2007-04-25 . 431DEFBB4A3D7B0DC062C1B064623A2F . 823808 . . [7.00.6000.20583] . . c:\windows\$hf_mig$\KB933566-IE7\SP2QFE\wininet.dll
    [-] 2007-04-25 . 0586A7F0B2FDB94D624F399D4728E7C8 . 822784 . . [7.00.6000.16473] . . c:\windows\ie7updates\KB937143-IE7\wininet.dll
    [-] 2007-03-07 . 5B35DAE6E4886F64D1DA58C4E3E01EB9 . 822784 . . [7.00.6000.16441] . . c:\windows\ie7updates\KB933566-IE7\wininet.dll
    [-] 2007-03-07 . B8F4DB39CA7353752F245379D285C80E . 823296 . . [7.00.6000.20544] . . c:\windows\$hf_mig$\KB931768-IE7\SP2QFE\wininet.dll
    [-] 2007-01-12 . BE43D00D802C92F01C8CC952C6F483F8 . 822784 . . [7.00.6000.16414] . . c:\windows\ie7updates\KB931768-IE7\wininet.dll
    [-] 2006-11-08 . 92995334F993E6E49C25C6D02EC04401 . 818688 . . [7.00.5730.11] . . c:\windows\ie7updates\KB928090-IE7\wininet.dll
    [-] 2006-09-14 . D207370287CF769AEBEBF03837784963 . 664576 . . [6.00.2900.2995] . . c:\windows\ie7\wininet.dll
    [-] 2005-10-21 . AF785C4947676A7FC1673FDC5C8D0B5B . 661504 . . [6.00.2900.2781] . . c:\windows\$hf_mig$\KB905915\SP2QFE\wininet.dll
    .
    [-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
    [-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
    [-] 2004-08-04 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll
    .
    [-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
    [-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
    [-] 2004-08-04 . 9BEACB911CA61E5881102188AB7FB431 . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll
    .
    [-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\explorer.exe
    [-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
    [-] 2007-06-13 . 7712DF0CDDE3A5AC89843E61CD5B3658 . 1033216 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
    [-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\$NtServicePackUninstall$\explorer.exe
    .
    [-] 2008-04-14 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512] . . c:\windows\regedit.exe
    [-] 2008-04-14 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regedit.exe
    [-] 2004-08-04 . 783AFC80383C176B22DBF8333343992D . 146432 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regedit.exe
    .
    [-] 2010-07-16 . 7A6A7900B5E322763430BA6FD9A31224 . 1288192 . . [5.1.2600.6010] . . c:\windows\system32\ole32.dll
    [-] 2010-07-16 . 7A6A7900B5E322763430BA6FD9A31224 . 1288192 . . [5.1.2600.6010] . . c:\windows\system32\dllcache\ole32.dll
    [-] 2010-07-16 . 8D51FB47062F2A1A9EFECCEF338A4C46 . 1289216 . . [5.1.2600.6010] . . c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
    [-] 2008-04-14 . ECCE74BC6168375016450A86A164D976 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
    [-] 2005-07-26 . AB8231D13692AC5088EB9C226B0C0576 . 1285120 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\ole32.dll
    [-] 2005-07-26 . A2F755E237FA2CDD748A80BFBE6657F3 . 1285632 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\ole32.dll
    [-] 2005-04-28 . 7440D29F257B7E44329343F944F2142C . 1286144 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\ole32.dll
    .
    [-] 2010-04-16 . 9E03DC5AB51CFD0190541CE2038D819D . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\usp10.dll
    [-] 2010-04-16 . 9E03DC5AB51CFD0190541CE2038D819D . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\dllcache\usp10.dll
    [-] 2010-04-16 . F8894BCC961D461674002B4BAE7AECC1 . 406016 . . [1.0420.2600.5969] . . c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
    [-] 2008-04-14 . 7D7D8501F3CB45D0408CDEFA08CDAEFF . 406016 . . [1.0420.2600.5512] . . c:\windows\ServicePackFiles\i386\usp10.dll
    [-] 2004-08-04 . 2EB58F9DCD6AB320B46744A4EA48B2D2 . 406528 . . [1.0420.2600.2180] . . c:\windows\$NtServicePackUninstall$\usp10.dll
    .
    [-] 2008-04-14 . 9B9F1C38D559047B8AC0DBA2D5FEBDE9 . 4096 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\ksuser.dll
    [-] 2008-04-14 . 9B9F1C38D559047B8AC0DBA2D5FEBDE9 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ksuser.dll
    [-] 2004-08-04 . CBCD254547689BFF80C9F547B20911E9 . 4096 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\ksuser.dll
    .
    [-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
    [-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
    [-] 2004-08-04 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe
    .
    [-] 2009-07-27 . 99BC0B50F511924348BE19C7C7313BBF . 135168 . . [6.00.2900.5853] . . c:\windows\system32\shsvcs.dll
    [-] 2009-07-27 . 99BC0B50F511924348BE19C7C7313BBF . 135168 . . [6.00.2900.5853] . . c:\windows\system32\dllcache\shsvcs.dll
    [-] 2009-07-27 . 888CD7B39C37E13A2419BECFAAF0A28C . 135168 . . [6.00.2900.5853] . . c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
    [-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
    [-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
    [-] 2006-12-19 . 53D9184A21C5CBF600D918E51EF3A7E5 . 135168 . . [6.00.2900.3051] . . c:\windows\$hf_mig$\KB928255\SP2QFE\shsvcs.dll
    .
    [-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
    [-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
    [-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
    .
    [-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
    [-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
    [-] 2004-08-04 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe
    .
    [-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
    [-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
    [-] 2004-08-04 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll
    .
    [-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
    [-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
    [-] 2004-08-04 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll
    .
    [-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
    [-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
    [-] 2004-08-04 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll
    .
    [-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
    [-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
    [-] 2004-08-04 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll
    .
    [-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
    [-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
    [-] 2004-08-04 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll
    .
    [-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
    [-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
    [-] 2004-08-04 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
    .
    [-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
    [-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
    [-] 2004-08-04 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll
    .
    [-] 2008-04-14 . 3CB32D3B8CBE79899D63280BB7A83CD9 . 344064 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\hnetcfg.dll
    [-] 2008-04-14 . 3CB32D3B8CBE79899D63280BB7A83CD9 . 344064 . . [5.1.2600.5512] . . c:\windows\system32\hnetcfg.dll
    [-] 2004-08-04 . 765B30C776A1780B46B479FE614F707C . 344064 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    .
    [-] 2008-04-14 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
    [-] 2008-04-14 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
    [-] 2004-08-04 . 9C3C12975C97119412802B181FBEEFFE . 167936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\appmgmts.dll
    .
    [-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\system32\dllcache\acpiec.sys
    [-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys
    .
    [-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
    [-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
    [-] 2006-02-15 00:30 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$hf_mig$\KB900485\SP2QFE\aec.sys
    [-] 2006-02-15 00:22 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$NtServicePackUninstall$\aec.sys
    .
    [-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
    [-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys
    [-] 2004-08-04 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\agp440.sys
    .
    [-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
    [-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
    [-] 2004-08-04 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys
    .
    [-] 2010-09-18 07:18 . 842900DEDBC8E3E8DBCCCB298FD88F65 . 953856 . . [4.1.6151] . . c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
    [-] 2010-09-18 06:53 . E76A5C202E68AF5A322D16B5A78F48B9 . 953856 . . [4.1.6151] . . c:\windows\system32\mfc40u.dll
    [-] 2010-09-18 06:53 . E76A5C202E68AF5A322D16B5A78F48B9 . 953856 . . [4.1.6151] . . c:\windows\system32\dllcache\mfc40u.dll
    [-] 2008-04-14 00:11 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
    [-] 2006-11-01 19:17 . 925F8B61ED301A317BA850EBEECBDAA0 . 927504 . . [4.1.0.61] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll
    .
    [-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
    [-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
    [-] 2004-08-04 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll
    .
    [-] 2006-10-19 02:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
    [-] 2006-10-19 02:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll
    [-] 2005-01-28 19:44 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
    [-] 2005-01-28 19:44 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
    [-] 2004-08-04 11:00 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll
    .
    [-] 2010-12-09 . F67CD97282E0ABFAF91A9A1359B16F2D . 2069376 . . [5.1.2600.6055] . . c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe
    [-] 2010-12-09 . 9ED77E2307F6EC6F174C063C15AA3B8C . 2027008 . . [5.1.2600.6055] . . c:\windows\system32\ntkrnlpa.exe
    [-] 2010-12-09 . 84FF488E249DBD2050EB39EA81C6F5C2 . 2069376 . . [5.1.2600.6055] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
    [-] 2010-12-09 . 84FF488E249DBD2050EB39EA81C6F5C2 . 2069376 . . [5.1.2600.6055] . . c:\windows\system32\dllcache\ntkrnlpa.exe
    [-] 2010-04-28 . 756362706DE8BC92F11E197C98A73844 . 2066944 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
    [-] 2010-02-16 . DED8B5A89B085284634502E9D75AC78C . 2066944 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
    [-] 2009-12-09 . FFDCE1EEA79C678C40237D4E031E5B51 . 2066176 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165-v2\SP3QFE\ntkrnlpa.exe
    [-] 2009-08-04 . 363B2BBEE0AEDC9E5433616D0AD0236A . 2066176 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
    [-] 2009-02-06 . 607352B9CB3D708C67F6039097801B5A . 2066176 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
    [-] 2008-08-14 . A25E9B86EFFB2AF33BF51E676B68BFB0 . 2066048 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    [-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
    [-] 2007-02-28 . 2DFB215E291E3D9B1CF9A6739B3BF16C . 2017280 . . [5.1.2600.3093] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
    [-] 2005-03-02 . D8ABA3EAB509627E707A3B14F00FBB6B . 2056832 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    .
    [-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
    [-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
    [-] 2004-08-04 11:00 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll
    .
    [-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
    [-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
    [-] 2007-02-05 . 36ACA6CDC19C95FF468A1426EB7F32F0 . 185344 . . [5.1.2600.3077] . . c:\windows\$hf_mig$\KB931261\SP2QFE\upnphost.dll
    [-] 2007-02-05 . ACA5D98663D879C6BAAFCEA7E2F1B710 . 185344 . . [5.1.2600.3077] . . c:\windows\$NtServicePackUninstall$\upnphost.dll
    .
    [-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
    [-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
    [-] 2004-08-04 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
    .
    [-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
    [-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
    [-] 2004-08-04 . D67BDBBDA86CC9AEEBBAF3217C1717D8 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll
    .
    [-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
    [-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
    [-] 2004-08-04 . 7ED462F353B3D915A418A689FA881F96 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
    .
    [-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
    [-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
    [-] 2004-08-04 11:00 . B48D3193DD1474DCBCC32BF4779AC698 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll
    .
    [-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
    [-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
    [-] 2004-08-04 . 96492C721C6EA517E2BFD5381FEF55E3 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
    .
    [-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
    [-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll
    [-] 2004-08-04 . D38408967BE738D0C1B47005BCE8CEEB . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
    .
    [-] 2010-12-09 . A531BBD3DE13121C1380ED7DC99082DB . 2192768 . . [5.1.2600.6055] . . c:\windows\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe
    [-] 2010-12-09 . 60E16152D847D7A7B7D3DA4C4B8E2120 . 2148864 . . [5.1.2600.6055] . . c:\windows\system32\ntoskrnl.exe
    [-] 2010-12-09 . 64C1ADF6DF629F340C5A439FE0EF8ED1 . 2192768 . . [5.1.2600.6055] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
    [-] 2010-12-09 . 64C1ADF6DF629F340C5A439FE0EF8ED1 . 2192768 . . [5.1.2600.6055] . . c:\windows\system32\dllcache\ntoskrnl.exe
    [-] 2010-04-27 . A2ABBEC40CDB57454645D06B7EBD22F5 . 2190080 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
    [-] 2010-02-16 . E1F653A542449D54FA2D27463D99B6B6 . 2190080 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
    [-] 2009-12-09 . 05BE3D9A71972223AFF6A3C823BA51B1 . 2189312 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165-v2\SP3QFE\ntoskrnl.exe
    [-] 2009-08-04 . FDE779EA1A564EBFE16F4E0F82B61BAD . 2189312 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
    [-] 2009-02-07 . EFE8EACE83EAAD5849A7A548FB75B584 . 2189184 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
    [-] 2008-08-14 . 31914172342BFF330063F343AC6958FE . 2189184 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    [-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
    [-] 2007-02-28 . E6679C3023B17D8B78946BC5DF53FA20 . 2137600 . . [5.1.2600.3093] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
    [-] 2005-03-02 . 28187802B7C368C0D3AEF7D4C382AABB . 2179456 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    .
    [-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
    [-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
    [-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
    .
    [-] 2008-04-14 . 54AF4B1D5459500EF0937F6D33B1914F . 175104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\w32time.dll
    [-] 2008-04-14 . 54AF4B1D5459500EF0937F6D33B1914F . 175104 . . [5.1.2600.5512] . . c:\windows\system32\w32time.dll
    [-] 2004-08-04 . 2B281958F5D0CF99ED626E3EF39D5C8D . 174592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\w32time.dll
    .
    [-] 2008-04-14 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wiaservc.dll
    [-] 2008-04-14 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512] . . c:\windows\system32\wiaservc.dll
    [-] 2006-12-19 . D9F097AA3B97034D3358A01B43E635B2 . 333824 . . [5.1.2600.3051] . . c:\windows\$hf_mig$\KB927802\SP2QFE\wiaservc.dll
    [-] 2006-12-19 . B6763F8534AC547CF1AF98AFDFF2EDC8 . 333824 . . [5.1.2600.3051] . . c:\windows\$NtServicePackUninstall$\wiaservc.dll
    .
    [-] 2008-04-14 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\midimap.dll
    [-] 2008-04-14 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\midimap.dll
    [-] 2004-08-04 . 3B4702155BB2AE9DC00C06A68834BDFA . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\midimap.dll
    .
    [-] 2008-04-14 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rasadhlp.dll
    [-] 2008-04-14 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512] . . c:\windows\system32\rasadhlp.dll
    [-] 2006-06-26 . B5D08C96B2DADAF5171FB69E341B272B . 7680 . . [5.1.2600.2938] . . c:\windows\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
    [-] 2006-06-26 . 5F098BD2AE6B03044B085DECFFDF91EC . 8192 . . [5.1.2600.2938] . . c:\windows\$NtServicePackUninstall$\rasadhlp.dll
    .
    ((((((((((((((((((((((((((((( SnapShot@2010-09-12_14.56.23 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2011-04-19 02:51 . 2011-04-19 02:51 51024 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f\vcomp90.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90rus.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90kor.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90jpn.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90ita.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90fra.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esp.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esn.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 53584 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 63312 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90deu.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90cht.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 35664 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90chs.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3 b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a 1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90u.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a 1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90.dll
    + 2009-07-12 05:05 . 2009-07-12 05:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
    + 2009-07-12 05:05 . 2009-07-12 05:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
    + 2011-05-14 00:17 . 2011-05-14 00:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll
    - 2009-07-12 01:54 . 2009-07-12 01:54 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723\vcomp.dll
    + 2009-07-12 00:54 . 2009-07-12 00:54 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723\vcomp.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll
    + 2011-05-13 23:45 . 2011-05-13 23:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80KOR.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80KOR.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80JPN.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80JPN.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ITA.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ITA.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80FRA.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80FRA.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ESP.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ESP.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80DEU.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80DEU.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHT.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHT.dll
    - 2009-07-12 01:32 . 2009-07-12 01:32 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHS.dll
    + 2009-07-12 00:32 . 2009-07-12 00:32 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHS.dll
    + 2011-05-14 05:06 . 2011-05-14 05:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll
    + 2011-05-14 05:23 . 2011-05-14 05:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll
    - 2009-07-12 06:07 . 2009-07-12 06:07 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80u.dll
    + 2009-07-12 05:07 . 2009-07-12 05:07 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80u.dll
    + 2009-07-12 05:19 . 2009-07-12 05:19 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80.dll
    - 2009-07-12 06:19 . 2009-07-12 06:19 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80.dll
    + 2011-05-13 22:37 . 2011-05-13 22:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll
    + 2011-11-22 02:39 . 2011-11-22 02:39 16384 c:\windows\Temp\Perflib_Perfdata_a8.dat
    + 2007-01-29 08:58 . 2011-07-08 13:49 46080 c:\windows\system32\tzchange.exe
    - 2007-01-29 08:58 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe
    + 2004-08-11 23:00 . 2010-08-27 05:57 99840 c:\windows\system32\srvsvc.dll
    + 2010-04-17 03:12 . 2010-04-17 03:12 48464 c:\windows\system32\sirenacm.dll
    + 2004-08-11 23:00 . 2011-11-08 16:27 80096 c:\windows\system32\perfc009.dat
    + 2004-08-11 23:00 . 2011-08-22 23:48 66560 c:\windows\system32\mshtmled.dll
    - 2004-08-11 23:00 . 2009-03-08 08:31 66560 c:\windows\system32\mshtmled.dll
    + 2006-11-08 02:03 . 2011-08-22 23:48 55296 c:\windows\system32\msfeedsbs.dll
    - 2006-11-08 02:03 . 2010-06-24 12:21 55296 c:\windows\system32\msfeedsbs.dll
    + 2011-01-02 17:38 . 2011-01-02 17:38 30624 c:\windows\system32\mlfcache.dat
    + 2004-08-11 23:00 . 2011-08-22 23:48 43520 c:\windows\system32\licmgr10.dll
    - 2004-08-11 23:00 . 2010-06-24 12:21 25600 c:\windows\system32\jsproxy.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 25600 c:\windows\system32\jsproxy.dll
    - 2004-08-11 23:12 . 2008-04-14 00:11 81920 c:\windows\system32\isign32.dll
    + 2004-08-11 23:12 . 2010-11-18 18:12 81920 c:\windows\system32\isign32.dll
    + 2011-08-23 22:48 . 2011-05-10 12:06 42496 c:\windows\system32\DRVSTORE\usbaapl_5CBB3A09528F6 8FC4AD2F36E43C028E7E6F20400\usbaapl.sys
    + 2011-08-23 22:48 . 2011-05-10 12:06 18432 c:\windows\system32\DRVSTORE\netaapl_B71F8545DA20A 81C41BFD744E8D7D9784787E916\netaapl.sys
    - 2006-03-28 01:02 . 2008-04-13 18:47 25856 c:\windows\system32\drivers\usbprint.sys
    + 2006-03-28 01:02 . 2008-04-13 18:47 25856 c:\windows\system32\drivers\usbprint.sys
    + 2009-12-11 04:06 . 2010-09-28 20:44 41984 c:\windows\system32\drivers\usbaapl.sys
    + 2008-05-20 22:33 . 2008-05-20 22:33 22784 c:\windows\system32\drivers\RimUsb.sys
    + 2004-08-11 23:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys
    + 2004-08-11 23:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
    + 2010-07-22 15:15 . 2009-05-18 17:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys
    - 2004-08-11 23:00 . 2008-04-14 00:11 45568 c:\windows\system32\dnsrslvr.dll
    + 2004-08-11 23:00 . 2009-04-20 17:17 45568 c:\windows\system32\dnsrslvr.dll
    - 2009-06-21 16:46 . 2010-06-24 12:22 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2009-06-21 16:46 . 2011-08-22 23:48 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2004-08-11 23:12 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
    + 2010-08-27 05:57 . 2010-08-27 05:57 99840 c:\windows\system32\dllcache\srvsvc.dll
    + 2004-08-11 23:00 . 2011-09-26 15:41 20480 c:\windows\system32\dllcache\oleaccrc.dll
    - 2004-08-11 23:00 . 2009-10-08 18:56 20480 c:\windows\system32\dllcache\oleaccrc.dll
    + 2010-12-15 04:11 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    + 2011-08-09 22:37 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
    + 2006-05-10 05:25 . 2011-08-22 23:48 66560 c:\windows\system32\dllcache\mshtmled.dll
    - 2006-05-10 05:25 . 2009-03-08 08:31 66560 c:\windows\system32\dllcache\mshtmled.dll
    - 2007-05-09 22:22 . 2010-06-24 12:21 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2007-05-09 22:22 . 2011-08-22 23:48 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 25600 c:\windows\system32\dllcache\jsproxy.dll
    - 2004-08-11 23:00 . 2010-06-24 12:21 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2010-11-18 18:12 . 2010-11-18 18:12 81920 c:\windows\system32\dllcache\isign32.dll
    + 2009-04-20 17:17 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll
    + 2009-12-14 07:08 . 2011-04-26 11:07 33280 c:\windows\system32\dllcache\csrsrv.dll
    - 2009-12-14 07:08 . 2009-12-14 07:08 33280 c:\windows\system32\dllcache\csrsrv.dll
    - 2004-08-11 23:00 . 2009-12-14 07:08 33280 c:\windows\system32\csrsrv.dll
    + 2004-08-11 23:00 . 2011-04-26 11:07 33280 c:\windows\system32\csrsrv.dll
    + 2010-09-22 13:43 . 2010-09-22 13:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_wp.exe
    - 2010-03-23 09:31 . 2010-03-23 09:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_wp.exe
    - 2010-04-01 15:42 . 2010-04-01 15:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Security.dll
    + 2011-07-08 18:00 . 2011-07-08 18:00 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Security.dll
    - 2010-03-31 18:51 . 2010-03-31 18:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor sn.dll
    + 2011-07-07 16:04 . 2011-07-07 16:04 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor sn.dll
    + 2011-07-07 16:04 . 2011-07-07 16:04 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ie.dll
    - 2010-03-31 18:51 . 2010-03-31 18:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ie.dll
    + 2011-07-07 16:03 . 2011-07-07 16:03 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPe rfMonExt.dll
    - 2010-03-31 18:51 . 2010-03-31 18:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPe rfMonExt.dll
    + 2011-07-07 17:09 . 2011-07-07 17:09 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_wp.exe
    - 2010-03-31 19:32 . 2010-03-31 19:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_wp.exe
    - 2010-03-31 19:32 . 2010-03-31 19:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_filter.dll
    + 2011-07-07 17:09 . 2011-07-07 17:09 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_filter.dll
    + 2011-02-13 15:20 . 2011-02-13 15:20 22016 c:\windows\Installer\db5d9.msi
    + 2011-02-13 15:19 . 2011-02-13 15:19 27136 c:\windows\Installer\db5a4.msi
    + 2011-02-13 15:17 . 2011-02-13 15:17 58880 c:\windows\Installer\db582.msi
    + 2011-10-10 21:26 . 2011-10-10 21:26 19968 c:\windows\Installer\d6131.msi
    + 2011-09-21 13:23 . 2011-09-21 13:23 53248 c:\windows\Installer\{ECC69E86-3B0E-4010-AA37-414C5D71B7B9}\ARPPRODUCTICON.exe
    + 2011-02-13 15:18 . 2011-02-13 15:18 61272 c:\windows\Installer\{E6158D07-2637-4ECF-B576-37C489669174}\IconWlc.exe
    + 2011-02-13 15:20 . 2011-02-13 15:20 80395 c:\windows\Installer\{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}\MsblIco.Exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 23040 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2006-03-23 07:57 . 2010-08-13 07:26 23040 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2006-03-23 07:57 . 2010-08-13 07:26 27136 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 27136 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 11264 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2006-03-23 07:57 . 2010-08-13 07:26 11264 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 12288 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    - 2006-03-23 07:57 . 2010-08-13 07:26 12288 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2011-09-15 02:57 . 2011-09-15 02:57 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
    - 2010-08-13 07:02 . 2010-08-13 07:02 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
    - 2010-06-12 17:33 . 2010-09-08 07:02 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2010-06-12 17:33 . 2011-10-13 07:26 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2011-07-27 17:38 . 2011-07-27 17:38 27136 c:\windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
    - 2009-10-13 22:25 . 2009-10-13 22:25 58945 c:\windows\Installer\{6412CECE-8172-4BE5-935B-6CECACD2CA87}\wlmail.exe
    + 2011-02-13 15:21 . 2011-02-13 15:21 58945 c:\windows\Installer\{6412CECE-8172-4BE5-935B-6CECACD2CA87}\wlmail.exe
    + 2011-10-13 07:07 . 2011-06-23 18:36 12800 c:\windows\ie8updates\KB2586448-IE8\xpshims.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 66560 c:\windows\ie8updates\KB2586448-IE8\mshtmled.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 55296 c:\windows\ie8updates\KB2586448-IE8\msfeedsbs.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 43520 c:\windows\ie8updates\KB2586448-IE8\licmgr10.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 25600 c:\windows\ie8updates\KB2586448-IE8\jsproxy.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 12800 c:\windows\ie8updates\KB2559049-IE8\xpshims.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 66560 c:\windows\ie8updates\KB2559049-IE8\mshtmled.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 55296 c:\windows\ie8updates\KB2559049-IE8\msfeedsbs.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 43520 c:\windows\ie8updates\KB2559049-IE8\licmgr10.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 25600 c:\windows\ie8updates\KB2559049-IE8\jsproxy.dll
    + 2011-06-16 07:09 . 2011-02-22 23:06 12800 c:\windows\ie8updates\KB2530548-IE8\xpshims.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 66560 c:\windows\ie8updates\KB2530548-IE8\mshtmled.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 55296 c:\windows\ie8updates\KB2530548-IE8\msfeedsbs.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 43520 c:\windows\ie8updates\KB2530548-IE8\licmgr10.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 25600 c:\windows\ie8updates\KB2530548-IE8\jsproxy.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 12800 c:\windows\ie8updates\KB2497640-IE8\xpshims.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 66560 c:\windows\ie8updates\KB2497640-IE8\mshtmled.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 55296 c:\windows\ie8updates\KB2497640-IE8\msfeedsbs.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 43520 c:\windows\ie8updates\KB2497640-IE8\licmgr10.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 25600 c:\windows\ie8updates\KB2497640-IE8\jsproxy.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 12800 c:\windows\ie8updates\KB2482017-IE8\xpshims.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 66560 c:\windows\ie8updates\KB2482017-IE8\mshtmled.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 55296 c:\windows\ie8updates\KB2482017-IE8\msfeedsbs.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 43520 c:\windows\ie8updates\KB2482017-IE8\licmgr10.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 25600 c:\windows\ie8updates\KB2482017-IE8\jsproxy.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 12800 c:\windows\ie8updates\KB2416400-IE8\xpshims.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 66560 c:\windows\ie8updates\KB2416400-IE8\mshtmled.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 55296 c:\windows\ie8updates\KB2416400-IE8\msfeedsbs.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 43520 c:\windows\ie8updates\KB2416400-IE8\licmgr10.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 25600 c:\windows\ie8updates\KB2416400-IE8\jsproxy.dll
    + 2010-10-17 07:14 . 2010-06-24 12:22 12800 c:\windows\ie8updates\KB2360131-IE8\xpshims.dll
    + 2010-10-17 07:14 . 2009-03-08 08:31 66560 c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll
    + 2010-10-17 07:14 . 2010-06-24 12:21 55296 c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll
    + 2010-10-17 07:14 . 2009-03-08 08:34 43008 c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll
    + 2010-10-17 07:14 . 2010-06-24 12:21 25600 c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll
    + 2011-10-13 07:04 . 2011-10-13 07:04 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_524fb 0dc\System.Drawing.Design.dll
    + 2011-10-13 07:03 . 2011-10-13 07:03 61440 c:\windows\assembly\NativeImages1_v1.1.4322\Custom Marshalers\1.0.5000.0__b03f5f7f11d50a3a_6e1305a7\C ustomMarshalers.dll
    + 2011-08-10 07:42 . 2011-08-10 07:42 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLiveWriter\e01941c4292a588e4f1eb5585822087c\Wi ndowsLiveWriter.ni.exe
    + 2011-10-13 07:36 . 2011-10-13 07:36 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLiveWriter\1ee639a35730f580f0266d2466d3976d\Wi ndowsLiveWriter.ni.exe
    + 2011-08-10 07:44 . 2011-08-10 07:44 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\6730cd9fbbafc6c69651abefafb0667a \WindowsLive.Writer.Api.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\4490f2c7ba373caac054470763d7081d \WindowsLive.Writer.Api.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationProvider\888b745ca99d39692c2e9af222e5eae8 \UIAutomationProvider.ni.dll
    + 2011-06-28 07:22 . 2011-06-28 07:22 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationProvider\1492e9393417d6e91b5ddc746b5ef320 \UIAutomationProvider.ni.dll
    + 2011-10-13 07:41 . 2011-10-13 07:41 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Pres#\6c334564da041df8fb75415f2d503224 \System.Windows.Presentation.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Pres#\343c52b741531ce9ae874ea7508831a7 \System.Windows.Presentation.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.DynamicD#\a54a122f1070ab71931dd9679ddd8e90 \System.Web.DynamicData.Design.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.DynamicD#\246110974e3c48733458819b07464b23 \System.Web.DynamicData.Design.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ComponentMod#\ace861fe8dbf146c3e449abaa7691e9f \System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-13 07:39 . 2011-10-13 07:39 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ComponentMod#\ac92806d5bd508eb25f1b4b73a36b101 \System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-13 07:39 . 2011-10-13 07:39 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c \System.AddIn.Contract.ni.dll
    + 2011-06-28 07:27 . 2011-06-28 07:27 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.AddIn.Contra#\177a17af98d803ab79006d6785706462 \System.AddIn.Contract.ni.dll
    + 2011-10-13 07:26 . 2011-10-13 07:26 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFontCac#\66873b557d5c7013e4c630361473b0c2 \PresentationFontCache.ni.exe
    + 2011-08-10 07:35 . 2011-08-10 07:35 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFontCac#\40ee65aacd9d7472cd6f8dddbfca604b \PresentationFontCache.ni.exe
    + 2011-10-13 07:24 . 2011-10-13 07:24 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCFFRast#\5b30652a7b802199984f93b5e414260f \PresentationCFFRasterizer.ni.dll
    + 2011-08-10 07:32 . 2011-08-10 07:32 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCFFRast#\12c424eed7ee0e9c017bf72ff09eb78c \PresentationCFFRasterizer.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Vsa\f9c514544c8e23220493cd42a0e20678\Micros oft.Vsa.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Vsa\eaa8d72317e5b8047e413939cc71ffba\Micros oft.Vsa.ni.dll
    + 2011-06-28 07:25 . 2011-06-28 07:25 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualC\a96b02abbfcaae424cfb91a198a9e0e9\Mi crosoft.VisualC.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualC\a140509b1342934fc5e58ae22ac9696c\Mi crosoft.VisualC.ni.dll
    + 2011-06-28 07:26 . 2011-06-28 07:26 19456 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\a8844048139471f4c7914a41f36a7e81 \Microsoft.PowerShell.Commands.Management.resource s.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\9855d3fb15e6c63a811b1f0b66d78428 \Microsoft.PowerShell.Commands.Utility.resources.n i.dll
    + 2011-06-28 07:27 . 2011-06-28 07:27 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\9804c5ec5e7a8945d4da1c7e3caf40c7 \Microsoft.PowerShell.ConsoleHost.resources.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\7618f444d33b1311e952ba9285e4a4b2 \Microsoft.PowerShell.Security.resources.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 19456 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\1b23e2c0707d81e7eb14f78552562635 \Microsoft.PowerShell.Commands.Management.resource s.ni.dll
    + 2011-06-28 07:26 . 2011-06-28 07:26 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\0fe4eb7e116bacc97d476713af23f42e \Microsoft.PowerShell.Commands.Utility.resources.n i.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\05bbffbe100ede49139819641a41dfda \Microsoft.PowerShell.ConsoleHost.resources.ni.dll
    + 2011-06-28 07:27 . 2011-06-28 07:27 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\01eba2bdd4d6baa3102dc8610e8cec92 \Microsoft.PowerShell.Security.resources.ni.dll
    + 2011-06-28 07:26 . 2011-06-28 07:26 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Fra#\f5057c30d89ad8d99e38c946a68def9e \Microsoft.Build.Framework.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6 \Microsoft.Build.Framework.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e \Microsoft.Build.Framework.ni.dll
    + 2011-06-28 07:26 . 2011-06-28 07:26 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Fra#\623c05a555ac0719a1367f511d4a9270 \Microsoft.Build.Framework.ni.dll
    + 2011-06-28 07:26 . 2011-06-28 07:26 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfs vc\c40d3caad8bff3c52db7e7562286406a\dfsvc.ni.exe
    + 2011-10-13 07:38 . 2011-10-13 07:38 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfs vc\ab7ce2d94ca725c3889a4e3c1ee88ece\dfsvc.ni.exe
    + 2011-06-28 07:23 . 2011-06-28 07:23 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Acc essibility\d9228d58804dfd75fd92a4d12ffac8af\Access ibility.ni.dll
    + 2011-10-13 07:35 . 2011-10-13 07:35 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Acc essibility\d86a3346c3d90ff12d0df9d7726f3ece\Access ibility.ni.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExp ressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.Regu larExpressions.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExp ressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.Regu larExpressions.dll
    - 2010-08-13 07:13 . 2010-08-13 07:13 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design \2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.d ll
    + 2011-10-13 07:20 . 2011-10-13 07:20 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design \2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.d ll
    + 2011-10-13 07:20 . 2011-10-13 07:20 81920 c:\windows\assembly\GAC_MSIL\System.Configuration. Install\2.0.0.0__b03f5f7f11d50a3a\System.Configura tion.Install.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 81920 c:\windows\assembly\GAC_MSIL\System.Configuration. Install\2.0.0.0__b03f5f7f11d50a3a\System.Configura tion.Install.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0 __b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0 __b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.Code DOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.V sa.Vb.CodeDOMProcessor.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.Code DOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.V sa.Vb.CodeDOMProcessor.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBas ic.Vsa.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBas ic.Vsa.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utili ties\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Uti lities.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utili ties\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Uti lities.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Frame work\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Fra mework.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Frame work\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Fra mework.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5 f7f11d50a3a\IEHost.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5 f7f11d50a3a\IEHost.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b0 3f5f7f11d50a3a\cscompmgd.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b0 3f5f7f11d50a3a\cscompmgd.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0 __b03f5f7f11d50a3a\Accessibility.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0 __b03f5f7f11d50a3a\Accessibility.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b0 3f5f7f11d50a3a\ISymWrapper.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b0 3f5f7f11d50a3a\ISymWrapper.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0. 0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0. 0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2010-06-12 17:56 . 2010-06-12 17:56 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0 __b03f5f7f11d50a3a\System.Security.dll
    + 2011-10-13 07:03 . 2011-10-13 07:03 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0 __b03f5f7f11d50a3a\System.Security.dll
    + 2011-10-13 07:22 . 2009-10-08 18:56 20480 c:\windows\$NtUninstallKB2564958$\oleaccrc.dll
    + 2010-09-16 04:13 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll
    + 2010-09-16 04:13 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB982802\spmsg.dll
    + 2010-10-17 07:17 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982132\update\spcustom.dll
    + 2010-10-17 07:17 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB982132\spmsg.dll
    + 2010-10-17 07:05 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB981957\update\spcustom.dll
    + 2010-10-17 07:05 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB981957\spmsg.dll
    + 2010-09-16 04:12 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
    + 2010-09-16 04:12 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981322\spmsg.dll
    + 2010-10-17 07:15 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979687\update\spcustom.dll
    + 2010-10-17 07:15 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB979687\spmsg.dll
    + 2011-03-17 07:02 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971029\update\spcustom.dll
    + 2011-03-17 07:02 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971029\spmsg.dll
    + 2011-09-15 02:56 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2616676\update\spcustom.dll
    + 2011-09-15 02:56 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2616676\spmsg.dll
    + 2011-09-13 07:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2607712\update\spcustom.dll
    + 2011-09-13 07:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2607712\spmsg.dll
    + 2011-10-13 07:09 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2592799\update\spcustom.dll
    + 2011-10-13 07:09 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2592799\spmsg.dll
    + 2011-10-13 07:07 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2586448-IE8\update\spcustom.dll
    + 2011-10-13 07:07 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2586448-IE8\spmsg.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 12800 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\xpshims.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 66560 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtmled.dll
    + 2011-10-13 03:38 . 2011-08-22 23:47 55296 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeedsbs.dll
    + 2011-10-13 03:38 . 2011-08-22 23:47 43520 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\licmgr10.dll
    + 2011-10-13 03:38 . 2011-08-22 23:47 25600 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\jsproxy.dll
    + 2011-09-15 02:49 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570947\update\spcustom.dll
    + 2011-09-15 02:49 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570947\spmsg.dll
    + 2011-08-10 07:17 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570222\update\spcustom.dll
    + 2011-08-10 07:17 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570222\spmsg.dll
    + 2011-08-10 07:18 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567680\update\spcustom.dll
    + 2011-08-10 07:18 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567680\spmsg.dll
    + 2011-10-13 07:10 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567053\update\spcustom.dll
    + 2011-10-13 07:10 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567053\spmsg.dll
    + 2011-08-10 07:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2566454\update\spcustom.dll
    + 2011-08-10 07:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2566454\spmsg.dll
    + 2011-08-09 22:37 . 2011-07-08 13:51 10496 c:\windows\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys
    + 2011-08-10 07:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll
    + 2011-08-10 07:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2562937\spmsg.dll
    + 2011-08-10 07:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2559049-IE8\update\spcustom.dll
    + 2011-08-10 07:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2559049-IE8\spmsg.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 12800 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\xpshims.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 66560 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtmled.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 55296 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeedsbs.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 43520 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\licmgr10.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 25600 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\jsproxy.dll
    + 2011-07-16 07:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2555917\update\spcustom.dll
    + 2011-07-16 07:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2555917\spmsg.dll
    + 2011-06-16 07:07 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544893\update\spcustom.dll
    + 2011-06-16 07:07 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544893\spmsg.dll
    + 2011-06-16 07:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544521-IE8\update\spcustom.dll
    + 2011-06-16 07:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544521-IE8\spmsg.dll
    + 2011-07-16 07:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2541763\update\spcustom.dll
    + 2011-07-16 07:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2541763\spmsg.dll
    + 2011-06-16 07:10 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276\update\spcustom.dll
    + 2011-06-16 07:10 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276\spmsg.dll
    + 2011-08-10 07:17 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276-v2\update\spcustom.dll
    + 2011-08-10 07:17 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276-v2\spmsg.dll
    + 2011-06-16 07:12 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2535512\update\spcustom.dll
    + 2011-06-16 07:12 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2535512\spmsg.dll
    + 2011-06-16 07:09 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2530548-IE8\update\spcustom.dll
    + 2011-06-16 07:09 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2530548-IE8\spmsg.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 12800 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\xpshims.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 66560 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtmled.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 55296 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeedsbs.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 43520 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\licmgr10.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 25600 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\jsproxy.dll
    + 2011-03-26 07:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2524375\update\spcustom.dll
    + 2011-03-26 07:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2524375\spmsg.dll
    + 2011-04-15 07:12 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2511455\update\spcustom.dll
    + 2011-04-15 07:12 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2511455\spmsg.dll
    + 2011-04-15 07:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2510531-IE8\update\spcustom.dll
    + 2011-04-15 07:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2510531-IE8\spmsg.dll
    + 2011-04-15 07:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2509553\update\spcustom.dll
    + 2011-04-15 07:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2509553\spmsg.dll
    + 2009-04-20 17:06 . 2009-04-20 17:06 45568 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsrslvr.dll
    + 2011-04-15 07:12 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2508429\update\spcustom.dll
    + 2011-04-15 07:12 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2508429\spmsg.dll
    + 2011-04-15 07:14 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2508272\update\spcustom.dll
    + 2011-04-15 07:14 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2508272\spmsg.dll
    + 2011-07-16 07:13 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2507938\update\spcustom.dll
    + 2011-07-16 07:13 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2507938\spmsg.dll
    + 2011-04-26 11:02 . 2011-04-26 11:02 33280 c:\windows\$hf_mig$\KB2507938\SP3QFE\csrsrv.dll
    + 2011-04-15 07:13 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2507618\update\spcustom.dll
    + 2011-04-15 07:13 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2507618\spmsg.dll
    + 2011-04-15 07:28 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2506223\update\spcustom.dll
    + 2011-04-15 07:28 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2506223\spmsg.dll
    + 2011-04-15 07:10 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2506212\update\spcustom.dll
    + 2011-04-15 07:10 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2506212\spmsg.dll
    + 2011-06-16 07:15 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2503665\update\spcustom.dll
    + 2011-06-16 07:15 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2503665\spmsg.dll
    + 2011-04-15 07:14 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2503658\update\spcustom.dll
    + 2011-04-15 07:14 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2503658\spmsg.dll
    + 2011-04-15 07:25 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2497640-IE8\update\spcustom.dll
    + 2011-04-15 07:25 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2497640-IE8\spmsg.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 12800 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\xpshims.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 66560 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mshtmled.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 55296 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\msfeedsbs.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 43520 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\licmgr10.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 25600 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\jsproxy.dll
    + 2011-04-15 07:41 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2491683\update\spcustom.dll
    + 2011-04-15 07:41 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2491683\spmsg.dll
    + 2011-04-15 07:36 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2485663\update\spcustom.dll
    + 2011-04-15 07:36 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2485663\spmsg.dll
    + 2011-02-14 08:09 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2485376\update\spcustom.dll
    + 2011-02-14 08:09 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2485376\spmsg.dll
    + 2011-02-14 08:08 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2483185\update\spcustom.dll
    + 2011-02-14 08:08 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2483185\spmsg.dll
    + 2011-02-14 08:04 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2482017-IE8\update\spcustom.dll
    + 2011-02-14 08:04 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2482017-IE8\spmsg.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 12800 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\xpshims.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 66560 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtmled.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 55296 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\msfeedsbs.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 43520 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\licmgr10.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 25600 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\jsproxy.dll
    + 2011-03-09 08:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2481109\update\spcustom.dll
    + 2011-03-09 08:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2481109\spmsg.dll
    + 2011-02-02 07:57 . 2011-02-02 07:57 53248 c:\windows\$hf_mig$\KB2481109\SP3QFE\tsgqec.dll
    + 2011-03-09 08:15 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2479943\update\spcustom.dll
    + 2011-03-09 08:15 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2479943\spmsg.dll
    + 2011-02-14 08:09 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2479628\update\spcustom.dll
    + 2011-02-14 08:09 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2479628\spmsg.dll
    + 2011-02-14 08:10 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2478971\update\spcustom.dll
    + 2011-02-14 08:10 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2478971\spmsg.dll
    + 2011-02-15 08:01 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2478960\update\spcustom.dll
    + 2011-02-15 08:01 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2478960\spmsg.dll
    + 2011-02-14 08:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2476687\update\spcustom.dll
    + 2011-02-14 08:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2476687\spmsg.dll
    + 2010-12-09 14:29 . 2010-12-09 14:29 33280 c:\windows\$hf_mig$\KB2476687\SP3QFE\csrsrv.dll
    + 2011-06-16 07:16 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2476490\update\spcustom.dll
    + 2011-06-16 07:16 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2476490\spmsg.dll
    + 2010-12-15 08:12 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2467659\update\spcustom.dll
    + 2010-12-15 08:12 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2467659\spmsg.dll
    + 2010-12-15 08:15 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2443105\update\spcustom.dll
    + 2010-12-15 08:15 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2443105\spmsg.dll
    + 2010-11-18 18:12 . 2010-11-18 18:12 81920 c:\windows\$hf_mig$\KB2443105\SP3QFE\isign32.dll
    + 2010-12-15 08:13 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2440591\update\spcustom.dll
    + 2010-12-15 08:13 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2440591\spmsg.dll
    + 2010-12-15 04:11 . 2010-11-03 05:55 40960 c:\windows\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys
    + 2010-12-15 08:12 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2436673\update\spcustom.dll
    + 2010-12-15 08:12 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2436673\spmsg.dll
    + 2010-12-15 08:03 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2423089\update\spcustom.dll
    + 2010-12-15 08:03 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2423089\spmsg.dll
    + 2010-12-15 04:09 . 2010-10-11 14:55 45568 c:\windows\$hf_mig$\KB2423089\SP3QFE\wab.exe
    + 2011-01-12 08:01 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2419632\update\spcustom.dll
    + 2011-01-12 08:01 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2419632\spmsg.dll
    + 2010-12-15 08:14 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2416400-IE8\update\spcustom.dll
    + 2010-12-15 08:14 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2416400-IE8\spmsg.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 12800 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\xpshims.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 66560 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtmled.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 55296 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeedsbs.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 43520 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\licmgr10.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 25600 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\jsproxy.dll
    + 2011-02-14 08:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2393802\update\spcustom.dll
    + 2011-02-13 19:17 . 2010-12-09 15:15 16896 c:\windows\$hf_mig$\KB2393802\update\mpsyschk.dll
    + 2011-02-14 08:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2393802\spmsg.dll
    + 2010-10-17 07:18 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2387149\update\spcustom.dll
    + 2010-10-17 07:18 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2387149\spmsg.dll
    + 2010-10-17 07:02 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2360937\update\spcustom.dll
    + 2010-10-17 07:02 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2360937\spmsg.dll
    + 2010-10-17 07:14 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2360131-IE8\update\spcustom.dll
    + 2010-10-17 07:14 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2360131-IE8\spmsg.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 12800 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\xpshims.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 66560 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtmled.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 55296 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeedsbs.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 43520 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\licmgr10.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 25600 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\jsproxy.dll
    + 2010-09-16 04:13 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
    + 2010-09-16 04:13 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2347290\spmsg.dll
    + 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
    + 2010-10-17 07:17 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2345886\update\spcustom.dll
    + 2010-10-17 07:17 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2345886\spmsg.dll
    + 2010-08-27 06:05 . 2010-08-27 06:05 99840 c:\windows\$hf_mig$\KB2345886\SP3QFE\srvsvc.dll
    + 2010-12-15 08:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2296199\update\spcustom.dll
    + 2010-12-15 08:15 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2296199\spmsg.dll
    + 2010-10-17 07:17 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2279986\update\spcustom.dll
    + 2010-10-17 07:17 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2279986\spmsg.dll
    + 2010-09-16 04:13 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll
    + 2010-09-16 04:13 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2259922\spmsg.dll
    + 2010-09-16 04:07 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
    + 2010-09-16 04:07 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2141007\spmsg.dll
    + 2010-09-16 04:13 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
    + 2010-09-16 04:13 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2121546\spmsg.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a 3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a 3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2009-04-15 23:28 . 2011-02-17 12:32 5120 c:\windows\system32\xpsp4res.dll
    - 2006-03-23 07:57 . 2010-08-13 07:26 4096 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 4096 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2011-10-13 07:20 . 2011-10-13 07:20 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0 .0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0 .0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0 .0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0 .0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f 5f7f11d50a3a\IIEHost.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f 5f7f11d50a3a\IIEHost.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0_ _b03f5f7f11d50a3a\IEExecRemote.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0_ _b03f5f7f11d50a3a\IEExecRemote.dll
    + 2010-07-22 05:57 . 2010-07-22 05:57 5120 c:\windows\$hf_mig$\KB982802\SP3QFE\xpsp4res.dll
    + 2010-07-12 12:53 . 2010-07-12 12:53 5120 c:\windows\$hf_mig$\KB979687\SP3QFE\xpsp4res.dll
    + 2011-02-17 12:32 . 2011-02-17 12:32 5120 c:\windows\$hf_mig$\KB2508429\SP3QFE\xpsp4res.dll
    + 2010-10-16 21:18 . 2010-08-13 12:53 5120 c:\windows\$hf_mig$\KB2360937\SP3QFE\xpsp4res.dll
    + 2010-08-26 12:52 . 2010-08-26 12:52 5120 c:\windows\$hf_mig$\KB2345886\SP3QFE\xpsp4res.dll
    + 2010-04-17 05:04 . 2010-04-17 05:04 306032 c:\windows\WLXPGSS.SCR
    - 2010-08-13 07:14 . 2010-08-13 07:14 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 653136 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a 1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 569680 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a 1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a 1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcm90.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
    + 2009-07-12 05:05 . 2009-07-12 05:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 159048 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a 1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
    + 2011-05-14 05:17 . 2011-05-14 05:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll
    + 2011-05-14 05:12 . 2011-05-14 05:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll
    + 2011-05-14 05:11 . 2011-05-14 05:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll
    + 2004-08-11 23:00 . 2011-06-20 17:44 293376 c:\windows\system32\winsrv.dll
    - 2004-08-11 23:00 . 2008-04-14 00:12 293376 c:\windows\system32\winsrv.dll
    + 2004-08-11 23:00 . 2011-03-04 06:37 420864 c:\windows\system32\vbscript.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 105984 c:\windows\system32\url.dll
    - 2004-08-11 23:00 . 2009-03-08 08:34 105984 c:\windows\system32\url.dll
    - 2004-08-11 23:00 . 2009-10-15 16:28 119808 c:\windows\system32\t2embed.dll
    + 2004-08-11 23:00 . 2010-08-27 08:02 119808 c:\windows\system32\t2embed.dll
    + 2004-08-11 23:00 . 2011-01-21 14:44 439296 c:\windows\system32\shimgvw.dll
    + 2004-08-11 23:00 . 2011-04-29 17:25 151552 c:\windows\system32\schannel.dll
    + 2004-08-11 23:00 . 2011-02-09 13:53 270848 c:\windows\system32\sbe.dll
    - 2004-08-11 23:00 . 2008-04-14 00:12 270848 c:\windows\system32\sbe.dll
    + 2004-08-11 23:00 . 2010-08-16 08:45 590848 c:\windows\system32\rpcrt4.dll
    + 2004-08-11 23:00 . 2011-11-08 16:27 466880 c:\windows\system32\perfh009.dat
    + 2004-08-11 23:00 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll
    - 2004-08-11 23:00 . 2008-04-14 00:12 551936 c:\windows\system32\oleaut32.dll
    - 2004-08-11 23:00 . 2008-04-14 00:12 249856 c:\windows\system32\odbc32.dll
    + 2004-08-11 23:00 . 2010-11-09 14:52 249856 c:\windows\system32\odbc32.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 206848 c:\windows\system32\occache.dll
    - 2004-08-11 23:00 . 2010-06-24 12:22 206848 c:\windows\system32\occache.dll
    + 2004-08-11 23:00 . 2010-12-09 15:15 718336 c:\windows\system32\ntdll.dll
    - 2004-08-11 23:11 . 2008-04-14 00:12 677888 c:\windows\system32\mstsc.exe
    + 2004-08-11 23:11 . 2011-01-27 11:57 677888 c:\windows\system32\mstsc.exe
    - 2004-08-11 23:00 . 2010-06-24 12:22 611840 c:\windows\system32\mstime.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 611840 c:\windows\system32\mstime.dll
    + 2006-11-08 02:03 . 2011-08-22 23:48 602112 c:\windows\system32\msfeeds.dll
    + 2006-10-19 02:47 . 2010-03-30 16:24 317440 c:\windows\system32\mp4sdecd.dll
    - 2006-10-19 02:47 . 2006-10-19 02:47 317440 c:\windows\system32\MP4SDECD.dll
    + 2004-08-11 23:00 . 2011-02-08 13:33 974848 c:\windows\system32\mfc42u.dll
    + 2004-08-11 23:00 . 2011-02-08 13:33 978944 c:\windows\system32\mfc42.dll
    + 2004-08-11 23:00 . 2010-09-18 06:53 954368 c:\windows\system32\mfc40.dll
    + 2011-11-19 23:45 . 2011-11-19 23:45 247968 c:\windows\system32\Macromed\Flash\FlashUtil11e_Ac tiveX.exe
    + 2011-11-19 23:45 . 2011-11-19 23:45 335520 c:\windows\system32\Macromed\Flash\FlashUtil11e_Ac tiveX.dll
    - 2004-08-11 23:00 . 2009-06-25 08:25 730112 c:\windows\system32\lsasrv.dll
    + 2004-08-11 23:00 . 2010-12-20 17:26 730112 c:\windows\system32\lsasrv.dll
    - 2004-08-11 23:00 . 2009-06-25 08:25 301568 c:\windows\system32\kerberos.dll
    + 2004-08-11 23:00 . 2010-12-22 12:34 301568 c:\windows\system32\kerberos.dll
    + 2004-08-11 23:00 . 2011-03-04 06:37 726528 c:\windows\system32\jscript.dll
    - 2004-08-11 23:00 . 2009-12-09 05:53 726528 c:\windows\system32\jscript.dll
    - 2004-08-11 23:00 . 2010-06-24 12:21 184320 c:\windows\system32\iepeers.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 184320 c:\windows\system32\iepeers.dll
    - 2004-08-11 23:00 . 2010-06-24 12:21 387584 c:\windows\system32\iedkcs32.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 387584 c:\windows\system32\iedkcs32.dll
    + 2004-08-11 23:00 . 2011-08-22 11:56 174080 c:\windows\system32\ie4uinit.exe
    + 2010-07-22 15:15 . 2008-04-17 16:12 107368 c:\windows\system32\GEARAspi.dll
    + 2004-08-11 23:11 . 2011-02-11 13:25 229888 c:\windows\system32\fxscover.exe
    - 2004-08-11 23:06 . 2010-08-13 07:45 162728 c:\windows\system32\FNTCACHE.DAT
    + 2004-08-11 23:06 . 2011-10-13 07:44 162728 c:\windows\system32\FNTCACHE.DAT
    + 2004-08-11 23:00 . 2011-02-09 13:53 186880 c:\windows\system32\encdec.dll
    - 2004-08-11 23:00 . 2008-04-14 00:11 186880 c:\windows\system32\encdec.dll
    + 2006-03-23 07:35 . 2011-02-17 13:18 357888 c:\windows\system32\drivers\srv.sys
    - 2004-08-11 23:11 . 2008-04-14 00:13 139656 c:\windows\system32\drivers\rdpwd.sys
    + 2004-08-11 23:11 . 2011-06-24 14:10 139656 c:\windows\system32\drivers\rdpwd.sys
    + 2004-08-11 23:00 . 2011-04-21 13:37 105472 c:\windows\system32\drivers\mup.sys
    + 2006-03-23 07:35 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys
    + 2004-08-11 23:00 . 2011-08-17 13:49 138496 c:\windows\system32\drivers\afd.sys
    - 2004-08-11 23:00 . 2008-08-14 10:04 138496 c:\windows\system32\drivers\afd.sys
    + 2004-08-11 23:00 . 2011-03-03 06:55 149504 c:\windows\system32\dnsapi.dll
    + 2009-04-15 23:28 . 2010-07-12 12:55 218112 c:\windows\system32\dllcache\wordpad.exe
    + 2010-06-18 17:45 . 2011-06-20 17:44 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2006-09-18 14:15 . 2011-04-30 03:01 758784 c:\windows\system32\dllcache\vgx.dll
    + 2008-05-09 10:53 . 2011-03-04 06:37 420864 c:\windows\system32\dllcache\vbscript.dll
    - 2006-10-17 17:05 . 2009-03-08 08:34 105984 c:\windows\system32\dllcache\url.dll
    + 2006-10-17 17:05 . 2011-08-22 23:48 105984 c:\windows\system32\dllcache\url.dll
    - 2009-06-16 14:36 . 2009-10-15 16:28 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2009-06-16 14:36 . 2010-08-27 08:02 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2008-10-14 23:31 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys
    + 2011-01-21 14:44 . 2011-01-21 14:44 439296 c:\windows\system32\dllcache\shimgvw.dll
    + 2008-12-05 06:54 . 2011-04-29 17:25 151552 c:\windows\system32\dllcache\schannel.dll
    + 2011-02-09 13:53 . 2011-02-09 13:53 270848 c:\windows\system32\dllcache\sbe.dll
    + 2009-04-15 14:51 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
    + 2011-08-09 22:38 . 2011-06-24 14:10 139656 c:\windows\system32\dllcache\rdpwd.sys
    + 2010-12-20 17:32 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll
    + 2009-10-08 18:57 . 2011-09-26 15:41 220160 c:\windows\system32\dllcache\oleacc.dll
    - 2009-10-08 18:57 . 2009-10-08 18:57 220160 c:\windows\system32\dllcache\oleacc.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
    + 2006-10-17 17:04 . 2011-08-22 23:48 206848 c:\windows\system32\dllcache\occache.dll
    - 2006-10-17 17:04 . 2010-06-24 12:22 206848 c:\windows\system32\dllcache\occache.dll
    + 2009-04-15 23:29 . 2010-12-09 15:15 718336 c:\windows\system32\dllcache\ntdll.dll
    + 2011-06-15 22:27 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys
    - 2004-08-11 23:00 . 2010-06-24 12:22 611840 c:\windows\system32\dllcache\mstime.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 611840 c:\windows\system32\dllcache\mstime.dll
    + 2004-08-11 23:12 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
    - 2004-08-11 23:12 . 2008-04-14 00:12 102400 c:\windows\system32\dllcache\msjro.dll
    + 2007-05-09 22:22 . 2011-08-22 23:48 602112 c:\windows\system32\dllcache\msfeeds.dll
    + 2004-08-11 23:12 . 2008-04-14 00:12 169984 c:\windows\system32\dllcache\msconfig.exe
    + 2004-08-11 23:12 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
    - 2004-08-11 23:12 . 2008-04-14 00:11 200704 c:\windows\system32\dllcache\msadox.dll
    + 2004-08-11 23:12 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
    - 2004-08-11 23:12 . 2008-04-14 00:11 180224 c:\windows\system32\dllcache\msadomd.dll
    - 2004-08-11 23:12 . 2008-04-14 00:11 536576 c:\windows\system32\dllcache\msado15.dll
    + 2004-08-11 23:12 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
    + 2008-11-13 02:23 . 2011-07-15 13:29 456320 c:\windows\system32\dllcache\mrxsmb.sys
    + 2010-03-30 16:24 . 2010-03-30 16:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll
    + 2006-10-14 08:13 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll
    + 2010-10-16 21:23 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll
    + 2004-08-11 23:00 . 2010-09-18 06:53 954368 c:\windows\system32\dllcache\mfc40.dll
    - 2009-04-15 23:29 . 2009-06-25 08:25 730112 c:\windows\system32\dllcache\lsasrv.dll
    + 2009-04-15 23:29 . 2010-12-20 17:26 730112 c:\windows\system32\dllcache\lsasrv.dll
    + 2011-01-27 11:57 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe
    + 2009-06-25 08:25 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
    - 2009-06-25 08:25 . 2009-06-25 08:25 301568 c:\windows\system32\dllcache\kerberos.dll
    - 2008-05-09 10:53 . 2009-12-09 05:53 726528 c:\windows\system32\dllcache\jscript.dll
    + 2008-05-09 10:53 . 2011-03-04 06:37 726528 c:\windows\system32\dllcache\jscript.dll
    + 2008-08-13 20:12 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
    - 2009-06-21 16:46 . 2010-06-24 12:21 247808 c:\windows\system32\dllcache\ieproxy.dll
    + 2009-06-21 16:46 . 2011-08-22 23:48 247808 c:\windows\system32\dllcache\ieproxy.dll
    - 2006-05-10 05:25 . 2010-06-24 12:21 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2006-05-10 05:25 . 2011-08-22 23:48 184320 c:\windows\system32\dllcache\iepeers.dll
    - 2010-06-12 16:48 . 2010-06-24 12:21 743424 c:\windows\system32\dllcache\iedvtool.dll
    + 2010-06-12 16:48 . 2011-08-22 23:48 743424 c:\windows\system32\dllcache\iedvtool.dll
    - 2006-11-07 08:27 . 2010-06-24 12:21 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2006-11-07 08:27 . 2011-08-22 23:48 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2006-11-07 08:26 . 2011-08-22 11:56 174080 c:\windows\system32\dllcache\ie4uinit.exe
    + 2011-02-11 13:25 . 2011-02-11 13:25 229888 c:\windows\system32\dllcache\fxscover.exe
    + 2011-02-09 13:53 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
    + 2008-06-20 17:46 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll
    + 2011-09-03 10:17 . 2011-09-28 07:06 599040 c:\windows\system32\dllcache\crypt32.dll
    + 2010-04-20 05:30 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll
    - 2008-06-20 11:40 . 2008-08-14 10:04 138496 c:\windows\system32\dllcache\afd.sys
    + 2008-06-20 11:40 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys
    + 2010-08-22 23:42 . 2010-08-22 23:42 507904 c:\windows\system32\btwapi.dll
    + 2004-08-11 23:00 . 2011-02-15 12:56 290432 c:\windows\system32\atmfd.dll
    + 2011-02-11 13:25 . 2011-02-11 13:25 229888 c:\windows\ServicePackFiles\ServicePackCache\i386\ fxscover.exe
    - 2010-03-23 09:31 . 2010-03-23 09:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webe ngine.dll
    + 2010-09-22 13:43 . 2010-09-22 13:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webe ngine.dll
    + 2011-07-07 09:18 . 2011-07-07 09:18 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS. dll
    - 2010-05-11 10:40 . 2010-05-11 10:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS. dll
    + 2011-03-25 10:15 . 2011-03-25 10:15 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rjit.dll
    - 2010-05-11 10:40 . 2010-05-11 10:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rdacwks.dll
    + 2011-07-07 09:18 . 2011-07-07 09:18 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rdacwks.dll
    + 2011-07-07 16:04 . 2011-07-07 16:04 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ld.dll
    - 2010-03-31 18:51 . 2010-03-31 18:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ld.dll
    - 2010-03-31 18:49 . 2010-03-31 18:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor jit.dll
    + 2011-07-07 16:01 . 2011-07-07 16:01 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor jit.dll
    + 2011-07-07 17:09 . 2011-07-07 17:09 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_isapi.dll
    - 2010-03-31 19:32 . 2010-03-31 19:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_isapi.dll
    + 2011-02-13 15:25 . 2011-02-13 15:25 569344 c:\windows\Installer\db67c.msi
    + 2011-02-13 15:24 . 2011-02-13 15:24 778752 c:\windows\Installer\db65b.msi
    + 2011-02-13 15:23 . 2011-02-13 15:23 463872 c:\windows\Installer\db61b.msi
    + 2011-02-13 15:21 . 2011-02-13 15:21 735744 c:\windows\Installer\db60a.msi
    + 2011-02-13 15:20 . 2011-02-13 15:20 429056 c:\windows\Installer\db5ce.msi
    + 2011-02-13 15:18 . 2011-02-13 15:18 149504 c:\windows\Installer\db595.msi
    + 2011-06-16 07:20 . 2011-06-16 07:20 223744 c:\windows\Installer\c42a0ca.msi
    + 2011-06-16 07:06 . 2011-06-16 07:06 467456 c:\windows\Installer\c42a073.msi
    + 2010-11-12 16:08 . 2010-11-12 16:08 889344 c:\windows\Installer\871ab81c.msp
    + 2010-11-10 02:33 . 2010-11-10 02:33 219648 c:\windows\Installer\782df72b.msi
    + 2010-09-24 01:02 . 2010-09-24 01:02 798208 c:\windows\Installer\23f5fa.msp
    + 2011-02-13 15:24 . 2011-02-13 15:24 132096 c:\windows\Installer\{EE39FFBD-544E-49E4-A999-6819828EAE91}\WLXPhotoGalleryIcon.exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 409600 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    - 2006-03-23 07:57 . 2010-08-13 07:26 409600 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 286720 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2006-03-23 07:57 . 2010-08-13 07:26 286720 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2006-03-23 07:57 . 2010-08-13 07:26 794624 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 794624 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2006-03-23 07:57 . 2011-11-09 08:01 135168 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2006-03-23 07:57 . 2010-08-13 07:26 135168 c:\windows\Installer\{91130409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2010-12-31 03:35 . 2010-12-31 03:35 897024 c:\windows\Installer\{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}\SafariIco.exe
    + 2011-08-23 23:33 . 2011-08-23 23:33 380928 c:\windows\Installer\{69995C7A-062A-4A90-A4DF-8C22895DF522}\iTunesIco.exe
    + 2011-01-14 11:10 . 2011-01-14 11:10 155520 c:\windows\Installer\$PatchCache$\Managed\00004109 500200000000000000F01FEC\14.0.5130\GKWORD6.DLL
    + 2011-01-14 11:10 . 2011-01-14 11:10 140160 c:\windows\Installer\$PatchCache$\Managed\00004109 500200000000000000F01FEC\14.0.5130\GKEXCEL2.DLL
    + 2011-10-13 07:07 . 2011-06-23 18:36 105984 c:\windows\ie8updates\KB2586448-IE8\url.dll
    + 2011-10-13 07:07 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2586448-IE8\spuninst\updspapi.dll
    + 2011-10-13 07:07 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2586448-IE8\spuninst\spuninst.exe
    + 2011-10-13 07:07 . 2011-06-23 18:36 206848 c:\windows\ie8updates\KB2586448-IE8\occache.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 611840 c:\windows\ie8updates\KB2586448-IE8\mstime.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 602112 c:\windows\ie8updates\KB2586448-IE8\msfeeds.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 247808 c:\windows\ie8updates\KB2586448-IE8\ieproxy.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 184320 c:\windows\ie8updates\KB2586448-IE8\iepeers.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 743424 c:\windows\ie8updates\KB2586448-IE8\iedvtool.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 387584 c:\windows\ie8updates\KB2586448-IE8\iedkcs32.dll
    + 2011-10-13 07:07 . 2011-06-23 12:05 173568 c:\windows\ie8updates\KB2586448-IE8\ie4uinit.exe
    + 2011-08-10 07:03 . 2009-03-08 08:34 105984 c:\windows\ie8updates\KB2559049-IE8\url.dll
    + 2011-08-10 07:03 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2559049-IE8\spuninst\updspapi.dll
    + 2011-08-10 07:03 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2559049-IE8\spuninst\spuninst.exe
    + 2011-08-10 07:03 . 2011-04-25 16:11 206848 c:\windows\ie8updates\KB2559049-IE8\occache.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 611840 c:\windows\ie8updates\KB2559049-IE8\mstime.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 602112 c:\windows\ie8updates\KB2559049-IE8\msfeeds.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 247808 c:\windows\ie8updates\KB2559049-IE8\ieproxy.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 184320 c:\windows\ie8updates\KB2559049-IE8\iepeers.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 743424 c:\windows\ie8updates\KB2559049-IE8\iedvtool.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 387584 c:\windows\ie8updates\KB2559049-IE8\iedkcs32.dll
    + 2011-08-10 07:03 . 2011-04-25 12:01 173568 c:\windows\ie8updates\KB2559049-IE8\ie4uinit.exe
    + 2011-06-16 07:02 . 2009-03-08 08:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll
    + 2011-06-16 07:02 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll
    + 2011-06-16 07:02 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe
    + 2011-06-16 07:09 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2530548-IE8\spuninst\updspapi.dll
    + 2011-06-16 07:09 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2530548-IE8\spuninst\spuninst.exe
    + 2011-06-16 07:08 . 2011-02-22 23:06 206848 c:\windows\ie8updates\KB2530548-IE8\occache.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 611840 c:\windows\ie8updates\KB2530548-IE8\mstime.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 602112 c:\windows\ie8updates\KB2530548-IE8\msfeeds.dll
    + 2011-06-16 07:09 . 2011-02-22 23:06 247808 c:\windows\ie8updates\KB2530548-IE8\ieproxy.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 184320 c:\windows\ie8updates\KB2530548-IE8\iepeers.dll
    + 2011-06-16 07:09 . 2011-02-22 23:06 743424 c:\windows\ie8updates\KB2530548-IE8\iedvtool.dll
    + 2011-06-16 07:09 . 2011-02-22 23:06 387584 c:\windows\ie8updates\KB2530548-IE8\iedkcs32.dll
    + 2011-06-16 07:09 . 2011-02-18 11:49 173568 c:\windows\ie8updates\KB2530548-IE8\ie4uinit.exe
    + 2011-04-15 07:02 . 2010-03-10 06:15 420352 c:\windows\ie8updates\KB2510531-IE8\vbscript.dll
    + 2011-04-15 07:02 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2510531-IE8\spuninst\updspapi.dll
    + 2011-04-15 07:02 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2510531-IE8\spuninst\spuninst.exe
    + 2011-04-15 07:02 . 2009-12-09 05:53 726528 c:\windows\ie8updates\KB2510531-IE8\jscript.dll
    + 2011-04-15 07:25 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2497640-IE8\spuninst\updspapi.dll
    + 2011-04-15 07:25 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2497640-IE8\spuninst\spuninst.exe
    + 2011-04-15 07:25 . 2010-12-20 23:59 206848 c:\windows\ie8updates\KB2497640-IE8\occache.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 611840 c:\windows\ie8updates\KB2497640-IE8\mstime.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 602112 c:\windows\ie8updates\KB2497640-IE8\msfeeds.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 247808 c:\windows\ie8updates\KB2497640-IE8\ieproxy.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 184320 c:\windows\ie8updates\KB2497640-IE8\iepeers.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 743424 c:\windows\ie8updates\KB2497640-IE8\iedvtool.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 387584 c:\windows\ie8updates\KB2497640-IE8\iedkcs32.dll
    + 2011-04-15 07:25 . 2010-12-20 12:55 173568 c:\windows\ie8updates\KB2497640-IE8\ie4uinit.exe
    + 2011-02-14 08:04 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2482017-IE8\spuninst\updspapi.dll
    + 2011-02-14 08:04 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2482017-IE8\spuninst\spuninst.exe
    + 2011-02-14 08:04 . 2010-11-06 00:26 206848 c:\windows\ie8updates\KB2482017-IE8\occache.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 611840 c:\windows\ie8updates\KB2482017-IE8\mstime.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 602112 c:\windows\ie8updates\KB2482017-IE8\msfeeds.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 247808 c:\windows\ie8updates\KB2482017-IE8\ieproxy.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 184320 c:\windows\ie8updates\KB2482017-IE8\iepeers.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 743424 c:\windows\ie8updates\KB2482017-IE8\iedvtool.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 387584 c:\windows\ie8updates\KB2482017-IE8\iedkcs32.dll
    + 2011-02-14 08:04 . 2010-11-03 12:26 173568 c:\windows\ie8updates\KB2482017-IE8\ie4uinit.exe
    + 2010-12-15 08:14 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2416400-IE8\spuninst\updspapi.dll
    + 2010-12-15 08:14 . 2010-02-22 14:23 231288 c:\windows\ie8updates\KB2416400-IE8\spuninst\spuninst.exe
    + 2010-12-15 08:13 . 2010-09-10 05:58 206848 c:\windows\ie8updates\KB2416400-IE8\occache.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 611840 c:\windows\ie8updates\KB2416400-IE8\mstime.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 602112 c:\windows\ie8updates\KB2416400-IE8\msfeeds.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 247808 c:\windows\ie8updates\KB2416400-IE8\ieproxy.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 184320 c:\windows\ie8updates\KB2416400-IE8\iepeers.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 743424 c:\windows\ie8updates\KB2416400-IE8\iedvtool.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 387584 c:\windows\ie8updates\KB2416400-IE8\iedkcs32.dll
    + 2010-12-15 08:13 . 2010-08-26 12:22 173056 c:\windows\ie8updates\KB2416400-IE8\ie4uinit.exe
    + 2010-10-17 07:14 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2360131-IE8\spuninst\updspapi.dll
    + 2010-10-17 07:14 . 2009-05-26 09:01 231288 c:\windows\ie8updates\KB2360131-IE8\spuninst\spuninst.exe
    + 2010-10-17 07:14 . 2010-06-24 12:22 206848 c:\windows\ie8updates\KB2360131-IE8\occache.dll
    + 2010-10-17 07:14 . 2010-06-24 12:22 611840 c:\windows\ie8updates\KB2360131-IE8\mstime.dll
    + 2010-10-17 07:14 . 2010-06-24 12:21 599040 c:\windows\ie8updates\KB2360131-IE8\msfeeds.dll
    + 2010-10-17 07:14 . 2010-06-24 12:21 247808 c:\windows\ie8updates\KB2360131-IE8\ieproxy.dll
    + 2010-10-17 07:14 . 2010-06-24 12:21 184320 c:\windows\ie8updates\KB2360131-IE8\iepeers.dll
    + 2010-10-17 07:14 . 2010-06-24 12:21 743424 c:\windows\ie8updates\KB2360131-IE8\iedvtool.dll
    + 2010-10-17 07:14 . 2010-06-24 12:21 387584 c:\windows\ie8updates\KB2360131-IE8\iedkcs32.dll
    + 2010-10-17 07:14 . 2010-06-23 12:08 173056 c:\windows\ie8updates\KB2360131-IE8\ie4uinit.exe
    + 2008-11-13 02:23 . 2011-07-15 13:29 456320 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2011-10-13 07:04 . 2011-10-13 07:04 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing\1.0.5000.0__b03f5f7f11d50a3a_709108c1\Sys tem.Drawing.dll
    + 2011-10-13 07:05 . 2011-10-13 07:05 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_8a02f 78b\System.Drawing.Design.dll
    + 2011-10-13 07:05 . 2011-10-13 07:05 118784 c:\windows\assembly\NativeImages1_v1.1.4322\Custom Marshalers\1.0.5000.0__b03f5f7f11d50a3a_e32a6706\C ustomMarshalers.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\Wsa tConfig\cc14c69205b984edba1db26fd5e421ac\WsatConfi g.ni.exe
    + 2011-10-13 07:38 . 2011-10-13 07:38 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\Wsa tConfig\c8627df7adb416722d8e0f05c57fef6b\WsatConfi g.ni.exe
    + 2011-10-13 07:38 . 2011-10-13 07:38 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLiveLocal.Wr#\8d9744364ead927be159ddaca5c73b6a \WindowsLiveLocal.WriterPlugin.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLiveLocal.Wr#\3c563025202d24342179c8a1a0a755ad \WindowsLiveLocal.WriterPlugin.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\fe621804d2c95c0e4fc8dff970b4f3f3 \WindowsLive.Writer.HtmlParser.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\fc64a3a9c3629479f0b1239f00825bbc \WindowsLive.Writer.BlogClient.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\f3247ee4c8974dcb21978a283ca5dd37 \WindowsLive.Writer.Interop.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\efe876b4b72a7027fdec114bf09e7a88 \WindowsLive.Writer.Passport.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\ed53ada3701a243ad82946a6565391e9 \WindowsLive.Writer.Instrumentation.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\de41662d8b5a65327eb32e4601b29734 \WindowsLive.Writer.Interop.Mshtml.ni.dll
    + 2011-06-28 07:25 . 2011-06-28 07:25 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\d78f83ddd58e30d6b7beb63b7534f092 \WindowsLive.Writer.Interop.SHDocVw.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\c3eeef28ef5d1fe19442fb127106e180 \WindowsLive.Writer.HtmlEditor.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\bb87acb24dd38a2a35c460e960909f26 \WindowsLive.Writer.Passport.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\b9c42f04581b04b23db07d4d29e47a1d \WindowsLive.Writer.SpellChecker.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\93c0a88195c257f98b0fb4371bfccc03 \WindowsLive.Writer.SpellChecker.ni.dll
    + 2011-08-10 07:42 . 2011-08-10 07:42 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\8211d331938ec70d8f6c630b2eb74658 \WindowsLive.Writer.Controls.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\7a787d90ccf09155f4436bb4d53c941b \WindowsLive.Writer.Localization.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\71caec3c513d97567d5196a72ee57ef0 \WindowsLive.Writer.BrowserControl.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\6adb0eaf9a145a2ba81619e49b1c4480 \WindowsLive.Writer.Extensibility.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\5f4061dfd69553f192267517ab2dc226 \WindowsLive.Writer.Mshtml.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\599239bb43737ad8063b7e9620a4c16e \WindowsLive.Writer.FileDestinations.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\49ab3a63512d9d028cc4fa800c1c3d2f \WindowsLive.Writer.Localization.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\486d51f1da2fb066734ce15fdf8c9733 \WindowsLive.Writer.BrowserControl.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\470af3d7e20d0819ac6dab6f001264c1 \WindowsLive.Writer.HtmlEditor.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\3e2eb2d5abfe8d71ae30931a68ce6fe4 \WindowsLive.Writer.FileDestinations.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\3ae7eae306c355e1efb728fac33b3965 \WindowsLive.Writer.Interop.SHDocVw.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\21b955e068018c3e384bd504b600a78a \WindowsLive.Writer.Extensibility.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\1fbb3941992cd85018b7c64a68dce3f8 \WindowsLive.Writer.BlogClient.ni.dll
    + 2011-06-28 07:25 . 2011-06-28 07:25 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\1802baf79662b34a028da7f1a5de1e64 \WindowsLive.Writer.Interop.Mshtml.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\14ddbf463c0b9b17f98d8f048777784a \WindowsLive.Writer.Instrumentation.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\0d88a9ab4974e271b5ad2fc0a699d8c4 \WindowsLive.Writer.Interop.ni.dll
    + 2011-10-13 07:36 . 2011-10-13 07:36 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\0c0afa682f30eb3e75011f1c92b04129 \WindowsLive.Writer.Controls.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\097baf70e23eed55818deec43d26c44a \WindowsLive.Writer.Mshtml.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\04473507f11eea12b260ab8b2707d423 \WindowsLive.Writer.HtmlParser.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Client\a295b8cfd7c63e29f4972592e2b7ef4b\W indowsLive.Client.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Client\50952e96ff796d55954df71508ec0899\W indowsLive.Client.ni.dll
    + 2011-10-13 07:34 . 2011-10-13 07:34 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571 \WindowsFormsIntegration.ni.dll
    + 2011-08-10 07:40 . 2011-08-10 07:40 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsFormsIntegra#\39ce0c9c9cc294c0ee26c4ff01522961 \WindowsFormsIntegration.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationTypes\f102afdffdbe2565bcedb7fa0626b865\UI AutomationTypes.ni.dll
    + 2011-06-28 07:22 . 2011-06-28 07:22 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationTypes\3740d6db28af31a6523a79fcdd71fbeb\UI AutomationTypes.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationClient\ba55240b7753047f8d1b03ef473bf74e\U IAutomationClient.ni.dll
    + 2011-08-10 07:40 . 2011-08-10 07:40 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationClient\431e918aee8da919f5b9e3a5195ccf93\U IAutomationClient.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Xml.Linq\946eefb99bc116ee68e0e7c69a5a8a5c\Syst em.Xml.Linq.ni.dll
    + 2011-10-13 07:41 . 2011-10-13 07:41 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Xml.Linq\566b2e11e7f3f6d973b17b86cf42f9bc\Syst em.Xml.Linq.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Routing\a82eef3128b9527dc05b3c8667e713bc\S ystem.Web.Routing.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Routing\3533d614ebecd4344efbee619dd11a74\S ystem.Web.Routing.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.RegularE#\203c148c913357bfc2ae9d209101f2b3 \System.Web.RegularExpressions.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.RegularE#\018b6e48c32d5b5d78086998e3505f1c \System.Web.RegularExpressions.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Extensio#\f89fe39468ea6faf71c4257c89cf3c54 \System.Web.Extensions.Design.ni.dll
    + 2011-10-13 07:41 . 2011-10-13 07:41 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Extensio#\d93514a764a83b18f6f3547b59cc8ae9 \System.Web.Extensions.Design.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Entity\93b5d1b77a74b76ac73cbf51ec871c01\Sy stem.Web.Entity.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Entity\2314ff800782dc85224e69e802a073f7\Sy stem.Web.Entity.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Entity.D#\f690a8f5d784a5bb20f2cbaa7277eb6c \System.Web.Entity.Design.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Entity.D#\d06a7d5872bbe85795f947f6c75d38c6 \System.Web.Entity.Design.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.DynamicD#\c5c96400424b85536443623f96f64581 \System.Web.DynamicData.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.DynamicD#\ad0851438a18bf730d974c9b2f5f776a \System.Web.DynamicData.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Abstract#\734ab0ea87d7dfd5c583eea535c05878 \System.Web.Abstractions.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Abstract#\5f8e87b47465a038403e73012c6d102a \System.Web.Abstractions.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Transactions\8efcd633af87989355382b5039f1b7df\ System.Transactions.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Transactions\846dd505f97805f00999ee26aec9bf75\ System.Transactions.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e \System.ServiceProcess.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceProce#\70a1400affdc775d7c7398e036359286 \System.ServiceProcess.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Security\de9cd25ccb24bcf8a0316756e766721f\Syst em.Security.ni.dll
    + 2011-10-13 07:36 . 2011-10-13 07:36 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Security\36c12de583ee81e9c99acb72b09d77ac\Syst em.Security.ni.dll
    + 2011-10-13 07:36 . 2011-10-13 07:36 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2 \System.Runtime.Serialization.Formatters.Soap.ni.d ll
    + 2011-08-10 07:43 . 2011-08-10 07:43 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\21248037960cf6dfa2ce401d355bd6c9 \System.Runtime.Serialization.Formatters.Soap.ni.d ll
    + 2011-08-10 07:43 . 2011-08-10 07:43 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Remo#\b7e0214a811f81e09041864081139641 \System.Runtime.Remoting.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Remo#\36bf3d5f05a40c9e3cadca5789c8a469 \System.Runtime.Remoting.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Net\b2a84980f206431821d85d5155d5916f\System.Ne t.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Net\480ea914e13fe41cdd8fb542bb1f7e81\System.Ne t.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management\90b90e700e59d73d6d692cf74e1ba16e\Sy stem.Management.ni.dll
    + 2011-08-10 08:03 . 2011-08-10 08:03 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management\6e563a58e6fc0117070d5b8fd59e4e1b\Sy stem.Management.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management.I#\f36eded354122da9555a6c7cdbdb5431 \System.Management.Instrumentation.ni.dll
    + 2011-08-10 08:03 . 2011-08-10 08:03 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management.I#\dc72c7581f1b3794c0ea595ba02ff7ad \System.Management.Instrumentation.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 160256 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management.A#\5d6a0e02b8e1cff94d07d2507667edc7 \System.Management.Automation.resources.ni.dll
    + 2011-06-28 07:28 . 2011-06-28 07:28 160256 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management.A#\35b34a452180a868171e1364bcc02208 \System.Management.Automation.resources.ni.dll
    + 2011-08-10 07:41 . 2011-08-10 07:41 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IO.Log\fcf8612a210d1f76e0b37dc8467b4696\System .IO.Log.ni.dll
    + 2011-10-13 07:35 . 2011-10-13 07:35 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IO.Log\20a77c41ee12362d303fb2574fcd5a24\System .IO.Log.ni.dll
    + 2011-08-10 07:41 . 2011-08-10 07:41 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IdentityMode#\ec017b5a95d02fccaefd835490ef1e14 \System.IdentityModel.Selectors.ni.dll
    + 2011-10-13 07:35 . 2011-10-13 07:35 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956 \System.IdentityModel.Selectors.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.EnterpriseSe#\75f452279422a7898e840ee5768c9d2e \System.EnterpriseServices.Wrapper.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.EnterpriseSe#\75f452279422a7898e840ee5768c9d2e \System.EnterpriseServices.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.EnterpriseSe#\69792bef8a100a055db88848836a7d88 \System.EnterpriseServices.Wrapper.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.EnterpriseSe#\69792bef8a100a055db88848836a7d88 \System.EnterpriseServices.ni.dll
    + 2011-08-10 07:39 . 2011-08-10 07:39 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing.Desi#\f7cd3d07c15366b76fe4c38d24455d6b \System.Drawing.Design.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing.Desi#\896eca06e2d9377b2dc4fad56ce49b07 \System.Drawing.Design.ni.dll
    + 2011-08-10 08:03 . 2011-08-10 08:03 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\822c996e6ad4901219b7de399a6f78bf \System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\33e9b0c368c31ef37a2ec7b5a181044b \System.DirectoryServices.Protocols.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\1ffe911e62f482e42be2c4428bd08c10 \System.DirectoryServices.Protocols.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c \System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Service#\e5ada332a9bc3c982e6aede6ba354196 \System.Data.Services.Client.ni.dll
    + 2011-08-10 08:02 . 2011-08-10 08:02 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Service#\e1c009b2c9becdb732a2ea45f32a46b8 \System.Data.Services.Design.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Service#\3f179f373f31817a914b639a56cc0497 \System.Data.Services.Design.ni.dll
    + 2011-08-10 08:02 . 2011-08-10 08:02 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Service#\1defd94e1662a4478ccf2cd0b1b4e6a6 \System.Data.Services.Client.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Entity.#\fee1a48b769a8c4beb335ee5ce006091 \System.Data.Entity.Design.ni.dll
    + 2011-08-10 08:00 . 2011-08-10 08:00 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Entity.#\04267c1dbdcdd8ec37e1518126767ead \System.Data.Entity.Design.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.DataSet#\f2a6d41b3f6e26eea6dcac9298aa637b \System.Data.DataSetExtensions.ni.dll
    + 2011-10-13 07:39 . 2011-10-13 07:39 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.DataSet#\b9d9ff5d03e90ede1116794f2c7dd6da \System.Data.DataSetExtensions.ni.dll
    + 2011-10-13 07:36 . 2011-10-13 07:36 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuration\bce0720436dc6cb76006377f295ea365 \System.Configuration.ni.dll
    + 2011-08-10 07:42 . 2011-08-10 07:42 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuration\77df2cd21a5b85a1605b335aa9ad9d44 \System.Configuration.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuratio#\585e68739b2a8aff61ee6b2786513245 \System.Configuration.Install.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuratio#\29d7091f6eab0ec61c4eb625ed221b73 \System.Configuration.Install.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.AddIn\fbf6ef12d1456058acde29f2640092fb\System. AddIn.ni.dll
    + 2011-10-13 07:39 . 2011-10-13 07:39 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.AddIn\3048737e9e3bf5173121a084337256bc\System. AddIn.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMS vcHost\896e42071939e038008b0bbbfed1213c\SMSvcHost. ni.exe
    + 2011-10-13 07:38 . 2011-10-13 07:38 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMS vcHost\6e45cf503f025c5fe814ea7e52f62a78\SMSvcHost. ni.exe
    + 2011-08-10 07:44 . 2011-08-10 07:44 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMD iagnostics\ca07e9cf488af1290d2340d682574a24\SMDiag nostics.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMD iagnostics\474a341340f687bcbd7777f2820a8c7a\SMDiag nostics.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\Ser viceModelReg\f2df1ca28301bfe7e1d52b86c8394217\Serv iceModelReg.ni.exe
    + 2011-08-10 07:44 . 2011-08-10 07:44 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\Ser viceModelReg\a5aa977dd575a6beb3a416bd480b98a7\Serv iceModelReg.ni.exe
    + 2011-08-10 07:38 . 2011-08-10 07:38 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\f52e48f55258d0a04fbab3a1f93752e9 \PresentationFramework.Classic.ni.dll
    + 2011-08-10 07:38 . 2011-08-10 07:38 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\cf812b99f587ab514afb36fa9d4c1567 \PresentationFramework.Aero.ni.dll
    + 2011-10-13 07:29 . 2011-10-13 07:29 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f \PresentationFramework.Luna.ni.dll
    + 2011-08-10 07:38 . 2011-08-10 07:38 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\b7795999cc67f3a6cec40f5b24005e00 \PresentationFramework.Luna.ni.dll
    + 2011-10-13 07:29 . 2011-10-13 07:29 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5 \PresentationFramework.Aero.ni.dll
    + 2011-10-13 07:29 . 2011-10-13 07:29 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1 \PresentationFramework.Classic.ni.dll
    + 2011-10-13 07:29 . 2011-10-13 07:29 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0 \PresentationFramework.Royale.ni.dll
    + 2011-08-10 07:38 . 2011-08-10 07:38 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\09f5af61ea2af04eb32c04b3091ffc86 \PresentationFramework.Royale.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSB uild\2d89c7b72bc8e527b26d5b6f3b931012\MSBuild.ni.e xe
    + 2011-10-13 07:38 . 2011-10-13 07:38 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSB uild\04595f414c49cf2a65b349648ba23e62\MSBuild.ni.e xe
    + 2011-10-13 07:38 . 2011-10-13 07:38 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3 \Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Transacti#\39e9d172f0cf5eec30b1b67212cc032b \Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 492032 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\fb17fceaa5465d6eeb15034a4bea2687 \Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 968192 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\eae2ab662e4b44aacd4cebd3f9b6c34f \Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 433664 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\9bcb002ea577b825f7c7872ec21b78a3 \Microsoft.PowerShell.Commands.Management.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 433664 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\9963fdc4d47bf168d55ffca06288c0b6 \Microsoft.PowerShell.Commands.Management.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 492032 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\97869a9a27244319a1bcb5c2d446a1cc \Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\4d166154a2d5a4497acccfcd08355267 \Microsoft.PowerShell.Security.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\43b77700ad8d984224b12472318e02ec \Microsoft.PowerShell.Security.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 968192 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.PowerShel#\1e71552b14add6b28ac6ad7897f3969d \Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Uti#\ff6d4892775fd1f9b137f7c92ea453f2 \Microsoft.Build.Utilities.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Uti#\f1b0ec3ccde9142e67ac681fb521ac66 \Microsoft.Build.Utilities.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Uti#\9250f038410f0d6432e3ccb0b046862b \Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc \Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Eng#\da112c5757e3c68d6369b6aa46cc9682 \Microsoft.Build.Engine.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Eng#\a4672179aba638cd78bdfe268391b47b \Microsoft.Build.Engine.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14 \Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Con#\37db660a84ee52b61a7ca55812581bbd \Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-06-28 07:26 . 2011-06-28 07:26 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\Cus tomMarshalers\80bd17388778c90f301746ad88700758\Cus tomMarshalers.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\Cus tomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\Cus tomMarshalers.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\Com SvcConfig\fe9a21b94803f74697bb42b9d1fdea5b\ComSvcC onfig.ni.exe
    + 2011-10-13 07:38 . 2011-10-13 07:38 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\Com SvcConfig\4e68d5df30b197ff72c75f1c3c24b949\ComSvcC onfig.ni.exe
    + 2011-08-10 07:41 . 2011-08-10 07:41 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\Asp NetMMCExt\f160c8e40b60edd47ae74b0b911fece1\AspNetM MCExt.ni.dll
    + 2011-10-13 07:35 . 2011-10-13 07:35 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\Asp NetMMCExt\e1bcee92f5af50d560d577c0a99ea3bd\AspNetM MCExt.ni.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2 .0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2 .0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0 .0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0 .0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess \2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.d ll
    - 2010-08-13 07:14 . 2010-08-13 07:14 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess \2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.d ll
    - 2010-08-13 07:14 . 2010-08-13 07:14 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0 .0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0 .0__b03f5f7f11d50a3a\System.Security.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serial ization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\ System.Runtime.Serialization.Formatters.Soap.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serial ization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\ System.Runtime.Serialization.Formatters.Soap.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoti ng\2.0.0.0__b77a5c561934e089\System.Runtime.Remoti ng.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoti ng\2.0.0.0__b77a5c561934e089\System.Runtime.Remoti ng.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0. 0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0. 0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0 .0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0 .0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0. 0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0. 0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServi ces\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServ ices.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServi ces\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServ ices.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServi ces.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.Dir ectoryServices.Protocols.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServi ces.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.Dir ectoryServices.Protocols.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0 .0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0 .0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2. 0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2. 0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\ 2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\ 2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03 f5f7f11d50a3a\sysglobl.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03 f5f7f11d50a3a\sysglobl.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic \8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.d ll
    + 2011-10-13 07:20 . 2011-10-13 07:20 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic \8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.d ll
    + 2011-10-13 07:20 . 2011-10-13 07:20 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft .VisualBasic.Compatibility.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft .VisualBasic.Compatibility.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Micr osoft.VisualBasic.Compatibility.Data.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Micr osoft.VisualBasic.Compatibility.Data.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0 .0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0 .0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks \2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.d ll
    + 2011-10-13 07:20 . 2011-10-13 07:20 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks \2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.d ll
    - 2010-08-13 07:14 . 2010-08-13 07:14 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engin e\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine .dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engin e\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine .dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0_ _b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2010-08-13 07:13 . 2010-08-13 07:13 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0_ _b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0 .0.0__b77a5c561934e089\System.Transactions.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0 .0.0__b77a5c561934e089\System.Transactions.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 113664 c:\windows\assembly\GAC_32\System.EnterpriseServic es\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.Wrapper.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 113664 c:\windows\assembly\GAC_32\System.EnterpriseServic es\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.Wrapper.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 258048 c:\windows\assembly\GAC_32\System.EnterpriseServic es\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 258048 c:\windows\assembly\GAC_32\System.EnterpriseServic es\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 486400 c:\windows\assembly\GAC_32\System.Data.OracleClien t\2.0.0.0__b77a5c561934e089\System.Data.OracleClie nt.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 486400 c:\windows\assembly\GAC_32\System.Data.OracleClien t\2.0.0.0__b77a5c561934e089\System.Data.OracleClie nt.dll
    + 2011-10-13 07:09 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2592799$\spuninst\updspap i.dll
    + 2011-10-13 07:09 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2592799$\spuninst\spunins t.exe
    + 2011-10-13 07:09 . 2011-02-16 13:22 138496 c:\windows\$NtUninstallKB2592799$\afd.sys
    + 2011-10-13 07:10 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2567053$\spuninst\updspap i.dll
    + 2011-10-13 07:10 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2567053$\spuninst\spunins t.exe
    + 2011-10-13 07:22 . 2009-10-08 18:57 611328 c:\windows\$NtUninstallKB2564958$\uiautomationcore .dll
    + 2011-10-13 07:22 . 2011-08-12 17:51 382840 c:\windows\$NtUninstallKB2564958$\spuninst\updspap i.dll
    + 2011-10-13 07:22 . 2011-08-12 17:51 231288 c:\windows\$NtUninstallKB2564958$\spuninst\spunins t.exe
    + 2011-10-13 07:22 . 2009-10-08 18:57 220160 c:\windows\$NtUninstallKB2564958$\oleacc.dll
    + 2010-09-16 04:13 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB982802\update\updspapi.dll
    + 2010-09-16 04:13 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB982802\update\update.exe
    + 2010-09-16 04:13 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB982802\spuninst.exe
    + 2010-07-23 06:13 . 2010-07-23 06:13 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll
    + 2010-10-17 07:17 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB982132\update\updspapi.dll
    + 2010-10-17 07:17 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB982132\update\update.exe
    + 2010-10-17 07:17 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB982132\spuninst.exe
    + 2010-08-27 08:01 . 2010-08-27 08:01 119808 c:\windows\$hf_mig$\KB982132\SP3QFE\t2embed.dll
    + 2010-10-17 07:05 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB981957\update\updspapi.dll
    + 2010-10-17 07:05 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB981957\update\update.exe
    + 2010-10-17 07:05 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB981957\spuninst.exe
    + 2010-09-16 04:12 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981322\update\updspapi.dll
    + 2010-09-16 04:12 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981322\update\update.exe
    + 2010-09-16 04:12 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981322\spuninst.exe
    + 2010-04-16 15:29 . 2010-04-16 15:29 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
    + 2010-10-17 07:15 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB979687\update\updspapi.dll
    + 2010-10-17 07:15 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB979687\update\update.exe
    + 2010-10-17 07:15 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB979687\spuninst.exe
    + 2010-07-12 13:02 . 2010-07-12 13:02 218112 c:\windows\$hf_mig$\KB979687\SP3QFE\wordpad.exe
    + 2011-03-17 07:02 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971029\update\updspapi.dll
    + 2011-03-17 07:02 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971029\update\update.exe
    + 2011-03-17 07:02 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971029\spuninst.exe
    + 2009-07-27 22:13 . 2009-07-27 22:13 135168 c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
    + 2011-09-15 02:56 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2616676\update\updspapi.dll
    + 2011-09-15 02:56 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2616676\update\update.exe
    + 2011-09-15 02:56 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2616676\spuninst.exe
    + 2011-09-09 09:11 . 2011-09-09 09:11 599552 c:\windows\$hf_mig$\KB2616676\SP3QFE\crypt32.dll
    + 2011-09-13 07:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2607712\update\updspapi.dll
    + 2011-09-13 07:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2607712\update\update.exe
    + 2011-09-13 07:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2607712\spuninst.exe
    + 2011-09-03 10:16 . 2011-09-03 10:16 599552 c:\windows\$hf_mig$\KB2607712\SP3QFE\crypt32.dll
    + 2011-10-13 07:09 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2592799\update\updspapi.dll
    + 2011-10-13 07:09 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2592799\update\update.exe
    + 2011-10-13 07:09 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2592799\spuninst.exe
    + 2011-10-13 03:38 . 2011-08-17 13:41 138496 c:\windows\$hf_mig$\KB2592799\SP3QFE\afd.sys
    + 2011-10-13 07:07 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2586448-IE8\update\updspapi.dll
    + 2011-10-13 07:07 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2586448-IE8\update\update.exe
    + 2011-10-13 07:07 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2586448-IE8\spuninst.exe
    + 2011-10-13 03:37 . 2011-08-22 23:47 919552 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 105984 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\url.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 206848 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\occache.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 611840 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mstime.dll
    + 2011-10-13 03:38 . 2011-08-22 23:47 602112 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeeds.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 247808 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieproxy.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 184320 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iepeers.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 743424 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedvtool.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 387584 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedkcs32.dll
    + 2011-10-13 03:37 . 2011-08-22 11:52 174080 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ie4uinit.exe
    + 2011-09-15 02:49 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570947\update\updspapi.dll
    + 2011-09-15 02:49 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570947\update\update.exe
    + 2011-09-15 02:49 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570947\spuninst.exe
    + 2011-08-10 07:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570222\update\updspapi.dll
    + 2011-08-10 07:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570222\update\update.exe
    + 2011-08-10 07:17 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570222\spuninst.exe
    + 2011-08-09 22:38 . 2011-06-24 14:09 139656 c:\windows\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys
    + 2011-08-10 07:18 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567680\update\updspapi.dll
    + 2011-08-10 07:18 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567680\update\update.exe
    + 2011-08-10 07:18 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567680\spuninst.exe
    + 2011-06-20 17:43 . 2011-06-20 17:43 293376 c:\windows\$hf_mig$\KB2567680\SP3QFE\winsrv.dll
    + 2011-10-13 07:10 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567053\update\updspapi.dll
    + 2011-10-13 07:10 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567053\update\update.exe
    + 2011-10-13 07:10 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567053\spuninst.exe
    + 2011-08-10 07:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2566454\update\updspapi.dll
    + 2011-08-10 07:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2566454\update\update.exe
    + 2011-08-10 07:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2566454\spuninst.exe
    + 2011-08-10 07:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2562937\update\updspapi.dll
    + 2011-08-10 07:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2562937\update\update.exe
    + 2011-08-10 07:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2562937\spuninst.exe
    + 2011-08-10 07:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2559049-IE8\update\updspapi.dll
    + 2011-08-10 07:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2559049-IE8\update\update.exe
    + 2011-08-10 07:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2559049-IE8\spuninst.exe
    + 2011-08-09 22:38 . 2011-06-23 18:33 919552 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 105984 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\url.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 206848 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\occache.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 611840 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mstime.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 602112 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeeds.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 247808 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieproxy.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 184320 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iepeers.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 743424 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedvtool.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 387584 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedkcs32.dll
    + 2011-08-09 22:38 . 2011-06-23 12:19 173568 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ie4uinit.exe
    + 2011-07-16 07:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2555917\update\updspapi.dll
    + 2011-07-16 07:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2555917\update\update.exe
    + 2011-07-16 07:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2555917\spuninst.exe
    + 2011-06-16 07:07 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544893\update\updspapi.dll
    + 2011-06-16 07:07 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544893\update\update.exe
    + 2011-06-16 07:07 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544893\spuninst.exe
    + 2011-06-15 22:26 . 2011-05-02 15:30 692736 c:\windows\$hf_mig$\KB2544893\SP3QFE\inetcomm.dll
    + 2011-06-16 07:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544521-IE8\update\updspapi.dll
    + 2011-06-16 07:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544521-IE8\update\update.exe
    + 2011-06-16 07:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544521-IE8\spuninst.exe
    + 2011-06-15 22:26 . 2011-04-30 02:59 758784 c:\windows\$hf_mig$\KB2544521-IE8\SP3QFE\vgx.dll
    + 2011-07-16 07:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2541763\update\updspapi.dll
    + 2011-07-16 07:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2541763\update\update.exe
    + 2011-07-16 07:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2541763\spuninst.exe
    + 2011-04-29 17:23 . 2011-04-29 17:23 151552 c:\windows\$hf_mig$\KB2541763\SP3QFE\schannel.dll
    + 2011-06-16 07:10 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276\update\updspapi.dll
    + 2011-06-16 07:10 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276\update\update.exe
    + 2011-06-16 07:10 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276\spuninst.exe
    + 2011-06-15 22:27 . 2011-04-29 16:47 457856 c:\windows\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys
    + 2011-08-10 07:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276-v2\update\updspapi.dll
    + 2011-08-10 07:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276-v2\update\update.exe
    + 2011-08-10 07:17 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276-v2\spuninst.exe
    + 2011-08-09 22:38 . 2011-07-15 13:29 457856 c:\windows\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys
    + 2011-06-16 07:12 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2535512\update\updspapi.dll
    + 2011-06-16 07:12 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2535512\update\update.exe
    + 2011-06-16 07:12 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2535512\spuninst.exe
    + 2011-06-15 22:27 . 2011-04-21 13:52 105472 c:\windows\$hf_mig$\KB2535512\SP3QFE\mup.sys
    + 2011-06-16 07:09 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2530548-IE8\update\updspapi.dll
    + 2011-06-16 07:09 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2530548-IE8\update\update.exe
    + 2011-06-16 07:09 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2530548-IE8\spuninst.exe
    + 2011-06-15 22:27 . 2011-04-25 16:09 919552 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 206848 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\occache.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 611840 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mstime.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 602112 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeeds.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 247808 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieproxy.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 184320 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iepeers.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 743424 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedvtool.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 387584 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedkcs32.dll
    + 2011-06-15 22:27 . 2011-04-25 11:37 173568 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ie4uinit.exe
    + 2011-03-26 07:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2524375\update\updspapi.dll
    + 2011-03-26 07:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2524375\update\update.exe
    + 2011-03-26 07:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2524375\spuninst.exe
    + 2011-04-15 07:12 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2511455\update\updspapi.dll
    + 2011-04-15 07:12 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2511455\update\update.exe
    + 2011-04-15 07:12 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2511455\spuninst.exe
    + 2011-04-14 07:49 . 2011-02-17 13:19 457472 c:\windows\$hf_mig$\KB2511455\SP3QFE\mrxsmb.sys
    + 2011-04-15 07:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2510531-IE8\update\updspapi.dll
    + 2011-04-15 07:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2510531-IE8\update\update.exe
    + 2011-04-15 07:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2510531-IE8\spuninst.exe
    + 2011-04-14 07:47 . 2011-03-04 06:35 420864 c:\windows\$hf_mig$\KB2510531-IE8\SP3QFE\vbscript.dll
    + 2011-04-14 07:47 . 2011-03-04 06:35 726528 c:\windows\$hf_mig$\KB2510531-IE8\SP3QFE\jscript.dll
    + 2011-04-15 07:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2509553\update\updspapi.dll
    + 2011-04-15 07:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2509553\update\update.exe
    + 2011-04-15 07:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2509553\spuninst.exe
    + 2008-06-20 11:16 . 2008-06-20 11:16 225856 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys
    + 2008-06-20 11:59 . 2008-06-20 11:59 361600 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
    + 2008-06-20 17:43 . 2008-06-20 17:43 245248 c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
    + 2011-03-03 06:53 . 2011-03-03 06:53 149504 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsapi.dll
    + 2008-10-16 15:07 . 2008-10-16 15:07 138496 c:\windows\$hf_mig$\KB2509553\SP3QFE\afd.sys
    + 2011-04-15 07:12 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2508429\update\updspapi.dll
    + 2011-04-15 07:12 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2508429\update\update.exe
    + 2011-04-15 07:12 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2508429\spuninst.exe
    + 2011-02-17 13:19 . 2011-02-17 13:19 357888 c:\windows\$hf_mig$\KB2508429\SP3QFE\srv.sys
    + 2011-04-15 07:14 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2508272\update\updspapi.dll
    + 2011-04-15 07:14 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2508272\update\update.exe
    + 2011-04-15 07:14 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2508272\spuninst.exe
    + 2011-07-16 07:13 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2507938\update\updspapi.dll
    + 2011-07-16 07:13 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2507938\update\update.exe
    + 2011-07-16 07:13 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2507938\spuninst.exe
    + 2011-04-26 11:02 . 2011-04-26 11:02 293376 c:\windows\$hf_mig$\KB2507938\SP3QFE\winsrv.dll
    + 2011-04-15 07:13 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2507618\update\updspapi.dll
    + 2011-04-15 07:13 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2507618\update\update.exe
    + 2011-04-15 07:13 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2507618\spuninst.exe
    + 2011-02-15 13:05 . 2011-02-15 13:05 290432 c:\windows\$hf_mig$\KB2507618\SP3QFE\atmfd.dll
    + 2011-04-15 07:28 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2506223\update\updspapi.dll
    + 2011-04-15 07:28 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2506223\update\update.exe
    + 2011-04-15 07:28 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2506223\spuninst.exe
    + 2011-04-15 07:10 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2506212\update\updspapi.dll
    + 2011-04-15 07:10 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2506212\update\update.exe
    + 2011-04-15 07:10 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2506212\spuninst.exe
    + 2011-02-08 13:32 . 2011-02-08 13:32 974848 c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42u.dll
    + 2011-02-08 13:32 . 2011-02-08 13:32 978944 c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42.dll
    + 2011-06-16 07:15 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2503665\update\updspapi.dll
    + 2011-06-16 07:15 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2503665\update\update.exe
    + 2011-06-16 07:15 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2503665\spuninst.exe
    + 2011-06-15 22:27 . 2011-02-16 13:25 138496 c:\windows\$hf_mig$\KB2503665\SP3QFE\afd.sys
    + 2011-04-15 07:14 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2503658\update\updspapi.dll
    + 2011-04-15 07:14 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2503658\update\update.exe
    + 2011-04-15 07:14 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2503658\spuninst.exe
    + 2011-03-07 05:31 . 2011-03-07 05:31 692736 c:\windows\$hf_mig$\KB2503658\SP3QFE\inetcomm.dll
    + 2011-04-15 07:25 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2497640-IE8\update\updspapi.dll
    + 2011-04-15 07:25 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2497640-IE8\update\update.exe
    + 2011-04-15 07:25 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2497640-IE8\spuninst.exe
    + 2011-04-14 07:50 . 2011-02-22 23:27 919552 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 206848 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\occache.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 611840 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mstime.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 602112 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\msfeeds.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 247808 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ieproxy.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 184320 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iepeers.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 743424 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iedvtool.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 387584 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iedkcs32.dll
    + 2011-04-14 07:50 . 2011-02-22 12:08 173568 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ie4uinit.exe
    + 2011-04-15 07:41 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2491683\update\updspapi.dll
    + 2011-04-15 07:41 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2491683\update\update.exe
    + 2011-04-15 07:41 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2491683\spuninst.exe
    + 2011-02-11 13:22 . 2011-02-11 13:22 229888 c:\windows\$hf_mig$\KB2491683\SP3QFE\fxscover.exe
    + 2011-04-15 07:36 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2485663\update\updspapi.dll
    + 2011-04-15 07:36 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2485663\update\update.exe
    + 2011-04-15 07:36 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2485663\spuninst.exe
    + 2011-02-14 08:09 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2485376\update\updspapi.dll
    + 2011-02-14 08:09 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2485376\update\update.exe
    + 2011-02-14 08:09 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2485376\spuninst.exe
    + 2011-01-07 14:09 . 2011-01-07 14:09 290048 c:\windows\$hf_mig$\KB2485376\SP3QFE\atmfd.dll
    + 2011-02-14 08:08 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2483185\update\updspapi.dll
    + 2011-02-14 08:08 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2483185\update\update.exe
    + 2011-02-14 08:08 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2483185\spuninst.exe
    + 2011-01-21 14:42 . 2011-01-21 14:42 439808 c:\windows\$hf_mig$\KB2483185\SP3QFE\shimgvw.dll
    + 2011-02-14 08:04 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2482017-IE8\update\updspapi.dll
    + 2011-02-14 08:04 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2482017-IE8\update\update.exe
    + 2011-02-14 08:04 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2482017-IE8\spuninst.exe
    + 2011-02-13 19:27 . 2010-12-20 23:58 919552 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 206848 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\occache.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 611840 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mstime.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 602112 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\msfeeds.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 247808 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ieproxy.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 184320 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iepeers.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 743424 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iedvtool.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 387584 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iedkcs32.dll
    + 2011-02-13 19:27 . 2010-12-20 12:48 173568 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ie4uinit.exe
    + 2011-03-09 08:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2481109\update\updspapi.dll
    + 2011-03-09 08:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2481109\update\update.exe
    + 2011-03-09 08:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2481109\spuninst.exe
    + 2011-01-27 11:41 . 2011-01-27 11:41 677888 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstsc.exe
    + 2011-02-02 07:57 . 2011-02-02 07:57 136192 c:\windows\$hf_mig$\KB2481109\SP3QFE\aaclient.dll
    + 2011-03-09 08:15 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2479943\update\updspapi.dll
    + 2011-03-09 08:15 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2479943\update\update.exe
    + 2011-03-09 08:15 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2479943\spuninst.exe
    + 2011-02-09 13:52 . 2011-02-09 13:52 270848 c:\windows\$hf_mig$\KB2479943\SP3QFE\sbe.dll
    + 2011-02-09 13:52 . 2011-02-09 13:52 186880 c:\windows\$hf_mig$\KB2479943\SP3QFE\encdec.dll
    + 2011-02-14 08:09 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2479628\update\updspapi.dll
    + 2011-02-14 08:09 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2479628\update\update.exe
    + 2011-02-14 08:09 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2479628\spuninst.exe
    + 2011-02-14 08:10 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2478971\update\updspapi.dll
    + 2011-02-14 08:10 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2478971\update\update.exe
    + 2011-02-14 08:10 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2478971\spuninst.exe
    + 2010-12-22 12:32 . 2010-12-22 12:32 301568 c:\windows\$hf_mig$\KB2478971\SP3QFE\kerberos.dll
    + 2011-02-15 08:01 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2478960\update\updspapi.dll
    + 2011-02-15 08:01 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2478960\update\update.exe
    + 2011-02-15 08:01 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2478960\spuninst.exe
    + 2010-12-20 17:24 . 2010-12-20 17:24 730112 c:\windows\$hf_mig$\KB2478960\SP3QFE\lsasrv.dll
    + 2011-02-14 08:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2476687\update\updspapi.dll
    + 2011-02-14 08:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2476687\update\update.exe
    + 2011-02-14 08:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2476687\spuninst.exe
    + 2011-06-16 07:16 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2476490\update\updspapi.dll
    + 2011-06-16 07:16 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2476490\update\update.exe
    + 2011-06-16 07:16 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2476490\spuninst.exe
    + 2010-12-20 17:30 . 2010-12-20 17:30 552448 c:\windows\$hf_mig$\KB2476490\SP3QFE\oleaut32.dll
    + 2010-12-15 08:12 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2467659\update\updspapi.dll
    + 2010-12-15 08:12 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2467659\update\update.exe
    + 2010-12-15 08:12 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2467659\spuninst.exe
    + 2010-12-15 08:15 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2443105\update\updspapi.dll
    + 2010-12-15 08:15 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2443105\update\update.exe
    + 2010-12-15 08:15 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2443105\spuninst.exe
    + 2010-12-15 08:13 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2440591\update\updspapi.dll
    + 2010-12-15 08:13 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2440591\update\update.exe
    + 2010-12-15 08:13 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2440591\spuninst.exe
    + 2010-12-15 08:12 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2436673\update\updspapi.dll
    + 2010-12-15 08:12 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2436673\update\update.exe
    + 2010-12-15 08:12 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2436673\spuninst.exe
    + 2010-12-15 08:03 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2423089\update\updspapi.dll
    + 2010-12-15 08:03 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2423089\update\update.exe
    + 2010-12-15 08:03 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2423089\spuninst.exe
    + 2011-01-12 08:01 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2419632\update\updspapi.dll
    + 2011-01-12 08:01 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2419632\update\update.exe
    + 2011-01-12 08:01 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2419632\spuninst.exe
    + 2010-11-09 14:50 . 2010-11-09 14:50 253952 c:\windows\$hf_mig$\KB2419632\SP3QFE\odbc32.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 102400 c:\windows\$hf_mig$\KB2419632\SP3QFE\msjro.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 200704 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadox.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 180224 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadomd.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 565248 c:\windows\$hf_mig$\KB2419632\SP3QFE\msado15.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 143360 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadco.dll
    + 2010-12-15 08:14 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2416400-IE8\update\updspapi.dll
    + 2010-12-15 08:14 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2416400-IE8\update\update.exe
    + 2010-12-15 08:14 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2416400-IE8\spuninst.exe
    + 2010-12-15 04:11 . 2010-11-06 00:27 919552 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 206848 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\occache.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 611840 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mstime.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 602112 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeeds.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 247808 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieproxy.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 184320 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iepeers.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 743424 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedvtool.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 387584 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedkcs32.dll
    + 2010-12-15 04:11 . 2010-11-03 12:01 173568 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ie4uinit.exe
    + 2011-02-14 08:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2393802\update\updspapi.dll
    + 2011-02-14 08:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2393802\update\update.exe
    + 2011-02-14 08:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2393802\spuninst.exe
    + 2011-02-13 19:17 . 2010-12-09 15:15 718336 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntdll.dll
    + 2010-10-17 07:18 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2387149\update\updspapi.dll
    + 2010-10-17 07:18 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2387149\update\update.exe
    + 2010-10-17 07:18 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2387149\spuninst.exe
    + 2010-10-16 21:23 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42u.dll
    + 2010-10-16 21:23 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42.dll
    + 2010-10-16 21:23 . 2010-09-18 07:18 953856 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
    + 2010-10-16 21:23 . 2010-09-18 07:18 954368 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40.dll
    + 2010-10-17 07:02 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2360937\update\updspapi.dll
    + 2010-10-17 07:02 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2360937\update\update.exe
    + 2010-10-17 07:02 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2360937\spuninst.exe
    + 2010-10-16 21:18 . 2010-08-16 08:43 590848 c:\windows\$hf_mig$\KB2360937\SP3QFE\rpcrt4.dll
    + 2010-10-17 07:14 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2360131-IE8\update\updspapi.dll
    + 2010-10-17 07:14 . 2009-05-26 09:01 755576 c:\windows\$hf_mig$\KB2360131-IE8\update\update.exe
    + 2010-10-17 07:14 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB2360131-IE8\spuninst.exe
    + 2010-10-16 21:20 . 2010-09-10 05:57 919552 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 206848 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\occache.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 611840 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mstime.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 602112 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeeds.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 247808 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieproxy.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 184320 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iepeers.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 743424 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedvtool.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 387584 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedkcs32.dll
    + 2010-10-16 21:20 . 2010-09-08 15:48 173056 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ie4uinit.exe
    + 2010-09-16 04:13 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
    + 2010-09-16 04:13 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2347290\update\update.exe
    + 2010-09-16 04:13 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2347290\spuninst.exe
    + 2010-10-17 07:17 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2345886\update\updspapi.dll
    + 2010-10-17 07:17 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2345886\update\update.exe
    + 2010-10-17 07:17 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2345886\spuninst.exe
    + 2010-08-26 13:37 . 2010-08-26 13:37 357248 c:\windows\$hf_mig$\KB2345886\SP3QFE\srv.sys
    + 2010-12-15 08:15 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2296199\update\updspapi.dll
    + 2010-12-15 08:15 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2296199\update\update.exe
    + 2010-12-15 08:15 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2296199\spuninst.exe
    + 2010-10-28 13:08 . 2010-10-28 13:08 290048 c:\windows\$hf_mig$\KB2296199\SP3QFE\atmfd.dll
    + 2010-10-17 07:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2279986\update\updspapi.dll
    + 2010-10-17 07:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2279986\update\update.exe
    + 2010-10-17 07:17 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2279986\spuninst.exe
    + 2010-09-01 11:48 . 2010-09-01 11:48 285824 c:\windows\$hf_mig$\KB2279986\SP3QFE\atmfd.dll
    + 2010-09-16 04:13 . 2009-05-26 09:01 382840 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll
    + 2010-09-16 04:13 . 2009-05-26 09:01 755576 c:\windows\$hf_mig$\KB2259922\update\update.exe
    + 2010-09-16 04:13 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB2259922\spuninst.exe
    + 2010-09-16 04:07 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
    + 2010-09-16 04:07 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2141007\update\update.exe
    + 2010-09-16 04:07 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2141007\spuninst.exe
    + 2010-06-09 07:41 . 2010-06-09 07:41 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
    + 2010-09-16 04:13 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
    + 2010-09-16 04:13 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2121546\update\update.exe
    + 2010-09-16 04:13 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2121546\spuninst.exe
    + 2010-06-18 17:43 . 2010-06-18 17:43 293376 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
    + 2011-04-14 07:49 . 2010-10-23 00:51 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 3781960 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a 1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll
    + 2011-04-19 02:51 . 2011-04-19 02:51 3766600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a 1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
    + 2009-07-12 05:02 . 2009-07-12 05:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
    + 2011-05-14 00:04 . 2011-05-14 00:04 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80u.dll
    + 2011-05-14 00:04 . 2011-05-14 00:04 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80.dll
    + 2009-07-12 00:46 . 2009-07-12 00:46 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80u.dll
    - 2009-07-12 01:46 . 2009-07-12 01:46 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80u.dll
    + 2009-07-12 00:46 . 2009-07-12 00:46 1105920 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll
    - 2009-07-12 01:46 . 2009-07-12 01:46 1105920 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll
    + 2009-12-11 04:06 . 2010-09-28 20:44 4184352 c:\windows\system32\usbaaplrc.dll
    + 2004-08-11 23:00 . 2011-08-22 23:48 1212416 c:\windows\system32\urlmon.dll
    + 2004-08-11 23:00 . 2011-01-21 14:44 8462336 c:\windows\system32\shell32.dll
    - 2004-08-11 23:00 . 2010-07-27 06:30 8462336 c:\windows\system32\shell32.dll
    + 2004-08-11 23:11 . 2011-02-02 07:58 2067456 c:\windows\system32\mstscax.dll
    + 2006-10-17 16:57 . 2011-08-22 23:48 2000384 c:\windows\system32\iertutil.dll
    + 2011-08-23 22:48 . 2011-05-10 12:06 4517664 c:\windows\system32\DRVSTORE\usbaapl_5CBB3A09528F6 8FC4AD2F36E43C028E7E6F20400\usbaaplrc.dll
    + 2011-08-23 22:48 . 2010-04-20 00:29 1461992 c:\windows\system32\DRVSTORE\netaapl_B71F8545DA20A 81C41BFD744E8D7D9784787E916\wdfcoinstaller01009.dl l
    + 2004-08-11 23:12 . 2008-04-14 00:12 4256768 c:\windows\system32\dllcache\wmm2res.dll
    + 2008-10-14 23:49 . 2011-09-06 13:20 1858944 c:\windows\system32\dllcache\win32k.sys
    + 2006-05-10 05:25 . 2011-08-22 23:48 1212416 c:\windows\system32\dllcache\urlmon.dll
    + 2008-06-17 19:02 . 2011-01-21 14:44 8462336 c:\windows\system32\dllcache\shell32.dll
    - 2008-06-17 19:02 . 2010-07-27 06:30 8462336 c:\windows\system32\dllcache\shell32.dll
    + 2008-10-14 23:56 . 2010-12-09 13:07 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2008-10-14 23:56 . 2010-12-09 13:42 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2011-02-02 07:58 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
    + 2007-05-09 22:22 . 2011-08-22 23:48 2000384 c:\windows\system32\dllcache\iertutil.dll
    - 2009-03-19 21:42 . 2006-11-29 17:06 3426072 c:\windows\system32\d3dx9_32.dll
    + 2009-03-19 21:42 . 2006-11-29 18:06 3426072 c:\windows\system32\d3dx9_32.dll
    - 2008-07-25 15:17 . 2008-07-25 15:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Windows.Forms.dll
    + 2011-03-25 10:15 . 2011-03-25 10:15 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Windows.Forms.dll
    - 2010-03-23 09:32 . 2010-03-23 09:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Web.dll
    + 2010-09-22 13:44 . 2010-09-22 13:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Web.dll
    - 2010-03-23 09:32 . 2010-03-23 09:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.dll
    + 2011-04-29 01:50 . 2011-04-29 01:50 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.dll
    + 2011-07-07 09:18 . 2011-07-07 09:18 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rwks.dll
    - 2010-05-11 10:40 . 2010-05-11 10:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rlib.dll
    + 2011-07-07 09:18 . 2011-07-07 09:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rlib.dll
    - 2010-04-01 15:42 . 2010-04-01 15:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Web.dll
    + 2011-07-08 17:59 . 2011-07-08 17:59 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Web.dll
    - 2010-04-01 15:42 . 2010-04-01 15:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.dll
    + 2011-07-08 17:59 . 2011-07-08 17:59 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.dll
    - 2010-03-31 18:50 . 2010-03-31 18:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor wks.dll
    + 2011-07-07 16:02 . 2011-07-07 16:02 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor wks.dll
    + 2011-07-07 16:02 . 2011-07-07 16:02 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor svr.dll
    - 2010-03-31 18:50 . 2010-03-31 18:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor svr.dll
    - 2010-04-01 15:42 . 2010-04-01 15:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor lib.dll
    + 2011-07-08 17:59 . 2011-07-08 17:59 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor lib.dll
    + 2011-07-27 17:38 . 2011-07-27 17:38 1769984 c:\windows\Installer\d4ffce.msi
    + 2011-07-27 17:29 . 2011-07-27 17:29 1710592 c:\windows\Installer\d4ff96.msi
    + 2011-04-29 16:28 . 2011-04-29 16:28 1995264 c:\windows\Installer\c42a0d3.msp
    + 2011-04-27 23:51 . 2011-04-27 23:51 6825472 c:\windows\Installer\c42a0b5.msp
    + 2011-05-20 21:31 . 2011-05-20 21:31 5518848 c:\windows\Installer\c42a0a2.msp
    + 2011-05-17 22:28 . 2011-05-17 22:28 6862848 c:\windows\Installer\c42a08f.msp
    + 2011-04-29 16:33 . 2011-04-29 16:33 8173568 c:\windows\Installer\c42a07c.msp
    + 2010-08-05 14:57 . 2010-08-05 14:57 4066304 c:\windows\Installer\a9df2e3.msp
    + 2010-08-20 17:50 . 2010-08-20 17:50 5518848 c:\windows\Installer\a9df2c1.msp
    + 2010-08-25 21:06 . 2010-08-25 21:06 6479360 c:\windows\Installer\a9df2ae.msp
    + 2011-08-10 21:43 . 2011-08-10 21:43 3795968 c:\windows\Installer\953a2f3.msp
    + 2011-07-26 12:17 . 2011-07-26 12:17 6824960 c:\windows\Installer\953a2d6.msp
    + 2011-08-16 16:35 . 2011-08-16 16:35 5519872 c:\windows\Installer\953a2c3.msp
    + 2011-09-07 01:48 . 2011-09-07 01:48 8181248 c:\windows\Installer\953a2b0.msp
    + 2011-07-27 11:39 . 2011-07-27 11:39 9892352 c:\windows\Installer\953a2a6.msp
    + 2011-01-27 18:49 . 2011-01-27 18:49 6825472 c:\windows\Installer\93c19477.msp
    + 2011-04-05 16:52 . 2011-04-05 16:52 5519872 c:\windows\Installer\93c19451.msp
    + 2010-11-21 03:34 . 2010-11-21 03:34 1198080 c:\windows\Installer\93c19431.msp
    + 2011-03-18 00:01 . 2011-03-18 00:01 9563648 c:\windows\Installer\93c19427.msp
    + 2011-01-11 21:50 . 2011-01-11 21:50 8177152 c:\windows\Installer\93c1941d.msp
    + 2010-10-22 20:45 . 2010-10-22 20:45 8444928 c:\windows\Installer\871ab830.msp
    + 2010-12-06 20:02 . 2010-12-06 20:02 5518848 c:\windows\Installer\871ab804.msp
    + 2011-08-23 23:33 . 2011-08-23 23:33 5467136 c:\windows\Installer\7b88349.msi
    + 2011-08-23 22:49 . 2011-08-23 22:49 3085312 c:\windows\Installer\7b8795a.msi
    + 2011-08-23 22:42 . 2011-08-23 22:42 9474048 c:\windows\Installer\7b8794c.msi
    + 2010-09-17 11:04 . 2010-09-17 11:04 9401856 c:\windows\Installer\785b962b.msp
    + 2010-10-22 18:25 . 2010-10-22 18:25 5521408 c:\windows\Installer\785b960e.msp
    + 2011-11-21 04:31 . 2011-11-21 04:31 2186240 c:\windows\Installer\556b09.msi
    + 2011-05-02 04:06 . 2011-05-02 04:06 2705920 c:\windows\Installer\46c524db.msp
    + 2011-07-26 17:50 . 2011-07-26 17:50 5522432 c:\windows\Installer\46b86086.msp
    + 2011-04-27 15:14 . 2011-04-27 15:14 5520384 c:\windows\Installer\3fde58e3.msp
    + 2011-04-29 16:30 . 2011-04-29 16:30 1197056 c:\windows\Installer\3fde58d0.msp
    + 2011-08-21 21:13 . 2011-08-21 21:13 1485312 c:\windows\Installer\3b80b659.msi
    + 2011-01-17 21:06 . 2011-01-17 21:06 5518848 c:\windows\Installer\393d698.msp
    + 2011-11-03 18:31 . 2011-11-03 18:31 5525504 c:\windows\Installer\35db684.msp
    + 2011-10-12 11:17 . 2011-10-12 11:17 4664832 c:\windows\Installer\352503a.msi
    + 2010-08-13 21:59 . 2010-08-13 21:59 8182272 c:\windows\Installer\315375b.msp
    + 2010-08-13 22:02 . 2010-08-13 22:02 2545664 c:\windows\Installer\3153751.msp
    + 2010-08-23 21:09 . 2010-08-23 21:09 7673344 c:\windows\Installer\3153747.msp
    + 2010-10-04 20:32 . 2010-10-04 20:32 5517824 c:\windows\Installer\3153734.msp
    + 2010-08-24 13:49 . 2010-08-24 13:49 6825472 c:\windows\Installer\3153721.msp
    + 2011-01-19 03:36 . 2011-01-19 03:36 2687488 c:\windows\Installer\2532cdcb.msp
    + 2010-09-23 11:39 . 2010-09-23 11:39 4265472 c:\windows\Installer\23f5f1.msp
    + 2011-02-22 15:32 . 2011-02-22 15:32 5520384 c:\windows\Installer\21e1d7aa.msp
    + 2011-07-21 16:34 . 2011-07-21 16:34 3456000 c:\windows\Installer\21b3eeb.msp
    + 2011-05-23 18:15 . 2011-05-23 18:15 3617792 c:\windows\Installer\18fb080.msp
    + 2011-09-20 19:36 . 2011-09-20 19:36 5521408 c:\windows\Installer\16ab7a2.msp
    + 2010-10-16 17:03 . 2010-10-16 17:03 1242624 c:\windows\Installer\134b5a.msi
    + 2007-04-19 18:09 . 2007-04-19 18:09 1061720 c:\windows\Installer\$PatchCache$\Managed\90403119 00063D11C8EF10054038389C\11.0.8173\OMFC.DLL
    + 2011-01-14 11:10 . 2011-01-14 11:10 2395008 c:\windows\Installer\$PatchCache$\Managed\00004109 500200000000000000F01FEC\14.0.5130\GKWORD.DLL
    + 2011-01-14 11:10 . 2011-01-14 11:10 2180992 c:\windows\Installer\$PatchCache$\Managed\00004109 500200000000000000F01FEC\14.0.5130\GKPOWERPOINT.DL L
    + 2011-01-14 11:10 . 2011-01-14 11:10 3443072 c:\windows\Installer\$PatchCache$\Managed\00004109 500200000000000000F01FEC\14.0.5130\GKEXCEL.DLL
    + 2009-04-03 22:21 . 2009-04-03 22:21 8543096 c:\windows\Installer\$PatchCache$\Managed\00002109 020090400000000000F01FEC\12.0.6425\OARTCONV.DLL
    + 2011-10-13 07:07 . 2011-06-23 18:36 1212416 c:\windows\ie8updates\KB2586448-IE8\urlmon.dll
    + 2011-10-13 07:07 . 2011-06-23 18:36 1991680 c:\windows\ie8updates\KB2586448-IE8\iertutil.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 1211904 c:\windows\ie8updates\KB2559049-IE8\urlmon.dll
    + 2011-08-10 07:03 . 2011-04-25 16:11 1991680 c:\windows\ie8updates\KB2559049-IE8\iertutil.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 1210880 c:\windows\ie8updates\KB2530548-IE8\urlmon.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 1991680 c:\windows\ie8updates\KB2530548-IE8\iertutil.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 1210880 c:\windows\ie8updates\KB2497640-IE8\urlmon.dll
    + 2011-04-15 07:25 . 2010-12-20 23:59 1991680 c:\windows\ie8updates\KB2497640-IE8\iertutil.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 1210880 c:\windows\ie8updates\KB2482017-IE8\urlmon.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 1991680 c:\windows\ie8updates\KB2482017-IE8\iertutil.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 1210880 c:\windows\ie8updates\KB2416400-IE8\urlmon.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 1986560 c:\windows\ie8updates\KB2416400-IE8\iertutil.dll
    + 2010-10-17 07:14 . 2010-06-24 12:22 1210368 c:\windows\ie8updates\KB2360131-IE8\urlmon.dll
    + 2010-10-17 07:14 . 2010-06-24 12:21 1986560 c:\windows\ie8updates\KB2360131-IE8\iertutil.dll
    + 2008-10-14 23:56 . 2010-12-09 13:07 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-10-14 23:56 . 2010-12-09 13:42 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2011-10-13 07:05 . 2011-10-13 07:05 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System \1.0.5000.0__b77a5c561934e089_cfa4ea30\System.dll
    + 2011-10-13 07:03 . 2011-10-13 07:03 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System \1.0.5000.0__b77a5c561934e089_afdb9524\System.dll
    + 2011-10-13 07:05 . 2011-10-13 07:05 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System .Xml\1.0.5000.0__b77a5c561934e089_a45a60b2\System. Xml.dll
    + 2011-10-13 07:04 . 2011-10-13 07:04 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System .Xml\1.0.5000.0__b77a5c561934e089_a1ebc58f\System. Xml.dll
    + 2011-10-13 07:04 . 2011-10-13 07:04 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System .Windows.Forms\1.0.5000.0__b77a5c561934e089_d40eed f6\System.Windows.Forms.dll
    + 2011-10-13 07:05 . 2011-10-13 07:05 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System .Windows.Forms\1.0.5000.0__b77a5c561934e089_96f72d 30\System.Windows.Forms.dll
    + 2011-10-13 07:05 . 2011-10-13 07:05 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing\1.0.5000.0__b03f5f7f11d50a3a_779cdcc5\Sys tem.Drawing.dll
    + 2011-10-13 07:05 . 2011-10-13 07:05 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System .Design\1.0.5000.0__b03f5f7f11d50a3a_7193e24c\Syst em.Design.dll
    + 2011-10-13 07:04 . 2011-10-13 07:04 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System .Design\1.0.5000.0__b03f5f7f11d50a3a_3323de2e\Syst em.Design.dll
    + 2011-10-13 07:04 . 2011-10-13 07:04 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorl ib\1.0.5000.0__b77a5c561934e089_59963f19\mscorlib. dll
    + 2011-10-13 07:05 . 2011-10-13 07:05 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorl ib\1.0.5000.0__b77a5c561934e089_0dabe944\mscorlib. dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\fd91703869c4577ee385f6950b744cbe \WindowsLive.Writer.ApplicationFramework.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 2018816 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\dec788a098576594112a08bb0bf21d95 \WindowsLive.Writer.CoreServices.ni.dll
    + 2011-08-10 07:42 . 2011-08-10 07:42 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\dae5a7d92344cb126cd6f3fdfd661c07 \WindowsLive.Writer.PostEditor.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 2018816 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\9855902aee545bdeae2cbbd1bd6151c9 \WindowsLive.Writer.CoreServices.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\6ea9639305271fc22aa925a7356d7db6 \WindowsLive.Writer.ApplicationFramework.ni.dll
    + 2011-10-13 07:36 . 2011-10-13 07:36 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\3203e91891cafbbb289bcde65e6a8389 \WindowsLive.Writer.PostEditor.ni.dll
    + 2011-08-10 07:33 . 2011-08-10 07:33 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsBase\fd6e0cd6f124a6d041ef1b4c9a5f080b\WindowsB ase.ni.dll
    + 2011-10-13 07:25 . 2011-10-13 07:25 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsBase\1adc4ae51a5ac63e896a1402749ca495\WindowsB ase.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationClients#\55d4813580b1e5d268ff0564942cee9c \UIAutomationClientsideProviders.ni.dll
    + 2011-08-10 07:40 . 2011-08-10 07:40 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationClients#\162600dde59fbaa0c048a949158ecba3 \UIAutomationClientsideProviders.ni.dll
    + 2011-08-10 07:29 . 2011-08-10 07:29 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem\e6c79e1d71b0c9000afd7e5e439b5c54\System.ni.dll
    + 2011-10-13 07:23 . 2011-10-13 07:23 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem\af39f6e644af02873b9bae319f2bfb13\System.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xm l.ni.dll
    + 2011-08-10 07:40 . 2011-08-10 07:40 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Xml\10154dcad2d62f226af2fd4211460a4b\System.Xm l.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.WorkflowServ#\22229a30650a9afbac984e1093898b13 \System.WorkflowServices.ni.dll
    + 2011-10-13 07:41 . 2011-10-13 07:41 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.WorkflowServ#\17902fdb0e0d3bc8b49bce693415fe7e \System.WorkflowServices.ni.dll
    + 2011-10-13 07:41 . 2011-10-13 07:41 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Run#\f72c5f649951b0403e62bfab6c453e6f \System.Workflow.Runtime.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Run#\4d6b3cc1fc7a4788612241af7966715a \System.Workflow.Runtime.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Com#\e4c9853af945c9cfede19f3faf18af6e \System.Workflow.ComponentModel.ni.dll
    + 2011-10-13 07:41 . 2011-10-13 07:41 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Com#\0aa4f4174204c93cc5181df4a6b2fb09 \System.Workflow.ComponentModel.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Act#\ab4b50c7c789e46a485903365765fde8 \System.Workflow.Activities.ni.dll
    + 2011-10-13 07:41 . 2011-10-13 07:41 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Act#\921629dc69a5a895101097c88ae67897 \System.Workflow.Activities.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Services\a2392c995b1bb6b63079091259222357\ System.Web.Services.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Services\6303e256d2ac0843c3e4c24172c90544\ System.Web.Services.ni.dll
    + 2011-10-13 07:41 . 2011-10-13 07:41 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Mobile\f5dac0448a1dbe2687a5df92904d6274\Sy stem.Web.Mobile.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Mobile\3da92a0b9b8ac97e11ca8bf4df671a78\Sy stem.Web.Mobile.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Extensio#\ccaf6bdd256a9b5079fedadcc8993327 \System.Web.Extensions.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Extensio#\01f4d6aa3299a41b8578b7e96afdcfb1 \System.Web.Extensions.ni.dll
    + 2011-08-10 07:39 . 2011-08-10 07:39 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Speech\e1208f0d981c420fc59f806bfbaa713b\System .Speech.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Speech\10d7daa3d1e62a0e40587cdc707be93f\System .Speech.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceModel#\9ec7da53380a754b4ad97709df0dd7e7 \System.ServiceModel.Web.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceModel#\27e1b8dfd5e1ccf2c5b9efc51f674c69 \System.ServiceModel.Web.ni.dll
    + 2011-08-10 07:41 . 2011-08-10 07:41 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\dece01bd9e9c32e47630fdfc78d3bd32 \System.Runtime.Serialization.ni.dll
    + 2011-10-13 07:35 . 2011-10-13 07:35 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2 \System.Runtime.Serialization.ni.dll
    + 2011-08-10 07:39 . 2011-08-10 07:39 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Printing\90b444d02047ef27921153d46967ef0e\Syst em.Printing.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Printing\0f8e14bfdb27645fb1a92ce26f9bf521\Syst em.Printing.ni.dll
    + 2011-08-10 08:03 . 2011-08-10 08:03 4949504 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management.A#\8a9589fd87302a1333af22962bb5f1f1 \System.Management.Automation.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 4949504 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management.A#\1a32e7ce68fa086773b235fc8b525476 \System.Management.Automation.ni.dll
    + 2011-10-13 07:35 . 2011-10-13 07:35 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IdentityModel\d14065ede44df8e9b5d6b60c5ddccc69 \System.IdentityModel.ni.dll
    + 2011-08-10 07:41 . 2011-08-10 07:41 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IdentityModel\a50e2fc92db32751857fb8d297f9d7bc \System.IdentityModel.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing\c10bea3c4bb7ef654651141bf9419090\Syste m.Drawing.ni.dll
    + 2011-08-10 07:39 . 2011-08-10 07:39 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing\7ed09623172a292eaee51e2e3bcaf784\Syste m.Drawing.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\91cd88a803768151c6262853d3454ba7 \System.DirectoryServices.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\259ecf480769f4e60514b7ae2abaa6f1 \System.DirectoryServices.ni.dll
    + 2011-10-13 07:36 . 2011-10-13 07:36 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Deployment\cc5ac99e8af2738e85cda5525fdd944f\Sy stem.Deployment.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Deployment\71cf3eb40fc38e6ac8fba09e872d2878\Sy stem.Deployment.ni.dll
    + 2011-10-13 07:30 . 2011-10-13 07:30 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data\ec323cf1df697cc0a45f67de685db90c\System.D ata.ni.dll
    + 2011-08-10 07:39 . 2011-08-10 07:39 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data\db2d84e279807592a680ef4135e9fe9a\System.D ata.ni.dll
    + 2011-10-13 07:36 . 2011-10-13 07:36 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.SqlXml\ef748704f543a8791e23387652d34dfb\S ystem.Data.SqlXml.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.SqlXml\0b16305773369cf740c6a2b1f1d785b2\S ystem.Data.SqlXml.ni.dll
    + 2011-08-10 08:02 . 2011-08-10 08:02 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Services\c1b9b8ce390548dcca661a5e6a908408 \System.Data.Services.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Services\541142d8742e6e88f1e729fafee04e71 \System.Data.Services.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.OracleC#\c729750d54f6e7427230622bcccd4709 \System.Data.OracleClient.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.OracleC#\5d5aa4b926ae422607ea833d934665c2 \System.Data.OracleClient.ni.dll
    + 2011-10-13 07:31 . 2011-10-13 07:31 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Linq\d96a94076acb8e0c5a96a1b2de4b3a7a\Sys tem.Data.Linq.ni.dll
    + 2011-08-10 07:39 . 2011-08-10 07:39 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Linq\571af34939797a7c1cd05b0b925a45bf\Sys tem.Data.Linq.ni.dll
    + 2011-10-13 07:39 . 2011-10-13 07:39 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Entity\a3ce22c2a84fdcb008d72d230ee0b2c0\S ystem.Data.Entity.ni.dll
    + 2011-08-10 07:46 . 2011-08-10 07:46 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Entity\2b58cc071d6bf0c741e91f86c09de5d7\S ystem.Data.Entity.ni.dll
    + 2011-08-10 07:39 . 2011-08-10 07:39 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Core\e54e013315849f5e34d8f2a8e7fdb450\System.C ore.ni.dll
    + 2011-10-13 07:30 . 2011-10-13 07:30 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Core\d507b9e0e50e453793ee5e01c07a5485\System.C ore.ni.dll
    + 2011-10-13 07:29 . 2011-10-13 07:29 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\Rea chFramework\714e9504255565bd9076fe13628e104a\Reach Framework.ni.dll
    + 2011-08-10 07:38 . 2011-08-10 07:38 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\Rea chFramework\24ab0cacc77e8696ceff3157942a2de4\Reach Framework.ni.dll
    + 2011-08-10 07:38 . 2011-08-10 07:38 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationUI\fac1ca86f4fea17de40d7fdaba38563e\Prese ntationUI.ni.dll
    + 2011-10-13 07:29 . 2011-10-13 07:29 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationUI\7dc6ee14234b0686182ced75f7dae990\Prese ntationUI.ni.dll
    + 2011-10-13 07:24 . 2011-10-13 07:24 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationBuildTa#\b42ad515bb20ec1f1250c040371c6730 \PresentationBuildTasks.ni.dll
    + 2011-08-10 07:31 . 2011-08-10 07:31 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationBuildTa#\b187becbc388c4ce7f33ede4da76e7b1 \PresentationBuildTasks.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualBas#\c6b19db2534042d435ede580f92bc75c \Microsoft.VisualBasic.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualBas#\24331b719aa25ac2b21099e32232840c \Microsoft.VisualBasic.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449 \Microsoft.Transactions.Bridge.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Transacti#\08594c4ba9ea0253a836fe1d8d341984 \Microsoft.Transactions.Bridge.ni.dll
    + 2011-10-13 07:40 . 2011-10-13 07:40 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.JScript\8ad32b72258899177c07dc5912b5b748\Mi crosoft.JScript.ni.dll
    + 2011-08-10 08:04 . 2011-08-10 08:04 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.JScript\345abd035c9378667b1cac54c1f21c97\Mi crosoft.JScript.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Tas#\906cd5555b79e4e0486dc8ef2a748b13 \Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-08-10 07:45 . 2011-08-10 07:45 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Tas#\7baff7d694394aaba490082c88d48fd2 \Microsoft.Build.Tasks.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Tas#\50e7c5eb58c982dba7b21cd10a69b095 \Microsoft.Build.Tasks.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289 \Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-10-13 07:38 . 2011-10-13 07:38 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0 \Microsoft.Build.Engine.ni.dll
    + 2011-08-10 07:44 . 2011-08-10 07:44 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Eng#\235a22e1ae9742bb724d411629dd99d5 \Microsoft.Build.Engine.ni.dll
    + 2011-10-13 07:21 . 2011-10-13 07:21 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5 c561934e089\System.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5 c561934e089\System.dll
    + 2011-10-13 07:21 . 2011-10-13 07:21 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b 77a5c561934e089\System.XML.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b 77a5c561934e089\System.XML.dll
    - 2010-08-13 07:13 . 2010-08-13 07:13 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\ 2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\ 2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2009-08-20 17:21 . 2009-08-20 17:21 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions \3.5.0.0__31bf3856ad364e35\System.Web.Extensions.d ll
    + 2010-10-07 23:12 . 2010-10-07 23:12 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions \3.5.0.0__31bf3856ad364e35\System.Web.Extensions.d ll
    + 2011-10-13 07:20 . 2011-10-13 07:20 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0 __b03f5f7f11d50a3a\System.Design.dll
    - 2010-08-13 07:13 . 2010-08-13 07:13 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0 __b03f5f7f11d50a3a\System.Design.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03 f5f7f11d50a3a\System.Web.dll
    - 2010-08-13 07:13 . 2010-08-13 07:13 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03 f5f7f11d50a3a\System.Web.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b7 7a5c561934e089\System.Data.dll
    + 2011-10-13 07:20 . 2011-10-13 07:20 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b7 7a5c561934e089\System.Data.dll
    + 2011-06-28 07:14 . 2011-10-13 07:20 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5 c561934e089\mscorlib.dll
    - 2010-08-13 07:14 . 2010-08-13 07:14 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5 c561934e089\mscorlib.dll
    + 2011-10-13 07:03 . 2011-10-13 07:03 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c5 61934e089\System.dll
    - 2010-06-12 17:56 . 2010-06-12 17:56 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c5 61934e089\System.dll
    - 2010-06-12 17:56 . 2010-06-12 17:56 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03 f5f7f11d50a3a\System.Web.dll
    + 2011-10-13 07:03 . 2011-10-13 07:03 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03 f5f7f11d50a3a\System.Web.dll
    + 2011-10-13 07:10 . 2011-06-02 14:02 1858944 c:\windows\$NtUninstallKB2567053$\win32k.sys
    + 2010-08-31 13:38 . 2010-08-31 13:38 1861888 c:\windows\$hf_mig$\KB981957\SP3QFE\win32k.sys
    + 2010-07-16 12:04 . 2010-07-16 12:04 1289216 c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
    + 2009-07-27 22:13 . 2009-07-27 22:13 8462848 c:\windows\$hf_mig$\KB971029\SP3QFE\shell32.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 1214464 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\urlmon.dll
    + 2011-10-13 03:37 . 2011-10-03 08:34 5972992 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 2001408 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iertutil.dll
    + 2011-09-06 13:25 . 2011-09-06 13:25 1867904 c:\windows\$hf_mig$\KB2567053\SP3QFE\win32k.sys
    + 2011-08-09 22:38 . 2011-06-23 18:33 1214464 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\urlmon.dll
    + 2011-08-09 22:38 . 2011-07-25 15:15 5971456 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll
    + 2011-08-09 22:38 . 2011-06-23 18:33 1992192 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iertutil.dll
    + 2011-06-02 14:07 . 2011-06-02 14:07 1867904 c:\windows\$hf_mig$\KB2555917\SP3QFE\win32k.sys
    + 2011-06-15 22:27 . 2011-04-25 16:09 1213952 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\urlmon.dll
    + 2011-06-15 22:27 . 2011-05-30 22:17 5967360 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 1992192 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iertutil.dll
    + 2011-03-03 13:27 . 2011-03-03 13:27 1866880 c:\windows\$hf_mig$\KB2506223\SP3QFE\win32k.sys
    + 2011-04-14 07:50 . 2011-02-22 23:27 1212928 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\urlmon.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 5964800 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll
    + 2011-04-14 07:50 . 2011-02-22 23:27 1992192 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iertutil.dll
    + 2011-01-21 14:42 . 2011-01-21 14:42 8463360 c:\windows\$hf_mig$\KB2483185\SP3QFE\shell32.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 1211904 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\urlmon.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 5962240 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 1992192 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iertutil.dll
    + 2011-02-02 07:57 . 2011-02-02 07:57 2069504 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstscx.dll
    + 2010-12-31 13:14 . 2010-12-31 13:14 1864064 c:\windows\$hf_mig$\KB2479628\SP3QFE\win32k.sys
    + 2010-10-26 13:27 . 2010-10-26 13:27 1862272 c:\windows\$hf_mig$\KB2436673\SP3QFE\win32k.sys
    + 2010-12-15 04:11 . 2010-11-06 00:27 1211904 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\urlmon.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 5960704 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll
    + 2010-12-15 04:11 . 2010-11-06 00:27 1992192 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iertutil.dll
    + 2011-02-13 19:16 . 2010-12-09 13:43 2192768 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe
    + 2011-02-13 19:16 . 2010-12-09 13:09 2027008 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrpamp.exe
    + 2010-12-09 23:39 . 2010-12-09 23:39 2069376 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe
    + 2011-02-13 19:17 . 2010-12-09 13:47 2148864 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlmp.exe
    + 2010-10-16 21:20 . 2010-09-10 05:57 1211904 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\urlmon.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 5958656 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll
    + 2010-10-16 21:20 . 2010-09-10 05:57 1987072 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iertutil.dll
    + 2004-08-11 23:00 . 2010-08-26 03:36 10841088 c:\windows\system32\wmp.dll
    - 2004-08-11 23:00 . 2009-07-14 03:43 10841088 c:\windows\system32\wmp.dll
    + 2006-03-28 02:02 . 2011-11-09 08:02 50295240 c:\windows\system32\MRT.exe
    + 2006-11-08 02:03 . 2011-08-23 21:48 11081728 c:\windows\system32\ieframe.dll
    + 2004-08-11 23:00 . 2010-08-26 03:36 10841088 c:\windows\system32\dllcache\wmp.dll
    - 2004-08-11 23:00 . 2009-07-14 03:43 10841088 c:\windows\system32\dllcache\wmp.dll
    + 2007-05-09 22:22 . 2011-08-23 21:48 11081728 c:\windows\system32\dllcache\ieframe.dll
    + 2011-07-13 02:49 . 2011-07-13 02:49 11459584 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updat es\M2572067\M2572067Uninstall.msp
    + 2011-06-16 07:16 . 2011-06-16 07:16 20333056 c:\windows\Installer\c42a0c2.msp
    + 2011-07-26 20:33 . 2011-07-26 20:33 10984448 c:\windows\Installer\953a2e9.msp
    + 2011-02-24 13:38 . 2011-02-24 13:38 10984448 c:\windows\Installer\93c19464.msp
    + 2011-02-12 00:47 . 2011-02-12 00:47 12028928 c:\windows\Installer\93c1943e.msp
    + 2010-10-14 21:57 . 2010-10-14 21:57 11189248 c:\windows\Installer\785b9621.msp
    + 2011-03-18 07:01 . 2011-03-18 07:01 20308992 c:\windows\Installer\3862b9c.msp
    + 2010-09-30 07:01 . 2010-09-30 07:01 20303872 c:\windows\Installer\26a396c.msp
    + 2011-03-28 07:27 . 2011-03-28 07:27 15456256 c:\windows\Installer\2532cdd9.msp
    + 2010-09-24 11:08 . 2010-09-24 11:08 17518080 c:\windows\Installer\23f5e6.msp
    + 2011-01-06 08:00 . 2011-01-06 08:00 20304384 c:\windows\Installer\2000bf2e.msp
    + 2011-04-21 07:00 . 2011-04-21 07:00 20314624 c:\windows\Installer\1eb12741.msp
    + 2011-10-13 07:23 . 2011-10-13 07:23 20333568 c:\windows\Installer\178350c.msp
    + 2011-07-12 00:43 . 2011-07-12 00:43 11641344 c:\windows\Installer\17834ff.msp
    + 2011-07-12 19:50 . 2011-07-12 19:50 17555968 c:\windows\Installer\16ab790.msp
    + 2011-10-13 07:07 . 2011-06-23 18:36 11081728 c:\windows\ie8updates\KB2586448-IE8\ieframe.dll
    + 2011-08-10 07:03 . 2011-04-26 14:11 11081728 c:\windows\ie8updates\KB2559049-IE8\ieframe.dll
    + 2011-06-16 07:08 . 2011-02-22 23:06 11080704 c:\windows\ie8updates\KB2530548-IE8\ieframe.dll
    + 2011-04-15 07:25 . 2010-12-21 10:29 11080704 c:\windows\ie8updates\KB2497640-IE8\ieframe.dll
    + 2011-02-14 08:04 . 2010-11-06 00:26 11080704 c:\windows\ie8updates\KB2482017-IE8\ieframe.dll
    + 2010-12-15 08:13 . 2010-09-10 05:58 11080192 c:\windows\ie8updates\KB2416400-IE8\ieframe.dll
    + 2010-10-17 07:14 . 2010-06-24 21:51 11077120 c:\windows\ie8updates\KB2360131-IE8\ieframe.dll
    + 2011-08-10 07:40 . 2011-08-10 07:40 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Forms\d00cc387e462e4c3cdcd112b137cac87 \System.Windows.Forms.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a \System.Windows.Forms.ni.dll
    + 2011-10-13 07:37 . 2011-10-13 07:37 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web\60df958ca96c9b8945f836759b6abd34\System.We b.ni.dll
    + 2010-10-16 16:36 . 2010-10-16 16:36 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web\41f436dae3c8146752d06130f7331527\System.We b.ni.dll
    + 2011-08-10 07:43 . 2011-08-10 07:43 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web\40893760431f8f0dcce3e18630e45b23\System.We b.ni.dll
    + 2011-08-10 07:42 . 2011-08-10 07:42 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceModel\e3a0205acab2215fbad7927d9d483aeb\ System.ServiceModel.ni.dll
    + 2011-10-13 07:36 . 2011-10-13 07:36 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceModel\ceadaf3b3d017c7a1ef10a06f8009f6f\ System.ServiceModel.ni.dll
    + 2011-10-13 07:33 . 2011-10-13 07:33 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Design\c6374d32e4af7b7e3e46b32176f76558\System .Design.ni.dll
    + 2011-08-10 07:39 . 2011-08-10 07:39 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Design\63ad0cd9b5e038c8e2e41415657db8fc\System .Design.ni.dll
    + 2011-08-10 07:38 . 2011-08-10 07:38 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\704556e34128441ea9f1a81cc89f8a79 \PresentationFramework.ni.dll
    + 2011-10-13 07:28 . 2011-10-13 07:28 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\054488924fcc579cce9fa0209dafe28b \PresentationFramework.ni.dll
    + 2011-10-13 07:25 . 2011-10-13 07:25 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCore\b2f0318713eca304eaa9d86fc17edb96\Pre sentationCore.ni.dll
    + 2011-08-10 07:34 . 2011-08-10 07:34 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCore\5f332c48d03eca57419c4f0e884092ee\Pre sentationCore.ni.dll
    + 2011-10-13 07:22 . 2011-10-13 07:22 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\msc orlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni .dll
    + 2011-06-28 07:16 . 2011-06-28 07:16 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\msc orlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni .dll
    + 2011-10-13 03:37 . 2011-08-22 23:47 11084288 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieframe.dll
    + 2011-06-25 05:03 . 2011-06-25 05:03 11083776 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieframe.dll
    + 2011-06-15 22:27 . 2011-04-25 16:09 11083776 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieframe.dll
    + 2011-02-23 08:57 . 2011-02-23 08:57 11082752 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ieframe.dll
    + 2011-02-13 19:27 . 2010-12-20 23:58 11082752 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ieframe.dll
    + 2010-11-06 10:57 . 2010-11-06 10:57 11082752 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieframe.dll
    + 2010-09-10 15:27 . 2010-09-10 15:27 11082240 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieframe.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
    "MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-17 3872080]
    "DellSupport"="c:\program files\DellSupport\DSAgnt.exe" [2007-03-15 460784]
    "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
    "ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2007-08-30 205480]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
    "igfxtray"="c:\windows\system32\igfxtray.exe" [2005-10-15 94208]
    "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-10-15 77824]
    "igfxpers"="c:\windows\system32\igfxpers.exe" [2005-10-15 114688]
    "RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2006-03-23 26112]
    "ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2007-08-30 205480]
    "ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2006-09-11 86960]
    "DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940]
    "HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86 \3\hpztsb10.exe" [2004-03-04 172032]
    "itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2006-11-22 813912]
    "IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2007-02-05 849280]
    "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 16384]
    "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
    "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 6.0\apdproxy.exe" [2007-10-02 67488]
    "PMX Daemon"="ICO.EXE" [2006-06-09 47104]
    "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-07-05 421888]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-19 421736]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce]
    "AvgUninstallURL"="start http://www.avg.com/ww.special-uninstallation-feedback-appf?lic=NFVXV1UtV0JEWEMtVllGTjMtUURKTUgtNDJBT0EtS zZIVTk&inst=NzctNzM2Njk5OTM0LUJBKzEtWEwrMS1GUDkyKz YtQkFSOUcrMS1UQjkrMi1GTCs5LVhPMzYrMS1GOU0xMEIrMi1Y TzkrMS1GOU0yKzEtRERUKzk0MTAtREQ5MEYrMS1TVDkwRkFQUC sxLVNUMTJGT0krMS1FVUxBKzEtU1QxMkZBUFArMQ&prod=90&v er=2012.0.1831&mid=d3dcc71d67a940ed148b5290cfba24e a-9418989c830595e0928da58d4579155f20b4fee4" [?]
    .
    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
    .
    [hkey_local_machine\software\microsoft\windows\curr entversion\explorer\ShellExecuteHooks]
    "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128]
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\session manager]
    BootExecute REG_MULTI_SZ \0
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\Radialpoint Security Services]
    @=""
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2010-02-18 15:43 248040 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "c:\\Program Files\\Dell Network Assistant\\ezi_hnm2.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Lavasoft\\Ad-Aware SE Personal\\Ad-Aware.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
    "c:\\Program Files\\FrostWire 5\\FrostWire.exe"=
    "c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
    "10421:UDP"= 10421:UDP:SingleClick Discovery Protocol
    "10426:UDP"= 10426:UDP:SingleClick ICC
    "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
    .
    R2 hnmwrlspkt;HomeNet Manager Wireless Protocol;c:\windows\system32\drivers\hnm_wrls_pkt. sys [7/14/2006 12:01 AM 13824]
    R2 wsppkt;Wireless Security Protocol;c:\windows\system32\drivers\wsp_pkt.sys [7/14/2006 12:02 AM 13696]
    R3 NETDLWL;D-Link Air Wireless Adapter(DL) NT Driver;c:\windows\system32\drivers\NETDLWL.sys [10/7/2005 11:19 PM 159104]
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-11-08 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 21:57]
    .
    2011-11-22 c:\windows\Tasks\User_Feed_Synchronization-{221DE3E7-2E68-44FC-ACA7-445CCD956670}.job
    - c:\windows\system32\msfeedssync.exe [2006-10-17 08:31]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.sympatico.ca/
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    TCP: DhcpNameServer = 192.168.2.1
    .
    - - - - ORPHANS REMOVED - - - -
    .
    BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
    .
    .
    .
    ************************************************** ************************
    .
    disk not found C:\
    .
    please note that you need administrator rights to perform deep scan
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files:
    .
    ************************************************** ************************
    .
    Completion time: 2011-11-21 22:04:22
    ComboFix-quarantined-files.txt 2011-11-22 03:04
    ComboFix2.txt 2010-09-13 17:41
    ComboFix3.txt 2010-09-12 15:03
    ComboFix4.txt 2010-09-11 02:52
    .
    Pre-Run: 36,285,394,944 bytes free
    Post-Run: 36,539,043,840 bytes free
    .
    - - End Of File - - F3AE36937B7B057BA5FD670828046900

  4. #4
    broni is offline Senior Member
    You didn't answer my question.

    Also....

    Open Windows Explorer. Go Tools>Folder Options>View tab, put a checkmark next to Show hidden files, and folders.
    Upload following files to http://www.virustotal.com/ for security check:
    - C:\WINDOWS\system32\ntdll.dll
    If the file is listed as already analyzed, click on Reanalyse file now button.
    Post scan results.

  5. #5
    jaycee231 is offline Junior Member
    ok, my messages keep disappearing from here after the page freezes and I get a Not Responding message in Explorer....

    Sorry, I did answer your question...had the same issue then as I did this time...messages I type are disappearing...

    I think that because there is the name of a stranger to me in my ISP details of my modem...I'll call my ISP provider and get my wireless connection secured.

    As for what you asked me to do...I don't have those options under Tools...please advise. (nothing in Tools ie: Folder Options etc.

  6. #6
    broni is offline Senior Member
    I'm talking about Windows Explorer not Internet Explorer.

  7. #7
    jaycee231 is offline Junior Member
    0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
    File name: ntdll.dll
    Submission date: 2011-11-22 04:57:53 (UTC)
    Current status: queued queued analysing finished


    Result: 0/ 42 (0.0%)
    VT Community

    not reviewed
    Safety score: -
    Compact Print results Antivirus Version Last Update Result
    AhnLab-V3 2011.11.21.00 2011.11.21 -
    AntiVir 7.11.17.252 2011.11.22 -
    Antiy-AVL 2.0.3.7 2011.11.22 -
    Avast 6.0.1289.0 2011.11.21 -
    AVG 10.0.0.1190 2011.11.21 -
    BitDefender 7.2 2011.11.22 -
    ByteHero 1.0.0.1 2011.11.14 -
    ClamAV 0.97.3.0 2011.11.22 -
    Commtouch 5.3.2.6 2011.11.22 -
    Comodo 10781 2011.11.22 -
    DrWeb 5.0.2.03300 2011.11.22 -
    Emsisoft 5.1.0.11 2011.11.22 -
    eSafe 7.0.17.0 2011.11.20 -
    eTrust-Vet 37.0.9580 2011.11.21 -
    F-Prot 4.6.5.141 2011.11.22 -
    F-Secure 9.0.16440.0 2011.11.21 -
    Fortinet 4.3.370.0 2011.11.22 -
    GData 22 2011.11.22 -
    Ikarus T3.1.1.109.0 2011.11.22 -
    Jiangmin 13.0.900 2011.11.16 -
    K7AntiVirus 9.119.5508 2011.11.21 -
    Kaspersky 9.0.0.837 2011.11.22 -
    McAfee 5.400.0.1158 2011.11.22 -
    McAfee-GW-Edition 2010.1D 2011.11.21 -
    Microsoft 1.7801 2011.11.21 -
    NOD32 6649 2011.11.22 -
    Norman 6.07.13 2011.11.21 -
    nProtect 2011-11-21.02 2011.11.21 -
    Panda 10.0.3.5 2011.11.21 -
    PCTools 8.0.0.5 2011.11.22 -
    Prevx 3.0 2011.11.22 -
    Rising 23.84.04.02 2011.11.18 -
    Sophos 4.71.0 2011.11.22 -
    SUPERAntiSpyware 4.40.0.1006 2011.11.22 -
    Symantec 20111.2.0.82 2011.11.22 -
    TheHacker 6.7.0.1.346 2011.11.22 -
    TrendMicro 9.500.0.1008 2011.11.22 -
    TrendMicro-HouseCall 9.500.0.1008 2011.11.22 -
    VBA32 3.12.16.4 2011.11.21 -
    VIPRE 11112 2011.11.22 -
    ViRobot 2011.11.22.4786 2011.11.22 -
    VirusBuster 14.1.76.0 2011.11.21 -
    Additional informationShow all
    MD5 : f8f0d25ca553e39dde485d8fc7fcce89
    SHA1 : 66e2618e7aaf0b59e44aea5431893f3a765bb87b
    SHA256: 54df909101aaec63234a5c33b51d6689fef58b943942bffa96 06864f43ec1085
    ssdeep: 12288:67HQSGlAIVpt6HXid8JBuaBxYYtN4h0ObyRh0BqooKbO GY7eron:6jQbiIVpt6HgG0koo
    kL
    File size : 718336 bytes
    First seen: 2011-02-08 18:49:24
    Last seen : 2011-11-22 04:57:53
    TrID:
    Win32 Executable Generic (68.0%)
    Generic Win/DOS Executable (15.9%)
    DOS Executable Generic (15.9%)
    Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
    sigcheck:
    publisher....: Microsoft Corporation
    copyright....: (c) Microsoft Corporation. All rights reserved.
    product......: Microsoft_ Windows_ Operating System
    description..: NT Layer DLL
    original name: ntdll.dll
    internal name: ntdll.dll
    file version.: 5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)
    comments.....: n/a
    signers......: -
    signing date.: -
    verified.....: Unsigned

    PEInfo: PE structure information

    [[ basic data ]]
    entrypointaddress: 0x120F8
    timedatestamp....: 0x4D00F27D (Thu Dec 09 15:15:09 2010)
    machinetype......: 0x14c (I386)

    [[ 4 section(s) ]]
    name, viradd, virsiz, rawdsiz, ntropy, md5
    .text, 0x1000, 0x7CEDA, 0x7D000, 6.86, 6c4b48cb287c622fa0ebc3104d609416
    .data, 0x7E000, 0x4A20, 0x3200, 1.47, cd0a71ec3c60f29a08b8ef0f634a1d4f
    .rsrc, 0x83000, 0x2BE78, 0x2C000, 3.33, 05d0beffa92d472226469dc6901be97d
    .reloc, 0xAF000, 0x2EE0, 0x3000, 6.67, 5c193c501f1c4ac97d79bd8d5f6e49e4

    [[ 1316 export(s) ]]
    CsrAllocateCaptureBuffer, CsrAllocateMessagePointer, CsrCaptureMessageBuffer, CsrCaptureMessageMultiUnicodeStringsInPlace, CsrCaptureMessageString, CsrCaptureTimeout, CsrClientCallServer, CsrClientConnectToServer, CsrFreeCaptureBuffer, CsrGetProcessId, CsrIdentifyAlertableThread, CsrNewThread, CsrProbeForRead, CsrProbeForWrite, CsrSetPriorityClass, DbgBreakPoint, DbgPrint, DbgPrintEx, DbgPrintReturnControlC, DbgPrompt, DbgQueryDebugFilterState, DbgSetDebugFilterState, DbgUiConnectToDbg, DbgUiContinue, DbgUiConvertStateChangeStructure, DbgUiDebugActiveProcess, DbgUiGetThreadDebugObject, DbgUiIssueRemoteBreakin, DbgUiRemoteBreakin, DbgUiSetThreadDebugObject, DbgUiStopDebugging, DbgUiWaitStateChange, DbgUserBreakPoint, KiFastSystemCall, KiFastSystemCallRet, KiIntSystemCall, KiRaiseUserExceptionDispatcher, KiUserApcDispatcher, KiUserCallbackDispatcher, KiUserExceptionDispatcher, LdrAccessOutOfProcessResource, LdrAccessResource, LdrAddRefDll, LdrAlternateResourcesEnabled, LdrCreateOutOfProcessImage, LdrDestroyOutOfProcessImage, LdrDisableThreadCalloutsForDll, LdrEnumResources, LdrEnumerateLoadedModules, LdrFindCreateProcessManifest, LdrFindEntryForAddress, LdrFindResourceDirectory_U, LdrFindResourceEx_U, LdrFindResource_U, LdrFlushAlternateResourceModules, LdrGetDllHandle, LdrGetDllHandleEx, LdrGetProcedureAddress, LdrHotPatchRoutine, LdrInitShimEngineDynamic, LdrInitializeThunk, LdrLoadAlternateResourceModule, LdrLoadDll, LdrLockLoaderLock, LdrProcessRelocationBlock, LdrQueryImageFileExecutionOptions, LdrQueryProcessModuleInformation, LdrSetAppCompatDllRedirectionCallback, LdrSetDllManifestProber, LdrShutdownProcess, LdrShutdownThread, LdrUnloadAlternateResourceModule, LdrUnloadDll, LdrUnlockLoaderLock, LdrVerifyImageMatchesChecksum, NlsAnsiCodePage, NlsMbCodePageTag, NlsMbOemCodePageTag, NtAcceptConnectPort, NtAccessCheck, NtAccessCheckAndAuditAlarm, NtAccessCheckByType, NtAccessCheckByTypeAndAuditAlarm, NtAccessCheckByTypeResultList, NtAccessCheckByTypeResultListAndAuditAlarm, NtAccessCheckByTypeResultListAndAuditAlarmByHandle , NtAddAtom, NtAddBootEntry, NtAdjustGroupsToken, NtAdjustPrivilegesToken, NtAlertResumeThread, NtAlertThread, NtAllocateLocallyUniqueId, NtAllocateUserPhysicalPages, NtAllocateUuids, NtAllocateVirtualMemory, NtAreMappedFilesTheSame, NtAssignProcessToJobObject, NtCallbackReturn, NtCancelDeviceWakeupRequest, NtCancelIoFile, NtCancelTimer, NtClearEvent, NtClose, NtCloseObjectAuditAlarm, NtCompactKeys, NtCompareTokens, NtCompleteConnectPort, NtCompressKey, NtConnectPort, NtContinue, NtCreateDebugObject, NtCreateDirectoryObject, NtCreateEvent, NtCreateEventPair, NtCreateFile, NtCreateIoCompletion, NtCreateJobObject, NtCreateJobSet, NtCreateKey, NtCreateKeyedEvent, NtCreateMailslotFile, NtCreateMutant, NtCreateNamedPipeFile, NtCreatePagingFile, NtCreatePort, NtCreateProcess, NtCreateProcessEx, NtCreateProfile, NtCreateSection, NtCreateSemaphore, NtCreateSymbolicLinkObject, NtCreateThread, NtCreateTimer, NtCreateToken, NtCreateWaitablePort, NtCurrentTeb, NtDebugActiveProcess, NtDebugContinue, NtDelayExecution, NtDeleteAtom, NtDeleteBootEntry, NtDeleteFile, NtDeleteKey, NtDeleteObjectAuditAlarm, NtDeleteValueKey, NtDeviceIoControlFile, NtDisplayString, NtDuplicateObject, NtDuplicateToken, NtEnumerateBootEntries, NtEnumerateKey, NtEnumerateSystemEnvironmentValuesEx, NtEnumerateValueKey, NtExtendSection, NtFilterToken, NtFindAtom, NtFlushBuffersFile, NtFlushInstructionCache, NtFlushKey, NtFlushVirtualMemory, NtFlushWriteBuffer, NtFreeUserPhysicalPages, NtFreeVirtualMemory, NtFsControlFile, NtGetContextThread, NtGetDevicePowerState, NtGetPlugPlayEvent, NtGetWriteWatch, NtImpersonateAnonymousToken, NtImpersonateClientOfPort, NtImpersonateThread, NtInitializeRegistry, NtInitiatePowerAction, NtIsProcessInJob, NtIsSystemResumeAutomatic, NtListenPort, NtLoadDriver, NtLoadKey, NtLoadKey2, NtLockFile, NtLockProductActivationKeys, NtLockRegistryKey, NtLockVirtualMemory, NtMakePermanentObject, NtMakeTemporaryObject, NtMapUserPhysicalPages, NtMapUserPhysicalPagesScatter, NtMapViewOfSection, NtModifyBootEntry, NtNotifyChangeDirectoryFile, NtNotifyChangeKey, NtNotifyChangeMultipleKeys, NtOpenDirectoryObject, NtOpenEvent, NtOpenEventPair, NtOpenFile, NtOpenIoCompletion, NtOpenJobObject, NtOpenKey, NtOpenKeyedEvent, NtOpenMutant, NtOpenObjectAuditAlarm, NtOpenProcess, NtOpenProcessToken, NtOpenProcessTokenEx, NtOpenSection, NtOpenSemaphore, NtOpenSymbolicLinkObject, NtOpenThread, NtOpenThreadToken, NtOpenThreadTokenEx, NtOpenTimer, NtPlugPlayControl, NtPowerInformation, NtPrivilegeCheck, NtPrivilegeObjectAuditAlarm, NtPrivilegedServiceAuditAlarm, NtProtectVirtualMemory, NtPulseEvent, NtQueryAttributesFile, NtQueryBootEntryOrder, NtQueryBootOptions, NtQueryDebugFilterState, NtQueryDefaultLocale, NtQueryDefaultUILanguage, NtQueryDirectoryFile, NtQueryDirectoryObject, NtQueryEaFile, NtQueryEvent, NtQueryFullAttributesFile, NtQueryInformationAtom, NtQueryInformationFile, NtQueryInformationJobObject, NtQueryInformationPort, NtQueryInformationProcess, NtQueryInformationThread, NtQueryInformationToken, NtQueryInstallUILanguage, NtQueryIntervalProfile, NtQueryIoCompletion, NtQueryKey, NtQueryMultipleValueKey, NtQueryMutant, NtQueryObject, NtQueryOpenSubKeys, NtQueryPerformanceCounter, NtQueryPortInformationProcess, NtQueryQuotaInformationFile, NtQuerySection, NtQuerySecurityObject, NtQuerySemaphore, NtQuerySymbolicLinkObject, NtQuerySystemEnvironmentValue, NtQuerySystemEnvironmentValueEx, NtQuerySystemInformation, NtQuerySystemTime, NtQueryTimer, NtQueryTimerResolution, NtQueryValueKey, NtQueryVirtualMemory, NtQueryVolumeInformationFile, NtQueueApcThread, NtRaiseException, NtRaiseHardError, NtReadFile, NtReadFileScatter, NtReadRequestData, NtReadVirtualMemory, NtRegisterThreadTerminatePort, NtReleaseKeyedEvent, NtReleaseMutant, NtReleaseSemaphore, NtRemoveIoCompletion, NtRemoveProcessDebug, NtRenameKey, NtReplaceKey, NtReplyPort, NtReplyWaitReceivePort, NtReplyWaitReceivePortEx, NtReplyWaitReplyPort, NtRequestDeviceWakeup, NtRequestPort, NtRequestWaitReplyPort, NtRequestWakeupLatency, NtResetEvent, NtResetWriteWatch, NtRestoreKey, NtResumeProcess, NtResumeThread, NtSaveKey, NtSaveKeyEx, NtSaveMergedKeys, NtSecureConnectPort, NtSetBootEntryOrder, NtSetBootOptions, NtSetContextThread, NtSetDebugFilterState, NtSetDefaultHardErrorPort, NtSetDefaultLocale, NtSetDefaultUILanguage, NtSetEaFile, NtSetEvent, NtSetEventBoostPriority, NtSetHighEventPair, NtSetHighWaitLowEventPair, NtSetInformationDebugObject, NtSetInformationFile, NtSetInformationJobObject, NtSetInformationKey, NtSetInformationObject, NtSetInformationProcess, NtSetInformationThread, NtSetInformationToken, NtSetIntervalProfile, NtSetIoCompletion, NtSetLdtEntries, NtSetLowEventPair, NtSetLowWaitHighEventPair, NtSetQuotaInformationFile, NtSetSecurityObject, NtSetSystemEnvironmentValue, NtSetSystemEnvironmentValueEx, NtSetSystemInformation, NtSetSystemPowerState, NtSetSystemTime, NtSetThreadExecutionState, NtSetTimer, NtSetTimerResolution, NtSetUuidSeed, NtSetValueKey, NtSetVolumeInformationFile, NtShutdownSystem, NtSignalAndWaitForSingleObject, NtStartProfile, NtStopProfile, NtSuspendProcess, NtSuspendThread, NtSystemDebugControl, NtTerminateJobObject, NtTerminateProcess, NtTerminateThread, NtTestAlert, NtTraceEvent, NtTranslateFilePath, NtUnloadDriver, NtUnloadKey, NtUnloadKeyEx, NtUnlockFile, NtUnlockVirtualMemory, NtUnmapViewOfSection, NtVdmControl, NtWaitForDebugEvent, NtWaitForKeyedEvent, NtWaitForMultipleObjects, NtWaitForSingleObject, NtWaitHighEventPair, NtWaitLowEventPair, NtWriteFile, NtWriteFileGather, NtWriteRequestData, NtWriteVirtualMemory, NtYieldExecution, PfxFindPrefix, PfxInitialize, PfxInsertPrefix, PfxRemovePrefix, PropertyLengthAsVariant, RtlAbortRXact, RtlAbsoluteToSelfRelativeSD, RtlAcquirePebLock, RtlAcquireResourceExclusive, RtlAcquireResourceShared, RtlActivateActivationContext, RtlActivateActivationContextEx, RtlActivateActivationContextUnsafeFast, RtlAddAccessAllowedAce, RtlAddAccessAllowedAceEx, RtlAddAccessAllowedObjectAce, RtlAddAccessDeniedAce, RtlAddAccessDeniedAceEx, RtlAddAccessDeniedObjectAce, RtlAddAce, RtlAddActionToRXact, RtlAddAtomToAtomTable, RtlAddAttributeActionToRXact, RtlAddAuditAccessAce, RtlAddAuditAccessAceEx, RtlAddAuditAccessObjectAce, RtlAddCompoundAce, RtlAddRange, RtlAddRefActivationContext, RtlAddRefMemoryStream, RtlAddVectoredExceptionHandler, RtlAddressInSectionTable, RtlAdjustPrivilege, RtlAllocateAndInitializeSid, RtlAllocateHandle, RtlAllocateHeap, RtlAnsiCharToUnicodeChar, RtlAnsiStringToUnicodeSize, RtlAnsiStringToUnicodeString, RtlAppendAsciizToString, RtlAppendPathElement, RtlAppendStringToString, RtlAppendUnicodeStringToString, RtlAppendUnicodeToString, RtlApplicationVerifierStop, RtlApplyRXact, RtlApplyRXactNoFlush, RtlAreAllAccessesGranted, RtlAreAnyAccessesGranted, RtlAreBitsClear, RtlAreBitsSet, RtlAssert, RtlAssert2, RtlCancelTimer, RtlCaptureContext, RtlCaptureStackBackTrace, RtlCaptureStackContext, RtlCharToInteger, RtlCheckForOrphanedCriticalSections, RtlCheckProcessParameters, RtlCheckRegistryKey, RtlClearAllBits, RtlClearBits, RtlCloneMemoryStream, RtlCommitMemoryStream, RtlCompactHeap, RtlCompareMemory, RtlCompareMemoryUlong, RtlCompareString, RtlCompareUnicodeString, RtlCompressBuffer, RtlComputeCrc32, RtlComputeImportTableHash, RtlComputePrivatizedDllName_U, RtlConsoleMultiByteToUnicodeN, RtlConvertExclusiveToShared, RtlConvertLongToLargeInteger, RtlConvertPropertyToVariant, RtlConvertSharedToExclusive, RtlConvertSidToUnicodeString, RtlConvertToAutoInheritSecurityObject, RtlConvertUiListToApiList, RtlConvertUlongToLargeInteger, RtlConvertVariantToProperty, RtlCopyLuid, RtlCopyLuidAndAttributesArray, RtlCopyMemoryStreamTo, RtlCopyOutOfProcessMemoryStreamTo, RtlCopyRangeList, RtlCopySecurityDescriptor, RtlCopySid, RtlCopySidAndAttributesArray, RtlCopyString, RtlCopyUnicodeString, RtlCreateAcl, RtlCreateActivationContext, RtlCreateAndSetSD, RtlCreateAtomTable, RtlCreateBootStatusDataFile, RtlCreateEnvironment, RtlCreateHeap, RtlCreateProcessParameters, RtlCreateQueryDebugBuffer, RtlCreateRegistryKey, RtlCreateSecurityDescriptor, RtlCreateServiceSid, RtlCreateSystemVolumeInformationFolder, RtlCreateTagHeap, RtlCreateTimer, RtlCreateTimerQueue, RtlCreateUnicodeString, RtlCreateUnicodeStringFromAsciiz, RtlCreateUserProcess, RtlCreateUserSecurityObject, RtlCreateUserThread, RtlCustomCPToUnicodeN, RtlCutoverTimeToSystemTime, RtlDeNormalizeProcessParams, RtlDeactivateActivationContext, RtlDeactivateActivationContextUnsafeFast, RtlDebugPrintTimes, RtlDecodePointer, RtlDecodeSystemPointer, RtlDecompressBuffer, RtlDecompressFragment, RtlDefaultNpAcl, RtlDelete, RtlDeleteAce, RtlDeleteAtomFromAtomTable, RtlDeleteCriticalSection, RtlDeleteElementGenericTable, RtlDeleteElementGenericTableAvl, RtlDeleteNoSplay, RtlDeleteOwnersRanges, RtlDeleteRange, RtlDeleteRegistryValue, RtlDeleteResource, RtlDeleteSecurityObject, RtlDeleteTimer, RtlDeleteTimerQueue, RtlDeleteTimerQueueEx, RtlDeregisterWait, RtlDeregisterWaitEx, RtlDestroyAtomTable, RtlDestroyEnvironment, RtlDestroyHandleTable, RtlDestroyHeap, RtlDestroyProcessParameters, RtlDestroyQueryDebugBuffer, RtlDetermineDosPathNameType_U, RtlDllShutdownInProgress, RtlDnsHostNameToComputerName, RtlDoesFileExists_U, RtlDosApplyFileIsolationRedirection_Ustr, RtlDosPathNameToNtPathName_U, RtlDosSearchPath_U, RtlDosSearchPath_Ustr, RtlDowncaseUnicodeChar, RtlDowncaseUnicodeString, RtlDumpResource, RtlDuplicateUnicodeString, RtlEmptyAtomTable, RtlEnableEarlyCriticalSectionEventCreation, RtlEncodePointer, RtlEncodeSystemPointer, RtlEnlargedIntegerMultiply, RtlEnlargedUnsignedDivide, RtlEnlargedUnsignedMultiply, RtlEnterCriticalSection, RtlEnumProcessHeaps, RtlEnumerateGenericTable, RtlEnumerateGenericTableAvl, RtlEnumerateGenericTableLikeADirectory, RtlEnumerateGenericTableWithoutSplaying, RtlEnumerateGenericTableWithoutSplayingAvl, RtlEqualComputerName, RtlEqualDomainName, RtlEqualLuid, RtlEqualPrefixSid, RtlEqualSid, RtlEqualString, RtlEqualUnicodeString, RtlEraseUnicodeString, RtlExitUserThread, RtlExpandEnvironmentStrings_U, RtlExtendHeap, RtlExtendedIntegerMultiply, RtlExtendedLargeIntegerDivide, RtlExtendedMagicDivide, RtlFillMemory, RtlFillMemoryUlong, RtlFinalReleaseOutOfProcessMemoryStream, RtlFindActivationContextSectionGuid, RtlFindActivationContextSectionString, RtlFindCharInUnicodeString, RtlFindClearBits, RtlFindClearBitsAndSet, RtlFindClearRuns, RtlFindLastBackwardRunClear, RtlFindLeastSignificantBit, RtlFindLongestRunClear, RtlFindMessage, RtlFindMostSignificantBit, RtlFindNextForwardRunClear, RtlFindRange, RtlFindSetBits, RtlFindSetBitsAndClear, RtlFirstEntrySList, RtlFirstFreeAce, RtlFlushSecureMemoryCache, RtlFormatCurrentUserKeyPath, RtlFormatMessage, RtlFreeAnsiString, RtlFreeHandle, RtlFreeHeap, RtlFreeOemString, RtlFreeRangeList, RtlFreeSid, RtlFreeThreadActivationContextStack, RtlFreeUnicodeString, RtlFreeUserThreadStack, RtlGUIDFromString, RtlGenerate8dot3Name, RtlGetAce, RtlGetActiveActivationContext, RtlGetCallersAddress, RtlGetCompressionWorkSpaceSize, RtlGetControlSecurityDescriptor, RtlGetCurrentDirectory_U, RtlGetCurrentPeb, RtlGetDaclSecurityDescriptor, RtlGetElementGenericTable, RtlGetElementGenericTableAvl, RtlGetFirstRange, RtlGetFrame, RtlGetFullPathName_U, RtlGetGroupSecurityDescriptor, RtlGetLastNtStatus, RtlGetLastWin32Error, RtlGetLengthWithoutLastFullDosOrNtPathElement, RtlGetLengthWithoutTrailingPathSeperators, RtlGetLongestNtPathLength, RtlGetNativeSystemInformation, RtlGetNextRange, RtlGetNtGlobalFlags, RtlGetNtProductType, RtlGetNtVersionNumbers, RtlGetOwnerSecurityDescriptor, RtlGetProcessHeaps, RtlGetSaclSecurityDescriptor, RtlGetSecurityDescriptorRMControl, RtlGetSetBootStatusData, RtlGetUnloadEventTrace, RtlGetUserInfoHeap, RtlGetVersion, RtlHashUnicodeString, RtlIdentifierAuthoritySid, RtlImageDirectoryEntryToData, RtlImageNtHeader, RtlImageRvaToSection, RtlImageRvaToVa, RtlImpersonateSelf, RtlInitAnsiString, RtlInitCodePageTable, RtlInitMemoryStream, RtlInitNlsTables, RtlInitOutOfProcessMemoryStream, RtlInitString, RtlInitUnicodeString, RtlInitUnicodeStringEx, RtlInitializeAtomPackage, RtlInitializeBitMap, RtlInitializeContext, RtlInitializeCriticalSection, RtlInitializeCriticalSectionAndSpinCount, RtlInitializeGenericTable, RtlInitializeGenericTableAvl, RtlInitializeHandleTable, RtlInitializeRXact, RtlInitializeRangeList, RtlInitializeResource, RtlInitializeSListHead, RtlInitializeSid, RtlInitializeStackTraceDataBase, RtlInsertElementGenericTable, RtlInsertElementGenericTableAvl, RtlInt64ToUnicodeString, RtlIntegerToChar, RtlIntegerToUnicodeString, RtlInterlockedFlushSList, RtlInterlockedPopEntrySList, RtlInterlockedPushEntrySList, RtlInterlockedPushListSList, RtlInvertRangeList, RtlIpv4AddressToStringA, RtlIpv4AddressToStringExA, RtlIpv4AddressToStringExW, RtlIpv4AddressToStringW, RtlIpv4StringToAddressA, RtlIpv4StringToAddressExA, RtlIpv4StringToAddressExW, RtlIpv4StringToAddressW, RtlIpv6AddressToStringA, RtlIpv6AddressToStringExA, RtlIpv6AddressToStringExW, RtlIpv6AddressToStringW, RtlIpv6StringToAddressA, RtlIpv6StringToAddressExA, RtlIpv6StringToAddressExW, RtlIpv6StringToAddressW, RtlIsActivationContextActive, RtlIsDosDeviceName_U, RtlIsGenericTableEmpty, RtlIsGenericTableEmptyAvl, RtlIsNameLegalDOS8Dot3, RtlIsRangeAvailable, RtlIsTextUnicode, RtlIsThreadWithinLoaderCallout, RtlIsValidHandle, RtlIsValidIndexHandle, RtlLargeIntegerAdd, RtlLargeIntegerArithmeticShift, RtlLargeIntegerDivide, RtlLargeIntegerNegate, RtlLargeIntegerShiftLeft, RtlLargeIntegerShiftRight, RtlLargeIntegerSubtract, RtlLargeIntegerToChar, RtlLeaveCriticalSection, RtlLengthRequiredSid, RtlLengthSecurityDescriptor, RtlLengthSid, RtlLocalTimeToSystemTime, RtlLockBootStatusData, RtlLockHeap, RtlLockMemoryStreamRegion, RtlLogStackBackTrace, RtlLookupAtomInAtomTable, RtlLookupElementGenericTable, RtlLookupElementGenericTableAvl, RtlMakeSelfRelativeSD, RtlMapGenericMask, RtlMapSecurityErrorToNtStatus, RtlMergeRangeLists, RtlMoveMemory, RtlMultiAppendUnicodeStringBuffer, RtlMultiByteToUnicodeN, RtlMultiByteToUnicodeSize, RtlNewInstanceSecurityObject, RtlNewSecurityGrantedAccess, RtlNewSecurityObject, RtlNewSecurityObjectEx, RtlNewSecurityObjectWithMultipleInheritance, RtlNormalizeProcessParams, RtlNtPathNameToDosPathName, RtlNtStatusToDosError, RtlNtStatusToDosErrorNoTeb, RtlNumberGenericTableElements, RtlNumberGenericTableElementsAvl, RtlNumberOfClearBits, RtlNumberOfSetBits, RtlOemStringToUnicodeSize, RtlOemStringToUnicodeString, RtlOemToUnicodeN, RtlOpenCurrentUser, RtlPcToFileHeader, RtlPinAtomInAtomTable, RtlPopFrame, RtlPrefixString, RtlPrefixUnicodeString, RtlProtectHeap, RtlPushFrame, RtlQueryAtomInAtomTable, RtlQueryDepthSList, RtlQueryEnvironmentVariable_U, RtlQueryHeapInformation, RtlQueryInformationAcl, RtlQueryInformationActivationContext, RtlQueryInformationActiveActivationContext, RtlQueryInterfaceMemoryStream, RtlQueryProcessBackTraceInformation, RtlQueryProcessDebugInformation, RtlQueryProcessHeapInformation, RtlQueryProcessLockInformation, RtlQueryRegistryValues, RtlQuerySecurityObject, RtlQueryTagHeap, RtlQueryTimeZoneInformation, RtlQueueApcWow64Thread, RtlQueueWorkItem, RtlRaiseException, RtlRaiseStatus, RtlRandom, RtlRandomEx, RtlReAllocateHeap, RtlReadMemoryStream, RtlReadOutOfProcessMemoryStream, RtlRealPredecessor, RtlRealSuccessor, RtlRegisterSecureMemoryCacheCallback, RtlRegisterWait, RtlReleaseActivationContext, RtlReleaseMemoryStream, RtlReleasePebLock, RtlReleaseResource, RtlRemoteCall, RtlRemoveVectoredExceptionHandler, RtlResetRtlTranslations, RtlRestoreLastWin32Error, RtlRevertMemoryStream, RtlRunDecodeUnicodeString, RtlRunEncodeUnicodeString, RtlSecondsSince1970ToTime, RtlSecondsSince1980ToTime, RtlSeekMemoryStream, RtlSelfRelativeToAbsoluteSD, RtlSelfRelativeToAbsoluteSD2, RtlSetAllBits, RtlSetAttributesSecurityDescriptor, RtlSetBits, RtlSetControlSecurityDescriptor, RtlSetCriticalSectionSpinCount, RtlSetCurrentDirectory_U, RtlSetCurrentEnvironment, RtlSetDaclSecurityDescriptor, RtlSetEnvironmentVariable, RtlSetGroupSecurityDescriptor, RtlSetHeapInformation, RtlSetInformationAcl, RtlSetIoCompletionCallback, RtlSetLastWin32Error, RtlSetLastWin32ErrorAndNtStatusFromNtStatus, RtlSetMemoryStreamSize, RtlSetOwnerSecurityDescriptor, RtlSetProcessIsCritical, RtlSetSaclSecurityDescriptor, RtlSetSecurityDescriptorRMControl, RtlSetSecurityObject, RtlSetSecurityObjectEx, RtlSetThreadIsCritical, RtlSetThreadPoolStartFunc, RtlSetTimeZoneInformation, RtlSetTimer, RtlSetUnicodeCallouts, RtlSetUserFlagsHeap, RtlSetUserValueHeap, RtlSizeHeap, RtlSplay, RtlStartRXact, RtlStatMemoryStream, RtlStringFromGUID, RtlSubAuthorityCountSid, RtlSubAuthoritySid, RtlSubtreePredecessor, RtlSubtreeSuccessor, RtlSystemTimeToLocalTime, RtlTimeFieldsToTime, RtlTimeToElapsedTimeFields, RtlTimeToSecondsSince1970, RtlTimeToSecondsSince1980, RtlTimeToTimeFields, RtlTraceDatabaseAdd, RtlTraceDatabaseCreate, RtlTraceDatabaseDestroy, RtlTraceDatabaseEnumerate, RtlTraceDatabaseFind, RtlTraceDatabaseLock, RtlTraceDatabaseUnlock, RtlTraceDatabaseValidate, RtlTryEnterCriticalSection, RtlUlongByteSwap, RtlUlonglongByteSwap, RtlUnhandledExceptionFilter, RtlUnhandledExceptionFilter2, RtlUnicodeStringToAnsiSize, RtlUnicodeStringToAnsiString, RtlUnicodeStringToCountedOemString, RtlUnicodeStringToInteger, RtlUnicodeStringToOemSize, RtlUnicodeStringToOemString, RtlUnicodeToCustomCPN, RtlUnicodeToMultiByteN, RtlUnicodeToMultiByteSize, RtlUnicodeToOemN, RtlUniform, RtlUnlockBootStatusData, RtlUnlockHeap, RtlUnlockMemoryStreamRegion, RtlUnwind, RtlUpcaseUnicodeChar, RtlUpcaseUnicodeString, RtlUpcaseUnicodeStringToAnsiString, RtlUpcaseUnicodeStringToCountedOemString, RtlUpcaseUnicodeStringToOemString, RtlUpcaseUnicodeToCustomCPN, RtlUpcaseUnicodeToMultiByteN, RtlUpcaseUnicodeToOemN, RtlUpdateTimer, RtlUpperChar, RtlUpperString, RtlUsageHeap, RtlUshortByteSwap, RtlValidAcl, RtlValidRelativeSecurityDescriptor, RtlValidSecurityDescriptor, RtlValidSid, RtlValidateHeap, RtlValidateProcessHeaps, RtlValidateUnicodeString, RtlVerifyVersionInfo, RtlWalkFrameChain, RtlWalkHeap, RtlWriteMemoryStream, RtlWriteRegistryValue, RtlZeroHeap, RtlZeroMemory, RtlZombifyActivationContext, RtlpApplyLengthFunction, RtlpEnsureBufferSize, RtlpNotOwnerCriticalSection, RtlpNtCreateKey, RtlpNtEnumerateSubKey, RtlpNtMakeTemporaryKey, RtlpNtOpenKey, RtlpNtQueryValueKey, RtlpNtSetValueKey, RtlpUnWaitCriticalSection, RtlpWaitForCriticalSection, RtlxAnsiStringToUnicodeSize, RtlxOemStringToUnicodeSize, RtlxUnicodeStringToAnsiSize, RtlxUnicodeStringToOemSize, VerSetConditionMask, ZwAcceptConnectPort, ZwAccessCheck, ZwAccessCheckAndAuditAlarm, ZwAccessCheckByType, ZwAccessCheckByTypeAndAuditAlarm, ZwAccessCheckByTypeResultList, ZwAccessCheckByTypeResultListAndAuditAlarm, ZwAccessCheckByTypeResultListAndAuditAlarmByHandle , ZwAddAtom, ZwAddBootEntry, ZwAdjustGroupsToken, ZwAdjustPrivilegesToken, ZwAlertResumeThread, ZwAlertThread, ZwAllocateLocallyUniqueId, ZwAllocateUserPhysicalPages, ZwAllocateUuids, ZwAllocateVirtualMemory, ZwAreMappedFilesTheSame, ZwAssignProcessToJobObject, ZwCallbackReturn, ZwCancelDeviceWakeupRequest, ZwCancelIoFile, ZwCancelTimer, ZwClearEvent, ZwClose, ZwCloseObjectAuditAlarm, ZwCompactKeys, ZwCompareTokens, ZwCompleteConnectPort, ZwCompressKey, ZwConnectPort, ZwContinue, ZwCreateDebugObject, ZwCreateDirectoryObject, ZwCreateEvent, ZwCreateEventPair, ZwCreateFile, ZwCreateIoCompletion, ZwCreateJobObject, ZwCreateJobSet, ZwCreateKey, ZwCreateKeyedEvent, ZwCreateMailslotFile, ZwCreateMutant, ZwCreateNamedPipeFile, ZwCreatePagingFile, ZwCreatePort, ZwCreateProcess, ZwCreateProcessEx, ZwCreateProfile, ZwCreateSection, ZwCreateSemaphore, ZwCreateSymbolicLinkObject, ZwCreateThread, ZwCreateTimer, ZwCreateToken, ZwCreateWaitablePort, ZwDebugActiveProcess, ZwDebugContinue, ZwDelayExecution, ZwDeleteAtom, ZwDeleteBootEntry, ZwDeleteFile, ZwDeleteKey, ZwDeleteObjectAuditAlarm, ZwDeleteValueKey, ZwDeviceIoControlFile, ZwDisplayString, ZwDuplicateObject, ZwDuplicateToken, ZwEnumerateBootEntries, ZwEnumerateKey, ZwEnumerateSystemEnvironmentValuesEx, ZwEnumerateValueKey, ZwExtendSection, ZwFilterToken, ZwFindAtom, ZwFlushBuffersFile, ZwFlushInstructionCache, ZwFlushKey, ZwFlushVirtualMemory, ZwFlushWriteBuffer, ZwFreeUserPhysicalPages, ZwFreeVirtualMemory, ZwFsControlFile, ZwGetContextThread, ZwGetDevicePowerState, ZwGetPlugPlayEvent, ZwGetWriteWatch, ZwImpersonateAnonymousToken, ZwImpersonateClientOfPort, ZwImpersonateThread, ZwInitializeRegistry, ZwInitiatePowerAction, ZwIsProcessInJob, ZwIsSystemResumeAutomatic, ZwListenPort, ZwLoadDriver, ZwLoadKey, ZwLoadKey2, ZwLockFile, ZwLockProductActivationKeys, ZwLockRegistryKey, ZwLockVirtualMemory, ZwMakePermanentObject, ZwMakeTemporaryObject, ZwMapUserPhysicalPages, ZwMapUserPhysicalPagesScatter, ZwMapViewOfSection, ZwModifyBootEntry, ZwNotifyChangeDirectoryFile, ZwNotifyChangeKey, ZwNotifyChangeMultipleKeys, ZwOpenDirectoryObject, ZwOpenEvent, ZwOpenEventPair, ZwOpenFile, ZwOpenIoCompletion, ZwOpenJobObject, ZwOpenKey, ZwOpenKeyedEvent, ZwOpenMutant, ZwOpenObjectAuditAlarm, ZwOpenProcess, ZwOpenProcessToken, ZwOpenProcessTokenEx, ZwOpenSection, ZwOpenSemaphore, ZwOpenSymbolicLinkObject, ZwOpenThread, ZwOpenThreadToken, ZwOpenThreadTokenEx, ZwOpenTimer, ZwPlugPlayControl, ZwPowerInformation, ZwPrivilegeCheck, ZwPrivilegeObjectAuditAlarm, ZwPrivilegedServiceAuditAlarm, ZwProtectVirtualMemory, ZwPulseEvent, ZwQueryAttributesFile, ZwQueryBootEntryOrder, ZwQueryBootOptions, ZwQueryDebugFilterState, ZwQueryDefaultLocale, ZwQueryDefaultUILanguage, ZwQueryDirectoryFile, ZwQueryDirectoryObject, ZwQueryEaFile, ZwQueryEvent, ZwQueryFullAttributesFile, ZwQueryInformationAtom, ZwQueryInformationFile, ZwQueryInformationJobObject, ZwQueryInformationPort, ZwQueryInformationProcess, ZwQueryInformationThread, ZwQueryInformationToken, ZwQueryInstallUILanguage, ZwQueryIntervalProfile, ZwQueryIoCompletion, ZwQueryKey, ZwQueryMultipleValueKey, ZwQueryMutant, ZwQueryObject, ZwQueryOpenSubKeys, ZwQueryPerformanceCounter, ZwQueryPortInformationProcess, ZwQueryQuotaInformationFile, ZwQuerySection, ZwQuerySecurityObject, ZwQuerySemaphore, ZwQuerySymbolicLinkObject, ZwQuerySystemEnvironmentValue, ZwQuerySystemEnvironmentValueEx, ZwQuerySystemInformation, ZwQuerySystemTime, ZwQueryTimer, ZwQueryTimerResolution, ZwQueryValueKey, ZwQueryVirtualMemory, ZwQueryVolumeInformationFile, ZwQueueApcThread, ZwRaiseException, ZwRaiseHardError, ZwReadFile, ZwReadFileScatter, ZwReadRequestData, ZwReadVirtualMemory, ZwRegisterThreadTerminatePort, ZwReleaseKeyedEvent, ZwReleaseMutant, ZwReleaseSemaphore, ZwRemoveIoCompletion, ZwRemoveProcessDebug, ZwRenameKey, ZwReplaceKey, ZwReplyPort, ZwReplyWaitReceivePort, ZwReplyWaitReceivePortEx, ZwReplyWaitReplyPort, ZwRequestDeviceWakeup, ZwRequestPort, ZwRequestWaitReplyPort, ZwRequestWakeupLatency, ZwResetEvent, ZwResetWriteWatch, ZwRestoreKey, ZwResumeProcess, ZwResumeThread, ZwSaveKey, ZwSaveKeyEx, ZwSaveMergedKeys, ZwSecureConnectPort, ZwSetBootEntryOrder, ZwSetBootOptions, ZwSetContextThread, ZwSetDebugFilterState, ZwSetDefaultHardErrorPort, ZwSetDefaultLocale, ZwSetDefaultUILanguage, ZwSetEaFile, ZwSetEvent, ZwSetEventBoostPriority, ZwSetHighEventPair, ZwSetHighWaitLowEventPair, ZwSetInformationDebugObject, ZwSetInformationFile, ZwSetInformationJobObject, ZwSetInformationKey, ZwSetInformationObject, ZwSetInformationProcess, ZwSetInformationThread, ZwSetInformationToken, ZwSetIntervalProfile, ZwSetIoCompletion, ZwSetLdtEntries, ZwSetLowEventPair, ZwSetLowWaitHighEventPair, ZwSetQuotaInformationFile, ZwSetSecurityObject, ZwSetSystemEnvironmentValue, ZwSetSystemEnvironmentValueEx, ZwSetSystemInformation, ZwSetSystemPowerState, ZwSetSystemTime, ZwSetThreadExecutionState, ZwSetTimer, ZwSetTimerResolution, ZwSetUuidSeed, ZwSetValueKey, ZwSetVolumeInformationFile, ZwShutdownSystem, ZwSignalAndWaitForSingleObject, ZwStartProfile, ZwStopProfile, ZwSuspendProcess, ZwSuspendThread, ZwSystemDebugControl, ZwTerminateJobObject, ZwTerminateProcess, ZwTerminateThread, ZwTestAlert, ZwTraceEvent, ZwTranslateFilePath, ZwUnloadDriver, ZwUnloadKey, ZwUnloadKeyEx, ZwUnlockFile, ZwUnlockVirtualMemory, ZwUnmapViewOfSection, ZwVdmControl, ZwWaitForDebugEvent, ZwWaitForKeyedEvent, ZwWaitForMultipleObjects, ZwWaitForSingleObject, ZwWaitHighEventPair, ZwWaitLowEventPair, ZwWriteFile, ZwWriteFileGather, ZwWriteRequestData, ZwWriteVirtualMemory, ZwYieldExecution, _CIcos, _CIlog, _CIpow, _CIsin, _CIsqrt, __isascii, __iscsym, __iscsymf, __toascii, _alldiv, _alldvrm, _allmul, _alloca_probe, _allrem, _allshl, _allshr, _atoi64, _aulldiv, _aulldvrm, _aullrem, _aullshr, _chkstk, _fltused, _ftol, _i64toa, _i64tow, _itoa, _itow, _lfind, _ltoa, _ltow, _memccpy, _memicmp, _snprintf, _snwprintf, _splitpath, _strcmpi, _stricmp, _strlwr, _strnicmp, _strupr, _tolower, _toupper, _ui64toa, _ui64tow, _ultoa, _ultow, _vsnprintf, _vsnwprintf, _wcsicmp, _wcslwr, _wcsnicmp, _wcsupr, _wtoi, _wtoi64, _wtol, abs, atan, atoi, atol, bsearch, ceil, cos, fabs, floor, isalnum, isalpha, iscntrl, isdigit, isgraph, islower, isprint, ispunct, isspace, isupper, iswalpha, iswctype, iswdigit, iswlower, iswspace, iswxdigit, isxdigit, labs, log, mbstowcs, memchr, memcmp, memcpy, memmove, memset, pow, qsort, sin, sprintf, sqrt, sscanf, strcat, strchr, strcmp, strcpy, strcspn, strlen, strncat, strncmp, strncpy, strpbrk, strrchr, strspn, strstr, strtol, strtoul, swprintf, tan, tolower, toupper, towlower, towupper, vDbgPrintEx, vDbgPrintExWithPrefix, vsprintf, wcscat, wcschr, wcscmp, wcscpy, wcscspn, wcslen, wcsncat, wcsncmp, wcsncpy, wcspbrk, wcsrchr, wcsspn, wcsstr, wcstol, wcstombs, wcstoul

    ExifTool:
    file metadata
    CharacterSet: Unicode
    CodeSize: 512000
    CompanyName: Microsoft Corporation
    EntryPoint: 0x120f8
    FileDescription: NT Layer DLL
    FileFlagsMask: 0x003f
    FileOS: Windows NT 32-bit
    FileSize: 702 kB
    FileSubtype: 0
    FileType: Win32 DLL
    FileVersion: 5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)
    FileVersionNumber: 5.1.2600.6055
    ImageVersion: 5.1
    InitializedDataSize: 211968
    InternalName: ntdll.dll
    LanguageCode: English (U.S.)
    LegalCopyright: Microsoft Corporation. All rights reserved.
    LinkerVersion: 7.1
    MIMEType: application/octet-stream
    MachineType: Intel 386 or later, and compatibles
    OSVersion: 5.1
    ObjectFileType: Dynamic link library
    OriginalFilename: ntdll.dll
    PEType: PE32
    ProductName: Microsoft Windows Operating System
    ProductVersion: 5.1.2600.6055
    ProductVersionNumber: 5.1.2600.6055
    Subsystem: Windows command line
    SubsystemVersion: 4.1
    TimeStamp: 2010:12:09 16:15:09+01:00
    UninitializedDataSize: 0



    VT Community

    0
    This file has never been reviewed by any VT Community member. Be the first one to comment on it!
    VirusTotal Team

  8. #8
    broni is offline Senior Member
    I asked you this:
    if someone is "sharing" my internet connection?
    Please elaborate. What does make you think so?

  9. #9
    jaycee231 is offline Junior Member
    Quote Originally Posted by jaycee231 View Post
    ok, my messages keep disappearing from here after the page freezes and I get a Not Responding message in Explorer....

    Sorry, I did answer your question...had the same issue then as I did this time...messages I type are disappearing...

    I think that because there is the name of a stranger to me in my ISP details of my modem...I'll call my ISP provider and get my wireless connection secured.
    Here was my answer.

  10. #10
    broni is offline Senior Member
    Save 20% on AVG Internet Security 2012 Suite!
    You have to secure your router.
    That's a start.

+ Reply to Thread
Page 1 of 2 1 2 LastLast