Computer Slow, Adobe Reader 11 virus?

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

I got a warning box:

Combo-fix cannot run when CA is installed. It would be dangerous to continue.
Please uninstall CA or use another tool.

I am uninstalling as I can always reinstall later.

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

Uninstalling CA worked. Will post Combofix log shortly. Reinstalling CA right now.
Had to uninstall Malware Bytes to install CA. Will reinstall Malware bytes after I post log.
CA also wants to run a full sysmtem scan to check for viruses since it was down.
_________________

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

Here is combo fix log:

ComboFix 11-12-13.03 - Tad Palmer 12/14/2011 13:38:42.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1559 [GMT -5:00]
Running from: c:\documents and settings\Tad Palmer\My Documents\Downloads\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\CSC\d6
.
.
((((((((((((((((((((((((( Files Created from 2011-11-14 to 2011-12-14 )))))))))))))))))))))))))))))))
.
.
2011-12-13 16:03 . 2011-12-13 16:03 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-12-12 20:42 . 2011-12-12 20:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-12-12 20:42 . 2011-08-31 22:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-21 01:29 . 2011-11-21 01:29 -------- d-----r- c:\documents and settings\Tad Palmer\Application Data\Brother
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-11 00:41 . 2011-10-11 00:41 21425 ----a-w- c:\windows\system32\drivers\AegisP.sys
2011-10-10 14:22 . 2011-10-10 23:31 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-09-28 07:06 . 2008-04-14 09:41 599040 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 15:41 . 2008-07-29 23:59 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 15:41 . 2001-08-23 13:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-26 15:41 . 2001-08-23 13:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll
2011-11-09 14:47 . 2011-10-11 00:03 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-05-10 . 6460FBE53566E18B9B07EDCAD804FBE5 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-06 344064]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-02-21 819200]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-02-21 970752]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2008-07-10 29984]
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2008-07-10 46368]
"PPort11reminder"="c:\program files\ScanSoft\PaperPort\Ereg\Ereg.exe" [2007-08-31 328992]
"ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"BrStsMon00"="c:\program files\Browny02\Brother\BrStMonW.exe" [2010-02-09 2621440]
"Intuit SyncManager"="c:\program files\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2011-06-14 1527128]
"WinPatrol"="c:\program files\BillP Studios\WinPatrol\winpatrol.exe" [2011-05-15 325512]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" [2009-03-08 128512]
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ComputerAssociatesAntiMalware]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Intuit\\QuickBooks 2011\\QBDBMgrN.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
.
R2 QBVSS;QBIDPService;c:\program files\Common Files\Intuit\DataProtect\QBIDPService.exe [6/30/2011 12:25 PM 1248256]
R3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [10/11/2011 6:46 AM 245760]
.
.
------- Supplementary Scan -------
.
TCP: DhcpNameServer = 192.168.10.1
FF - ProfilePath - c:\documents and settings\Tad Palmer\Application Data\Mozilla\Firefox\Profiles\d4m1k4fi.default\
.
- - - - ORPHANS REMOVED - - - -
.
Notify-PFW - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-12-14 13:42
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(840)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2456)
c:\windows\system32\WININET.dll
c:\program files\BillP Studios\WinPatrol\PATROLPRO.DLL
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2011-12-14 13:43:46
ComboFix-quarantined-files.txt 2011-12-14 18:43
.
Pre-Run: 28,868,587,520 bytes free
Post-Run: 29,506,297,856 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 3787C4E4C3479D7381BD9F146F18F492

Should I uninstall combo fix from my computer?

I guess I will wait to install malware bytes. I will wait to run scan as well.

Thanks for your time.

vict0r · **Joined:** Wed 03 Dec, 2008 8:00 pm **Posts:** 1043

Never mind, I didn't see that you already were in the process of reinstalling CA.

I'll be back later with further instructions.
_________________

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

cool, thanks.

vict0r · **Joined:** Wed 03 Dec, 2008 8:00 pm **Posts:** 1043

Services - Stop / Disable

Open Notepad (or some other text editor)
Please copy (Ctrl+C) and paste (Ctrl+V) the following text into Notepad.
Code:
@echo off
sc stop DNSCache
sc config DNSCache start=disabled
del %0
exit
Save the text file as "FixServices.bat" (including quotation marks).
Select Save file type as All files, otherwisefile it will not work.
Please save it to the desktop.
Double click "FixServices.bat" to execute to fix.
A window will open and close, this is normal.

Run OTL Script

We need to run an OTL Fix. This fix will reboot the computer. Save all work and close all open windows except these instructions.

Double-click OTL.exe to start the program.
Copy and Paste the following code into the textbox. Do not include the word Code
Code:
:processes
killallprocesses

:otl
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O32 - AutoRun File - [2011/10/08 04:51:52 | 000,000,016 | -H-- | M] () - E:\AUTORUN.INF -- [ FAT ]

:files
E:\AUTORUN.INF

:commands
[emptyflash]
[emptytemp]
[emptyjava]
[resethosts]
Then click the Run Fix button at the top.
Click .
OTL may ask to reboot the machine. Please do so if asked.
The report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.

Malwarebytes' Anti-Malware

Please download Malwarebytes' Anti-Malware and save it to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform Quick Scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Check all items except items in the C:\System Volume Information folder... and click Remove Selected.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
When completed, a log will open in Notepad. Please copy and paste the log back into your next reply
The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

SystemLook

Double-click SystemLook.exe on your desktop to run it.
Copy the content of the following codebox into the main text field:
Code:
:dir
C:\WINDOWS /s /nsfcfiles.dll /md5
E:\ /nAUTORUN.INF

:file
E:\AUTORUN.INF

:contents
E:\AUTORUN.INF

:reg
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNSCache /s
Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
The log can also be found on your Desktop entitled SystemLook.txt

Remember to post:

OTL log.
Malwarebytes log.
SystemLook log.

How is the computer performing now?

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

Malware bytes still uploaded new version, but the database is still the old one. A box still popped up saying database 106 days out of date. I will include the malwarebytes scan, but it is still acting screwy.
Here is the Old timers log:

All processes killed
========== PROCESSES ==========
========== OTL ==========
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
File E:\AUTORUN.INF not found.
========== FILES ==========
File\Folder E:\AUTORUN.INF not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 456 bytes

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: Tad Palmer
->Flash cache emptied: 765 bytes

Total Flash Files Cleaned = 0.00 mb

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 36852657 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Tad Palmer
->Temp folder emptied: 869744577 bytes
->Temporary Internet Files folder emptied: 1986205 bytes
->Java cache emptied: 28755 bytes
->FireFox cache emptied: 96721341 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2402044 bytes
%systemroot%\System32 .tmp files removed: 293393 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 511 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 76525 bytes

Total Files Cleaned = 962.00 mb

[EMPTYJAVA]

User: Administrator
->Java cache emptied: 0 bytes

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: Tad Palmer
->Java cache emptied: 0 bytes

Total Java Files Cleaned = 0.00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.31.0 log created on 12152011_181103

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Here Is MBAm log:

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 7622

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

12/15/2011 6:31:05 PM
mbam-log-2011-12-15 (18-31-05).txt

Scan type: Quick scan
Objects scanned: 165144
Time elapsed: 4 minute(s), 32 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

Here is system look. Had to post in two posts.

SystemLook 30.07.11 by jpshortstuff
Log created at 18:46 on 15/12/2011 by Tad Palmer
Administrator - Elevation successful

========== dir ==========

C:\WINDOWS - Parameters: "/s /nsfcfiles.dll /md5"

---Files---
None found.

C:\WINDOWS\$hf_mig$ d--h--- [00:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2079403 d--h--- [00:35 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2079403\SP3QFE d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2079403\update d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2115168 d--h--- [00:40 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2115168\SP3QFE d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2115168\update d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2229593 d--h--- [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2229593\SP3QFE d------ [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2229593\update d------ [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2345886 d--h--- [22:06 12/10/2011]

C:\WINDOWS\$hf_mig$\KB2345886\SP3QFE d------ [09:01 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2345886\update d------ [09:01 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2347290 d--h--- [00:36 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2347290\update d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2360937 d--h--- [00:47 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2360937\SP3QFE d------ [00:47 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2360937\update d------ [00:47 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2387149 d--h--- [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE d------ [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2387149\update d------ [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2393802 d--h--- [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE d------ [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2393802\update d------ [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2419632 d--h--- [00:31 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2419632\SP3QFE d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2419632\update d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2423089 d--h--- [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2423089\SP3QFE d------ [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2423089\update d------ [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2440591 d--h--- [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2440591\SP3QFE d------ [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2440591\update d------ [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2443105 d--h--- [00:39 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2443105\SP3QFE d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2443105\update d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2447568-IE8 d--h--- [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2447568-IE8\SP3QFE d------ [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2447568-IE8\update d------ [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2467659 d--h--- [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2467659\update d------ [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2476490 d--h--- [00:36 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2476490\SP3QFE d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2476490\update d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2478960 d--h--- [00:28 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2478960\SP3QFE d------ [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2478960\update d------ [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2478971 d--h--- [00:41 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2478971\SP3QFE d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2478971\update d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2479943 d--h--- [00:41 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2479943\SP3QFE d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2479943\update d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2481109 d--h--- [00:39 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2481109\SP3QFE d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2481109\update d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2483185 d--h--- [00:35 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2483185\SP3QFE d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2483185\update d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2485663 d--h--- [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2485663\SP3QFE d------ [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2485663\update d------ [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2503665 d--h--- [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2503665\SP3QFE d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2503665\update d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2506212 d--h--- [00:32 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2506212\SP3QFE d------ [01:10 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2506212\update d------ [01:10 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2507618 d--h--- [00:33 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2507618\SP3QFE d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2507618\update d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2507938 d--h--- [00:37 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2507938\SP3QFE d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2507938\update d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2508272 d--h--- [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2508272\update d------ [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2508429 d--h--- [00:33 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2508429\SP3QFE d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2508429\update d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2509553 d--h--- [00:28 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE d------ [00:51 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2509553\update d------ [00:51 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2510531-IE8 d--h--- [08:35 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2510531-IE8\SP3QFE d------ [08:36 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2510531-IE8\update d------ [08:36 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2510581 d--h--- [00:37 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2535512 d--h--- [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2535512\SP3QFE d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2535512\update d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2536276-v2 d--h--- [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2536276-v2\SP3QFE d------ [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2536276-v2\update d------ [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2541763 d--h--- [00:28 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2541763\SP3QFE d------ [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2541763\update d------ [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2544521 d--h--- [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2544521\SP3QFE d------ [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2544521\update d------ [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2544521-IE8 d--h--- [08:33 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2544521-IE8\SP3QFE d------ [08:34 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2544521-IE8\update d------ [08:34 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2544893 d--h--- [00:23 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2544893\SP3QFE d------ [00:23 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2544893\update d------ [00:23 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2544893-v2 d--h--- [09:33 09/11/2011]

C:\WINDOWS\$hf_mig$\KB2544893-v2\SP3QFE d------ [09:38 09/11/2011]

C:\WINDOWS\$hf_mig$\KB2544893-v2\update d------ [09:38 09/11/2011]

C:\WINDOWS\$hf_mig$\KB2555917 d--h--- [00:28 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2555917\SP3QFE d------ [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2555917\update d------ [00:50 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2559049 d--h--- [00:29 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2559049\SP3QFE d------ [00:52 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2559049\update d------ [00:52 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2562937 d--h--- [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2562937\update d------ [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2566454 d--h--- [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2566454\SP3QFE d------ [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2566454\update d------ [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2567053 d--h--- [22:06 12/10/2011]

C:\WINDOWS\$hf_mig$\KB2567053\SP3QFE d------ [08:52 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2567053\update d------ [08:52 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2567680 d--h--- [00:41 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2567680\SP3QFE d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2567680\update d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2570222 d--h--- [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2570222\SP3QFE d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2570222\update d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2570947 d--h--- [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2570947\update d------ [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2586448-IE8 d--h--- [08:51 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE d------ [08:51 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2586448-IE8\update d------ [08:51 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2592799 d--h--- [08:52 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE d------ [08:52 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2592799\update d------ [08:52 13/10/2011]

C:\WINDOWS\$hf_mig$\KB2616676-v2 d--h--- [00:37 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2616676-v2\SP3QFE d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2616676-v2\update d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB2618444-IE8 d--h--- [09:33 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE d------ [09:34 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2618444-IE8\update d------ [09:34 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2618451 d--h--- [13:04 14/12/2011]

C:\WINDOWS\$hf_mig$\KB2618451\update d------ [13:05 14/12/2011]

C:\WINDOWS\$hf_mig$\KB2619339 d--h--- [12:09 14/12/2011]

C:\WINDOWS\$hf_mig$\KB2619339\SP3QFE d------ [09:33 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2619339\update d------ [09:33 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2620712 d--h--- [12:08 14/12/2011]

C:\WINDOWS\$hf_mig$\KB2620712\SP3QFE d------ [09:33 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2620712\update d------ [09:33 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2624667 d--h--- [02:24 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2624667\SP3QFE d------ [09:34 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2624667\update d------ [09:34 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2633171 d--h--- [02:54 14/12/2011]

C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE d------ [09:33 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2633171\update d------ [09:33 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2639417 d--h--- [02:24 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2639417\SP3QFE d------ [09:34 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2639417\update d------ [09:34 15/12/2011]

C:\WINDOWS\$hf_mig$\KB2641690 d--h--- [11:06 11/11/2011]

C:\WINDOWS\$hf_mig$\KB2641690\SP3QFE d------ [16:30 11/11/2011]

C:\WINDOWS\$hf_mig$\KB2641690\update d------ [16:30 11/11/2011]

C:\WINDOWS\$hf_mig$\KB898461 d--h--- [00:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB898461\update d------ [00:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB923561 d--h--- [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB923561\SP3QFE d------ [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB923561\update d------ [00:49 11/10/2011]

C:\WINDOWS\$hf_mig$\KB950762 d--h--- [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB950762\SP3QFE d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB950762\update d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB950974 d--h--- [00:39 11/10/2011]

C:\WINDOWS\$hf_mig$\KB950974\SP3QFE d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB950974\update d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB951376-v2 d--h--- [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE d------ [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB951376-v2\update d------ [01:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB951978 d--h--- [00:40 11/10/2011]

C:\WINDOWS\$hf_mig$\KB951978\SP3QFE d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB951978\update d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952004 d--h--- [00:34 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952004\SP3QFE d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952004\update d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952287 d--h--- [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952287\SP3QFE d------ [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952287\update d------ [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952954 d--h--- [00:42 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952954\SP3QFE d------ [01:16 11/10/2011]

C:\WINDOWS\$hf_mig$\KB952954\update d------ [01:16 11/10/2011]

C:\WINDOWS\$hf_mig$\KB954459 d--h--- [00:32 11/10/2011]

C:\WINDOWS\$hf_mig$\KB955759 d--h--- [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB955759\SP3QFE d------ [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB955759\update d------ [01:03 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956572 d--h--- [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956572\SP3QFE d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956572\update d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956744 d--h--- [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956744\SP3QFE d------ [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956744\update d------ [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956802 d--h--- [00:29 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956802\SP3QFE d------ [00:51 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956802\update d------ [00:51 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956844 d--h--- [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956844\SP3QFE d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB956844\update d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB958644 d--h--- [00:51 11/10/2011]

C:\WINDOWS\$hf_mig$\KB958644\SP3QFE d------ [00:52 11/10/2011]

C:\WINDOWS\$hf_mig$\KB958644\update d------ [00:52 11/10/2011]

C:\WINDOWS\$hf_mig$\KB959426 d--h--- [00:41 11/10/2011]

C:\WINDOWS\$hf_mig$\KB959426\SP3QFE d------ [01:16 11/10/2011]

C:\WINDOWS\$hf_mig$\KB959426\update d------ [01:16 11/10/2011]

C:\WINDOWS\$hf_mig$\KB960803 d--h--- [00:29 11/10/2011]

C:\WINDOWS\$hf_mig$\KB960803\SP3QFE d------ [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB960803\update d------ [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB960859 d--h--- [00:42 11/10/2011]

C:\WINDOWS\$hf_mig$\KB960859\SP3QFE d------ [01:16 11/10/2011]

C:\WINDOWS\$hf_mig$\KB960859\update d------ [01:16 11/10/2011]

C:\WINDOWS\$hf_mig$\KB961501 d--h--- [00:35 11/10/2011]

C:\WINDOWS\$hf_mig$\KB961501\SP3QFE d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB961501\update d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB968389 d--h--- [00:26 11/10/2011]

C:\WINDOWS\$hf_mig$\KB968389\SP3QFE d------ [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB968389\update d------ [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB969059 d--h--- [00:40 11/10/2011]

C:\WINDOWS\$hf_mig$\KB969059\SP3QFE d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB969059\update d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB970430 d--h--- [22:06 12/10/2011]

C:\WINDOWS\$hf_mig$\KB970430\SP3QFE d------ [08:58 13/10/2011]

C:\WINDOWS\$hf_mig$\KB970430\update d------ [08:58 13/10/2011]

C:\WINDOWS\$hf_mig$\KB971029 d--h--- [00:04 11/10/2011]

C:\WINDOWS\$hf_mig$\KB971029\SP3QFE d------ [00:24 11/10/2011]

C:\WINDOWS\$hf_mig$\KB971029\update d------ [00:24 11/10/2011]

C:\WINDOWS\$hf_mig$\KB971657 d--h--- [00:37 11/10/2011]

C:\WINDOWS\$hf_mig$\KB971657\SP3QFE d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB971657\update d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB971737 d--h--- [22:03 12/10/2011]

C:\WINDOWS\$hf_mig$\KB971737\SP3QFE d------ [08:46 13/10/2011]

C:\WINDOWS\$hf_mig$\KB971737\update d------ [08:46 13/10/2011]

C:\WINDOWS\$hf_mig$\KB972270 d--h--- [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB972270\SP3QFE d------ [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB972270\update d------ [00:58 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973507 d--h--- [00:33 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973507\SP3QFE d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973507\update d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973687 d--h--- [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973687\SP3QFE d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973687\update d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973815 d--h--- [00:29 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973815\SP3QFE d------ [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973815\update d------ [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973869 d--h--- [00:24 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973869\SP3QFE d------ [00:24 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973869\update d------ [00:24 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973904 d--h--- [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973904\SP3QFE d------ [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB973904\update d------ [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974112 d--h--- [00:36 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974112\SP3QFE d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974112\update d------ [01:13 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974318 d--h--- [00:40 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974318\SP3QFE d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974318\update d------ [01:15 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974392 d--h--- [00:32 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974392\SP3QFE d------ [01:10 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974392\update d------ [01:10 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974571 d--h--- [00:34 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974571\SP3QFE d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB974571\update d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975025 d--h--- [00:34 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975025\SP3QFE d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975025\update d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975467 d--h--- [00:26 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975467\SP3QFE d------ [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975467\update d------ [00:48 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975560 d--h--- [00:33 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975560\SP3QFE d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975560\update d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975562 d--h--- [00:29 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975562\SP3QFE d------ [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975562\update d------ [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975713 d--h--- [00:38 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975713\SP3QFE d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB975713\update d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB977816 d--h--- [00:33 11/10/2011]

C:\WINDOWS\$hf_mig$\KB977816\SP3QFE d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB977816\update d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB977914 d--h--- [00:31 11/10/2011]

C:\WINDOWS\$hf_mig$\KB977914\SP3QFE d------ [01:10 11/10/2011]

C:\WINDOWS\$hf_mig$\KB977914\update d------ [01:10 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978338 d--h--- [00:37 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978338\SP3QFE d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978338\update d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978542 d--h--- [00:31 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978542\SP3QFE d------ [01:10 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978542\update d------ [01:10 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978601 d--h--- [00:26 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978601\SP3QFE d------ [00:57 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978601\update d------ [00:56 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978706 d--h--- [00:30 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978706\SP3QFE d------ [00:54 11/10/2011]

C:\WINDOWS\$hf_mig$\KB978706\update d------ [00:54 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979309 d--h--- [00:24 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979309\SP3QFE d------ [00:54 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979309\update d------ [00:54 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979482 d--h--- [00:30 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979482\SP3QFE d------ [00:54 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979482\update d------ [00:54 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979687 d--h--- [00:35 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979687\SP3QFE d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB979687\update d------ [01:12 11/10/2011]

C:\WINDOWS\$hf_mig$\KB980436 d--h--- [00:33 11/10/2011]

C:\WINDOWS\$hf_mig$\KB981322 d--h--- [00:32 11/10/2011]

C:\WINDOWS\$hf_mig$\KB981322\SP3QFE d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB981322\update d------ [01:11 11/10/2011]

C:\WINDOWS\$hf_mig$\KB981997 d--h--- [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB981997\SP3QFE d------ [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB981997\update d------ [00:53 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982132 d--h--- [00:37 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982132\SP3QFE d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982132\update d------ [01:14 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982381-IE8 d--h--- [01:02 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE d------ [01:02 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982381-IE8\update d------ [01:02 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982665 d--h--- [00:42 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982665\SP3QFE d------ [00:51 11/10/2011]

C:\WINDOWS\$hf_mig$\KB982665\update d------ [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallKB2079403$ d--h-c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB2079403$\spuninst d----c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB2115168$ d--h-c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB2115168$\spuninst d----c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB2229593$ d--h-c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB2229593$\spuninst d----c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB2296011$ d--h-c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB2296011$\spuninst d----c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB2345886$ d--h-c- [09:01 13/10/2011]

C:\WINDOWS\$NtUninstallKB2345886$\spuninst d----c- [09:01 13/10/2011]

C:\WINDOWS\$NtUninstallKB2347290$ d--h-c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2347290$\spuninst d----c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2360937$ d--h-c- [00:47 11/10/2011]

C:\WINDOWS\$NtUninstallKB2360937$\spuninst d----c- [00:47 11/10/2011]

C:\WINDOWS\$NtUninstallKB2378111_WM9$ d--h-c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst d----c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB2387149$ d--h-c- [01:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB2387149$\spuninst d----c- [01:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB2393802$ d--h-c- [00:49 11/10/2011]

C:\WINDOWS\$NtUninstallKB2393802$\spuninst d----c- [00:49 11/10/2011]

C:\WINDOWS\$NtUninstallKB2412687$ d--h-c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB2412687$\spuninst d----c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB2419632$ d--h-c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB2419632$\spuninst d----c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB2423089$ d--h-c- [00:48 11/10/2011]

C:\WINDOWS\$NtUninstallKB2423089$\spuninst d----c- [00:48 11/10/2011]

C:\WINDOWS\$NtUninstallKB2440591$ d--h-c- [00:58 11/10/2011]

C:\WINDOWS\$NtUninstallKB2440591$\spuninst d----c- [00:58 11/10/2011]

C:\WINDOWS\$NtUninstallKB2443105$ d--h-c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB2443105$\spuninst d----c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB2467659$ d--h-c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB2467659$\spuninst d----c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB2476490$ d--h-c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2476490$\spuninst d----c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2478960$ d--h-c- [00:50 11/10/2011]

C:\WINDOWS\$NtUninstallKB2478960$\spuninst d----c- [00:50 11/10/2011]

C:\WINDOWS\$NtUninstallKB2478971$ d--h-c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB2478971$\spuninst d----c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB2479943$ d--h-c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB2479943$\spuninst d----c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB2481109$ d--h-c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB2481109$\spuninst d----c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB2483185$ d--h-c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2483185$\spuninst d----c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2485663$ d--h-c- [00:58 11/10/2011]

C:\WINDOWS\$NtUninstallKB2485663$\spuninst d----c- [00:58 11/10/2011]

C:\WINDOWS\$NtUninstallKB2503665$ d--h-c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB2503665$\spuninst d----c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB2506212$ d--h-c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB2506212$\spuninst d----c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB2507618$ d--h-c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB2507618$\spuninst d----c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB2507938$ d--h-c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2507938$\spuninst d----c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2508272$ d--h-c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB2508272$\spuninst d----c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB2508429$ d--h-c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB2508429$\spuninst d----c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB2509553$ d--h-c- [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallKB2509553$\spuninst d----c- [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallKB2535512$ d--h-c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB2535512$\spuninst d----c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB2536276-v2$ d--h-c- [01:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB2536276-v2$\spuninst d----c- [01:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB2541763$ d--h-c- [00:50 11/10/2011]

C:\WINDOWS\$NtUninstallKB2541763$\spuninst d----c- [00:50 11/10/2011]

C:\WINDOWS\$NtUninstallKB2544521$ d--h-c- [00:50 11/10/2011]

C:\WINDOWS\$NtUninstallKB2544521$\spuninst d----c- [00:50 11/10/2011]

C:\WINDOWS\$NtUninstallKB2544893$ d--h-c- [00:23 11/10/2011]

C:\WINDOWS\$NtUninstallKB2544893$\spuninst d----c- [00:23 11/10/2011]

C:\WINDOWS\$NtUninstallKB2544893-v2$ d--h-c- [09:38 09/11/2011]

C:\WINDOWS\$NtUninstallKB2544893-v2$\spuninst d----c- [09:38 09/11/2011]

C:\WINDOWS\$NtUninstallKB2555917$ d--h-c- [00:50 11/10/2011]

C:\WINDOWS\$NtUninstallKB2555917$\spuninst d----c- [00:50 11/10/2011]

C:\WINDOWS\$NtUninstallKB2559049$ d--h-c- [00:52 11/10/2011]

C:\WINDOWS\$NtUninstallKB2559049$\spuninst d----c- [00:52 11/10/2011]

C:\WINDOWS\$NtUninstallKB2562937$ d--h-c- [00:48 11/10/2011]

C:\WINDOWS\$NtUninstallKB2562937$\spuninst d----c- [00:48 11/10/2011]

C:\WINDOWS\$NtUninstallKB2564958$ d--h-c- [09:01 13/10/2011]

C:\WINDOWS\$NtUninstallKB2564958$\spuninst d----c- [09:01 13/10/2011]

C:\WINDOWS\$NtUninstallKB2566454$ d--h-c- [00:49 11/10/2011]

C:\WINDOWS\$NtUninstallKB2566454$\spuninst d----c- [00:49 11/10/2011]

C:\WINDOWS\$NtUninstallKB2567053$ d--h-c- [08:52 13/10/2011]

C:\WINDOWS\$NtUninstallKB2567053$\spuninst d----c- [08:52 13/10/2011]

C:\WINDOWS\$NtUninstallKB2567680$ d--h-c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB2567680$\spuninst d----c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB2570222$ d--h-c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB2570222$\spuninst d----c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB2570791$ d--h-c- [01:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB2570791$\spuninst d----c- [01:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB2570947$ d--h-c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB2570947$\spuninst d----c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB2592799$ d--h-c- [08:52 13/10/2011]

C:\WINDOWS\$NtUninstallKB2592799$\spuninst d----c- [08:52 13/10/2011]

C:\WINDOWS\$NtUninstallKB2616676-v2$ d--h-c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2616676-v2$\spuninst d----c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB2618451$ d--h-c- [13:05 14/12/2011]

C:\WINDOWS\$NtUninstallKB2618451$\spuninst d----c- [13:05 14/12/2011]

C:\WINDOWS\$NtUninstallKB2619339$ d--h-c- [09:33 15/12/2011]

C:\WINDOWS\$NtUninstallKB2619339$\spuninst d----c- [09:33 15/12/2011]

C:\WINDOWS\$NtUninstallKB2620712$ d--h-c- [09:33 15/12/2011]

C:\WINDOWS\$NtUninstallKB2620712$\spuninst d----c- [09:33 15/12/2011]

C:\WINDOWS\$NtUninstallKB2624667$ d--h-c- [09:34 15/12/2011]

C:\WINDOWS\$NtUninstallKB2624667$\spuninst d----c- [09:34 15/12/2011]

C:\WINDOWS\$NtUninstallKB2633171$ d--h-c- [09:33 15/12/2011]

C:\WINDOWS\$NtUninstallKB2633171$\spuninst d----c- [09:33 15/12/2011]

C:\WINDOWS\$NtUninstallKB2633952$ d--h-c- [13:05 14/12/2011]

C:\WINDOWS\$NtUninstallKB2633952$\spuninst d----c- [13:05 14/12/2011]

C:\WINDOWS\$NtUninstallKB2639417$ d--h-c- [09:34 15/12/2011]

C:\WINDOWS\$NtUninstallKB2639417$\spuninst d----c- [09:34 15/12/2011]

C:\WINDOWS\$NtUninstallKB2641690$ d--h-c- [16:30 11/11/2011]

C:\WINDOWS\$NtUninstallKB2641690$\spuninst d----c- [16:30 11/11/2011]

C:\WINDOWS\$NtUninstallKB898461$ d--h-c- [00:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB898461$\spuninst d----c- [00:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB923561$ d--h-c- [00:49 11/10/2011]

C:\WINDOWS\$NtUninstallKB923561$\spuninst d----c- [00:49 11/10/2011]

C:\WINDOWS\$NtUninstallKB929399$ d--h-c- [08:47 13/10/2011]

C:\WINDOWS\$NtUninstallKB929399$\spuninst d----c- [08:47 13/10/2011]

C:\WINDOWS\$NtUninstallKB939683$ d--h-c- [18:43 16/10/2011]

C:\WINDOWS\$NtUninstallKB939683$\spuninst d----c- [18:43 16/10/2011]

C:\WINDOWS\$NtUninstallKB941569$ d--h-c- [08:52 13/10/2011]

C:\WINDOWS\$NtUninstallKB941569$\spuninst d----c- [08:52 13/10/2011]

C:\WINDOWS\$NtUninstallKB950762$ d--h-c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB950762$\spuninst d----c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB950974$ d--h-c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB950974$\spuninst d----c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB951376-v2$ d--h-c- [01:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst d----c- [01:04 11/10/2011]

C:\WINDOWS\$NtUninstallKB951978$ d--h-c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB951978$\spuninst d----c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB952004$ d--h-c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB952004$\spuninst d----c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB952069_WM9$ d--h-c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst d----c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB952287$ d--h-c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB952287$\spuninst d----c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB952954$ d--h-c- [01:16 11/10/2011]

C:\WINDOWS\$NtUninstallKB952954$\spuninst d----c- [01:16 11/10/2011]

C:\WINDOWS\$NtUninstallKB954154_WM11$ d--h-c- [08:33 13/10/2011]

C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst d----c- [08:33 13/10/2011]

C:\WINDOWS\$NtUninstallKB954155_WM9$ d--h-c- [00:25 11/10/2011]

C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst d----c- [00:25 11/10/2011]

C:\WINDOWS\$NtUninstallKB955759$ d--h-c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB955759$\spuninst d----c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB956572$ d--h-c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB956572$\spuninst d----c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB956744$ d--h-c- [00:58 11/10/2011]

C:\WINDOWS\$NtUninstallKB956744$\spuninst d----c- [00:58 11/10/2011]

C:\WINDOWS\$NtUninstallKB956802$ d--h-c- [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallKB956802$\spuninst d----c- [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallKB956844$ d--h-c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB956844$\spuninst d----c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB958644$ d--h-c- [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallKB958644$\spuninst d----c- [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallKB959426$ d--h-c- [01:16 11/10/2011]

C:\WINDOWS\$NtUninstallKB959426$\spuninst d----c- [01:16 11/10/2011]

C:\WINDOWS\$NtUninstallKB960803$ d--h-c- [00:53 11/10/2011]

C:\WINDOWS\$NtUninstallKB960803$\spuninst d----c- [00:53 11/10/2011]

C:\WINDOWS\$NtUninstallKB960859$ d--h-c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB960859$\spuninst d----c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB961118$ d--h-c- [08:58 13/10/2011]

C:\WINDOWS\$NtUninstallKB961118$\spuninst d----c- [08:58 13/10/2011]

C:\WINDOWS\$NtUninstallKB961501$ d--h-c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB961501$\spuninst d----c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB968389$ d--h-c- [00:48 11/10/2011]

C:\WINDOWS\$NtUninstallKB968389$\spuninst d----c- [00:48 11/10/2011]

C:\WINDOWS\$NtUninstallKB969059$ d--h-c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB969059$\spuninst d----c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB970430$ d--h-c- [08:58 13/10/2011]

C:\WINDOWS\$NtUninstallKB970430$\spuninst d----c- [08:58 13/10/2011]

C:\WINDOWS\$NtUninstallKB971029$ d--h-c- [00:24 11/10/2011]

C:\WINDOWS\$NtUninstallKB971029$\spuninst d----c- [00:24 11/10/2011]

C:\WINDOWS\$NtUninstallKB971657$ d--h-c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB971657$\spuninst d----c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB971737$ d--h-c- [08:46 13/10/2011]

C:\WINDOWS\$NtUninstallKB971737$\spuninst d----c- [08:46 13/10/2011]

C:\WINDOWS\$NtUninstallKB972270$ d--h-c- [00:58 11/10/2011]

C:\WINDOWS\$NtUninstallKB972270$\spuninst d----c- [00:58 11/10/2011]

C:\WINDOWS\$NtUninstallKB973507$ d--h-c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB973507$\spuninst d----c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB973540_WM9$ d--h-c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst d----c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB973687$ d--h-c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB973687$\spuninst d----c- [00:57 11/10/2011]

C:\WINDOWS\$NtUninstallKB973815$ d--h-c- [00:53 11/10/2011]

C:\WINDOWS\$NtUninstallKB973815$\spuninst d----c- [00:53 11/10/2011]

C:\WINDOWS\$NtUninstallKB973869$ d--h-c- [00:24 11/10/2011]

C:\WINDOWS\$NtUninstallKB973869$\spuninst d----c- [00:24 11/10/2011]

C:\WINDOWS\$NtUninstallKB973904$ d--h-c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB973904$\spuninst d----c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB974112$ d--h-c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB974112$\spuninst d----c- [01:13 11/10/2011]

C:\WINDOWS\$NtUninstallKB974318$ d--h-c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB974318$\spuninst d----c- [01:15 11/10/2011]

C:\WINDOWS\$NtUninstallKB974392$ d--h-c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB974392$\spuninst d----c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB974571$ d--h-c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB974571$\spuninst d----c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB975025$ d--h-c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB975025$\spuninst d----c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB975467$ d--h-c- [00:48 11/10/2011]

C:\WINDOWS\$NtUninstallKB975467$\spuninst d----c- [00:48 11/10/2011]

C:\WINDOWS\$NtUninstallKB975558_WM8$ d--h-c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst d----c- [01:03 11/10/2011]

C:\WINDOWS\$NtUninstallKB975560$ d--h-c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB975560$\spuninst d----c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB975562$ d--h-c- [00:53 11/10/2011]

C:\WINDOWS\$NtUninstallKB975562$\spuninst d----c- [00:53 11/10/2011]

C:\WINDOWS\$NtUninstallKB975713$ d--h-c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB975713$\spuninst d----c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB977816$ d--h-c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB977816$\spuninst d----c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB977914$ d--h-c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB977914$\spuninst d----c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB978338$ d--h-c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB978338$\spuninst d----c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB978542$ d--h-c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB978542$\spuninst d----c- [01:10 11/10/2011]

C:\WINDOWS\$NtUninstallKB978601$ d--h-c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB978601$\spuninst d----c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB978695_WM9$ d--h-c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst d----c- [00:56 11/10/2011]

C:\WINDOWS\$NtUninstallKB978706$ d--h-c- [00:54 11/10/2011]

C:\WINDOWS\$NtUninstallKB978706$\spuninst d----c- [00:54 11/10/2011]

C:\WINDOWS\$NtUninstallKB979309$ d--h-c- [00:54 11/10/2011]

C:\WINDOWS\$NtUninstallKB979309$\spuninst d----c- [00:54 11/10/2011]

C:\WINDOWS\$NtUninstallKB979482$ d--h-c- [00:54 11/10/2011]

C:\WINDOWS\$NtUninstallKB979482$\spuninst d----c- [00:54 11/10/2011]

C:\WINDOWS\$NtUninstallKB979687$ d--h-c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB979687$\spuninst d----c- [01:12 11/10/2011]

C:\WINDOWS\$NtUninstallKB981322$ d--h-c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB981322$\spuninst d----c- [01:11 11/10/2011]

C:\WINDOWS\$NtUninstallKB981997$ d--h-c- [00:53 11/10/2011]

C:\WINDOWS\$NtUninstallKB981997$\spuninst d----c- [00:53 11/10/2011]

C:\WINDOWS\$NtUninstallKB982132$ d--h-c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB982132$\spuninst d----c- [01:14 11/10/2011]

C:\WINDOWS\$NtUninstallKB982665$ d--h-c- [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallKB982665$\spuninst d----c- [00:51 11/10/2011]

C:\WINDOWS\$NtUninstallMSCompPackV1$ d--h-c- [00:12 11/10/2011]

C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst d----c- [00:12 11/10/2011]

C:\WINDOWS\$NtUninstallWMFDist11$ d--h-c- [00:11 11/10/2011]

C:\WINDOWS\$NtUninstallWMFDist11$\spuninst d----c- [00:11 11/10/2011]

C:\WINDOWS\$NtUninstallwmp11$ d--h-c- [00:11 11/10/2011]

C:\WINDOWS\$NtUninstallwmp11$\spuninst d----c- [00:11 11/10/2011]

C:\WINDOWS\$NtUninstallWudf01000$ d--h-c- [00:10 11/10/2011]

C:\WINDOWS\$NtUninstallWudf01000$\spuninst d----c- [00:10 11/10/2011]

C:\WINDOWS\addins d------ [19:18 10/10/2011]

C:\WINDOWS\AppPatch d------ [19:18 10/10/2011]

C:\WINDOWS\assembly dr--s-- [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Accessibility d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\cscompmgd d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\CustomMarshalers d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\IEExecRemote d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\IEHost d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\IEProtocol d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC\IEProtocol\2.0.0.139__82cc56431f1a971d d------ [13:16 11/10/2011]

C:\WINDOWS\assembly\GAC\IIEHost d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Interop.QBPOSXMLRPLIB d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC\Interop.QBPOSXMLRPLIB\2.0.0.32__31d8aec643e18259 d------ [13:16 11/10/2011]

C:\WINDOWS\assembly\GAC\Interop.QBXMLRP2 d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC\Interop.QBXMLRP2\8.0.0.249__31d8aec643e18259 d------ [13:14 11/10/2011]

C:\WINDOWS\assembly\GAC\ISymWrapper d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.JScript d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.mshtml d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a d------ [13:12 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.Vsa d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.VisualC d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.Vsa d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft_VsaVb d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\mscorcfg d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\QBWCInterfaces d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC\QBWCInterfaces\2.0.0.139__82cc56431f1a971d d------ [13:16 11/10/2011]

C:\WINDOWS\assembly\GAC\Regcode d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System d------ [20:12 13/10/2011]

C:\WINDOWS\assembly\GAC\System\1.0.5000.0__b77a5c561934e089 d------ [20:12 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Configuration.Install d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\System.Data d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089 d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Data.OracleClient d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089 d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Design d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.DirectoryServices d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Drawing d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Drawing.Design d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\GAC\System.EnterpriseServices d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Management d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Messaging d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Runtime.Remoting d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089 d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Security d------ [20:12 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a d------ [20:12 13/10/2011]

C:\WINDOWS\assembly\GAC\System.ServiceProcess d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Web d------ [20:12 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a d------ [20:12 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Web.Mobile d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Web.RegularExpressions d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Web.Services d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Windows.Forms d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089 d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Xml d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089 d------ [08:46 13/10/2011]

C:\WINDOWS\assembly\GAC_32 d------ [00:14 11/10/2011]

C:\WINDOWS\assembly\GAC_32\cli_cppuhelper d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_32\cli_cppuhelper\1.0.21.0__ce2cb7e279207b9e d------ [00:36 11/10/2011]

C:\WINDOWS\assembly\GAC_32\CustomMarshalers d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\ISymWrapper d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_32\mscorlib d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089 d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\policy.1.0.cli_cppuhelper d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_32\policy.1.0.cli_cppuhelper\21.0.0.0__ce2cb7e279207b9e d------ [00:36 11/10/2011]

C:\WINDOWS\assembly\GAC_32\PresentationCore d------ [08:55 13/10/2011]

C:\WINDOWS\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35 d------ [08:55 13/10/2011]

C:\WINDOWS\assembly\GAC_32\QBWCCommon d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_32\QBWCCommon\2.0.0.139__82cc56431f1a971d d------ [13:16 11/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Data d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089 d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089 d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Printing d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Transactions d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089 d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Web d------ [09:07 13/10/2011]

C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a d------ [09:07 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL d------ [00:14 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Accessibility d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt d------ [09:07 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a d------ [09:07 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cli_basetypes d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cli_basetypes\1.0.18.0__ce2cb7e279207b9e d------ [00:35 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cli_oootypes d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cli_oootypes\1.0.7.0__ce2cb7e279207b9e d------ [00:36 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cli_ure d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cli_ure\1.0.21.0__ce2cb7e279207b9e d------ [00:35 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cli_uretypes d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cli_uretypes\1.0.7.0__ce2cb7e279207b9e d------ [00:35 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cscompmgd d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\IEHost d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\IIEHost d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Interop.QBInstanceFinder d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Interop.QBInstanceFinder\21.0.0.0__5b3f47ba29970ccb d------ [13:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.QuickBooks.FCS d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.QuickBooks.FCS\1.3.0.0__5b3f47ba29970ccb d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.QuickBooks.XmlDigitalSignature d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.QuickBooks.XmlDigitalSignature\1.2.0.0__5b3f47ba29970ccb d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.3rdParty.Lucene d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.3rdParty.Lucene\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.3rdParty.MajesticHTMLParser d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.3rdParty.MajesticHTMLParser\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.3rdParty.ObjectBuilder d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.3rdParty.ObjectBuilder\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.3rdParty.SharpZipLib d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.3rdParty.SharpZipLib\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Core d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Core\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Core.Plugin d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Core.Plugin\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.EntitlementClient.Api d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.EntitlementClient.Api\6.0.0.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.EntitlementClient.Common d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.EntitlementClient.Common\6.0.0.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.EntitlementClient.WinInet d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.EntitlementClient.WinInet\6.0.0.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Reporter d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Reporter\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Search d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Search\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.SharedUIToolkit d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.SharedUIToolkit\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.WindowsFirewallUtilities d------ [13:22 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.WindowsFirewallUtilities\5.0.6.0__7ce6deabcb36a8ea d------ [13:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine d------ [00:14 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework d------ [00:14 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\policy.1.0.cli_basetypes d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\policy.1.0.cli_basetypes\18.0.0.0__ce2cb7e279207b9e d------ [00:35 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\policy.1.0.cli_oootypes d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\policy.1.0.cli_oootypes\7.0.0.0__ce2cb7e279207b9e d------ [00:36 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\policy.1.0.cli_ure d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\policy.1.0.cli_ure\21.0.0.0__ce2cb7e279207b9e d------ [00:35 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\policy.1.0.cli_uretypes d------ [00:37 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\policy.1.0.cli_uretypes\7.0.0.0__ce2cb7e279207b9e d------ [00:35 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationCFFRasterizer d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFontCache d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework d------ [08:55 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35 d------ [08:55 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Aero d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Classic d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Luna d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Royale d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationUI d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\ReachFramework d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Sentinel.v3.5Client d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089 d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\sysglobl d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089 d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.AddIn d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.AddIn.Contract d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Configuration d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Core d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.DataSetExtensions d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Entity d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Entity.Design d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Linq d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services d------ [18:47 16/10/2011]

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

Here is rest of System Look Had to split it up.

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089 d------ [18:47 16/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Client d------ [18:47 16/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089 d------ [18:47 16/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Design d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089 d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Deployment d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Design d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Drawing d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design d------ [09:07 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a d------ [09:07 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089 d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Management d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Management.Instrumentation d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Messaging d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Net d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089 d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089 d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Security d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089 d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.WasHosting d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089 d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Web d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Speech d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Abstractions d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.DynamicData d------ [18:47 16/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35 d------ [18:47 16/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.DynamicData.Design d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Entity d------ [18:47 16/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089 d------ [18:47 16/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Entity.Design d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions d------ [08:56 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35 d------ [08:56 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions.Design d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Routing d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms d------ [09:07 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089 d------ [09:07 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Presentation d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.WorkflowServices d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Xml d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089 d------ [09:08 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Xml.Linq d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089 d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\WindowsBase d------ [08:55 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35 d------ [08:55 13/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration d------ [00:16 11/10/2011]

C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35 d------ [00:15 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322 d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\CustomMarshalers d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_9a418b67 d------ [20:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_c4436d5a d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_3cb76bce d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_ec3503a4 d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_aa553e55 d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_c38d8d9f d------ [20:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Design d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_0648e5a5 d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_ed5abaaf d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_0a34481e d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_5a3557bd d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing.Design d------ [00:09 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_9259c5b2 d------ [20:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_f172e906 d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Windows.Forms d------ [00:10 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_578bd1bc d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_bd53049b d------ [20:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml d------ [00:10 11/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_b4345262 d------ [20:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_d54894b9 d------ [20:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32 d------ [00:17 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\e1bcee92f5af50d560d577c0a99ea3bd d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ComSvcConfig d------ [01:05 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4e68d5df30b197ff72c75f1c3c24b949 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97 d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\ab7ce2d94ca725c3889a4e3c1ee88ece d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con# d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14 d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng# d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\da112c5757e3c68d6369b6aa46cc9682 d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra# d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas# d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289 d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\50e7c5eb58c982dba7b21cd10a69b095 d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti# d------ [11:41 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\ff6d4892775fd1f9b137f7c92ea453f2 d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\8ad32b72258899177c07dc5912b5b748 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti# d------ [01:05 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas# d------ [11:41 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\24331b719aa25ac2b21099e32232840c d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\eaa8d72317e5b8047e413939cc71ffba d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\MSBuild d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\MSBuild\04595f414c49cf2a65b349648ba23e62 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib d------ [00:22 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721 d------ [09:11 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa# d------ [00:22 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b42ad515bb20ec1f1250c040371c6730 d------ [09:11 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast# d------ [00:22 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5b30652a7b802199984f93b5e414260f d------ [09:11 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore d------ [00:23 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\b2f0318713eca304eaa9d86fc17edb96 d------ [09:11 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFontCac# d------ [00:23 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\66873b557d5c7013e4c630361473b0c2 d------ [09:11 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo# d------ [00:25 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\054488924fcc579cce9fa0209dafe28b d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0 d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1 d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5 d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationUI d------ [00:26 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationUI\7dc6ee14234b0686182ced75f7dae990 d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ReachFramework d------ [00:26 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ReachFramework\714e9504255565bd9076fe13628e104a d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ServiceModelReg d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\f2df1ca28301bfe7e1d52b86c8394217 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMDiagnostics d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\474a341340f687bcbd7777f2820a8c7a d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMSvcHost d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6e45cf503f025c5fe814ea7e52f62a78 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System d------ [00:22 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13 d------ [09:11 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.AddIn d------ [11:41 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.AddIn\3048737e9e3bf5173121a084337256bc d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra# d------ [11:41 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ComponentMod# d------ [11:41 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\ac92806d5bd508eb25f1b4b73a36b101 d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio# d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\29d7091f6eab0ec61c4eb625ed221b73 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Core d------ [00:26 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Core\d507b9e0e50e453793ee5e01c07a5485 d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data d------ [00:26 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\ec323cf1df697cc0a45f67de685db90c d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet# d------ [11:41 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\b9d9ff5d03e90ede1116794f2c7dd6da d------ [09:17 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Entity d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\a3ce22c2a84fdcb008d72d230ee0b2c0 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.# d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\fee1a48b769a8c4beb335ee5ce006091 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Linq d------ [00:27 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\d96a94076acb8e0c5a96a1b2de4b3a7a d------ [09:12 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service# d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3f179f373f31817a914b639a56cc0497 d------ [18:56 16/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\4597c85b289816af2db581358c859187 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e5ada332a9bc3c982e6aede6ba354196 d------ [18:56 16/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\fd2165857d3316d2edbf69b90e949b98 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Services d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Services\25077aa88c48d495f11be353fc30c6c0 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Services\541142d8742e6e88f1e729fafee04e71 d------ [18:56 16/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ef748704f543a8791e23387652d34dfb d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\cc5ac99e8af2738e85cda5525fdd944f d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design d------ [00:28 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c6374d32e4af7b7e3e46b32176f76558 d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer# d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\33e9b0c368c31ef37a2ec7b5a181044b d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\91cd88a803768151c6262853d3454ba7 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing d------ [00:28 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090 d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi# d------ [00:28 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\896eca06e2d9377b2dc4fad56ce49b07 d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe# d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityMode# d------ [01:04 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityModel d------ [01:04 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\d14065ede44df8e9b5d6b60c5ddccc69 d------ [09:15 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IO.Log d------ [01:04 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IO.Log\20a77c41ee12362d303fb2574fcd5a24 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\90b90e700e59d73d6d692cf74e1ba16e d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management.I# d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management.I#\f36eded354122da9555a6c7cdbdb5431 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Net d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Net\b2a84980f206431821d85d5155d5916f d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Printing d------ [00:28 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Printing\0f8e14bfdb27645fb1a92ce26f9bf521 d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri# d------ [01:04 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2 d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\36c12de583ee81e9c99acb72b09d77ac d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel d------ [01:05 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\ceadaf3b3d017c7a1ef10a06f8009f6f d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel# d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\9ec7da53380a754b4ad97709df0dd7e7 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce# d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Speech d------ [00:28 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Speech\10d7daa3d1e62a0e40587cdc707be93f d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions d------ [11:42 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\8efcd633af87989355382b5039f1b7df d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\60df958ca96c9b8945f836759b6abd34 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\734ab0ea87d7dfd5c583eea535c05878 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\8f77a43c1910913da43d0d5a8c58873c d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\9e082691f8cd06210453b9644392df51 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a54a122f1070ab71931dd9679ddd8e90 d------ [18:57 16/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ad0851438a18bf730d974c9b2f5f776a d------ [18:56 16/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Entity d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\8bfce80b497e469756ab02fa8db697e7 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\93b5d1b77a74b76ac73cbf51ec871c01 d------ [18:57 16/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\44b3d546f49ad178fe6fd900fb8993bf d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d06a7d5872bbe85795f947f6c75d38c6 d------ [18:57 16/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\510278233d1ce1c7158fe268f2cc4e81 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\ccaf6bdd256a9b5079fedadcc8993327 d------ [18:56 16/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\d93514a764a83b18f6f3547b59cc8ae9 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\f5dac0448a1dbe2687a5df92904d6274 d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\018b6e48c32d5b5d78086998e3505f1c d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Routing d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\3533d614ebecd4344efbee619dd11a74 d------ [09:18 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\6303e256d2ac0843c3e4c24172c90544 d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms d------ [00:29 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6c334564da041df8fb75415f2d503224 d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\921629dc69a5a895101097c88ae67897 d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\0aa4f4174204c93cc5181df4a6b2fb09 d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\f72c5f649951b0403e62bfab6c453e6f d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ# d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\17902fdb0e0d3bc8b49bce693415fe7e d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml d------ [00:29 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq d------ [11:43 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\566b2e11e7f3f6d973b17b86cf42f9bc d------ [09:19 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp d------ [00:17 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1E0.tmp d------ [08:41 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2B3.tmp d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2C0.tmp d------ [08:43 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP308.tmp d------ [00:17 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3E4.tmp d------ [00:19 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP503.tmp d------ [08:53 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5EA.tmp d------ [08:55 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP611.tmp d------ [08:56 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP72C.tmp d------ [09:03 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP803.tmp d------ [09:05 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClient d------ [00:30 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba55240b7753047f8d1b03ef473bf74e d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClients# d------ [00:30 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\55d4813580b1e5d268ff0564942cee9c d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider d------ [00:30 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8 d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes d------ [00:30 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865 d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase d------ [00:22 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\1adc4ae51a5ac63e896a1402749ca495 d------ [09:11 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra# d------ [00:30 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571 d------ [09:13 13/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WsatConfig d------ [01:06 11/10/2011]

C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WsatConfig\c8627df7adb416722d8e0f05c57fef6b d------ [09:16 13/10/2011]

C:\WINDOWS\assembly\temp d------ [00:14 11/10/2011]

C:\WINDOWS\assembly\tmp d------ [00:09 11/10/2011]

C:\WINDOWS\Config d------ [19:18 10/10/2011]

C:\WINDOWS\Connection Wizard d------ [19:18 10/10/2011]

C:\WINDOWS\CSC d--hs-- [23:43 10/10/2011]

C:\WINDOWS\CSC\d1 d------ [23:43 10/10/2011]

C:\WINDOWS\CSC\d2 d------ [23:43 10/10/2011]

C:\WINDOWS\CSC\d3 d------ [23:43 10/10/2011]

C:\WINDOWS\CSC\d4 d------ [23:43 10/10/2011]

C:\WINDOWS\CSC\d5 d------ [23:43 10/10/2011]

C:\WINDOWS\CSC\d7 d------ [23:43 10/10/2011]

C:\WINDOWS\CSC\d8 d------ [23:43 10/10/2011]

C:\WINDOWS\Cursors d------ [19:18 10/10/2011]

C:\WINDOWS\Debug d------ [19:18 10/10/2011]

C:\WINDOWS\Debug\UserMode d------ [19:18 10/10/2011]

C:\WINDOWS\Downloaded Installations d------ [23:55 10/10/2011]

C:\WINDOWS\Downloaded Installations\{C327C337-AC0B-4075-BFD1-385B156BBEBC} d------ [23:55 10/10/2011]

C:\WINDOWS\Downloaded Program Files d---s-- [23:32 10/10/2011]

C:\WINDOWS\Driver Cache d------ [19:18 10/10/2011]

C:\WINDOWS\Driver Cache\i386 d------ [19:18 10/10/2011]

C:\WINDOWS\ehome d------ [19:18 10/10/2011]

C:\WINDOWS\ERDNT d------ [00:20 17/10/2011]

C:\WINDOWS\ERDNT\10-16-2011 d------ [00:20 17/10/2011]

C:\WINDOWS\ERDNT\10-16-2011\Users d------ [00:20 17/10/2011]

C:\WINDOWS\ERDNT\10-16-2011\Users\00000001 d------ [00:20 17/10/2011]

C:\WINDOWS\ERDNT\10-16-2011\Users\00000002 d------ [00:20 17/10/2011]

C:\WINDOWS\ERDNT\10-24-2011 d------ [11:19 24/10/2011]

C:\WINDOWS\ERDNT\10-24-2011\Users d------ [11:19 24/10/2011]

C:\WINDOWS\ERDNT\10-24-2011\Users\00000001 d------ [11:19 24/10/2011]

C:\WINDOWS\ERDNT\10-24-2011\Users\00000002 d------ [11:19 24/10/2011]

C:\WINDOWS\ERDNT\10-30-2011 d------ [22:13 30/10/2011]

C:\WINDOWS\ERDNT\10-30-2011\Users d------ [22:13 30/10/2011]

C:\WINDOWS\ERDNT\10-30-2011\Users\00000001 d------ [22:13 30/10/2011]

C:\WINDOWS\ERDNT\10-30-2011\Users\00000002 d------ [22:13 30/10/2011]

C:\WINDOWS\ERDNT\11-13-2011 d------ [19:34 13/11/2011]

C:\WINDOWS\ERDNT\11-13-2011\Users d------ [19:34 13/11/2011]

C:\WINDOWS\ERDNT\11-13-2011\Users\00000001 d------ [19:34 13/11/2011]

C:\WINDOWS\ERDNT\11-13-2011\Users\00000002 d------ [19:34 13/11/2011]

C:\WINDOWS\ERDNT\11-24-2011 d------ [09:40 24/11/2011]

C:\WINDOWS\ERDNT\11-24-2011\Users d------ [09:40 24/11/2011]

C:\WINDOWS\ERDNT\11-24-2011\Users\00000001 d------ [09:40 24/11/2011]

C:\WINDOWS\ERDNT\11-24-2011\Users\00000002 d------ [09:40 24/11/2011]

C:\WINDOWS\ERDNT\11-7-2011 d------ [11:21 07/11/2011]

C:\WINDOWS\ERDNT\11-7-2011\Users d------ [11:21 07/11/2011]

C:\WINDOWS\ERDNT\11-7-2011\Users\00000001 d------ [11:21 07/11/2011]

C:\WINDOWS\ERDNT\11-7-2011\Users\00000002 d------ [11:21 07/11/2011]

C:\WINDOWS\ERDNT\cache d------ [18:42 14/12/2011]

C:\WINDOWS\ERDNT\Hiv-backup d------ [18:35 14/12/2011]

C:\WINDOWS\ERDNT\Hiv-backup\Users d------ [18:36 14/12/2011]

C:\WINDOWS\ERDNT\Hiv-backup\Users\00000001 d------ [18:36 14/12/2011]

C:\WINDOWS\ERDNT\Hiv-backup\Users\00000002 d------ [18:36 14/12/2011]

C:\WINDOWS\ERDNT\Hiv-backup\Users\00000003 d------ [18:36 14/12/2011]

C:\WINDOWS\ERDNT\Hiv-backup\Users\00000004 d------ [18:36 14/12/2011]

C:\WINDOWS\ERDNT\Hiv-backup\Users\00000005 d------ [18:36 14/12/2011]

C:\WINDOWS\ERDNT\Hiv-backup\Users\00000006 d------ [18:36 14/12/2011]

C:\WINDOWS\Fonts dr--s-- [19:18 10/10/2011]

C:\WINDOWS\Help d------ [19:18 10/10/2011]

C:\WINDOWS\Help\tours d------ [23:34 10/10/2011]

C:\WINDOWS\Help\tours\mmtour d------ [23:34 10/10/2011]

C:\WINDOWS\ie8 d--h-c- [01:00 11/10/2011]

C:\WINDOWS\ie8\spuninst d----c- [01:00 11/10/2011]

C:\WINDOWS\ie8updates d------ [01:02 11/10/2011]

C:\WINDOWS\ie8updates\KB2447568-IE8 d--h-c- [01:03 11/10/2011]

C:\WINDOWS\ie8updates\KB2447568-IE8\spuninst d----c- [01:03 11/10/2011]

C:\WINDOWS\ie8updates\KB2510531-IE8 d--h-c- [08:35 13/10/2011]

C:\WINDOWS\ie8updates\KB2510531-IE8\spuninst d----c- [08:35 13/10/2011]

C:\WINDOWS\ie8updates\KB2544521-IE8 d--h-c- [08:34 13/10/2011]

C:\WINDOWS\ie8updates\KB2544521-IE8\spuninst d----c- [08:34 13/10/2011]

C:\WINDOWS\ie8updates\KB2586448-IE8 d--h-c- [08:51 13/10/2011]

C:\WINDOWS\ie8updates\KB2586448-IE8\spuninst d----c- [08:51 13/10/2011]

C:\WINDOWS\ie8updates\KB2618444-IE8 d--h-c- [09:34 15/12/2011]

C:\WINDOWS\ie8updates\KB2618444-IE8\spuninst d----c- [09:34 15/12/2011]

C:\WINDOWS\ie8updates\KB982381-IE8 d--h-c- [01:02 11/10/2011]

C:\WINDOWS\ie8updates\KB982381-IE8\spuninst d----c- [01:02 11/10/2011]

C:\WINDOWS\ime d------ [19:18 10/10/2011]

C:\WINDOWS\ime\chsime d------ [23:34 10/10/2011]

C:\WINDOWS\ime\chsime\applets d------ [23:34 10/10/2011]

C:\WINDOWS\ime\CHTIME d------ [19:18 10/10/2011]

C:\WINDOWS\ime\CHTIME\Applets d------ [19:18 10/10/2011]

C:\WINDOWS\ime\imejp d------ [19:18 10/10/2011]

C:\WINDOWS\ime\imejp\applets d------ [19:18 10/10/2011]

C:\WINDOWS\ime\imejp98 d------ [19:18 10/10/2011]

C:\WINDOWS\ime\imjp8_1 d------ [23:34 10/10/2011]

C:\WINDOWS\ime\imjp8_1\applets d------ [23:34 10/10/2011]

C:\WINDOWS\ime\imkr6_1 d------ [23:34 10/10/2011]

C:\WINDOWS\ime\imkr6_1\applets d------ [23:34 10/10/2011]

C:\WINDOWS\ime\imkr6_1\dicts d------ [23:34 10/10/2011]

C:\WINDOWS\ime\shared d------ [23:34 10/10/2011]

C:\WINDOWS\ime\shared\res d------ [23:34 10/10/2011]

C:\WINDOWS\inf d--h--- [19:18 10/10/2011]

C:\WINDOWS\inf\IEM d------ [01:02 11/10/2011]

C:\WINDOWS\inf\IEM\0409 d------ [01:02 11/10/2011]

C:\WINDOWS\Installer d--hs-- [19:24 10/10/2011]

C:\WINDOWS\Installer\$PatchCache$ d--hs-- [00:13 11/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed d--hs-- [00:13 11/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C d--hs-- [00:15 11/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729 d--hs-- [00:15 11/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D d--hs-- [08:56 13/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729 d--hs-- [08:56 13/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010 d--hs-- [11:48 14/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0 d--hs-- [11:48 14/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\CBAA07D195BC00747A80AE651DAC700B d--hs-- [19:16 13/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\CBAA07D195BC00747A80AE651DAC700B\21.0.4003 d--hs-- [19:16 13/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3 d--hs-- [00:13 11/10/2011]

C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729 d--hs-- [00:13 11/10/2011]

C:\WINDOWS\Installer\iProData d------ [00:38 11/10/2011]

C:\WINDOWS\Installer\{02570AE0-BEE0-4A6C-BE3F-D806E9F2EA17} d------ [11:37 11/10/2011]

C:\WINDOWS\Installer\{1D70AABC-CB59-4700-A708-EA56D1CA07B0} d------ [13:22 11/10/2011]

C:\WINDOWS\Installer\{2BC2781A-F7F6-452E-95EB-018A522F1B2C} d------ [11:37 11/10/2011]

C:\WINDOWS\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227} d------ [23:43 10/10/2011]

C:\WINDOWS\Installer\{3E171899-0175-47CC-84C4-562ACDD4C021} d------ [00:37 11/10/2011]

C:\WINDOWS\Installer\{453D5A4E-4EF8-4A27-B3B6-A6A14389AF7C} d------ [19:02 14/12/2011]

C:\WINDOWS\Installer\{52504CE6-E909-4113-B232-4AFEC6543A61} d------ [00:00 11/10/2011]

C:\WINDOWS\Installer\{716E0306-8318-4364-8B8F-0CC4E9376BAC} d------ [13:07 11/10/2011]

C:\WINDOWS\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} d------ [08:36 13/10/2011]

C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AA1000000001} d------ [11:51 14/10/2011]

C:\WINDOWS\Installer\{AEB9948B-4FF2-47C9-990E-47014492A0FE} d------ [00:40 11/10/2011]

C:\WINDOWS\Installer\{BDBAAB1B-B364-465E-931D-4E2E2F0E609A} d------ [12:19 11/10/2011]

C:\WINDOWS\Installer\{BDBAAB1B-B364-465E-931D-4E2E2F0E609A}\{D2B942CC-0565-43C6-82F9-DE26EA4928E6} d------ [12:19 11/10/2011]

C:\WINDOWS\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} d------ [08:35 13/10/2011]

C:\WINDOWS\Intuit d------ [13:02 11/10/2011]

C:\WINDOWS\Intuit\{1D70AABC-CB59-4700-A708-EA56D1CA07B0} d------ [13:02 11/10/2011]

C:\WINDOWS\java d------ [19:18 10/10/2011]

C:\WINDOWS\java\classes d------ [19:18 10/10/2011]

C:\WINDOWS\java\trustlib d------ [19:18 10/10/2011]

C:\WINDOWS\L2Schemas d------ [19:18 10/10/2011]

C:\WINDOWS\Media d------ [19:18 10/10/2011]

C:\WINDOWS\Microsoft.NET d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705 d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322 d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033 d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\0409 d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs d------ [00:09 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates d------ [20:11 13/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M2572067 d------ [20:11 13/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727 d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033 d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\Browsers d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\0409 d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RedistList d------ [00:13 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SubsetList d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files d------ [00:14 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0 d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\MUI d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\MUI\0409 d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\en-US d------ [00:15 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5 d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\1033 d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1 d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\MOF d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\MSBuild d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\SQL d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\SQL\EN d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension d------ [00:16 11/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\chrome d------ [18:44 16/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\defaults d------ [18:44 16/10/2011]

C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\defaults\preferences d------ [18:44 16/10/2011]

C:\WINDOWS\msagent d------ [19:18 10/10/2011]

C:\WINDOWS\msagent\chars d------ [19:18 10/10/2011]

C:\WINDOWS\msagent\intl d------ [19:18 10/10/2011]

C:\WINDOWS\msapps d------ [19:18 10/10/2011]

C:\WINDOWS\msapps\msinfo d------ [19:18 10/10/2011]

C:\WINDOWS\mui d------ [19:18 10/10/2011]

C:\WINDOWS\Network Diagnostic d------ [19:18 10/10/2011]

C:\WINDOWS\Offline Web Pages dr----- [23:32 10/10/2011]

C:\WINDOWS\pchealth d------ [19:18 10/10/2011]

C:\WINDOWS\pchealth\ERRORREP d------ [00:13 11/10/2011]

C:\WINDOWS\pchealth\ERRORREP\QHEADLES d------ [00:13 11/10/2011]

C:\WINDOWS\pchealth\ERRORREP\QSIGNOFF d------ [00:13 11/10/2011]

C:\WINDOWS\pchealth\helpctr d------ [19:18 10/10/2011]

C:\WINDOWS\pchealth\helpctr\BATCH d------ [23:32 10/10/2011]

C:\WINDOWS\pchealth\helpctr\binaries d------ [19:18 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Config d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Config\Cache d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Config\CheckPoint d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Database d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\DataColl d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\HelpFiles d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Indices d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\InstalledSKUs d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Logs d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\OfflineCache d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\OfflineCache\Professional_32#0409 d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\PackageStore d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\blurbs d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\CompatCtr d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\css d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\DFS d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\dialogs d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\DVDUpgrd d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\ErrMsg d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\errors d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\images d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\images\16x16 d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\images\24x24 d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\images\32x32 d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\images\48x48 d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\images\Centers d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\images\Expando d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\NetDiag d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\panels d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\panels\subpanels d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\rc d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\Remote Assistance d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Common d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Css d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Client d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Server d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\scripts d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\sysinfo d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\sysinfo\graphics d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\sysinfo\graphics\33x16pie d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\sysinfo\graphics\47x24pie d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System\UpdateCtr d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\System_OEM d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Temp d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited d------ [23:33 10/10/2011]

C:\WINDOWS\pchealth\UploadLB d------ [23:31 10/10/2011]

C:\WINDOWS\pchealth\UploadLB\Binaries d------ [23:31 10/10/2011]

C:\WINDOWS\pchealth\UploadLB\Config d------ [23:33 10/10/2011]

C:\WINDOWS\PeerNet d------ [19:18 10/10/2011]

C:\WINDOWS\Prefetch d------ [23:42 10/10/2011]

C:\WINDOWS\Provisioning d------ [19:18 10/10/2011]

C:\WINDOWS\Provisioning\Schemas d------ [19:18 10/10/2011]

C:\WINDOWS\Registration d------ [23:30 10/10/2011]

C:\WINDOWS\Registration\CRMLog d------ [23:30 10/10/2011]

C:\WINDOWS\repair d------ [19:18 10/10/2011]

C:\WINDOWS\Resources d------ [19:18 10/10/2011]

C:\WINDOWS\Resources\Themes d------ [19:18 10/10/2011]

C:\WINDOWS\Resources\Themes\Luna d------ [19:18 10/10/2011]

C:\WINDOWS\Resources\Themes\Luna\Shell d------ [19:18 10/10/2011]

C:\WINDOWS\Resources\Themes\Luna\Shell\Homestead d------ [19:18 10/10/2011]

C:\WINDOWS\Resources\Themes\Luna\Shell\Metallic d------ [19:18 10/10/2011]

C:\WINDOWS\Resources\Themes\Luna\Shell\NormalColor d------ [19:18 10/10/2011]

C:\WINDOWS\rnapxs d------ [12:19 11/10/2011]

C:\WINDOWS\rnapxs\CSDK d------ [12:19 11/10/2011]

C:\WINDOWS\rnapxs\CSDK\conf d------ [19:02 14/12/2011]

C:\WINDOWS\rnapxs\CSDK\data d------ [19:02 14/12/2011]

C:\WINDOWS\rnapxs\CSDK\dll d------ [19:02 14/12/2011]

C:\WINDOWS\rnapxs\CSDK\download d------ [19:10 14/12/2011]

C:\WINDOWS\rnapxs\CSDK\StLst d------ [19:02 14/12/2011]

C:\WINDOWS\rnapxs\CSDK\urlcache d------ [19:02 14/12/2011]

C:\WINDOWS\rnapxs\logs d------ [19:02 14/12/2011]

C:\WINDOWS\rnapxs\ulist d------ [19:02 14/12/2011]

C:\WINDOWS\security d------ [19:18 10/10/2011]

C:\WINDOWS\security\Database d------ [19:24 10/10/2011]

C:\WINDOWS\security\logs d------ [19:18 10/10/2011]

C:\WINDOWS\security\templates d------ [19:18 10/10/2011]

C:\WINDOWS\SoftwareDistribution d------ [23:42 10/10/2011]

C:\WINDOWS\SoftwareDistribution\AuthCabs d------ [00:01 11/10/2011]

C:\WINDOWS\SoftwareDistribution\DataStore d------ [23:43 10/10/2011]

C:\WINDOWS\SoftwareDistribution\DataStore\Logs d------ [23:43 10/10/2011]

C:\WINDOWS\SoftwareDistribution\Download d------ [23:42 10/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\02436769f1bb08660087299442ccda82 d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\02436769f1bb08660087299442ccda82\backup d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\02436769f1bb08660087299442ccda82\sp3gdr d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\02436769f1bb08660087299442ccda82\sp3qfe d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\02436769f1bb08660087299442ccda82\update d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\063b47bf6f88ac7c22d205795e466d3f d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\063b47bf6f88ac7c22d205795e466d3f\SP3GDR d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\063b47bf6f88ac7c22d205795e466d3f\SP3QFE d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\063b47bf6f88ac7c22d205795e466d3f\update d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\17e46901add634f15d293735648771e6 d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\17e46901add634f15d293735648771e6\backup d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\17e46901add634f15d293735648771e6\sp3gdr d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\17e46901add634f15d293735648771e6\sp3qfe d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\17e46901add634f15d293735648771e6\update d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\196fa81559690e2494e56094df51cdd8 d------ [12:09 14/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\196fa81559690e2494e56094df51cdd8\update d------ [12:09 14/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\1dfa26aa7c55425acf0fd8a07e6aaee7 d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\1dfa26aa7c55425acf0fd8a07e6aaee7\backup d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\1dfa26aa7c55425acf0fd8a07e6aaee7\sp3gdr d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\1dfa26aa7c55425acf0fd8a07e6aaee7\sp3qfe d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\1dfa26aa7c55425acf0fd8a07e6aaee7\update d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\378fc1ce2ddfdfed8be122eaaaccc2cc d------ [00:49 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\378fc1ce2ddfdfed8be122eaaaccc2cc\backup d------ [00:49 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\378fc1ce2ddfdfed8be122eaaaccc2cc\sp3gdr d------ [00:49 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\378fc1ce2ddfdfed8be122eaaaccc2cc\sp3qfe d------ [00:49 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\378fc1ce2ddfdfed8be122eaaaccc2cc\update d------ [00:49 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\37ea7d9587e54acc7afa27dc26096f4f d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\37ea7d9587e54acc7afa27dc26096f4f\backup d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\37ea7d9587e54acc7afa27dc26096f4f\sp3gdr d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\37ea7d9587e54acc7afa27dc26096f4f\sp3qfe d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\37ea7d9587e54acc7afa27dc26096f4f\update d------ [00:48 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\3b8bc9bbfdb19e4227d5a553f3206c44 d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\3b8bc9bbfdb19e4227d5a553f3206c44\update d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\3c861ca2e0fbb8987ee4e7a238498dec d------ [12:09 14/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\3c861ca2e0fbb8987ee4e7a238498dec\update d------ [12:09 14/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\59b90d72a25c8fb81ab5ce06472f5082 d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\59b90d72a25c8fb81ab5ce06472f5082\backup d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\59b90d72a25c8fb81ab5ce06472f5082\sp3gdr d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\59b90d72a25c8fb81ab5ce06472f5082\sp3qfe d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\59b90d72a25c8fb81ab5ce06472f5082\update d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\6d96dffc598263b266d998c5ef2cef5f d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\6d96dffc598263b266d998c5ef2cef5f\SP3GDR d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\6d96dffc598263b266d998c5ef2cef5f\SP3QFE d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\6d96dffc598263b266d998c5ef2cef5f\update d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\807df1609adbda23482ae3d5f31b7886 d------ [00:09 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\807df1609adbda23482ae3d5f31b7886\update d------ [00:09 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\85d26475ceaed09eb8326f5d66f84c6c d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\85d26475ceaed09eb8326f5d66f84c6c\backup d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\85d26475ceaed09eb8326f5d66f84c6c\sp3gdr d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\85d26475ceaed09eb8326f5d66f84c6c\sp3qfe d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\85d26475ceaed09eb8326f5d66f84c6c\update d------ [02:24 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\bbdccbfd5870508d129e9b482b642cbf d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\bbdccbfd5870508d129e9b482b642cbf\backup d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\bbdccbfd5870508d129e9b482b642cbf\sp3gdr d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\bbdccbfd5870508d129e9b482b642cbf\sp3qfe d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\bbdccbfd5870508d129e9b482b642cbf\update d------ [02:25 15/12/2011]

C:\WINDOWS\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37 d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\SP3GDR d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\SP3QFE d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\update d------ [00:59 11/10/2011]

C:\WINDOWS\SoftwareDistribution\EventCache d------ [23:42 10/10/2011]

C:\WINDOWS\SoftwareDistribution\SelfUpdate d------ [00:01 11/10/2011]

C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default d------ [00:01 11/10/2011]

C:\WINDOWS\SoftwareDistribution\SelfUpdate\Registered d------ [00:01 11/10/2011]

C:\WINDOWS\SoftwareDistribution\WebSetup d------ [00:01 11/10/2011]

C:\WINDOWS\SoftwareDistribution\WuRedir d------ [00:01 11/10/2011]

C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77 d------ [00:01 11/10/2011]

C:\WINDOWS\srchasst d------ [23:34 10/10/2011]

C:\WINDOWS\Sun d------ [14:14 24/10/2011]

C:\WINDOWS\Sun\Java d------ [14:14 24/10/2011]

C:\WINDOWS\Sun\Java\Deployment d------ [14:14 24/10/2011]

C:\WINDOWS\system d------ [19:18 10/10/2011]

C:\WINDOWS\system32 d------ [19:18 10/10/2011]
sfcfiles.dll --a---- 1614848 bytes [20:00 10/05/2008] [20:00 10/05/2008] 6460FBE53566E18B9B07EDCAD804FBE5

C:\WINDOWS\system32\1025 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\1028 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\1031 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\1033 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\1037 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\1041 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\1042 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\1054 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\2052 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\3076 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\3com_dmi d------ [19:18 10/10/2011]

C:\WINDOWS\system32\appmgmt d------ [12:31 09/12/2011]

C:\WINDOWS\system32\appmgmt\MACHINE d---s-- [12:31 09/12/2011]

C:\WINDOWS\system32\appmgmt\S-1-5-21-1547161642-287218729-1417001333-1004 d---s-- [12:31 09/12/2011]

C:\WINDOWS\system32\CatRoot d------ [19:23 10/10/2011]

C:\WINDOWS\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE} d------ [19:23 10/10/2011]

C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} d------ [19:23 10/10/2011]

C:\WINDOWS\system32\CatRoot2 d------ [19:23 10/10/2011]

C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE} d------ [19:23 10/10/2011]

C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} d------ [19:23 10/10/2011]

C:\WINDOWS\system32\Com d------ [23:29 10/10/2011]

C:\WINDOWS\system32\config d------ [19:18 10/10/2011]

C:\WINDOWS\system32\config\systemprofile d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data dr-h--- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Intel d------ [00:40 11/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Intel\Wireless d------ [00:40 11/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Intel\Wireless\Settings d--h--- [00:42 11/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft d---s-- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache d---s-- [00:15 11/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content d---s-- [00:15 11/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData d---s-- [00:15 11/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Media Player d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates d---s-- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My d---s-- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates d---s-- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs d---s-- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs d---s-- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Desktop d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Favorites d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings dr-h--- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data d--h--- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0 d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\History d---s-- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5 d---s-- [23:42 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012011101020111011 d---s-- [23:42 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\temp d------ [18:43 14/12/2011]

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files d---s-- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\My Documents d------ [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\NetHood d--h--- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\PrintHood d--h--- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Recent d--h--- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\SendTo dr-h--- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Start Menu dr----- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs dr----- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories dr----- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility dr----- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Entertainment dr----- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup dr----- [23:36 10/10/2011]

C:\WINDOWS\system32\config\systemprofile\Templates d--h--- [23:36 10/10/2011]

C:\WINDOWS\system32\dhcp d------ [19:18 10/10/2011]

C:\WINDOWS\system32\DirectX d------ [23:32 10/10/2011]

C:\WINDOWS\system32\DirectX\Dinput d------ [23:32 10/10/2011]

C:\WINDOWS\system32\dllcache dr-hsc- [19:18 10/10/2011]

C:\WINDOWS\system32\drivers d------ [19:18 10/10/2011]

C:\WINDOWS\system32\drivers\disdn d------ [19:18 10/10/2011]

C:\WINDOWS\system32\drivers\etc d------ [19:18 10/10/2011]

C:\WINDOWS\system32\drivers\UMDF d------ [00:10 11/10/2011]

C:\WINDOWS\system32\DRVSTORE d----c- [00:39 11/10/2011]

C:\WINDOWS\system32\DRVSTORE\brimi10a_47200315D7F756B7BB85EB956352B444A3A9D741 d----c- [11:46 11/10/2011]

C:\WINDOWS\system32\DRVSTORE\brimi10a_47200315D7F756B7BB85EB956352B444A3A9D741\x86 d----c- [11:46 11/10/2011]

C:\WINDOWS\system32\DRVSTORE\brpri10a_4DBEC6D767A0114984EC47DA65B03F8F0E7F09BC d----c- [11:46 11/10/2011]

C:\WINDOWS\system32\DRVSTORE\netw4k32_1BDC0713EC2AE134FC858C6F7F20C87410E6BA5C d----c- [00:39 11/10/2011]

C:\WINDOWS\system32\DRVSTORE\netw4x32_6BCDD85873491234C1BCE1A995B7FEDD88433F15 d----c- [00:39 11/10/2011]

C:\WINDOWS\system32\DRVSTORE\w29n51_3219C3E9682004CC6857361A4203A8986CCEB210 d----c- [00:39 11/10/2011]

C:\WINDOWS\system32\en d------ [19:18 10/10/2011]

C:\WINDOWS\system32\en-US d------ [23:29 10/10/2011]

C:\WINDOWS\system32\export d------ [19:18 10/10/2011]

C:\WINDOWS\system32\ias d------ [19:18 10/10/2011]

C:\WINDOWS\system32\icsxml d------ [19:18 10/10/2011]

C:\WINDOWS\system32\IME d------ [19:18 10/10/2011]

C:\WINDOWS\system32\IME\CINTLGNT d------ [19:18 10/10/2011]

C:\WINDOWS\system32\IME\PINTLGNT d------ [19:18 10/10/2011]

C:\WINDOWS\system32\IME\TINTLGNT d------ [19:18 10/10/2011]

C:\WINDOWS\system32\inetsrv d------ [19:18 10/10/2011]

C:\WINDOWS\system32\LogFiles d------ [00:10 11/10/2011]

C:\WINDOWS\system32\LogFiles\WUDF d------ [00:10 11/10/2011]

C:\WINDOWS\system32\Macromed d------ [23:31 10/10/2011]

C:\WINDOWS\system32\Macromed\Flash d------ [23:31 10/10/2011]

C:\WINDOWS\system32\Microsoft d---s-- [23:42 10/10/2011]

C:\WINDOWS\system32\Microsoft\Protect d---s-- [23:42 10/10/2011]

C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18 d---s-- [23:42 10/10/2011]

C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User d---s-- [23:42 10/10/2011]

C:\WINDOWS\system32\MsDtc d------ [23:29 10/10/2011]

C:\WINDOWS\system32\MsDtc\Trace d------ [23:29 10/10/2011]

C:\WINDOWS\system32\mui d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0009 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0401 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0402 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0404 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0405 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0406 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0407 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0408 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0409 d------ [00:09 11/10/2011]

C:\WINDOWS\system32\mui\040b d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\040C d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\040D d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\040e d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0410 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0411 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0412 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0413 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0414 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0415 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0416 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0418 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0419 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\041a d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\041b d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\041D d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\041e d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\041f d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0424 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0425 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0426 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0427 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0804 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0816 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\0C0A d------ [19:18 10/10/2011]

C:\WINDOWS\system32\mui\dispspec d------ [19:18 10/10/2011]

C:\WINDOWS\system32\npp d------ [19:18 10/10/2011]

C:\WINDOWS\system32\NtmsData d------ [00:22 11/10/2011]

C:\WINDOWS\system32\oobe d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\actsetup d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\error d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\html d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\html\dslmain d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\html\iconnect d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\html\ispsgnup d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\html\isptype d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\html\mouse d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\html\mouse\images d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\html\oemcust d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\html\oemhw d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\html\oemreg d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\html\sconnect d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\icserror d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\images d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\isperror d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\regerror d------ [23:31 10/10/2011]

C:\WINDOWS\system32\oobe\sample d------ [19:18 10/10/2011]

C:\WINDOWS\system32\oobe\setup d------ [19:18 10/10/2011]

C:\WINDOWS\system32\PreInstall d------ [00:04 11/10/2011]

C:\WINDOWS\system32\PreInstall\WinSE d------ [00:04 11/10/2011]

C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1 d------ [00:04 11/10/2011]

C:\WINDOWS\system32\ras d------ [19:18 10/10/2011]

C:\WINDOWS\system32\ReinstallBackups d------ [23:20 03/11/2011]

C:\WINDOWS\system32\ReinstallBackups\0000 d------ [23:20 03/11/2011]

C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles d------ [23:20 03/11/2011]

C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\x86 d------ [23:20 03/11/2011]

C:\WINDOWS\system32\Restore d------ [23:31 10/10/2011]

C:\WINDOWS\system32\scripting d------ [19:18 10/10/2011]

C:\WINDOWS\system32\Setup d------ [19:18 10/10/2011]

C:\WINDOWS\system32\ShellExt d------ [19:18 10/10/2011]

C:\WINDOWS\system32\SoftwareDistribution d------ [00:01 11/10/2011]

C:\WINDOWS\system32\SoftwareDistribution\Setup d------ [00:01 11/10/2011]

C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup d------ [00:01 11/10/2011]

C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll d------ [00:01 11/10/2011]

C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226 d------ [00:01 11/10/2011]

C:\WINDOWS\system32\spool d------ [19:18 10/10/2011]

C:\WINDOWS\system32\spool\drivers d------ [19:18 10/10/2011]

C:\WINDOWS\system32\spool\drivers\color d------ [19:18 10/10/2011]

C:\WINDOWS\system32\spool\drivers\w32x86 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\spool\drivers\w32x86\3 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\spool\drivers\w32x86\brothermfc_j265w780e d------ [11:50 11/10/2011]

C:\WINDOWS\system32\spool\drivers\w32x86\brotherpc_fax_v_2_1f116 d------ [11:50 11/10/2011]

C:\WINDOWS\system32\spool\PRINTERS d------ [23:28 10/10/2011]

C:\WINDOWS\system32\spool\prtprocs d------ [19:18 10/10/2011]

C:\WINDOWS\system32\spool\prtprocs\w32x86 d------ [19:18 10/10/2011]

C:\WINDOWS\system32\spool\prtprocs\x64 d------ [00:15 11/10/2011]

C:\WINDOWS\system32\spool\XPSEP d------ [00:15 11/10/2011]

C:\WINDOWS\system32\spool\XPSEP\amd64 d------ [00:15 11/10/2011]

C:\WINDOWS\system32\spool\XPSEP\amd64\amd64 d------ [00:15 11/10/2011]

C:\WINDOWS\system32\spool\XPSEP\i386 d------ [00:15 11/10/2011]

C:\WINDOWS\system32\spool\XPSEP\i386\i386 d------ [00:15 11/10/2011]

C:\WINDOWS\system32\URTTemp d------ [00:09 11/10/2011]

C:\WINDOWS\system32\usmt d------ [19:18 10/10/2011]

C:\WINDOWS\system32\wbem d------ [19:18 10/10/2011]

C:\WINDOWS\system32\wbem\AutoRecover d------ [23:30 10/10/2011]

C:\WINDOWS\system32\wbem\Logs d------ [19:18 10/10/2011]

C:\WINDOWS\system32\wbem\mof d------ [19:18 10/10/2011]

C:\WINDOWS\system32\wbem\mof\bad d------ [19:18 10/10/2011]

C:\WINDOWS\system32\wbem\mof\good d------ [19:18 10/10/2011]

C:\WINDOWS\system32\wbem\Performance d------ [23:30 10/10/2011]

C:\WINDOWS\system32\wbem\Repository d------ [19:18 10/10/2011]

C:\WINDOWS\system32\wbem\Repository\FS d------ [23:30 10/10/2011]

C:\WINDOWS\system32\wbem\snmp d------ [23:34 10/10/2011]

C:\WINDOWS\system32\wbem\xml d------ [19:18 10/10/2011]

C:\WINDOWS\system32\wins d------ [19:18 10/10/2011]

C:\WINDOWS\system32\xircom d------ [23:34 10/10/2011]

C:\WINDOWS\system32\XPSViewer d------ [00:15 11/10/2011]

C:\WINDOWS\system32\XPSViewer\en-US d------ [00:15 11/10/2011]

C:\WINDOWS\Tasks d---s-- [23:32 10/10/2011]

C:\WINDOWS\temp d------ [18:43 14/12/2011]

C:\WINDOWS\twain_32 d------ [19:18 10/10/2011]

C:\WINDOWS\twain_32\BrSc09c d------ [11:49 11/10/2011]

C:\WINDOWS\twain_32\BrSc09c\Common d------ [11:49 11/10/2011]

C:\WINDOWS\twain_32\BrSc09c\Lang d------ [11:49 11/10/2011]

C:\WINDOWS\twain_32\BrSc09c\MFJ265WU d------ [11:49 11/10/2011]

C:\WINDOWS\WBEM d------ [01:02 11/10/2011]

C:\WINDOWS\Web dr----- [19:18 10/10/2011]

C:\WINDOWS\Web\printers d------ [19:18 10/10/2011]

C:\WINDOWS\Web\printers\images d------ [19:18 10/10/2011]

C:\WINDOWS\Web\Wallpaper dr----- [23:32 10/10/2011]

C:\WINDOWS\WinSxS d------ [19:18 10/10/2011]

C:\WINDOWS\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_0296e955 d------ [13:15 11/10/2011]

C:\WINDOWS\WinSxS\amd64_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d37d5c5a d------ [13:15 11/10/2011]

C:\WINDOWS\WinSxS\InstallTemp d------ [19:18 10/10/2011]

C:\WINDOWS\WinSxS\Manifests d------ [19:18 10/10/2011]

C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e d------ [09:08 13/10/2011]

C:\WINDOWS\WinSxS\MSIL_Intuit.QuickBooks.FCS_5b3f47ba29970ccb_1.3.0.0_x-ww_d936dcb9 d------ [13:15 11/10/2011]

C:\WINDOWS\WinSxS\Policies d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\Policies\amd64_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_16f3e195 d------ [13:15 11/10/2011]

C:\WINDOWS\WinSxS\Policies\amd64_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_aea75d50 d------ [13:15 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.4.1.Microsoft.MSXML2R_6bd6b9abf345378f_x-ww_679a1c95 d------ [08:35 13/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_x-ww_88e8eab8 d------ [08:35 13/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_x-ww_5f0bbcff d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773 d------ [00:13 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_x-ww_caeee150 d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_x-ww_0f75c32e d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_x-ww_7d81c9f9 d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501 d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75 d------ [00:16 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30 d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377 d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb d------ [08:35 13/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d d------ [12:19 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf d------ [08:36 13/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5 d------ [08:35 13/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841 d------ [13:14 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474 d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca d------ [00:13 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd d------ [13:14 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700 d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303 d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2 d------ [13:15 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05 d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a d------ [11:37 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2 d------ [12:19 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2 d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375 d------ [00:16 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e d------ [12:19 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313 d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943 d------ [13:14 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53 d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa d------ [00:31 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 d------ [01:03 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023 d------ [00:57 11/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0 d------ [19:23 10/10/2011]

C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790 d------ [09:08 13/10/2011]

E: - Unable to find folder.

========== file ==========

E:\AUTORUN.INF - Unable to find/read file.

========== contents ==========

E:\AUTORUN.INF - Unable to open file.

========== reg ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNSCache]
"Type"= 0x0000000020 (32)
"Start"= 0x0000000002 (2)
"ErrorControl"= 0x0000000001 (1)
"ImagePath"="%SystemRoot%\system32\svchost.exe -k NetworkService"
"DisplayName"="DNS Client"
"Group"="TDI"
"DependOnService"="Tcpip"
"DependOnGroup"=" "
"ObjectName"="NT AUTHORITY\NetworkService"
"Description"="Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start."

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNSCache\Parameters]
"ServiceDll"="%SystemRoot%\System32\dnsrslvr.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNSCache\Security]
"Security"=01 00 14 80 a8 00 00 00 b4 00 00 00 14 00 00 00 30 00 00 00 02 00 1c 00 01 00 00 00 02 80 14 00 ff 01 0f 00 01 01 00 00 00 00 00 01 00 00 00 00 02 00 78 00 05 00 00 00 00 00 14 00 8d 01 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 18 00 9d 01 02 00 01 02 00 00 00 00 00 05 20 00 00 00 23 02 00 00 00 00 18 00 fd 01 02 00 01 02 00 00 00 00 00 05 20 00 00 00 2c 02 00 00 00 00 18 00 ff 01 0f 00 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 00 00 14 00 fd 01 02 00 01 01 00 00 00 00 00 05 12 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00 (REG_BINARY)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNSCache\Enum]
"0"="Root\LEGACY_DNSCACHE\0000"
"Count"= 0x0000000001 (1)
"NextInstance"= 0x0000000001 (1)

-= EOF =-

this should be everything.
The computer does seem to be running better, but I haven't been using it alot either.
so I will use it some tonight to check.
Thanks for your help.

vict0r · **Joined:** Wed 03 Dec, 2008 8:00 pm **Posts:** 1043

I'm sorry for the delay.

Do you remember if your external hard drive (Drive E:) was plugged in when you performed the OTL fix?

Reset IP-Flush DNS-Renew IP

This will release the IP address settings, flush the DNS resolver cache, then renew the IP address settings.
It will be easier and less error prone, if we create a batch file to do this... please follow these steps:

Copy all text in the quote box (below)...to Notepad.
Quote:
@echo off
ipconfig /release
ipconfig /flushdns
ipconfig /renew
del %0
Save the Notepad file on your desktop...as DNSreset.bat... save type as "All Files"

DNSreset.bat <<------------- you should see this on your desktop.
Double click on DNSreset.bat to run it.
A black CMD window will flash, then disappear...this is normal. The batch file will be deleted when finished.
The IP address settings should now be released and renewed and the DNS cache flushed.

Upload File for testing

Please go to Virustotal or jotti.org

Copy/paste this file and path into the white box at the top:

Quote:

c:\windows\system32\sfcfiles.dll

Press Submit - this will submit the file for testing.
Please wait for all the scanners to finish then copy and paste the permalink (web address) in your next response.
Example of web address :

TDSSKiller

TDSSKiller.exe

Desktop

Important!: Run this fix once and once only.
Double click on TDSSKiller.exe to launch it.
Click on Start Scan, the scan will run.
A box will appear saying System scan completed.
If any Malicious objects are found, change the default action Cure to Skip.
If any suspicious objects are detected the default action will be Skip, ensure Skip
Click Continue.
A log file should be created on your C: drive named something like TDSSKiller.2.4.0.0 24.07.2010.
To find the log click Start > Computer > C:.
Please post the contents of that log in your next reply.

Router check

Open Notepad.
Copy/paste the following text into the empty Notepad window.
Code:
@echo off
>Log1.txt (
ipconfig /all
nslookup www.malwarebytes.org
nslookup google.com
nslookup www.google.co.uk
nslookup yahoo.com
ping -n 4 www.malwarebytes.org
ping -n 4 google.com
ping -n 4 www.google.co.uk
ping -n 4 yahoo.com
route print
)
start Log1.txt
del %0
Save the file as xxx.bat on your desktop. Save it with the file type... all types *.*.
Double click the file xxx.bat to execute.

Log1.txt should open in Notepad automatically when the script has complete, post the contents of this file in your next response.

Update Malwarebytes Anti Malware

Please start Malwarebytes' Anti Malware (MBAM) (already installed).
Click the Update tab and then click the Check for Updates button to perform the update.
Please repeat the previous step (update) if the database was not updated (needed if the program itself was updated, Malwarebytes will confirm a successful database update in an alertbox).
Tell me if the database is updated or not.
The exact wording of any error messages will be useful.

Remember to post:

Was the external hard drive plugged in?
Link to the online virusscan.
The Tdsskiller log.
The router check log.
Did Malwarebytes update it's database?

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

Here are first two items.

I can't remember if the external harddrive was plugged in for OTL or not.

Here is the link to the scan:
http://www.virustotal.com/file-scan/rep ... 1324261556

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

Here is tdsskiller scan:

21:40:45.0125 3396 TDSS rootkit removing tool 2.6.23.0 Dec 13 2011 10:39:31
21:40:45.0625 3396 ============================================================
21:40:45.0625 3396 Current date / time: 2011/12/18 21:40:45.0625
21:40:45.0625 3396 SystemInfo:
21:40:45.0625 3396
21:40:45.0625 3396 OS Version: 5.1.2600 ServicePack: 3.0
21:40:45.0625 3396 Product type: Workstation
21:40:45.0625 3396 ComputerName: SILVER_BULLET
21:40:45.0625 3396 UserName: Tad Palmer
21:40:45.0625 3396 Windows directory: C:\WINDOWS
21:40:45.0625 3396 System windows directory: C:\WINDOWS
21:40:45.0625 3396 Processor architecture: Intel x86
21:40:45.0625 3396 Number of processors: 1
21:40:45.0625 3396 Page size: 0x1000
21:40:45.0625 3396 Boot type: Normal boot
21:40:45.0625 3396 ============================================================
21:40:47.0265 3396 Initialize success
21:42:40.0765 2892 ============================================================
21:42:40.0765 2892 Scan started
21:42:40.0765 2892 Mode: Manual;
21:42:40.0765 2892 ============================================================
21:42:41.0515 2892 Abiosdsk - ok
21:42:41.0531 2892 abp480n5 - ok
21:42:41.0609 2892 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
21:42:41.0625 2892 ACPI - ok
21:42:41.0671 2892 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
21:42:41.0687 2892 ACPIEC - ok
21:42:41.0718 2892 adpu160m - ok
21:42:41.0765 2892 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
21:42:41.0781 2892 aec - ok
21:42:41.0843 2892 AegisP (375eb0b97e3950adef3633c27a82438b) C:\WINDOWS\system32\DRIVERS\AegisP.sys
21:42:41.0843 2892 AegisP - ok
21:42:41.0906 2892 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
21:42:41.0921 2892 AFD - ok
21:42:41.0937 2892 Aha154x - ok
21:42:41.0953 2892 aic78u2 - ok
21:42:41.0984 2892 aic78xx - ok
21:42:42.0000 2892 AliIde - ok
21:42:42.0031 2892 amsint - ok
21:42:42.0078 2892 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
21:42:42.0078 2892 Arp1394 - ok
21:42:42.0093 2892 asc - ok
21:42:42.0125 2892 asc3350p - ok
21:42:42.0140 2892 asc3550 - ok
21:42:42.0187 2892 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
21:42:42.0218 2892 AsyncMac - ok
21:42:42.0234 2892 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
21:42:42.0250 2892 atapi - ok
21:42:42.0265 2892 Atdisk - ok
21:42:42.0375 2892 ati2mtag (03621f7f968ff63713943405deb777f9) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
21:42:42.0406 2892 ati2mtag - ok
21:42:42.0562 2892 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
21:42:42.0578 2892 Atmarpc - ok
21:42:42.0625 2892 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
21:42:42.0640 2892 audstub - ok
21:42:42.0671 2892 bcm4sbxp (78123f44be9e4768852a3a017e02d637) C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
21:42:42.0687 2892 bcm4sbxp - ok
21:42:42.0734 2892 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
21:42:42.0734 2892 Beep - ok
21:42:42.0828 2892 BrScnUsb (92a964547b96d697e5e9ed43b4297f5a) C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys
21:42:42.0828 2892 BrScnUsb - ok
21:42:43.0000 2892 catchme - ok
21:42:43.0031 2892 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
21:42:43.0046 2892 cbidf2k - ok
21:42:43.0078 2892 cd20xrnt - ok
21:42:43.0109 2892 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
21:42:43.0109 2892 Cdaudio - ok
21:42:43.0140 2892 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
21:42:43.0156 2892 Cdfs - ok
21:42:43.0281 2892 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
21:42:43.0296 2892 Cdrom - ok
21:42:43.0328 2892 Changer - ok
21:42:43.0375 2892 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
21:42:43.0406 2892 CmBatt - ok
21:42:43.0421 2892 CmdIde - ok
21:42:43.0453 2892 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
21:42:43.0468 2892 Compbatt - ok
21:42:43.0500 2892 Cpqarray - ok
21:42:43.0515 2892 dac2w2k - ok
21:42:43.0531 2892 dac960nt - ok
21:42:43.0562 2892 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
21:42:43.0578 2892 Disk - ok
21:42:43.0656 2892 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
21:42:43.0687 2892 dmboot - ok
21:42:43.0703 2892 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
21:42:43.0718 2892 dmio - ok
21:42:43.0750 2892 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
21:42:43.0765 2892 dmload - ok
21:42:43.0812 2892 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
21:42:43.0828 2892 DMusic - ok
21:42:43.0843 2892 dpti2o - ok
21:42:43.0859 2892 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
21:42:43.0875 2892 drmkaud - ok
21:42:43.0921 2892 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
21:42:43.0953 2892 Fastfat - ok
21:42:43.0984 2892 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
21:42:44.0000 2892 Fdc - ok
21:42:44.0015 2892 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
21:42:44.0031 2892 Fips - ok
21:42:44.0046 2892 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
21:42:44.0062 2892 Flpydisk - ok
21:42:44.0125 2892 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
21:42:44.0125 2892 FltMgr - ok
21:42:44.0250 2892 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
21:42:44.0265 2892 Fs_Rec - ok
21:42:44.0281 2892 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
21:42:44.0296 2892 Ftdisk - ok
21:42:44.0343 2892 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
21:42:44.0375 2892 Gpc - ok
21:42:44.0406 2892 hpn - ok
21:42:44.0437 2892 HSFHWICH (a84bbbdd125d370593004f6429f8445c) C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys
21:42:44.0468 2892 HSFHWICH - ok
21:42:44.0531 2892 HSF_DPV (b678fa91cf4a1c19b462d8db04cd02ab) C:\WINDOWS\system32\DRIVERS\HSF_DPV.SYS
21:42:44.0578 2892 HSF_DPV - ok
21:42:44.0656 2892 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
21:42:44.0671 2892 HTTP - ok
21:42:44.0703 2892 i2omgmt - ok
21:42:44.0718 2892 i2omp - ok
21:42:44.0906 2892 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
21:42:44.0968 2892 i8042prt - ok
21:42:45.0046 2892 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
21:42:45.0078 2892 Imapi - ok
21:42:45.0125 2892 ini910u - ok
21:42:45.0187 2892 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
21:42:45.0203 2892 IntelIde - ok
21:42:45.0296 2892 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
21:42:45.0328 2892 intelppm - ok
21:42:45.0359 2892 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
21:42:45.0390 2892 Ip6Fw - ok
21:42:45.0453 2892 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
21:42:45.0468 2892 IpFilterDriver - ok
21:42:45.0484 2892 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
21:42:45.0531 2892 IpInIp - ok
21:42:45.0578 2892 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
21:42:45.0609 2892 IpNat - ok
21:42:45.0625 2892 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
21:42:45.0656 2892 IPSec - ok
21:42:45.0718 2892 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
21:42:45.0750 2892 IRENUM - ok
21:42:45.0781 2892 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
21:42:45.0796 2892 isapnp - ok
21:42:45.0843 2892 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
21:42:45.0875 2892 Kbdclass - ok
21:42:45.0953 2892 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
21:42:45.0968 2892 kmixer - ok
21:42:46.0000 2892 KmxAgent (3fdcb245744b046e7f5bd4b15c71025d) C:\WINDOWS\system32\DRIVERS\kmxagent.sys
21:42:46.0031 2892 KmxAgent - ok
21:42:46.0078 2892 KmxAMRT (eadf1e9d9b766a8d18ddf5896fbc7541) C:\WINDOWS\system32\DRIVERS\KmxAMRT.sys
21:42:46.0093 2892 KmxAMRT - ok
21:42:46.0156 2892 KmxCF (eca0d72d15841a7ac721189fb2bbb6c8) C:\WINDOWS\system32\DRIVERS\KmxCF.sys
21:42:46.0187 2892 KmxCF - ok
21:42:46.0218 2892 KmxCfg (06ae46da804a9986c7bcb4c172d6f5fb) C:\WINDOWS\system32\DRIVERS\kmxcfg.sys
21:42:46.0265 2892 KmxCfg - ok
21:42:46.0375 2892 KmxFile (0df04c9968510eeef3b3cf0df31c3b64) C:\WINDOWS\system32\DRIVERS\KmxFile.sys
21:42:46.0390 2892 KmxFile - ok
21:42:46.0421 2892 KmxFw (251a2f47e13a48aa95d8514a71b46306) C:\WINDOWS\system32\DRIVERS\kmxfw.sys
21:42:46.0437 2892 KmxFw - ok
21:42:46.0468 2892 KmxSbx (4717df0f6bcab33009d4034be2245642) C:\WINDOWS\system32\DRIVERS\KmxSbx.sys
21:42:46.0500 2892 KmxSbx - ok
21:42:46.0531 2892 KmxStart (3b4cf5b51d3f3e594aa96d6931e0b372) C:\WINDOWS\system32\DRIVERS\kmxstart.sys
21:42:46.0546 2892 KmxStart - ok
21:42:46.0625 2892 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
21:42:46.0656 2892 KSecDD - ok
21:42:46.0687 2892 lbrtfdc - ok
21:42:46.0734 2892 mdmxsdk (3c318b9cd391371bed62126581ee9961) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
21:42:46.0750 2892 mdmxsdk - ok
21:42:46.0796 2892 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
21:42:46.0828 2892 mnmdd - ok
21:42:46.0890 2892 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
21:42:46.0921 2892 Modem - ok
21:42:46.0953 2892 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
21:42:47.0000 2892 Mouclass - ok
21:42:47.0015 2892 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
21:42:47.0046 2892 MountMgr - ok
21:42:47.0062 2892 mraid35x - ok
21:42:47.0093 2892 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
21:42:47.0125 2892 MRxDAV - ok
21:42:47.0187 2892 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
21:42:47.0218 2892 MRxSmb - ok
21:42:47.0343 2892 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
21:42:47.0375 2892 Msfs - ok
21:42:47.0437 2892 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
21:42:47.0484 2892 MSKSSRV - ok
21:42:47.0500 2892 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
21:42:47.0546 2892 MSPCLOCK - ok
21:42:47.0578 2892 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
21:42:47.0625 2892 MSPQM - ok
21:42:47.0656 2892 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
21:42:47.0687 2892 mssmbios - ok
21:42:47.0734 2892 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
21:42:47.0750 2892 Mup - ok
21:42:47.0812 2892 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
21:42:47.0859 2892 NDIS - ok
21:42:47.0921 2892 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
21:42:47.0953 2892 NdisTapi - ok
21:42:47.0984 2892 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
21:42:48.0015 2892 Ndisuio - ok
21:42:48.0046 2892 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
21:42:48.0093 2892 NdisWan - ok
21:42:48.0109 2892 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
21:42:48.0140 2892 NDProxy - ok
21:42:48.0156 2892 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
21:42:48.0187 2892 NetBIOS - ok
21:42:48.0218 2892 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
21:42:48.0250 2892 NetBT - ok
21:42:48.0312 2892 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
21:42:48.0343 2892 NIC1394 - ok
21:42:48.0390 2892 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
21:42:48.0421 2892 Npfs - ok
21:42:48.0468 2892 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
21:42:48.0515 2892 Ntfs - ok
21:42:48.0640 2892 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
21:42:48.0671 2892 Null - ok
21:42:48.0703 2892 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
21:42:48.0750 2892 NwlnkFlt - ok
21:42:48.0765 2892 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
21:42:48.0812 2892 NwlnkFwd - ok
21:42:48.0843 2892 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
21:42:48.0890 2892 ohci1394 - ok
21:42:48.0921 2892 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\drivers\Parport.sys
21:42:48.0968 2892 Parport - ok
21:42:49.0000 2892 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
21:42:49.0031 2892 PartMgr - ok
21:42:49.0062 2892 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
21:42:49.0125 2892 ParVdm - ok
21:42:49.0421 2892 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
21:42:49.0484 2892 PCI - ok
21:42:49.0578 2892 PCIDump - ok
21:42:49.0609 2892 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\drivers\PCIIde.sys
21:42:49.0640 2892 PCIIde - ok
21:42:49.0656 2892 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
21:42:49.0703 2892 Pcmcia - ok
21:42:49.0718 2892 PDCOMP - ok
21:42:49.0734 2892 PDFRAME - ok
21:42:49.0750 2892 PDRELI - ok
21:42:49.0781 2892 PDRFRAME - ok
21:42:49.0796 2892 perc2 - ok
21:42:49.0812 2892 perc2hib - ok
21:42:49.0890 2892 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
21:42:49.0937 2892 PptpMiniport - ok
21:42:49.0953 2892 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
21:42:50.0015 2892 PSched - ok
21:42:50.0031 2892 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
21:42:50.0078 2892 Ptilink - ok
21:42:50.0109 2892 ql1080 - ok
21:42:50.0140 2892 Ql10wnt - ok
21:42:50.0156 2892 ql12160 - ok
21:42:50.0187 2892 ql1240 - ok
21:42:50.0203 2892 ql1280 - ok
21:42:50.0218 2892 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
21:42:50.0250 2892 RasAcd - ok
21:42:50.0281 2892 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
21:42:50.0312 2892 Rasl2tp - ok
21:42:50.0328 2892 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
21:42:50.0375 2892 RasPppoe - ok
21:42:50.0390 2892 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
21:42:50.0406 2892 Raspti - ok
21:42:50.0437 2892 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
21:42:50.0468 2892 Rdbss - ok
21:42:50.0515 2892 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
21:42:50.0546 2892 RDPCDD - ok
21:42:50.0578 2892 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
21:42:50.0609 2892 rdpdr - ok
21:42:50.0656 2892 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
21:42:50.0687 2892 RDPWD - ok
21:42:50.0703 2892 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
21:42:50.0734 2892 redbook - ok
21:42:50.0812 2892 s24trans (e2c6abcbefb1d44f6aaeb1cd5d6062d4) C:\WINDOWS\system32\DRIVERS\s24trans.sys
21:42:50.0843 2892 s24trans - ok
21:42:50.0875 2892 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys
21:42:50.0921 2892 sdbus - ok
21:42:51.0000 2892 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
21:42:51.0046 2892 Secdrv - ok
21:42:51.0109 2892 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys
21:42:51.0140 2892 Serial - ok
21:42:51.0171 2892 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
21:42:51.0203 2892 Sfloppy - ok
21:42:51.0234 2892 Simbad - ok
21:42:51.0250 2892 Sparrow - ok
21:42:51.0281 2892 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
21:42:51.0328 2892 splitter - ok
21:42:51.0390 2892 Sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
21:42:51.0421 2892 Sr - ok
21:42:51.0484 2892 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
21:42:51.0531 2892 Srv - ok
21:42:51.0625 2892 STAC97 (305cc42945a713347f978d78566113f3) C:\WINDOWS\system32\drivers\STAC97.sys
21:42:51.0671 2892 STAC97 - ok
21:42:51.0703 2892 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
21:42:51.0734 2892 swenum - ok
21:42:51.0765 2892 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
21:42:51.0812 2892 swmidi - ok
21:42:51.0828 2892 symc810 - ok
21:42:51.0843 2892 symc8xx - ok
21:42:51.0859 2892 sym_hi - ok
21:42:51.0875 2892 sym_u3 - ok
21:42:51.0906 2892 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
21:42:51.0937 2892 sysaudio - ok
21:42:52.0031 2892 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
21:42:52.0078 2892 Tcpip - ok
21:42:52.0156 2892 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
21:42:52.0203 2892 TDPIPE - ok
21:42:52.0234 2892 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
21:42:52.0281 2892 TDTCP - ok
21:42:52.0312 2892 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
21:42:52.0359 2892 TermDD - ok
21:42:52.0390 2892 TosIde - ok
21:42:52.0453 2892 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
21:42:52.0515 2892 Udfs - ok
21:42:52.0531 2892 ultra - ok
21:42:52.0609 2892 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
21:42:52.0656 2892 Update - ok
21:42:52.0765 2892 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
21:42:52.0828 2892 usbccgp - ok
21:42:52.0859 2892 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
21:42:52.0921 2892 usbehci - ok
21:42:52.0937 2892 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
21:42:52.0968 2892 usbhub - ok
21:42:53.0015 2892 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
21:42:53.0062 2892 usbprint - ok
21:42:53.0109 2892 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
21:42:53.0140 2892 USBSTOR - ok
21:42:53.0203 2892 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
21:42:53.0234 2892 usbuhci - ok
21:42:53.0265 2892 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
21:42:53.0296 2892 VgaSave - ok
21:42:53.0312 2892 ViaIde - ok
21:42:53.0343 2892 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
21:42:53.0375 2892 VolSnap - ok
21:42:53.0531 2892 w29n51 (d6006de6a6ed423d8016a03bc50cbe6b) C:\WINDOWS\system32\DRIVERS\w29n51.sys
21:42:53.0640 2892 w29n51 - ok
21:42:53.0781 2892 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
21:42:53.0812 2892 Wanarp - ok
21:42:53.0843 2892 WDICA - ok
21:42:53.0875 2892 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
21:42:53.0921 2892 wdmaud - ok
21:42:54.0031 2892 winachsf (0c5b9cf1bdf998750d9c5eeb5f8c55ac) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
21:42:54.0093 2892 winachsf - ok
21:42:54.0296 2892 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
21:42:54.0359 2892 WudfPf - ok
21:42:54.0390 2892 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
21:42:54.0453 2892 WudfRd - ok
21:42:54.0515 2892 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
21:42:54.0703 2892 \Device\Harddisk0\DR0 - ok
21:42:54.0703 2892 Boot (0x1200) (3d9a320c64f8310ca9c08b22b5b90661) \Device\Harddisk0\DR0\Partition0
21:42:54.0703 2892 \Device\Harddisk0\DR0\Partition0 - ok
21:42:54.0718 2892 ============================================================
21:42:54.0718 2892 Scan finished
21:42:54.0718 2892 ============================================================
21:42:54.0734 4024 Detected object count: 0
21:42:54.0734 4024 Actual detected object count: 0

Here is the router check log:

Windows IP Configuration

Host Name . . . . . . . . . . . . : silver_bullet

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : woh.rr.com

Ethernet adapter Wireless Network Connection:

Connection-specific DNS Suffix . : woh.rr.com

Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2915ABG Network Connection

Physical Address. . . . . . . . . : 00-12-F0-88-44-20

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.10.102

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.10.1

DHCP Server . . . . . . . . . . . : 192.168.10.1

DNS Servers . . . . . . . . . . . : 192.168.10.1

Lease Obtained. . . . . . . . . . : Sunday, December 18, 2011 9:27:35 PM

Lease Expires . . . . . . . . . . : Sunday, December 25, 2011 9:27:35 PM

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected

Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller

Physical Address. . . . . . . . . : 00-12-3F-D2-25-DA

Server: TEW-651BR
Address: 192.168.10.1

Name: www.malwarebytes.org.woh.rr.com
Address: 72.3.199.7

Server: TEW-651BR
Address: 192.168.10.1

Name: google.com
Addresses: 74.125.115.105, 74.125.115.106, 74.125.115.147, 74.125.115.99
74.125.115.103, 74.125.115.104

Server: TEW-651BR
Address: 192.168.10.1

Name: www.google.co.uk.woh.rr.com
Address: 72.3.199.7

Server: TEW-651BR
Address: 192.168.10.1

Name: yahoo.com
Addresses: 72.30.2.43, 98.137.149.56, 98.139.180.149, 209.191.122.70

Pinging gs1.wac.v2cdn.net [93.184.216.119] with 32 bytes of data:

Reply from 93.184.216.119: bytes=32 time=71ms TTL=53

Reply from 93.184.216.119: bytes=32 time=77ms TTL=53

Reply from 93.184.216.119: bytes=32 time=94ms TTL=53

Reply from 93.184.216.119: bytes=32 time=75ms TTL=53

Ping statistics for 93.184.216.119:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 71ms, Maximum = 94ms, Average = 79ms

Pinging google.com [74.125.115.104] with 32 bytes of data:

Reply from 74.125.115.104: bytes=32 time=47ms TTL=53

Reply from 74.125.115.104: bytes=32 time=62ms TTL=53

Reply from 74.125.115.104: bytes=32 time=63ms TTL=53

Reply from 74.125.115.104: bytes=32 time=62ms TTL=53

Ping statistics for 74.125.115.104:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 47ms, Maximum = 63ms, Average = 58ms

Pinging www.l.google.com [74.125.115.147] with 32 bytes of data:

Reply from 74.125.115.147: bytes=32 time=39ms TTL=53

Reply from 74.125.115.147: bytes=32 time=53ms TTL=53

Reply from 74.125.115.147: bytes=32 time=54ms TTL=53

Reply from 74.125.115.147: bytes=32 time=54ms TTL=53

Ping statistics for 74.125.115.147:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 39ms, Maximum = 54ms, Average = 50ms

Pinging yahoo.com [209.191.122.70] with 32 bytes of data:

Reply from 209.191.122.70: bytes=32 time=49ms TTL=53

Reply from 209.191.122.70: bytes=32 time=63ms TTL=53

Reply from 209.191.122.70: bytes=32 time=63ms TTL=53

Reply from 209.191.122.70: bytes=32 time=49ms TTL=53

Ping statistics for 209.191.122.70:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 49ms, Maximum = 63ms, Average = 56ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 12 f0 88 44 20 ...... Intel(R) PRO/Wireless 2915ABG Network Connection - Packet Scheduler Miniport
0x3 ...00 12 3f d2 25 da ...... Broadcom 440x 10/100 Integrated Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.10.1 192.168.10.102 25
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.10.0 255.255.255.0 192.168.10.102 192.168.10.102 25
192.168.10.102 255.255.255.255 127.0.0.1 127.0.0.1 25
192.168.10.255 255.255.255.255 192.168.10.102 192.168.10.102 25
224.0.0.0 240.0.0.0 192.168.10.102 192.168.10.102 25
255.255.255.255 255.255.255.255 192.168.10.102 3 1
255.255.255.255 255.255.255.255 192.168.10.102 192.168.10.102 1
Default Gateway: 192.168.10.1
===========================================================================
Persistent Routes:
None

I will update Malwarebytes after this.

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

The malwarebytes database did not update.
When I first started it box:

Database outdated by 109 days. Would you like to update?

click ok. bar runs updating

box: You now have latest database version.
click ok

When I click on the update tab, database date is 8/31/11 and version is 7622.

Run, check for updates. Bar runs. box: You have the latest database version.

Nothing updates or changes.

Could the Computer associates anti-virus somehow be interfereing?
I activated snooze and disabled firewall to no avail.

Thanks for your time and help.

vict0r · **Joined:** Wed 03 Dec, 2008 8:00 pm **Posts:** 1043

Change DNS servers

Print these instructions out or save them as a TXT document on your desktop. In the unlikely event something goes wrong or a number is input wrong. You may not be able to access the internet to see these instructions.

Click Start-Button and Open The Control Panel.
Locate and open Network Connections
Double-Click your default Network Connection from the available list (If you are usingr wireless choose that one.)
Click Properties
Highlight Internet Protocol (TCP/IP) or Internet Protocol Version 4 (TCP/IPv4) and click on Properties again
Click on: “Use the following DNS server addresses”

Type these numbers into the preferred DNS block first
208.67.222.222

and these into the alternate DNS
208.67.220.220

Click OK until all those windows are all closed
Now reboot your computer.

If after this you can not get back on the internet re-follow these instructions and
Choose Obtain DNS server automatically .

Let me know if Malwarebytes Anti Malware still does not update it's database after the reboot.

t-risk7 · **Joined:** Wed 07 Jul, 2010 5:27 pm **Posts:** 104

DNS changed fine.
But when I tried to update Malwarebytes, got and error box:

PROGRAM_ERROR_UPDATING(11004,0, No address found)
The requested name is valid and was found in the database, but it does not have the correct associated data being resolved for.)

I will uninstall Malwarebytes, then reinstall it.

MalWare Removal Forum

Forum rules

Computer Slow, Adobe Reader 11 virus?

Who is online