ComboFix 09-02-28.01 - Rajiv 2009-03-06 6:13:00.2 - NTFSx86 Microsoft� Windows Vista� Home Premium 6.0.6001.1.1252.1.1033.18.2038.721 [GMT -8:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe Command switches used :: c:\users\Rajiv\Desktop\CFScript.txt * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\programdata\Azureus c:\programdata\Azureus\azCID.txt c:\users\All Users\Azureus\azCID.txt c:\users\Rajiv\AppData\Roaming\Azureus c:\users\Rajiv\AppData\Roaming\Azureus\.certs c:\users\Rajiv\AppData\Roaming\Azureus\.keystore c:\users\Rajiv\AppData\Roaming\Azureus\.lock c:\users\Rajiv\AppData\Roaming\Azureus\active\C8AB1945BAEB0C61342B88CAEEE7BF45777EE043.dat c:\users\Rajiv\AppData\Roaming\Azureus\active\C8AB1945BAEB0C61342B88CAEEE7BF45777EE043.dat.bak c:\users\Rajiv\AppData\Roaming\Azureus\active\cache.dat c:\users\Rajiv\AppData\Roaming\Azureus\azureus.config c:\users\Rajiv\AppData\Roaming\Azureus\azureus.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\azureus.statistics c:\users\Rajiv\AppData\Roaming\Azureus\azureus.statistics.bak c:\users\Rajiv\AppData\Roaming\Azureus\banips.config c:\users\Rajiv\AppData\Roaming\Azureus\banips.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\cache\1191085919.ico c:\users\Rajiv\AppData\Roaming\Azureus\cnetworks.config c:\users\Rajiv\AppData\Roaming\Azureus\dht\addresses.dat c:\users\Rajiv\AppData\Roaming\Azureus\dht\contacts.dat c:\users\Rajiv\AppData\Roaming\Azureus\dht\diverse.dat c:\users\Rajiv\AppData\Roaming\Azureus\dht\general.dat c:\users\Rajiv\AppData\Roaming\Azureus\dht\net3\addresses.dat c:\users\Rajiv\AppData\Roaming\Azureus\dht\net3\contacts.dat c:\users\Rajiv\AppData\Roaming\Azureus\dht\net3\diverse.dat c:\users\Rajiv\AppData\Roaming\Azureus\dht\net3\version.dat c:\users\Rajiv\AppData\Roaming\Azureus\dht\version.dat c:\users\Rajiv\AppData\Roaming\Azureus\downloads.config c:\users\Rajiv\AppData\Roaming\Azureus\downloads.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\friends.config c:\users\Rajiv\AppData\Roaming\Azureus\friends.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\ipfilter.cache c:\users\Rajiv\AppData\Roaming\Azureus\logs\alerts_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\AutoSpeedSearchHistory_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\clientid_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\CNetworks_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\debug_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\Friends_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\MetaSearch_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\MetaSearch_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\MetaSearch_Engine_3.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\MetaSearch_Engine_4.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\MetaSearch_Engine_5.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\MetaSearch_Engine_9.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\NetStatus_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_AutoSpeedSearchHistory_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_clientid_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_CNetworks_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_debug_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_Friends_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_MetaSearch_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_MetaSearch_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_MetaSearch_Engine_3.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_MetaSearch_Engine_4.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_MetaSearch_Engine_5.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_MetaSearch_Engine_9.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_NetStatus_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_seltrace_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_Subscriptions_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_thread_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_thread_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_v3.ads_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_v3.CMsgr_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_v3.CMsgr_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_v3.Friends_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_v3.Friends_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_v3.PMsgr_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1234937571497_v3.Stream_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_alerts_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_AutoSpeedSearchHistory_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_clientid_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_CNetworks_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_debug_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_Friends_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_MetaSearch_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_MetaSearch_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_MetaSearch_Engine_3.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_MetaSearch_Engine_4.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_MetaSearch_Engine_5.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_MetaSearch_Engine_9.txt c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_NetStatus_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_seltrace_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_Subscriptions_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_thread_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_thread_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_v3.ads_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_v3.CMsgr_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_v3.CMsgr_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_v3.Friends_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_v3.Friends_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_v3.PMsgr_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\save\1235002717405_v3.Stream_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\seltrace_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\Subscriptions_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\thread_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\thread_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\v3.ads_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\v3.CMsgr_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\v3.CMsgr_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\v3.Friends_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\v3.Friends_2.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\v3.PMsgr_1.log c:\users\Rajiv\AppData\Roaming\Azureus\logs\v3.Stream_1.log c:\users\Rajiv\AppData\Roaming\Azureus\metasearch.config c:\users\Rajiv\AppData\Roaming\Azureus\metasearch.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\net\pm_7132.dat c:\users\Rajiv\AppData\Roaming\Azureus\net\pm_default.dat c:\users\Rajiv\AppData\Roaming\Azureus\sidebarauto.config c:\users\Rajiv\AppData\Roaming\Azureus\sidebarauto.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\subs\186D0E57232DEE8DC2FD.vuze c:\users\Rajiv\AppData\Roaming\Azureus\subs\581765478D3517627C73.vuze c:\users\Rajiv\AppData\Roaming\Azureus\subscriptions.config c:\users\Rajiv\AppData\Roaming\Azureus\subscriptions.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\tables.config c:\users\Rajiv\AppData\Roaming\Azureus\tables.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\timingstats.dat c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU100164119051114830.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU1291475815401771232.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU199445104342628314.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU2522201839571192775.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU3544941020700281979.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU6432681333069112904.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU6755278312672860430.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU6887743698773420645.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU8373637528294253610.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU8758715264509806686.tmp c:\users\Rajiv\AppData\Roaming\Azureus\tmp\AZU9127786758223051413.tmp c:\users\Rajiv\AppData\Roaming\Azureus\torrents\[isoHunt] Scrubs Season 2.torrent c:\users\Rajiv\AppData\Roaming\Azureus\tracker.config c:\users\Rajiv\AppData\Roaming\Azureus\tracker.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\unsentdata.config c:\users\Rajiv\AppData\Roaming\Azureus\unsentdata.config.bak c:\users\Rajiv\AppData\Roaming\Azureus\v3.Friends.dat c:\users\Rajiv\AppData\Roaming\Azureus\v3.Friends.dat.bak c:\users\Rajiv\AppData\Roaming\Azureus\VuzeActivities.config c:\users\Rajiv\AppData\Roaming\Azureus\VuzeActivities.config.bak . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_gaopdxserv.sys ((((((((((((((((((((((((( Files Created from 2009-02-06 to 2009-03-06 ))))))))))))))))))))))))))))))) . 2009-03-04 16:00 . 2009-03-04 16:00 d-------- c:\program files\Nuclear Coffee 2009-03-04 15:58 . 2009-03-04 15:58 d-------- c:\users\All Users\WinZip 2009-03-04 15:58 . 2009-03-04 15:58 d-------- c:\programdata\WinZip 2009-02-28 18:28 . 2009-02-28 18:30 d-------- c:\users\All Users\McAfee Anti-Theft 2009-02-28 18:28 . 2009-02-28 18:30 d-------- c:\programdata\McAfee Anti-Theft 2009-02-28 14:20 . 2009-03-06 06:21 11,101 --a------ c:\windows\System32\Config.MPF 2009-02-28 14:18 . 2009-03-01 19:35 d-------- c:\users\All Users\SiteAdvisor 2009-02-28 14:18 . 2009-03-01 19:35 d-------- c:\programdata\SiteAdvisor 2009-02-28 14:17 . 2006-03-03 08:07 143,360 --a------ c:\windows\System32\dunzip32.dll 2009-02-28 14:16 . 2007-11-22 06:44 201,320 --a------ c:\windows\System32\drivers\mfehidk.sys 2009-02-28 14:16 . 2007-11-22 06:44 79,304 --a------ c:\windows\System32\drivers\mfeavfk.sys 2009-02-28 14:16 . 2007-12-02 12:51 40,488 --a------ c:\windows\System32\drivers\mfesmfk.sys 2009-02-28 14:16 . 2007-11-22 06:44 35,240 --a------ c:\windows\System32\drivers\mfebopk.sys 2009-02-28 14:16 . 2007-11-22 06:44 33,832 --a------ c:\windows\System32\drivers\mferkdk.sys 2009-02-28 14:15 . 2007-07-13 06:21 125,728 --a------ c:\windows\System32\drivers\Mpfp.sys 2009-02-28 14:14 . 2009-02-28 14:15 d-------- c:\program files\McAfee.com 2009-02-28 14:14 . 2009-03-01 19:34 d-------- c:\program files\McAfee 2009-02-28 14:14 . 2009-02-28 14:16 d-------- c:\program files\Common Files\McAfee 2009-02-28 13:33 . 2009-02-28 13:33 d-------- c:\users\Rajiv\AppData\Roaming\McAfee 2009-02-28 12:48 . 2008-07-27 10:03 282,112 --a------ c:\windows\System32\mscoree.dll 2009-02-28 12:48 . 2008-07-27 10:03 96,760 --a------ c:\windows\System32\dfshim.dll 2009-02-28 12:48 . 2008-07-27 10:03 41,984 --a------ c:\windows\System32\netfxperf.dll 2009-02-28 12:47 . 2008-07-27 10:03 158,720 --a------ c:\windows\System32\mscorier.dll 2009-02-28 12:47 . 2008-07-27 10:03 83,968 --a------ c:\windows\System32\mscories.dll 2009-02-28 10:13 . 2009-02-28 10:14 250 --a------ c:\windows\gmer.ini 2009-02-26 20:14 . 2009-02-28 15:04 d-------- c:\users\All Users\Spybot - Search & Destroy 2009-02-26 20:14 . 2009-02-28 15:04 d-------- c:\programdata\Spybot - Search & Destroy 2009-02-26 20:14 . 2009-02-28 15:04 d-------- c:\program files\Spybot - Search & Destroy 2009-02-26 17:51 . 2009-02-26 17:51 d-------- c:\users\Rajiv\AppData\Roaming\Malwarebytes 2009-02-26 17:51 . 2009-02-26 17:51 d-------- c:\users\All Users\Malwarebytes 2009-02-26 17:51 . 2009-02-26 17:51 d-------- c:\programdata\Malwarebytes 2009-02-22 09:48 . 2009-02-22 09:48 d-------- c:\program files\Trend Micro 2009-02-22 08:14 . 2009-02-28 15:02 d-------- c:\users\All Users\Lavasoft 2009-02-22 08:14 . 2009-02-28 15:02 d-------- c:\programdata\Lavasoft 2009-02-22 08:14 . 2009-02-28 15:02 d-------- c:\program files\Lavasoft 2009-02-22 08:14 . 2009-01-18 13:30 64,160 --a------ c:\windows\System32\drivers\Lbd.sys 2009-02-19 17:28 . 2009-02-19 17:28 d-------- c:\program files\gs 2009-02-18 20:54 . 2009-03-06 06:22 230,452,574 --a------ c:\windows\MEMORY.DMP 2009-02-18 19:54 . 2009-02-18 19:54 d-------- c:\users\Rajiv\AppData\Roaming\CyberLink 2009-02-17 15:09 . 2009-02-21 17:54 d-------- c:\program files\uTorrent 2009-02-17 15:08 . 2009-02-21 18:02 d-------- c:\users\Rajiv\AppData\Roaming\uTorrent 2009-02-15 12:04 . 2009-02-15 12:04 d-------- c:\program files\Ringtone Maker 2009-02-14 22:22 . 2008-12-04 20:32 428,544 --a------ c:\windows\System32\EncDec.dll 2009-02-14 22:22 . 2008-12-04 20:32 293,376 --a------ c:\windows\System32\psisdecd.dll 2009-02-14 22:22 . 2008-12-04 20:31 217,088 --a------ c:\windows\System32\psisrndr.ax 2009-02-14 22:22 . 2008-12-04 20:31 177,664 --a------ c:\windows\System32\mpg2splt.ax 2009-02-14 22:22 . 2008-12-04 20:31 80,896 --a------ c:\windows\System32\MSNP.ax 2009-02-13 16:06 . 2009-02-13 16:06 d-------- c:\users\Rajiv\AppData\Roaming\IObit 2009-02-13 16:06 . 2009-02-13 16:06 d-------- c:\program files\IObit 2009-02-11 15:52 . 2009-01-14 19:36 1,383,424 --a------ c:\windows\System32\mshtml.tlb 2009-02-11 15:52 . 2009-01-14 22:11 827,392 --a------ c:\windows\System32\wininet.dll 2009-02-09 18:58 . 2009-02-09 18:58 d-------- c:\users\Rajiv\AppData\Roaming\gtk-2.0 2009-02-09 18:57 . 2009-02-09 19:03 d-------- c:\users\Rajiv\AppData\Roaming\.purple 2009-02-09 18:52 . 2009-02-09 19:08 d-------- c:\program files\Pidgin 2009-02-09 18:51 . 2009-02-28 15:03 d-------- c:\program files\Common Files\GTK 2009-02-09 10:32 . 2009-02-09 19:38 d-------- c:\program files\Insofta Cover Commander . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-03-06 14:23 47,104 ----a-w c:\windows\System32\Rpcnet.dll 2009-03-06 14:23 17,408 ----a-w c:\windows\System32\rpcnetp.exe 2009-03-06 14:23 17,408 ----a-w c:\windows\System32\rpcnetp.dll 2009-03-05 22:59 410,984 ----a-w c:\windows\System32\deploytk.dll 2009-03-05 22:59 --------- d-----w c:\program files\Java 2009-03-03 00:50 --------- d-----w c:\users\Rajiv\AppData\Roaming\SharpReader 2009-03-01 22:19 --------- d-----w c:\programdata\McAfee 2009-03-01 21:38 --------- d-----w c:\program files\Microsoft Silverlight 2009-02-28 22:18 --------- d-----w c:\program files\Mozilla Thunderbird 2009-02-18 00:25 --------- d-----w c:\programdata\Microsoft Help 2009-02-15 23:13 --------- d-----w c:\program files\Google 2009-02-13 00:06 --------- d-----w c:\program files\Viewpoint 2009-02-12 00:00 --------- d-----w c:\program files\Windows Mail 2009-02-10 03:38 --------- d---a-w c:\programdata\temp 2009-02-10 03:31 --------- d-----w c:\program files\iMoneysoft 2009-02-10 03:07 --------- d-----w c:\programdata\RapidSolution 2009-02-09 21:07 --------- d-----w c:\program files\AIM6 2009-02-08 02:33 47,104 ----a-w c:\windows\System32\rpcnet.exe 2009-01-31 23:13 --------- d-----w c:\users\Rajiv\AppData\Roaming\EPSON 2009-01-30 00:34 --------- d-----w c:\users\Rajiv\AppData\Roaming\Corel 2009-01-22 01:49 --------- d-----w c:\users\Rajiv\AppData\Roaming\Samsung 2009-01-22 01:48 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-22 01:48 --------- d-----w c:\program files\MarkAny 2009-01-22 01:47 --------- d-----w c:\program files\Samsung 2009-01-16 00:09 --------- d-----w c:\program files\Twister MP3 2009-01-15 23:52 --------- d-----w c:\programdata\NextUp 2009-01-15 23:51 --------- d-----w c:\program files\TextAloud 2009-01-15 23:48 --------- d-----w c:\program files\Aimersoft 2009-01-15 23:33 --------- d-----w c:\users\Rajiv\AppData\Roaming\NoteCable 2009-01-15 01:39 --------- d-----w c:\program files\RapidSolution 2009-01-15 01:36 --------- d-----w c:\program files\Wondershare 2009-01-15 00:46 --------- d-----w c:\program files\ImageConverter Plus 2009-01-08 17:42 36,608 ----a-w c:\windows\System32\FsUsbExDisk.Sys 2009-01-08 17:42 233,472 ----a-w c:\windows\System32\FsUsbExService.Exe 2009-01-08 17:42 110,592 ----a-w c:\windows\System32\FsUsbExDevice.Dll 2009-01-05 22:33 3,751,995 ----a-w c:\windows\System32\GPhotos.scr 2008-12-15 23:30 2,560 ----a-w c:\windows\_MSRSTRT.EXE 2008-07-02 04:43 174 --sha-w c:\program files\desktop.ini 2008-04-22 22:44 4 --sh--r c:\users\All Users\sysqcl1129139270.dat 2008-04-22 22:44 4 --sh--r c:\programdata\sysqcl1129139270.dat 2007-06-09 17:27 262,144 ----a-w c:\programdata\ntuser.dat . ((((((((((((((((((((((((((((( SnapShot@2009-02-28_12.21.00.35 ))))))))))))))))))))))))))))))))))))))))) . - 2008-01-05 10:26:10 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2008-07-27 18:03:11 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2008-01-05 10:26:18 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2008-07-27 18:03:12 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2008-01-05 10:26:34 4,444,160 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2008-07-27 18:03:13 4,546,560 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2008-01-05 10:26:56 483,840 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2008-07-27 18:03:15 486,400 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2008-01-05 10:26:56 3,036,160 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2008-07-27 18:03:15 2,933,248 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2008-01-05 10:26:56 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2008-01-19 02:22:56 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2008-07-27 18:22:54 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2008-01-05 10:27:00 261,120 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2008-07-27 18:03:15 261,632 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2008-01-05 10:27:00 5,431,296 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2008-07-27 18:03:15 5,238,784 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2008-01-05 10:25:54 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2008-07-27 18:03:10 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2008-01-05 10:26:00 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2008-07-27 18:03:11 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2008-01-05 10:26:10 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2008-07-27 18:03:11 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2008-01-05 10:26:12 5,120 ----a-w c:\windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe + 2008-07-27 18:03:11 5,120 ----a-w c:\windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe - 2008-01-05 10:26:14 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2008-07-27 18:03:12 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2008-01-05 10:26:14 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2008-07-27 18:03:12 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2008-01-05 10:26:14 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2008-07-27 18:03:12 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2008-01-05 10:26:18 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2008-07-27 18:03:12 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2008-01-05 10:26:18 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2008-07-27 18:03:12 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2008-01-05 10:26:18 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2008-07-27 18:03:12 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2008-01-05 10:26:18 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2008-07-27 18:03:12 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll - 2008-01-05 10:26:20 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2008-07-27 18:03:12 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2008-01-05 10:26:20 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-07-27 18:03:12 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2008-01-05 10:26:24 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2008-07-27 18:03:12 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2008-01-05 10:26:24 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2008-07-27 18:03:12 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2008-01-05 10:26:24 671,744 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2008-07-27 18:03:12 659,456 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2006-10-20 01:14:05 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2008-07-27 18:03:12 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2008-01-05 10:26:26 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-07-27 18:03:12 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2008-01-05 10:26:24 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2008-07-27 18:03:12 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2006-10-20 01:14:05 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2008-07-27 18:03:12 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2008-01-05 10:26:56 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2008-07-27 18:03:14 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2008-01-05 10:26:56 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2008-07-27 18:03:14 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2008-01-05 10:26:56 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2008-07-27 18:03:14 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2008-01-05 10:26:56 741,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2008-07-27 18:03:15 745,472 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2008-01-05 10:26:56 933,888 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2008-07-27 18:03:15 970,752 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2008-01-05 10:26:56 5,070,848 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2008-07-27 18:03:15 5,062,656 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2008-01-05 10:26:56 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2008-07-27 18:03:15 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2008-01-05 10:26:56 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2008-07-27 18:03:15 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2008-01-05 10:26:56 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2008-07-27 18:03:15 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2008-01-05 10:26:56 630,784 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2008-07-27 18:03:15 626,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2008-01-05 10:27:00 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2008-07-27 18:03:15 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2008-01-05 10:27:00 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2008-01-05 10:27:00 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2008-07-27 18:03:15 303,104 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2008-01-05 10:27:00 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2008-07-27 18:03:15 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2008-01-05 10:27:00 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2008-01-05 10:27:00 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2008-07-27 18:03:15 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2008-01-05 10:27:00 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2008-07-27 18:03:15 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2008-01-05 10:27:00 90,112 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2008-07-27 18:03:15 77,824 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2008-01-05 10:27:02 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2008-07-27 18:03:15 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2008-01-05 10:27:04 5,013,504 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2008-07-27 18:03:15 5,025,792 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2008-01-05 10:27:04 2,068,480 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2008-07-27 18:03:16 2,048,000 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2008-01-05 10:26:56 3,076,096 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2008-07-27 18:03:15 3,149,824 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2009-02-28 21:28:58 11,485,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\mscorlib.ni.dll + 2009-02-28 21:30:13 12,019,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\1614b0890537ea85f7146871f16ff566\PresentationCore.ni.dll + 2009-02-28 21:30:40 519,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\4726d3a2fcf966ffcbb64bc6bbc2a6c9\PresentationFramework.Luna.ni.dll + 2009-02-28 21:30:39 217,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5043d615c05541efa7da79a81b4c5447\PresentationFramework.Classic.ni.dll + 2009-02-28 21:30:40 246,784 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5ca1da9728ea82c9b0a07d8cc278686b\PresentationFramework.Royale.ni.dll + 2009-02-28 21:30:35 14,165,504 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\dbc502adeb31e41a14ee3c966e32049e\PresentationFramework.ni.dll + 2009-02-28 21:30:38 356,864 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\eccdc7e09544bc0906631c29065dc1a4\PresentationFramework.Aero.ni.dll + 2009-02-28 21:30:48 6,614,016 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\[u]0[/u]b40341027c01716cec1dd97592698e0\System.Data.ni.dll + 2009-02-28 21:31:00 10,681,344 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\204db7071fb26343b0fd3f3d140c0bf8\System.Design.ni.dll + 2009-02-28 21:31:03 208,384 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\5f5d64dd0e7991aaaad2d98ee52afe42\System.Drawing.Design.ni.dll + 2009-02-28 21:31:02 1,587,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6978f2e90f13bc720d57fa6895c911e2\System.Drawing.ni.dll + 2009-02-28 21:31:15 12,428,800 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9a254c455892c02355ab0ab0f0727c5b\System.Windows.Forms.ni.dll + 2009-02-28 21:31:25 2,965,504 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\8f371da6c59608dcf446cf4082412f4f\System.Workflow.Activities.ni.dll + 2009-02-28 21:31:32 4,423,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\89f99c99dfbf243005b8dd36843f595a\System.Workflow.ComponentModel.ni.dll + 2009-02-28 21:31:35 1,897,984 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\f6bb11c9b952152fb0887b38fdcec034\System.Workflow.Runtime.ni.dll + 2009-02-28 21:31:42 5,449,728 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\36f3953f24d4f0b767bf172331ad6f3e\System.Xml.ni.dll + 2009-02-28 21:29:36 7,867,392 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c8041330ad90929d\System.ni.dll + 2009-02-28 21:29:43 3,158,528 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\[u]0[/u]40295c8d0468ccc867cf88705aa00dc\WindowsBase.ni.dll - 2009-02-28 17:59:02 1,602 ----a-w c:\windows\bthservsdp.dat + 2009-03-06 14:21:27 1,602 ----a-w c:\windows\bthservsdp.dat + 2008-11-08 03:00:02 116,368 ----a-w c:\windows\Downloaded Program Files\McContentMgr.dll + 2008-11-08 02:58:40 359,056 ----a-w c:\windows\Downloaded Program Files\McHealthCheck.dll + 2008-11-08 03:00:38 117,896 ----a-w c:\windows\Downloaded Program Files\McLogMgr.dll + 2008-11-08 02:59:18 561,808 ----a-w c:\windows\Downloaded Program Files\McPlugins.dll + 2008-11-08 03:01:16 239,760 ----a-w c:\windows\Downloaded Program Files\McProdMgr.dll + 2008-11-08 02:57:34 308,384 ----a-w c:\windows\Downloaded Program Files\MVT.dll + 2008-11-08 02:54:48 147,456 ----a-w c:\windows\Downloaded Program Files\Uploader.exe + 2005-10-21 04:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE + 2009-02-28 22:38:10 32,038 ----a-r c:\windows\Installer\{A26FA58F-0AD6-4F9C-A134-FE2CFB2EAE97}\controlPanelIcon_1.exe + 2009-03-04 23:58:54 632,320 ----a-r c:\windows\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B7}\IconCD95F66110.exe + 2009-03-04 23:58:54 29,184 ----a-r c:\windows\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B7}\IconCD95F6617.exe - 2008-01-05 10:25:46 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe + 2008-07-27 18:03:10 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe - 2008-01-05 10:25:46 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll + 2008-07-27 18:03:10 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll - 2008-01-05 10:25:46 14,336 ----a-w c:\windows\Microsoft.NET\Framework\sbs_iehost.dll + 2008-07-27 18:03:10 14,336 ----a-w c:\windows\Microsoft.NET\Framework\sbs_iehost.dll - 2008-01-05 10:25:46 14,360 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll + 2008-07-27 18:03:10 14,360 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll - 2008-01-05 10:25:50 14,904 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll + 2008-07-27 18:03:10 14,904 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll - 2008-01-05 10:25:50 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll + 2008-07-27 18:03:10 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll - 2008-01-05 10:25:50 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll + 2008-07-27 18:03:10 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll - 2008-01-05 10:25:50 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll + 2008-07-27 18:03:10 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll - 2008-01-05 10:25:50 14,384 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll + 2008-07-27 18:03:10 14,384 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll - 2008-01-05 10:25:50 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.data.dll + 2008-07-27 18:03:10 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.data.dll - 2008-01-05 10:25:50 14,376 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll + 2008-07-27 18:03:10 14,376 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll - 2008-01-05 10:25:50 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll + 2008-07-27 18:03:10 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll - 2008-01-05 10:25:50 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll + 2008-07-27 18:03:10 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll - 2008-01-05 10:25:50 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll + 2008-07-27 18:03:10 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll - 2008-01-05 10:25:50 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2008-07-27 18:03:10 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll - 2008-01-05 10:25:50 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2008-07-27 18:03:10 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll - 2008-01-05 10:25:50 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll + 2008-07-27 18:03:10 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll - 2008-01-05 10:27:06 97,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll + 2008-07-27 18:03:16 96,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll - 2006-10-20 01:13:36 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll + 2008-07-27 18:03:10 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll - 2006-10-20 01:13:36 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll + 2008-07-27 18:03:10 145,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll - 2006-10-20 01:13:37 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll + 2008-07-27 18:03:10 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll - 2006-10-20 01:13:37 183,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll + 2008-07-27 18:03:10 193,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll - 2006-10-20 01:13:37 208,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll + 2008-07-27 18:03:10 218,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll - 2008-01-05 10:25:54 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll + 2008-07-27 18:03:10 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll - 2008-01-05 10:25:54 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll + 2008-07-27 18:03:10 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll - 2008-01-05 10:25:54 99,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll + 2008-07-27 18:03:10 98,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll - 2008-01-05 10:25:54 59,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe + 2008-07-27 18:03:11 58,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe - 2008-01-05 10:25:54 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe + 2008-07-27 18:03:11 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe - 2008-01-05 10:25:54 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll + 2008-07-27 18:03:11 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll - 2008-01-05 10:25:56 17,928 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll + 2008-07-27 18:03:11 17,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll - 2008-01-05 10:25:56 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll + 2008-07-27 18:03:11 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll - 2008-01-05 10:25:58 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll + 2008-07-27 18:03:11 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll - 2008-01-05 10:25:58 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe + 2008-07-27 18:03:11 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe - 2008-01-05 10:25:58 32,776 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe + 2008-07-27 18:03:11 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe - 2008-01-05 10:25:58 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe + 2008-07-27 18:03:11 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe - 2008-01-05 10:25:58 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe + 2008-07-27 18:03:11 34,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe - 2008-01-05 10:25:58 33,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2008-07-27 18:03:11 33,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe - 2008-01-05 10:26:00 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll + 2008-07-27 18:03:11 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll - 2008-01-05 10:26:00 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe + 2008-07-27 18:03:11 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe - 2008-01-05 10:26:06 101,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll + 2008-07-27 18:03:11 89,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll - 2008-01-05 10:26:06 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe + 2008-07-27 18:03:11 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe - 2008-01-05 10:26:06 1,162,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll + 2008-07-27 18:03:11 1,163,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll - 2008-01-05 10:26:10 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll + 2008-07-27 18:03:11 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll - 2008-01-05 10:26:10 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll + 2008-07-27 18:03:11 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll - 2008-01-05 10:26:10 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll + 2008-07-27 18:03:11 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll - 2008-01-05 10:26:10 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe + 2008-07-27 18:03:11 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe - 2008-01-05 10:26:12 66,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll + 2008-07-27 18:03:11 62,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll - 2008-01-05 10:26:12 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe + 2008-07-27 18:03:11 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe - 2008-01-05 10:26:12 575,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll + 2008-07-27 18:03:11 575,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll - 2008-01-05 10:26:14 36,344 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe + 2008-07-27 18:03:11 36,344 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe - 2006-10-20 01:14:02 788,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll + 2008-07-27 18:03:11 798,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll - 2008-01-05 10:26:14 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll + 2008-07-27 18:03:11 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll - 2008-01-05 10:26:14 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe + 2008-07-27 18:03:12 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe - 2008-01-05 10:26:14 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll + 2008-07-27 18:03:12 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll - 2008-01-05 10:26:14 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll + 2008-07-27 18:03:12 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll - 2008-01-05 10:26:14 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll + 2008-07-27 18:03:12 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll - 2008-01-05 10:26:14 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe + 2008-07-27 18:03:12 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe - 2008-01-05 10:26:18 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe + 2008-07-27 18:03:12 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe - 2008-01-05 10:26:18 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll + 2008-07-27 18:03:12 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll - 2008-01-05 10:26:18 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll + 2008-07-27 18:03:12 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll - 2008-01-05 10:26:18 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe + 2008-07-27 18:03:12 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe - 2008-01-05 10:26:18 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll + 2008-07-27 18:03:12 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll - 2008-01-05 10:26:18 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll + 2008-07-27 18:03:12 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll - 2008-01-05 10:26:18 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll + 2008-07-27 18:03:12 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll - 2008-01-05 10:26:18 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll + 2008-07-27 18:03:12 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll - 2008-01-05 10:26:20 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll + 2008-07-27 18:03:12 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll - 2008-01-05 10:26:20 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-07-27 18:03:12 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll - 2008-01-05 10:26:24 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll + 2008-07-27 18:03:12 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll - 2008-01-05 10:26:24 671,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll + 2008-07-27 18:03:12 659,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll - 2008-01-05 10:26:24 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll + 2008-07-27 18:03:12 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll - 2006-10-20 01:14:05 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll + 2008-07-27 18:03:12 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll - 2008-01-05 10:26:24 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll + 2008-07-27 18:03:12 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll - 2008-01-05 10:26:26 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-07-27 18:03:12 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2006-10-20 01:14:05 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll + 2008-07-27 18:03:12 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll - 2008-01-05 10:26:26 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll + 2008-07-27 18:03:12 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll - 2008-01-05 10:26:26 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe + 2008-07-27 18:03:12 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe - 2008-01-05 10:26:30 822,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2008-07-27 18:03:12 998,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll - 2008-01-05 10:26:32 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll + 2008-07-27 18:03:12 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll - 2008-01-05 10:26:32 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll + 2008-07-27 18:03:12 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll - 2008-01-05 10:26:32 47,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll + 2008-07-27 18:03:12 46,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll - 2008-01-05 10:26:32 348,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2008-07-27 18:03:12 367,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - 2008-01-05 10:26:32 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll + 2008-07-27 18:03:12 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll - 2008-01-05 10:26:34 4,444,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2008-07-27 18:03:13 4,546,560 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2008-01-05 10:26:36 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll + 2008-07-27 18:03:13 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll - 2008-01-05 10:26:36 340,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll + 2008-07-27 18:03:13 345,600 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll - 2008-01-05 10:26:38 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll + 2008-07-27 18:03:13 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll - 2008-01-05 10:26:42 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll + 2008-07-27 18:03:13 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll - 2008-01-05 10:26:42 242,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll + 2008-07-27 18:03:13 230,912 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll - 2008-01-05 10:26:42 70,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe + 2008-07-27 18:03:13 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - 2008-01-05 10:26:42 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll + 2008-07-27 18:03:13 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll - 2008-01-05 10:26:44 5,814,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2008-07-27 18:03:13 5,815,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - 2006-10-20 01:14:43 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0[/u]409\mscorsecr.dll + 2008-07-27 18:03:14 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0[/u]409\mscorsecr.dll - 2008-01-05 10:26:52 101,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe + 2008-07-27 18:03:14 100,856 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe - 2008-01-05 10:26:52 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll + 2008-07-27 18:03:14 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll - 2008-01-05 10:26:52 89,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll + 2008-07-27 18:03:14 88,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll - 2008-01-05 10:26:52 144,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll + 2008-07-27 18:03:14 143,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll - 2008-01-05 10:26:56 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe + 2008-07-27 18:03:14 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe - 2008-01-05 10:26:56 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe + 2008-07-27 18:03:14 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe - 2008-01-05 10:26:56 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2008-07-27 18:03:14 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll - 2008-01-05 10:26:56 119,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll + 2008-07-27 18:03:14 118,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll - 2008-01-05 10:26:56 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll + 2008-07-27 18:03:14 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll - 2008-01-05 10:26:56 392,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2008-07-27 18:03:14 392,184 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll - 2008-01-05 10:26:56 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll + 2008-07-27 18:03:14 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll - 2008-01-05 10:26:56 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll + 2008-07-27 18:03:14 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll - 2008-01-05 10:26:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll + 2008-07-27 18:03:14 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll - 2008-01-05 10:26:56 3,036,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll + 2008-07-27 18:03:15 2,933,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll - 2008-01-05 10:26:56 483,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll + 2008-07-27 18:03:15 486,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll - 2008-01-05 10:26:56 741,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll + 2008-07-27 18:03:15 745,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll - 2008-01-05 10:26:56 933,888 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll + 2008-07-27 18:03:15 970,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll - 2008-01-05 10:26:56 5,070,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2008-07-27 18:03:15 5,062,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll - 2008-01-05 10:26:56 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll + 2008-07-27 18:03:15 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll - 2008-01-05 10:26:56 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll + 2008-07-27 18:03:15 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll - 2008-01-05 10:26:56 3,076,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2008-07-27 18:03:15 3,149,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll - 2008-01-05 10:26:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll + 2008-07-27 18:03:15 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll - 2008-01-05 10:26:56 630,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2008-07-27 18:03:15 626,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll - 2008-01-05 10:26:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll - 2008-01-05 10:27:00 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll + 2008-07-27 18:03:15 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll - 2008-01-19 02:22:56 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll + 2008-07-27 18:22:54 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll - 2008-01-05 10:27:00 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll + 2008-07-27 18:03:15 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll - 2008-01-05 10:27:00 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll - 2008-01-05 10:27:00 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll + 2008-07-27 18:03:15 303,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll - 2008-01-05 10:27:00 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll + 2008-07-27 18:03:15 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll - 2008-01-05 10:27:00 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll - 2008-01-05 10:27:00 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll + 2008-07-27 18:03:15 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll - 2008-01-05 10:27:00 261,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll + 2008-07-27 18:03:15 261,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll - 2008-01-05 10:27:00 5,431,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2008-07-27 18:03:15 5,238,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll - 2008-01-05 10:27:00 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll + 2008-07-27 18:03:15 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll - 2008-01-05 10:27:00 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll + 2008-07-27 18:03:15 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll - 2008-01-05 10:27:02 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll + 2008-07-27 18:03:15 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll - 2008-01-05 10:27:04 5,013,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2008-07-27 18:03:15 5,025,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2008-01-05 10:27:04 2,068,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll + 2008-07-27 18:03:16 2,048,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll - 2008-01-05 10:27:04 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL + 2008-07-27 18:03:16 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL - 2008-01-05 10:27:04 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe + 2008-07-27 18:03:16 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe - 2008-01-05 10:27:04 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll + 2008-07-27 18:03:16 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll - 2008-01-05 10:27:04 435,200 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2008-07-27 18:03:16 438,272 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll - 2008-01-05 10:27:04 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll + 2008-07-27 18:03:16 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll - 2009-02-28 18:00:03 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2009-03-06 14:22:38 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2009-02-28 20:20:27 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat + 2009-03-06 14:23:29 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat + 2009-03-06 14:23:29 262,144 ---ha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat.LOG1 - 2009-02-28 20:20:15 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat + 2009-03-06 14:23:29 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat + 2009-03-06 14:23:29 262,144 ---ha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1 + 2009-02-28 22:02:05 262,144 ----a-w c:\windows\System32\config\Journal\NTUSER.DAT + 2009-02-28 22:02:06 262,144 ----a-w c:\windows\System32\config\RegBack\NTUSER.DAT - 2009-02-28 18:00:09 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-03-06 14:03:48 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-02-28 18:00:09 65,536 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-03-06 14:03:48 65,536 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-03-05 23:05:30 24,064 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\2c4a0065-684256cb-n\Decora-D3D.dll + 2009-03-05 23:05:30 57,344 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\3976f065-74c845a8-n\Decora-SSE.dll + 2009-03-05 23:05:29 499,712 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\39ba6e6-7dcf4af7-n\jmc.dll + 2009-03-05 23:05:29 503,808 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\39ba6e6-7dcf4af7-n\msvcp71.dll + 2009-03-05 23:05:29 348,160 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\39ba6e6-7dcf4af7-n\msvcr71.dll + 2009-03-05 23:05:29 20,480 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\4f710eed-725fc4f6-n\gluegen-rt.dll + 2009-03-05 23:05:30 315,392 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-5c5c67b5-n\jogl.dll + 2009-03-05 23:05:30 20,480 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-5c5c67b5-n\jogl_awt.dll + 2009-03-05 23:05:30 114,688 ----a-w c:\windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\6baea4fe-5c5c67b5-n\jogl_cg.dll - 2009-02-28 18:00:09 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-03-06 14:03:48 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-02-28 21:38:57 6,046 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\3B11B9520E9C990D1FE61D4D992E3BB0CBA7750A\3B11B9520E9C990D1FE61D4D992E3BB0CBA7750A\Data.dat + 2009-03-03 01:23:26 6,486 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\5ECEC80A919CAA6F23A95046611FF5C1FDB12D2Fa\5ECEC80A919CAA6F23A95046611FF5C1FDB12D2F\Data.dat - 2009-02-21 22:48:52 11,182 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\732E825ED19A44BC9AF3D946329D8A4812B525F6\732E825ED19A44BC9AF3D946329D8A4812B525F6\Data.dat + 2009-02-28 21:33:34 11,336 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\732E825ED19A44BC9AF3D946329D8A4812B525F6\732E825ED19A44BC9AF3D946329D8A4812B525F6\Data.dat - 2009-02-21 21:18:29 7,780 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\74A956292B9D7ED29866593C7E501FA45B187192\74A956292B9D7ED29866593C7E501FA45B187192\Data.dat + 2009-03-06 14:02:34 7,152 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\74A956292B9D7ED29866593C7E501FA45B187192\74A956292B9D7ED29866593C7E501FA45B187192\Data.dat + 2009-03-03 01:10:28 5,706 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\AEEAE024FC482A95352D3CD1F0820A2C78FDE92Fa\AEEAE024FC482A95352D3CD1F0820A2C78FDE92F\Data.dat + 2009-03-03 00:59:18 6,334 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\AFA0228517D559C72225EDC64521ED7E04459E89a\AFA0228517D559C72225EDC64521ED7E04459E89\Data.dat + 2009-03-03 01:22:48 5,718 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\CDB180478C5ED3B8A9EFF55D43E1CD6DCE25E0E3a\CDB180478C5ED3B8A9EFF55D43E1CD6DCE25E0E3\Data.dat + 2009-03-06 14:03:52 5,842 ----a-w c:\windows\System32\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\F452D1CDFB082A7EC8E33C7927864A685456F253\F452D1CDFB082A7EC8E33C7927864A685456F253\Data.dat - 2009-02-28 20:17:30 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat + 2009-02-28 22:02:06 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat + 2009-02-28 22:02:06 262,144 ----a-w c:\windows\System32\config\TxR\NTUSER.DAT + 2008-05-28 17:32:42 61,688 ----a-w c:\windows\System32\drivers\McPvDrv.sys - 2009-01-11 22:20:13 144,792 ----a-w c:\windows\System32\java.exe + 2009-03-05 22:59:37 144,792 ----a-w c:\windows\System32\java.exe - 2009-01-11 22:20:13 144,792 ----a-w c:\windows\System32\javaw.exe + 2009-03-05 22:59:37 144,792 ----a-w c:\windows\System32\javaw.exe - 2009-01-11 22:20:13 148,888 ----a-w c:\windows\System32\javaws.exe + 2009-03-05 22:59:37 148,888 ----a-w c:\windows\System32\javaws.exe - 2006-10-20 01:15:07 6,144 ----a-w c:\windows\System32\MUI\[u]0[/u]409\mscorees.dll + 2008-07-27 18:03:17 15,360 ----a-w c:\windows\System32\MUI\[u]0[/u]409\mscorees.dll - 2009-02-28 18:16:52 102,194 ----a-w c:\windows\System32\perfc009.dat + 2009-03-05 22:51:28 102,194 ----a-w c:\windows\System32\perfc009.dat - 2009-02-28 18:16:52 598,588 ----a-w c:\windows\System32\perfh009.dat + 2009-03-05 22:51:28 598,588 ----a-w c:\windows\System32\perfh009.dat - 2009-02-16 05:57:20 6,553,600 ----a-w c:\windows\System32\SMI\Store\Machine\schema.dat + 2009-02-28 21:26:30 6,553,600 ----a-w c:\windows\System32\SMI\Store\Machine\schema.dat - 2009-02-28 18:02:01 16,062 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-300775179-2714954865-3135053195-1000_UserData.bin + 2009-03-06 14:25:02 16,970 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-300775179-2714954865-3135053195-1000_UserData.bin - 2009-02-28 18:02:01 84,148 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2009-03-06 14:25:02 84,700 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin - 2009-02-03 01:40:27 2,984 ----a-w c:\windows\System32\WDI\ERCQueuedResolutions.dat + 2009-03-02 15:18:11 4,474 ----a-w c:\windows\System32\WDI\ERCQueuedResolutions.dat - 2009-02-28 18:02:00 87,334 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-03-05 22:47:54 88,544 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin - 2009-02-27 00:14:42 144,914 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2009-03-06 13:57:04 250,546 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin - 2009-02-16 00:01:53 101,201,956 ----a-w c:\windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin + 2009-02-28 20:56:31 130,127,246 ----a-w c:\windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin + 2008-07-27 18:00:22 10,752 ----a-w c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6000.16720_none_4dd0dfd192a9f18b\Accessibility.dll + 2008-07-27 17:55:49 10,752 ----a-w c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6000.20883_none_3708f675ac4c367e\Accessibility.dll + 2008-07-27 18:03:10 10,752 ----a-w c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6001.18111_none_4dabc48792fbfe2c\Accessibility.dll + 2008-07-27 17:58:31 10,752 ----a-w c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6001.22230_none_36e03523aca1773f\Accessibility.dll + 2008-07-27 18:00:23 507,904 ----a-w c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6000.16720_none_809e9498963f10ba\AspNetMMCExt.dll + 2008-07-27 17:55:49 507,904 ----a-w c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6000.20883_none_69d6ab3cafe155ad\AspNetMMCExt.dll + 2008-07-27 18:03:11 507,904 ----a-w c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6001.18111_none_8079794e96911d5b\AspNetMMCExt.dll + 2008-07-27 17:58:31 507,904 ----a-w c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6001.22230_none_69ade9eab036966e\AspNetMMCExt.dll + 2008-07-27 18:00:23 13,312 ----a-w c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6000.16720_none_18bd6f40a9b5d6a8\cscompmgd.dll + 2008-07-27 17:55:51 13,312 ----a-w c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6000.20883_none_01f585e4c3581b9b\cscompmgd.dll + 2008-07-27 18:03:11 13,312 ----a-w c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6001.18111_none_189853f6aa07e349\cscompmgd.dll + 2008-07-27 17:58:31 13,312 ----a-w c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6001.22230_none_01ccc492c3ad5c5c\cscompmgd.dll + 2008-07-27 18:00:23 5,120 ----a-w c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6000.16720_none_65f34b6e88aba3e7\dfsvc.exe + 2008-07-27 17:55:51 5,120 ----a-w c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6000.20883_none_4f2b6212a24de8da\dfsvc.exe + 2008-07-27 18:03:11 5,120 ----a-w c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6001.18111_none_65ce302488fdb088\dfsvc.exe + 2008-07-27 17:58:31 5,120 ----a-w c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6001.22230_none_4f02a0c0a2a3299b\dfsvc.exe + 2008-07-27 18:00:23 9,728 ----a-w c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6000.16720_none_7f06452c075a5a3c\IEExec.exe + 2008-07-27 17:55:51 9,728 ----a-w c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6000.20883_none_683e5bd020fc9f2f\IEExec.exe + 2008-07-27 18:03:12 9,728 ----a-w c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6001.18111_none_7ee129e207ac66dd\IEExec.exe + 2008-07-27 17:58:32 9,728 ----a-w c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6001.22230_none_68159a7e2151dff0\IEExec.exe + 2008-07-27 18:00:23 8,192 ----a-w c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6000.16720_none_ef94d833c4e430f8\IEExecRemote.dll + 2008-07-27 17:55:52 8,192 ----a-w c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6000.20883_none_d8cceed7de8675eb\IEExecRemote.dll + 2008-07-27 18:03:12 8,192 ----a-w c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6001.18111_none_ef6fbce9c5363d99\IEExecRemote.dll + 2008-07-27 17:58:32 8,192 ----a-w c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6001.22230_none_d8a42d85dedbb6ac\IEExecRemote.dll + 2008-07-27 18:00:23 77,824 ----a-w c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6000.16720_none_7e7f95c007bcf6b5\IEHost.dll + 2008-07-27 17:55:52 77,824 ----a-w c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6000.20883_none_67b7ac64215f3ba8\IEHost.dll + 2008-07-27 18:03:12 77,824 ----a-w c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6001.18111_none_7e5a7a76080f0356\IEHost.dll + 2008-07-27 17:58:32 77,824 ----a-w c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6001.22230_none_678eeb1221b47c69\IEHost.dll + 2008-07-27 18:00:23 6,656 ----a-w c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6000.16720_none_81aec2428b19ab74\IIEHost.dll + 2008-07-27 17:55:52 6,656 ----a-w c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6000.20883_none_6ae6d8e6a4bbf067\IIEHost.dll + 2008-07-27 18:03:12 6,656 ----a-w c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6001.18111_none_8189a6f88b6bb815\IIEHost.dll + 2008-07-27 17:58:32 6,656 ----a-w c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6001.22230_none_6abe1794a5113128\IIEHost.dll + 2008-07-27 18:00:24 40,960 ----a-w c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6000.16720_none_a7f9fcdcd724c803\jsc.exe + 2008-07-27 17:55:52 40,960 ----a-w c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6000.20883_none_91321380f0c70cf6\jsc.exe + 2008-07-27 18:03:12 40,960 ----a-w c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6001.18111_none_a7d4e192d776d4a4\jsc.exe + 2008-07-27 17:58:32 40,960 ----a-w c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6001.22230_none_9109522ef11c4db7\jsc.exe + 2008-07-27 18:00:24 348,160 ----a-w c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6000.16720_none_38c710b80e2e0c67\Microsoft.Build.Engine.dll + 2008-07-27 17:55:52 348,160 ----a-w c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6000.20883_none_21ff275c27d0515a\Microsoft.Build.Engine.dll + 2008-07-27 18:03:12 348,160 ----a-w c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6001.18111_none_38a1f56e0e801908\Microsoft.Build.Engine.dll + 2008-07-27 17:58:32 348,160 ----a-w c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6001.22230_none_21d6660a2825921b\Microsoft.Build.Engine.dll + 2008-07-27 18:00:24 36,864 ----a-w c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6000.16720_none_c2ee2c438342bfeb\Microsoft.Build.Framework.dll + 2008-07-27 17:55:52 36,864 ----a-w c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6000.20883_none_ac2642e79ce504de\Microsoft.Build.Framework.dll + 2008-07-27 18:03:12 36,864 ----a-w c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6001.18111_none_c2c910f98394cc8c\Microsoft.Build.Framework.dll + 2008-07-27 17:58:32 36,864 ----a-w c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6001.22230_none_abfd81959d3a459f\Microsoft.Build.Framework.dll + 2008-07-27 18:00:24 655,360 ----a-w c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6000.16720_none_9d87218c8cdc56ad\Microsoft.Build.Tasks.dll + 2008-07-27 17:55:52 655,360 ----a-w c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6000.20883_none_86bf3830a67e9ba0\Microsoft.Build.Tasks.dll + 2008-07-27 18:03:12 655,360 ----a-w c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6001.18111_none_9d6206428d2e634e\Microsoft.Build.Tasks.dll + 2008-07-27 17:58:32 655,360 ----a-w c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6001.22230_none_869676dea6d3dc61\Microsoft.Build.Tasks.dll + 2008-07-27 18:00:24 77,824 ----a-w c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6000.16720_none_e22f79faa4b204b9\Microsoft.Build.Utilities.dll + 2008-07-27 17:55:52 77,824 ----a-w c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6000.20883_none_cb67909ebe5449ac\Microsoft.Build.Utilities.dll + 2008-07-27 18:03:12 77,824 ----a-w c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6001.18111_none_e20a5eb0a504115a\Microsoft.Build.Utilities.dll + 2008-07-27 17:58:32 77,824 ----a-w c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6001.22230_none_cb3ecf4cbea98a6d\Microsoft.Build.Utilities.dll + 2008-07-27 18:00:24 749,568 ----a-w c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6000.16720_none_d253037d82bc5298\Microsoft.JScript.dll + 2008-07-27 17:55:52 749,568 ----a-w c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6000.20883_none_bb8b1a219c5e978b\Microsoft.JScript.dll + 2008-07-27 18:03:12 749,568 ----a-w c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6001.18111_none_d22de833830e5f39\Microsoft.JScript.dll + 2008-07-27 17:58:32 749,568 ----a-w c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6001.22230_none_bb6258cf9cb3d84c\Microsoft.JScript.dll + 2008-07-27 18:00:24 110,592 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6000.16720_none_5f627c4b1c7d41c7\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-07-27 17:55:52 110,592 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6000.20883_none_489a92ef361f86ba\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-07-27 18:03:12 110,592 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6001.18111_none_5f3d61011ccf4e68\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-07-27 17:58:32 110,592 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6001.22230_none_4871d19d3674c77b\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-07-27 18:00:24 372,736 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6000.16720_none_ed8ab03894e675b5\Microsoft.VisualBasic.Compatibility.dll + 2008-07-27 17:55:52 372,736 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6000.20883_none_d6c2c6dcae88baa8\Microsoft.VisualBasic.Compatibility.dll + 2008-07-27 18:03:12 372,736 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6001.18111_none_ed6594ee95388256\Microsoft.VisualBasic.Compatibility.dll + 2008-07-27 17:58:32 372,736 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6001.22230_none_d69a058aaeddfb69\Microsoft.VisualBasic.Compatibility.dll + 2008-07-27 18:00:24 28,672 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6000.16720_none_f2fe695d4c27dfa3\Microsoft.VisualBasic.Vsa.dll + 2008-07-27 17:55:52 28,672 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6000.20883_none_dc36800165ca2496\Microsoft.VisualBasic.Vsa.dll + 2008-07-27 18:03:12 28,672 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6001.18111_none_f2d94e134c79ec44\Microsoft.VisualBasic.Vsa.dll + 2008-07-27 17:58:32 28,672 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6001.22230_none_dc0dbeaf661f6557\Microsoft.VisualBasic.Vsa.dll + 2008-07-27 18:00:24 659,456 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6000.16720_none_adb388aa00e25dcd\Microsoft.VisualBasic.dll + 2008-07-27 17:55:52 659,456 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6000.20883_none_96eb9f4e1a84a2c0\Microsoft.VisualBasic.dll + 2008-07-27 18:03:12 659,456 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6001.18111_none_ad8e6d6001346a6e\Microsoft.VisualBasic.dll + 2008-07-27 17:58:32 659,456 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6001.22230_none_96c2ddfc1ad9e381\Microsoft.VisualBasic.dll + 2008-07-27 18:00:24 5,632 ----a-w c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6000.16720_none_8517de4eb185b862\Microsoft.VisualC.Dll + 2008-07-27 17:55:52 5,632 ----a-w c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6000.20883_none_6e4ff4f2cb27fd55\Microsoft.VisualC.Dll + 2008-07-27 18:03:12 5,632 ----a-w c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6001.18111_none_84f2c304b1d7c503\Microsoft.VisualC.Dll + 2008-07-27 17:58:32 5,632 ----a-w c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6001.22230_none_6e2733a0cb7d3e16\Microsoft.VisualC.Dll + 2008-07-27 18:00:24 12,800 ----a-w c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6000.16720_none_44a2019ef24603f4\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-07-27 17:55:52 12,800 ----a-w c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6000.20883_none_2dda18430be848e7\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-07-27 18:03:12 12,800 ----a-w c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6001.18111_none_447ce654f2981095\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-07-27 17:58:32 12,800 ----a-w c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6001.22230_none_2db156f10c3d89a8\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-07-27 18:00:24 32,768 ----a-w c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6000.16720_none_68752cae39ce89df\Microsoft.Vsa.dll + 2008-07-27 17:55:52 32,768 ----a-w c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6000.20883_none_51ad43525370ced2\Microsoft.Vsa.dll + 2008-07-27 18:03:12 32,768 ----a-w c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6001.18111_none_685011643a209680\Microsoft.Vsa.dll + 2008-07-27 17:58:32 32,768 ----a-w c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6001.22230_none_5184820053c60f93\Microsoft.Vsa.dll + 2008-07-27 18:00:24 7,168 ----a-w c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6000.16720_none_6723493acd9cb768\Microsoft_VsaVb.dll + 2008-07-27 17:55:52 7,168 ----a-w c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6000.20883_none_505b5fdee73efc5b\Microsoft_VsaVb.dll + 2008-07-27 18:03:12 7,168 ----a-w c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6001.18111_none_66fe2df0cdeec409\Microsoft_VsaVb.dll + 2008-07-27 17:58:32 7,168 ----a-w c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6001.22230_none_50329e8ce7943d1c\Microsoft_VsaVb.dll + 2008-07-27 18:00:26 110,592 ----a-w c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6000.16720_none_d505e94789d4c176\sysglobl.dll + 2008-07-27 17:55:55 110,592 ----a-w c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6000.20883_none_be3dffeba3770669\sysglobl.dll + 2008-07-27 18:03:14 110,592 ----a-w c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6001.18111_none_d4e0cdfd8a26ce17\sysglobl.dll + 2008-07-27 17:58:34 110,592 ----a-w c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6001.22230_none_be153e99a3cc472a\sysglobl.dll + 2008-07-27 18:00:26 81,920 ----a-w c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6000.16720_none_8be75bc7785395c1\System.Configuration.Install.dll + 2008-07-27 17:55:55 81,920 ----a-w c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6000.20883_none_751f726b91f5dab4\System.Configuration.Install.dll + 2008-07-27 18:03:14 81,920 ----a-w c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6001.18111_none_8bc2407d78a5a262\System.Configuration.Install.dll + 2008-07-27 17:58:34 81,920 ----a-w c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6001.22230_none_74f6b119924b1b75\System.Configuration.Install.dll + 2008-07-27 18:00:26 425,984 ----a-w c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6000.16720_none_2b4a6fa23668e266\System.configuration.dll + 2008-07-27 17:55:55 425,984 ----a-w c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6000.20883_none_14828646500b2759\System.configuration.dll + 2008-07-27 18:03:14 425,984 ----a-w c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6001.18111_none_2b25545836baef07\System.configuration.dll + 2008-07-27 17:58:34 425,984 ----a-w c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6001.22230_none_1459c4f45060681a\System.configuration.dll + 2008-07-27 18:00:27 745,472 ----a-w c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6000.16720_none_319e3f19a4acfb15\System.Data.SqlXml.dll + 2008-07-27 17:55:55 745,472 ----a-w c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6000.20883_none_1ad655bdbe4f4008\System.Data.SqlXml.dll + 2008-07-27 18:03:15 745,472 ----a-w c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6001.18111_none_317923cfa4ff07b6\System.Data.SqlXml.dll + 2008-07-27 17:58:35 745,472 ----a-w c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6001.22230_none_1aad946bbea480c9\System.Data.SqlXml.dll + 2008-07-27 18:00:27 970,752 ----a-w c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6000.16720_none_60211163309e66b3\System.Deployment.dll + 2008-07-27 17:55:55 970,752 ----a-w c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6000.20883_none_495928074a40aba6\System.Deployment.dll + 2008-07-27 18:03:15 970,752 ----a-w c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6001.18111_none_5ffbf61930f07354\System.Deployment.dll + 2008-07-27 17:58:35 970,752 ----a-w c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6001.22230_none_493066b54a95ec67\System.Deployment.dll + 2008-07-27 18:00:27 5,062,656 ----a-w c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6000.16720_none_b57005af02cc9524\System.Design.dll + 2008-07-27 17:55:55 5,062,656 ----a-w c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6000.20883_none_9ea81c531c6eda17\System.Design.dll + 2008-07-27 18:03:15 5,062,656 ----a-w c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6001.18111_none_b54aea65031ea1c5\System.Design.dll + 2008-07-27 17:58:35 5,062,656 ----a-w c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6001.22230_none_9e7f5b011cc41ad8\System.Design.dll + 2008-07-27 18:00:27 188,416 ----a-w c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.16720_none_af40550f540ba4b8\System.DirectoryServices.Protocols.dll + 2008-07-27 17:55:55 188,416 ----a-w c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.20883_none_98786bb36dade9ab\System.DirectoryServices.Protocols.dll + 2008-07-27 18:03:15 188,416 ----a-w c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.18111_none_af1b39c5545db159\System.DirectoryServices.Protocols.dll + 2008-07-27 17:58:35 188,416 ----a-w c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.22230_none_984faa616e032a6c\System.DirectoryServices.Protocols.dll + 2008-07-27 18:00:27 401,408 ----a-w c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.16720_none_56c449b3311fcd6d\System.DirectoryServices.dll + 2008-07-27 17:55:55 401,408 ----a-w c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.20883_none_3ffc60574ac21260\System.DirectoryServices.dll + 2008-07-27 18:03:15 401,408 ----a-w c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.18111_none_569f2e693171da0e\System.DirectoryServices.dll + 2008-07-27 17:58:35 401,408 ----a-w c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.22230_none_3fd39f054b175321\System.DirectoryServices.dll + 2008-07-27 18:00:27 81,920 ----a-w c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6000.16720_none_1c2e287cb016cb42\System.Drawing.Design.dll + 2008-07-27 17:55:55 81,920 ----a-w c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6000.20883_none_05663f20c9b91035\System.Drawing.Design.dll + 2008-07-27 18:03:15 81,920 ----a-w c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6001.18111_none_1c090d32b068d7e3\System.Drawing.Design.dll + 2008-07-27 17:58:35 81,920 ----a-w c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6001.22230_none_053d7dceca0e50f6\System.Drawing.Design.dll + 2008-07-27 18:00:27 626,688 ----a-w c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6000.16720_none_8fb93569f081bc50\System.Drawing.dll + 2008-07-27 17:55:55 626,688 ----a-w c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6000.20883_none_78f14c0e0a240143\System.Drawing.dll + 2008-07-27 18:03:15 626,688 ----a-w c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6001.18111_none_8f941a1ff0d3c8f1\System.Drawing.dll + 2008-07-27 17:58:35 626,688 ----a-w c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6001.22230_none_78c88abc0a794204\System.Drawing.dll + 2008-07-27 18:00:27 372,736 ----a-w c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6000.16720_none_1f5b763e0c197b33\System.Management.dll + 2008-07-27 17:55:55 372,736 ----a-w c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6000.20883_none_08938ce225bbc026\System.Management.dll + 2008-07-27 18:03:15 372,736 ----a-w c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6001.18111_none_1f365af40c6b87d4\System.Management.dll + 2008-07-27 17:58:35 372,736 ----a-w c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6001.22230_none_086acb90261100e7\System.Management.dll + 2008-07-27 18:00:27 258,048 ----a-w c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.16720_none_2dd84bdf234f2daa\System.Messaging.dll + 2008-07-27 17:55:55 258,048 ----a-w c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.20883_none_171062833cf1729d\System.Messaging.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.18111_none_2db3309523a13a4b\System.Messaging.dll + 2008-07-27 17:58:35 258,048 ----a-w c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.22230_none_16e7a1313d46b35e\System.Messaging.dll + 2008-07-27 18:00:27 303,104 ----a-w c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6000.16720_none_c5ba723444dfcf3d\System.Runtime.Remoting.dll + 2008-07-27 17:55:55 303,104 ----a-w c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6000.20883_none_aef288d85e821430\System.Runtime.Remoting.dll + 2008-07-27 18:03:15 303,104 ----a-w c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6001.18111_none_c59556ea4531dbde\System.Runtime.Remoting.dll + 2008-07-27 17:58:35 303,104 ----a-w c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6001.22230_none_aec9c7865ed754f1\System.Runtime.Remoting.dll + 2008-07-27 18:00:27 131,072 ----a-w c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6000.16720_none_4838f505237d831c\System.Runtime.Serialization.Formatters.Soap.dll + 2008-07-27 17:55:55 131,072 ----a-w c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6000.20883_none_31710ba93d1fc80f\System.Runtime.Serialization.Formatters.Soap.dll + 2008-07-27 18:03:15 131,072 ----a-w c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.18111_none_4813d9bb23cf8fbd\System.Runtime.Serialization.Formatters.Soap.dll + 2008-07-27 17:58:35 131,072 ----a-w c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.22230_none_31484a573d7508d0\System.Runtime.Serialization.Formatters.Soap.dll + 2008-07-27 18:00:27 258,048 ----a-w c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6000.16720_none_9c2d1345cdee588e\System.Security.dll + 2008-07-27 17:55:55 258,048 ----a-w c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6000.20883_none_856529e9e7909d81\System.Security.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.18111_none_9c07f7fbce40652f\System.Security.dll + 2008-07-27 17:58:35 258,048 ----a-w c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.22230_none_853c6897e7e5de42\System.Security.dll + 2008-07-27 18:00:27 114,688 ----a-w c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6000.16720_none_5523dfad7c4203b6\System.ServiceProcess.dll + 2008-07-27 17:55:55 114,688 ----a-w c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6000.20883_none_3e5bf65195e448a9\System.ServiceProcess.dll + 2008-07-27 18:03:15 114,688 ----a-w c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6001.18111_none_54fec4637c941057\System.ServiceProcess.dll + 2008-07-27 17:58:35 114,688 ----a-w c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6001.22230_none_3e3334ff9639896a\System.ServiceProcess.dll + 2008-07-27 18:00:27 835,584 ----a-w c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6000.16720_none_d81670f9cfc68bea\System.Web.Mobile.dll + 2008-07-27 17:55:55 835,584 ----a-w c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6000.20883_none_c14e879de968d0dd\System.Web.Mobile.dll + 2008-07-27 18:03:15 835,584 ----a-w c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6001.18111_none_d7f155afd018988b\System.Web.Mobile.dll + 2008-07-27 17:58:35 835,584 ----a-w c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6001.22230_none_c125c64be9be119e\System.Web.Mobile.dll + 2008-07-27 18:00:27 77,824 ----a-w c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6000.16720_none_4db0d24c1e2d3469\System.Web.RegularExpressions.dll + 2008-07-27 17:55:55 77,824 ----a-w c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6000.20883_none_36e8e8f037cf795c\System.Web.RegularExpressions.dll + 2008-07-27 18:03:15 77,824 ----a-w c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6001.18111_none_4d8bb7021e7f410a\System.Web.RegularExpressions.dll + 2008-07-27 17:58:35 77,824 ----a-w c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6001.22230_none_36c0279e3824ba1d\System.Web.RegularExpressions.dll + 2008-07-27 18:00:27 839,680 ----a-w c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.16720_none_f2eba22fb1c64598\System.Web.Services.dll + 2008-07-27 17:55:55 839,680 ----a-w c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.20883_none_dc23b8d3cb688a8b\System.Web.Services.dll + 2008-07-27 18:03:15 839,680 ----a-w c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.18111_none_f2c686e5b2185239\System.Web.Services.dll + 2008-07-27 17:58:36 839,680 ----a-w c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.22230_none_dbfaf781cbbdcb4c\System.Web.Services.dll + 2008-07-27 18:00:27 5,025,792 ----a-w c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6000.16720_none_3111dd924337ab48\System.Windows.Forms.dll + 2008-07-27 17:55:55 5,025,792 ----a-w c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6000.20883_none_1a49f4365cd9f03b\System.Windows.Forms.dll + 2008-07-27 18:03:15 5,025,792 ----a-w c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6001.18111_none_30ecc2484389b7e9\System.Windows.Forms.dll + 2008-07-27 17:58:36 5,025,792 ----a-w c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6001.22230_none_1a2132e45d2f30fc\System.Windows.Forms.dll + 2008-07-27 18:00:28 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.16720_none_81c62adf49000f9d\System.XML.dll + 2008-07-27 17:55:56 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.20883_none_6afe418362a25490\System.XML.dll + 2008-07-27 18:03:16 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.18111_none_81a10f9549521c3e\System.XML.dll + 2008-07-27 17:58:36 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.22230_none_6ad5803162f79551\System.XML.dll + 2008-07-27 18:00:27 3,149,824 ----a-w c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6000.16720_none_dab5d0b95ba55950\System.dll + 2008-07-27 17:55:55 3,149,824 ----a-w c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6000.20883_none_c3ede75d75479e43\System.dll + 2008-07-27 18:03:15 3,149,824 ----a-w c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.18111_none_da90b56f5bf765f1\System.dll + 2008-07-27 17:58:35 3,149,824 ----a-w c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.22230_none_c3c5260b759cdf04\System.dll + 2008-07-27 18:00:22 36,864 ----a-w c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6000.16720_none_18ed2252583dfd4f\aspnet_compiler.exe + 2008-07-27 17:55:49 36,864 ----a-w c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6000.20883_none_022538f671e04242\aspnet_compiler.exe + 2008-07-27 18:03:11 36,864 ----a-w c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_18c80708589009f0\aspnet_compiler.exe + 2008-07-27 17:58:31 36,864 ----a-w c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_01fc77a472358303\aspnet_compiler.exe + 2008-07-27 18:00:22 24,576 ----a-w c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6000.16720_none_098e0a5b18bfd415\aspnet_regbrowsers.exe + 2008-07-27 17:55:49 24,576 ----a-w c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6000.20883_none_f2c620ff32621908\aspnet_regbrowsers.exe + 2008-07-27 18:03:11 24,576 ----a-w c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6001.18111_none_0968ef111911e0b6\aspnet_regbrowsers.exe + 2008-07-27 17:58:31 24,576 ----a-w c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6001.22230_none_f29d5fad32b759c9\aspnet_regbrowsers.exe + 2008-07-27 18:00:22 106,496 ----a-w c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6000.16720_none_50001be1bbe18d26\aspnet_regsql.exe + 2008-07-27 17:55:49 106,496 ----a-w c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6000.20883_none_39383285d583d219\aspnet_regsql.exe + 2008-07-27 18:03:11 106,496 ----a-w c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6001.18111_none_4fdb0097bc3399c7\aspnet_regsql.exe + 2008-07-27 17:58:31 106,496 ----a-w c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6001.22230_none_390f7133d5d912da\aspnet_regsql.exe + 2008-07-27 18:00:23 106,496 ----a-w c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6000.16720_none_6bfcb0a8ef8c6f2e\CasPol.exe + 2008-07-27 17:55:49 106,496 ----a-w c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6000.20883_none_5534c74d092eb421\CasPol.exe + 2008-07-27 18:03:11 106,496 ----a-w c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6001.18111_none_6bd7955eefde7bcf\CasPol.exe + 2008-07-27 17:58:31 106,496 ----a-w c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6001.22230_none_550c05fb0983f4e2\CasPol.exe + 2008-07-27 18:00:23 69,120 ----a-w c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6000.16720_none_7265203191693c0b\CustomMarshalers.dll + 2008-07-27 17:55:51 69,120 ----a-w c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6000.20883_none_5b9d36d5ab0b80fe\CustomMarshalers.dll + 2008-07-27 18:03:11 69,120 ----a-w c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6001.18111_none_724004e791bb48ac\CustomMarshalers.dll + 2008-07-27 17:58:31 69,120 ----a-w c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6001.22230_none_5b747583ab60c1bf\CustomMarshalers.dll + 2008-07-27 18:00:24 28,672 ----a-w c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6000.16720_none_7b9d9e0320ce1b15\InstallUtil.exe + 2008-07-27 17:55:52 28,672 ----a-w c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6000.20883_none_64d5b4a73a706008\InstallUtil.exe + 2008-07-27 18:03:12 28,672 ----a-w c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6001.18111_none_7b7882b9212027b6\InstallUtil.exe + 2008-07-27 17:58:32 28,672 ----a-w c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6001.22230_none_64acf3553ac5a0c9\InstallUtil.exe + 2008-07-27 18:00:24 72,192 ----a-w c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6000.16720_none_0881a09d12cd922d\ISymWrapper.dll + 2008-07-27 17:55:52 72,192 ----a-w c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6000.20883_none_f1b9b7412c6fd720\ISymWrapper.dll + 2008-07-27 18:03:12 72,192 ----a-w c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6001.18111_none_085c8553131f9ece\ISymWrapper.dll + 2008-07-27 17:58:32 72,192 ----a-w c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6001.22230_none_f190f5ef2cc517e1\ISymWrapper.dll + 2008-07-27 18:03:14 479,232 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcm80.dll + 2008-07-27 18:03:14 558,080 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcp80.dll + 2008-07-27 18:03:14 635,904 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcr80.dll + 2008-07-27 18:00:24 69,632 ----a-w c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.16720_none_81591d45b0e55432\MSBuild.exe + 2008-07-27 17:55:52 69,632 ----a-w c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.20883_none_6a9133e9ca879925\MSBuild.exe + 2008-07-27 18:03:12 69,632 ----a-w c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.18111_none_813401fbb13760d3\MSBuild.exe + 2008-07-27 17:58:32 69,632 ----a-w c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.22230_none_6a687297cadcd9e6\MSBuild.exe + 2008-07-27 18:00:24 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.16720_none_c7dc8a0ec1089f13\mscorlib.dll + 2008-07-27 17:55:52 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.20883_none_b114a0b2daaae406\mscorlib.dll + 2008-07-27 18:03:13 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.18111_none_c7b76ec4c15aabb4\mscorlib.dll + 2008-07-27 17:58:33 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.22230_none_b0ebdf60db0024c7\mscorlib.dll + 2008-07-27 18:00:22 98,808 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_3921f539eb3d8e34\alink.dll + 2008-07-27 17:55:49 98,808 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_225a0bde04dfd327\alink.dll + 2008-07-27 18:03:10 98,808 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_38fcd9efeb8f9ad5\alink.dll + 2008-07-27 17:58:31 98,808 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_22314a8c053513e8\alink.dll + 2008-07-27 18:00:22 28,672 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.16720_none_6556da40a4b1aa70\alinkui.dll + 2008-07-27 17:55:49 28,672 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.20883_none_4e8ef0e4be53ef63\alinkui.dll + 2008-07-27 18:03:10 28,672 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.18111_none_6531bef6a503b711\alinkui.dll + 2008-07-27 17:58:31 28,672 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.22230_none_4e662f92bea93024\alinkui.dll + 2008-07-27 18:00:28 1,344,000 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.16720_none_7f3638c1b8807636\VsaVb7rt.dll + 2008-07-27 17:55:56 1,344,000 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.20883_none_686e4f65d222bb29\VsaVb7rt.dll + 2008-07-27 18:03:16 1,344,000 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.18111_none_7f111d77b8d282d7\VsaVb7rt.dll + 2008-07-27 17:58:36 1,344,000 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.22230_none_68458e13d277fbea\VsaVb7rt.dll + 2008-07-27 18:00:22 218,112 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.16720_none_50855fce2ae6758a\Vsavb7rtUI.dll + 2008-07-27 17:55:49 218,112 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.20883_none_39bd76724488ba7d\Vsavb7rtUI.dll + 2008-07-27 18:03:10 218,112 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.18111_none_506044842b38822b\Vsavb7rtUI.dll + 2008-07-27 17:58:31 218,112 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.22230_none_3994b52044ddfb3e\Vsavb7rtUI.dll + 2008-07-27 18:00:22 147,968 ----a-w c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.16720_none_6d811f76e797ee4e\AdoNetDiag.dll + 2008-07-27 17:55:49 147,968 ----a-w c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.20883_none_56b9361b013a3341\AdoNetDiag.dll + 2008-07-27 18:03:10 147,968 ----a-w c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.18111_none_6d5c042ce7e9faef\AdoNetDiag.dll + 2008-07-27 17:58:31 147,968 ----a-w c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.22230_none_569074c9018f7402\AdoNetDiag.dll + 2008-07-27 18:00:22 58,880 ----a-w c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_c55cc3986aa0f96b\AppLaunch.exe + 2008-07-27 17:55:49 58,880 ----a-w c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ae94da3c84433e5e\AppLaunch.exe + 2008-07-27 18:03:11 58,880 ----a-w c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c537a84e6af3060c\AppLaunch.exe + 2008-07-27 17:58:31 58,880 ----a-w c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae6c18ea84987f1f\AppLaunch.exe + 2008-07-27 18:00:22 22,024 ----a-w c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d5762fdb578fde3d\aspnet_filter.dll + 2008-07-27 17:55:49 22,024 ----a-w c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_beae467f71322330\aspnet_filter.dll + 2008-07-27 18:03:11 22,024 ----a-w c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d551149157e1eade\aspnet_filter.dll + 2008-07-27 17:58:31 22,024 ----a-w c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_be85852d718763f1\aspnet_filter.dll + 2008-07-27 18:00:22 17,416 ----a-w c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dda3740568b14f3b\aspnet_isapi.dll + 2008-07-27 17:55:49 17,416 ----a-w c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c6db8aa98253942e\aspnet_isapi.dll + 2008-07-27 18:03:11 17,416 ----a-w c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dd7e58bb69035bdc\aspnet_isapi.dll + 2008-07-27 17:58:31 17,416 ----a-w c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6b2c95782a8d4ef\aspnet_isapi.dll + 2008-07-27 18:00:24 97,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_90e8a24fd2d12b2d\MmcAspExt.dll + 2008-07-27 17:55:52 97,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7a20b8f3ec737020\MmcAspExt.dll + 2008-07-27 18:03:12 97,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_90c38705d32337ce\MmcAspExt.dll + 2008-07-27 17:58:32 97,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_79f7f7a1ecc8b0e1\MmcAspExt.dll + 2008-07-27 18:00:22 33,800 ----a-w c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_ddd04c5afc661a12\Aspnet_perf.dll + 2008-07-27 17:55:49 33,800 ----a-w c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c70862ff16085f05\Aspnet_perf.dll + 2008-07-27 18:03:11 33,800 ----a-w c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ddab3110fcb826b3\Aspnet_perf.dll + 2008-07-27 17:58:31 33,800 ----a-w c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6dfa1ad165d9fc6\Aspnet_perf.dll + 2008-07-27 18:00:22 84,480 ----a-w c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.16720_none_303fe2adfd729d2f\aspnet_rc.dll + 2008-07-27 17:55:49 84,480 ----a-w c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.20883_none_1977f9521714e222\aspnet_rc.dll + 2008-07-27 18:03:11 84,480 ----a-w c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.18111_none_301ac763fdc4a9d0\aspnet_rc.dll + 2008-07-27 17:58:31 84,480 ----a-w c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.22230_none_194f3800176a22e3\aspnet_rc.dll + 2008-07-27 18:00:22 33,288 ----a-w c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_124dc10f21a7964c\aspnet_regiis.exe + 2008-07-27 17:55:49 33,288 ----a-w c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_fb85d7b33b49db3f\aspnet_regiis.exe + 2008-07-27 18:03:11 33,288 ----a-w c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1228a5c521f9a2ed\aspnet_regiis.exe + 2008-07-27 17:58:31 33,288 ----a-w c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_fb5d16613b9f1c00\aspnet_regiis.exe + 2008-07-27 18:00:22 34,312 ----a-w c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_8142f10dc28972ea\aspnet_state.exe + 2008-07-27 17:55:49 34,312 ----a-w c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_6a7b07b1dc2bb7dd\aspnet_state.exe + 2008-07-27 18:03:11 34,312 ----a-w c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_811dd5c3c2db7f8b\aspnet_state.exe + 2008-07-27 17:58:31 34,312 ----a-w c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_6a52465fdc80f89e\aspnet_state.exe + 2008-07-27 18:00:23 33,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_c50edb888bf66284\aspnet_wp.exe + 2008-07-27 17:55:49 33,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ae46f22ca598a777\aspnet_wp.exe + 2008-07-27 18:03:11 33,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c4e9c03e8c486f25\aspnet_wp.exe + 2008-07-27 17:58:31 33,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae1e30daa5ede838\aspnet_wp.exe + 2008-07-27 18:00:23 230,904 ----a-w c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_03362a9d8d7b9753\ilasm.exe + 2008-07-27 17:55:52 230,904 ----a-w c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ec6e4141a71ddc46\ilasm.exe + 2008-07-27 18:03:12 230,904 ----a-w c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_03110f538dcda3f4\ilasm.exe + 2008-07-27 17:58:32 230,904 ----a-w c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ec457fefa7731d07\ilasm.exe + 2008-07-27 18:00:27 57,392 ----a-w c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_52860d14b787880b\System.EnterpriseServices.Thunk.dll + 2008-07-27 17:55:55 57,392 ----a-w c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_3bbe23b8d129ccfe\System.EnterpriseServices.Thunk.dll + 2008-07-27 18:03:15 57,392 ----a-w c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5260f1cab7d994ac\System.EnterpriseServices.Thunk.dll + 2008-07-27 17:58:35 57,392 ----a-w c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_3b956266d17f0dbf\System.EnterpriseServices.Thunk.dll + 2008-07-27 18:00:23 105,464 ----a-w c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.16720_none_20f118a5f8b7c691\clrgc.exe + 2008-07-27 17:55:50 105,464 ----a-w c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.20883_none_0a292f4a125a0b84\clrgc.exe + 2008-07-27 18:03:11 105,464 ----a-w c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.18111_none_20cbfd5bf909d332\clrgc.exe + 2008-07-27 17:58:31 105,464 ----a-w c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.22230_none_0a006df812af4c45\clrgc.exe + 2008-07-27 18:00:23 89,608 ----a-w c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b30d9713c2a13a95\CORPerfMonExt.dll + 2008-07-27 17:55:50 89,608 ----a-w c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_9c45adb7dc437f88\CORPerfMonExt.dll + 2008-07-27 18:03:11 89,608 ----a-w c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b2e87bc9c2f34736\CORPerfMonExt.dll + 2008-07-27 17:58:31 89,608 ----a-w c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9c1cec65dc98c049\CORPerfMonExt.dll + 2008-07-27 18:00:23 80,376 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.16720_none_fe9ea81e2cc7a10d\csc.exe + 2008-07-27 17:55:50 80,376 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.20883_none_e7d6bec24669e600\csc.exe + 2008-07-27 18:03:11 80,376 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.18111_none_fe798cd42d19adae\csc.exe + 2008-07-27 17:58:31 80,376 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.22230_none_e7adfd7046bf26c1\csc.exe + 2008-07-27 18:00:23 1,163,768 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.16720_none_299326f9d18fcbcd\cscomp.dll + 2008-07-27 17:55:51 1,163,768 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.20883_none_12cb3d9deb3210c0\cscomp.dll + 2008-07-27 18:03:11 1,163,768 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.18111_none_296e0bafd1e1d86e\cscomp.dll + 2008-07-27 17:58:31 1,163,768 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.22230_none_12a27c4beb875181\cscomp.dll + 2008-07-27 18:00:22 145,408 ----a-w c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.16720_none_70fa2f2bea847d65\cscompui.dll + 2008-07-27 17:55:49 145,408 ----a-w c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.20883_none_5a3245d00426c258\cscompui.dll + 2008-07-27 18:03:10 145,408 ----a-w c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.18111_none_70d513e1ead68a06\cscompui.dll + 2008-07-27 17:58:31 145,408 ----a-w c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.22230_none_5a09847e047c0319\cscompui.dll + 2008-07-27 18:00:23 27,136 ----a-w c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dad3d84a4fe9cf2d\Culture.dll + 2008-07-27 17:55:51 27,136 ----a-w c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c40beeee698c1420\Culture.dll + 2008-07-27 18:03:11 27,136 ----a-w c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_daaebd00503bdbce\Culture.dll + 2008-07-27 17:58:31 27,136 ----a-w c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c3e32d9c69e154e1\Culture.dll + 2008-07-27 18:00:23 35,320 ----a-w c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.16720_none_e5e61fca33bbd736\cvtres.exe + 2008-07-27 17:55:51 35,320 ----a-w c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.20883_none_cf1e366e4d5e1c29\cvtres.exe + 2008-07-27 18:03:11 35,320 ----a-w c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.18111_none_e5c10480340de3d7\cvtres.exe + 2008-07-27 17:58:31 35,320 ----a-w c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.22230_none_cef5751c4db35cea\cvtres.exe + 2008-07-27 18:00:22 13,824 ----a-w c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d1bdbba018204fce\CvtResUI.dll + 2008-07-27 17:55:49 13,824 ----a-w c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_baf5d24431c294c1\CvtResUI.dll + 2008-07-27 18:03:10 13,824 ----a-w c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d198a05618725c6f\CvtResUI.dll + 2008-07-27 17:58:31 13,824 ----a-w c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_bacd10f23217d582\CvtResUI.dll + 2008-07-27 18:00:23 575,496 ----a-w c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.16720_none_d10442cb1462cc84\diasymreader.dll + 2008-07-27 17:55:51 575,496 ----a-w c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.20883_none_ba3c596f2e051177\diasymreader.dll + 2008-07-27 18:03:11 575,496 ----a-w c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.18111_none_d0df278114b4d925\diasymreader.dll + 2008-07-27 17:58:32 575,496 ----a-w c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.22230_none_ba13981d2e5a5238\diasymreader.dll + 2008-07-27 18:00:23 62,968 ----a-w c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_887641f8543b58cd\dfdll.dll + 2008-07-27 17:55:51 62,968 ----a-w c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_71ae589c6ddd9dc0\dfdll.dll + 2008-07-27 18:03:11 62,968 ----a-w c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_885126ae548d656e\dfdll.dll + 2008-07-27 17:58:31 62,968 ----a-w c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7185974a6e32de81\dfdll.dll + 2008-07-27 18:00:28 96,760 ----a-w c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.16720_none_768419d85fe38f05\dfshim.dll + 2008-07-27 17:55:56 96,760 ----a-w c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.20883_none_76cfd7f9792f227a\dfshim.dll + 2008-07-27 18:03:16 96,760 ----a-w c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.18111_none_787628b45d011d5c\dfshim.dll + 2008-07-27 17:58:36 96,760 ----a-w c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.22230_none_78e9255d762fdbb1\dfshim.dll + 2008-07-27 18:00:23 36,344 ----a-w c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.16720_none_cdc273811ae653eb\dw20.exe + 2008-07-27 17:55:51 36,344 ----a-w c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.20883_none_b6fa8a25348898de\dw20.exe + 2008-07-27 18:03:11 36,344 ----a-w c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.18111_none_cd9d58371b38608c\dw20.exe + 2008-07-27 17:58:32 36,344 ----a-w c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.22230_none_b6d1c8d334ddd99f\dw20.exe + 2008-07-27 18:00:23 798,224 ----a-w c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cf8a616af2a68bf7\EventLogMessages.dll + 2008-07-27 17:55:51 798,224 ----a-w c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b8c2780f0c48d0ea\EventLogMessages.dll + 2008-07-27 18:03:11 798,224 ----a-w c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_cf654620f2f89898\EventLogMessages.dll + 2008-07-27 17:58:32 798,224 ----a-w c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b899b6bd0c9e11ab\EventLogMessages.dll + 2008-07-27 18:00:23 18,936 ----a-w c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_02f7688b0a477a67\fusion.dll + 2008-07-27 17:55:51 18,936 ----a-w c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ec2f7f2f23e9bf5a\fusion.dll + 2008-07-27 18:03:11 18,936 ----a-w c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_02d24d410a998708\fusion.dll + 2008-07-27 17:58:32 18,936 ----a-w c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ec06bddd243f001b\fusion.dll + 2008-07-27 18:00:29 41,984 ----a-w c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.16720_none_9297cbea7e22b2e8\netfxperf.dll + 2008-07-27 17:55:56 41,984 ----a-w c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.20883_none_92e38a0b976e465d\netfxperf.dll + 2008-07-27 18:03:17 41,984 ----a-w c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.18111_none_9489dac67b40413f\netfxperf.dll + 2008-07-27 17:58:37 41,984 ----a-w c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.22230_none_94fcd76f946eff94\netfxperf.dll + 2008-07-27 18:00:24 65,032 ----a-w c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b6dc6c95d82f7e23\InstallUtilLib.dll + 2008-07-27 17:55:52 65,032 ----a-w c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a0148339f1d1c316\InstallUtilLib.dll + 2008-07-27 18:03:12 65,032 ----a-w c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b6b7514bd8818ac4\InstallUtilLib.dll + 2008-07-27 17:58:32 65,032 ----a-w c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9febc1e7f22703d7\InstallUtilLib.dll + 2008-07-27 18:00:24 998,408 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16720_none_2b477be306910f6b\mscordacwks.dll + 2008-07-27 17:55:52 998,408 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.20883_none_147f92872033545e\mscordacwks.dll + 2008-07-27 18:03:12 998,408 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.18111_none_2b22609906e31c0c\mscordacwks.dll + 2008-07-27 17:58:32 998,408 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.22230_none_1456d1352088951f\mscordacwks.dll + 2008-07-27 18:00:24 83,456 ----a-w c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_6d15d8a7c565aae6\mscordbc.dll + 2008-07-27 17:55:52 83,456 ----a-w c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_564def4bdf07efd9\mscordbc.dll + 2008-07-27 18:03:12 83,456 ----a-w c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_6cf0bd5dc5b7b787\mscordbc.dll + 2008-07-27 17:58:32 83,456 ----a-w c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_56252df9df5d309a\mscordbc.dll + 2008-07-27 18:00:24 308,224 ----a-w c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_704c45e65c1b155c\mscordbi.dll + 2008-07-27 17:55:52 308,224 ----a-w c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_59845c8a75bd5a4f\mscordbi.dll + 2008-07-27 18:03:12 308,224 ----a-w c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_70272a9c5c6d21fd\mscordbi.dll + 2008-07-27 17:58:32 308,224 ----a-w c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_595b9b3876129b10\mscordbi.dll + 2008-07-27 18:00:29 282,112 ----a-w c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.16720_none_b3641f8d59134c1c\mscoree.dll + 2008-07-27 17:55:56 282,112 ----a-w c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.20883_none_b3afddae725edf91\mscoree.dll + 2008-07-27 18:03:17 282,112 ----a-w c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.18111_none_b5562e695630da73\mscoree.dll + 2008-07-27 17:58:36 282,112 ----a-w c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.22230_none_b5c92b126f5f98c8\mscoree.dll + 2008-07-27 18:00:29 15,360 ----a-w c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.16720_none_175dada98e1713c9\mscorees.dll + 2008-07-27 17:55:56 15,360 ----a-w c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.20883_none_17a96bcaa762a73e\mscorees.dll + 2008-07-27 18:03:17 15,360 ----a-w c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.18111_none_194fbc858b34a220\mscorees.dll + 2008-07-27 17:58:37 15,360 ----a-w c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.22230_none_19c2b92ea4636075\mscorees.dll + 2008-07-27 18:00:24 46,592 ----a-w c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_eabc86bf6fd8fce5\mscorie.dll + 2008-07-27 17:55:52 46,592 ----a-w c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d3f49d63897b41d8\mscorie.dll + 2008-07-27 18:03:12 46,592 ----a-w c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ea976b75702b0986\mscorie.dll + 2008-07-27 17:58:32 46,592 ----a-w c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d3cbdc1189d08299\mscorie.dll + 2008-07-27 18:00:29 158,720 ----a-w c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.16720_none_7a962ef9ddf8e5ca\mscorier.dll + 2008-07-27 17:55:56 158,720 ----a-w c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.20883_none_7ae1ed1af744793f\mscorier.dll + 2008-07-27 18:03:17 158,720 ----a-w c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.18111_none_7c883dd5db167421\mscorier.dll + 2008-07-27 17:58:37 158,720 ----a-w c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.22230_none_7cfb3a7ef4453276\mscorier.dll + 2008-07-27 18:00:29 83,968 ----a-w c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.16720_none_bc2740c9f4b44e45\mscories.dll + 2008-07-27 17:55:56 83,968 ----a-w c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.20883_none_bc72feeb0dffe1ba\mscories.dll + 2008-07-27 18:03:17 83,968 ----a-w c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.18111_none_be194fa5f1d1dc9c\mscories.dll + 2008-07-27 17:58:37 83,968 ----a-w c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.22230_none_be8c4c4f0b009af1\mscories.dll + 2008-07-27 18:00:24 367,104 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_bf82ae7730dc9b9e\mscorjit.dll + 2008-07-27 17:55:52 367,104 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a8bac51b4a7ee091\mscorjit.dll + 2008-07-27 18:03:12 367,104 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_bf5d932d312ea83f\mscorjit.dll + 2008-07-27 17:58:33 367,104 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_a89203c94ad42152\mscorjit.dll + 2008-07-27 18:00:24 94,208 ----a-w c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_c3051899495c0261\mscorld.dll + 2008-07-27 17:55:52 94,208 ----a-w c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ac3d2f3d62fe4754\mscorld.dll + 2008-07-27 18:03:12 94,208 ----a-w c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_c2dffd4f49ae0f02\mscorld.dll + 2008-07-27 17:58:33 94,208 ----a-w c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ac146deb63538815\mscorld.dll + 2008-07-27 18:00:28 96,768 ----a-w c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.16720_none_a586c87acc4ee451\mscormmc.dll + 2008-07-27 17:55:56 96,768 ----a-w c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.20883_none_a5d2869be59a77c6\mscormmc.dll + 2008-07-27 18:03:16 96,768 ----a-w c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.18111_none_a778d756c96c72a8\mscormmc.dll + 2008-07-27 17:58:36 96,768 ----a-w c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.22230_none_a7ebd3ffe29b30fd\mscormmc.dll + 2008-07-27 18:00:25 114,176 ----a-w c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f809cbf55be51514\mscorpe.dll + 2008-07-27 17:55:53 114,176 ----a-w c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_e141e29975875a07\mscorpe.dll + 2008-07-27 18:03:13 114,176 ----a-w c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f7e4b0ab5c3721b5\mscorpe.dll + 2008-07-27 17:58:33 114,176 ----a-w c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_e119214775dc9ac8\mscorpe.dll + 2008-07-27 18:00:25 345,600 ----a-w c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f04d2f859bf6b755\mscorrc.dll + 2008-07-27 17:55:53 345,600 ----a-w c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d9854629b598fc48\mscorrc.dll + 2008-07-27 18:03:13 345,600 ----a-w c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f028143b9c48c3f6\mscorrc.dll + 2008-07-27 17:58:33 345,600 ----a-w c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d95c84d7b5ee3d09\mscorrc.dll + 2008-07-27 18:00:25 77,312 ----a-w c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_11d75989f473c8ca\mscorsec.dll + 2008-07-27 17:55:53 77,312 ----a-w c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fb0f702e0e160dbd\mscorsec.dll + 2008-07-27 18:03:13 77,312 ----a-w c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_11b23e3ff4c5d56b\mscorsec.dll + 2008-07-27 17:58:33 77,312 ----a-w c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fae6aedc0e6b4e7e\mscorsec.dll + 2008-07-27 18:00:26 31,744 ----a-w c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a5bb7e77ee33a16c\mscorsecr.dll + 2008-07-27 17:55:54 31,744 ----a-w c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8ef3951c07d5e65f\mscorsecr.dll + 2008-07-27 18:03:14 31,744 ----a-w c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a596632dee85ae0d\mscorsecr.dll + 2008-07-27 17:58:34 31,744 ----a-w c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8ecad3ca082b2720\mscorsecr.dll + 2008-07-27 18:00:25 18,944 ----a-w c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_967eaf5860c6dda6\mscorsn.dll + 2008-07-27 17:55:53 18,944 ----a-w c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7fb6c5fc7a692299\mscorsn.dll + 2008-07-27 18:03:13 18,944 ----a-w c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9659940e6118ea47\mscorsn.dll + 2008-07-27 17:58:33 18,944 ----a-w c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7f8e04aa7abe635a\mscorsn.dll + 2008-07-27 18:00:25 230,912 ----a-w c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5b1627d403b6b0de\mscorsvc.dll + 2008-07-27 17:55:53 230,912 ----a-w c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.20883_none_444e3e781d58f5d1\mscorsvc.dll + 2008-07-27 18:03:13 230,912 ----a-w c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5af10c8a0408bd7f\mscorsvc.dll + 2008-07-27 17:58:33 230,912 ----a-w c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.22230_none_44257d261dae3692\mscorsvc.dll + 2008-07-27 18:00:25 69,632 ----a-w c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_201c2ab5e826014f\mscorsvw.exe + 2008-07-27 17:55:53 69,632 ----a-w c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_0954415a01c84642\mscorsvw.exe + 2008-07-27 18:03:13 69,632 ----a-w c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1ff70f6be8780df0\mscorsvw.exe + 2008-07-27 17:58:33 69,632 ----a-w c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_092b8008021d8703\mscorsvw.exe + 2008-07-27 18:00:25 19,456 ----a-w c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cec3db076487f2b9\mscortim.dll + 2008-07-27 17:55:53 19,456 ----a-w c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b7fbf1ab7e2a37ac\mscortim.dll + 2008-07-27 18:03:13 19,456 ----a-w c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ce9ebfbd64d9ff5a\mscortim.dll + 2008-07-27 17:58:33 19,456 ----a-w c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b7d330597e7f786d\mscortim.dll + 2008-07-27 18:00:25 5,815,296 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_328358fc2e900398\mscorwks.dll + 2008-07-27 17:55:53 5,815,296 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1bbb6fa04832488b\mscorwks.dll + 2008-07-27 18:03:13 5,815,296 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_325e3db22ee21039\mscorwks.dll + 2008-07-27 17:58:33 5,815,296 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1b92ae4e4887894c\mscorwks.dll + 2008-07-27 18:00:22 82,944 ----a-w c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.16720_none_399312dcb0de0ef0\NETFXSBS10.exe + 2008-07-27 17:55:49 82,944 ----a-w c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.20883_none_39ded0fdca29a265\NETFXSBS10.exe + 2008-07-27 18:03:10 82,944 ----a-w c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.18111_none_3b8521b8adfb9d47\NETFXSBS10.exe + 2008-07-27 17:58:30 82,944 ----a-w c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.22230_none_3bf81e61c72a5b9c\NETFXSBS10.exe + 2008-07-27 18:00:26 100,856 ----a-w c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_77e2e7244a50f2f9\ngen.exe + 2008-07-27 17:55:54 100,856 ----a-w c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_611afdc863f337ec\ngen.exe + 2008-07-27 18:03:14 100,856 ----a-w c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_77bdcbda4aa2ff9a\ngen.exe + 2008-07-27 17:58:34 100,856 ----a-w c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_60f23c76644878ad\ngen.exe + 2008-07-27 18:00:26 24,584 ----a-w c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dc5677122d543f36\normalization.dll + 2008-07-27 17:55:54 24,584 ----a-w c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c58e8db646f68429\normalization.dll + 2008-07-27 18:03:14 24,584 ----a-w c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dc315bc82da64bd7\normalization.dll + 2008-07-27 17:58:34 24,584 ----a-w c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c565cc64474bc4ea\normalization.dll + 2008-07-27 18:00:26 88,584 ----a-w c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_29fcfd8eff55da0a\PerfCounter.dll + 2008-07-27 17:55:54 88,584 ----a-w c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1335143318f81efd\PerfCounter.dll + 2008-07-27 18:03:14 88,584 ----a-w c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_29d7e244ffa7e6ab\PerfCounter.dll + 2008-07-27 17:58:34 88,584 ----a-w c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_130c52e1194d5fbe\PerfCounter.dll + 2008-07-27 18:00:26 143,360 ----a-w c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_9cbc7d3e49842763\peverify.dll + 2008-07-27 17:55:54 143,360 ----a-w c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_85f493e263266c56\peverify.dll + 2008-07-27 18:03:14 143,360 ----a-w c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9c9761f449d63404\peverify.dll + 2008-07-27 17:58:34 143,360 ----a-w c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_85cbd290637bad17\peverify.dll + 2008-07-27 18:00:22 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.16720_none_a4b3513de20981cb\sbs_diasymreader.dll + 2008-07-27 17:55:49 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.20883_none_a4ff0f5efb551540\sbs_diasymreader.dll + 2008-07-27 18:03:10 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.18111_none_a6a56019df271022\sbs_diasymreader.dll + 2008-07-27 17:58:30 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.22230_none_a7185cc2f855ce77\sbs_diasymreader.dll + 2008-07-27 18:00:22 14,336 ----a-w c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.16720_none_15bc4e0a4553cb65\sbs_iehost.dll + 2008-07-27 17:55:49 14,336 ----a-w c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.20883_none_16080c2b5e9f5eda\sbs_iehost.dll + 2008-07-27 18:03:10 14,336 ----a-w c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.18111_none_17ae5ce6427159bc\sbs_iehost.dll + 2008-07-27 17:58:30 14,336 ----a-w c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.22230_none_1821598f5ba01811\sbs_iehost.dll + 2008-07-27 18:00:22 14,360 ----a-w c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.16720_none_fadb1f7894625625\sbs_microsoft.jscript.dll + 2008-07-27 17:55:49 14,360 ----a-w c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.20883_none_fb26dd99adade99a\sbs_microsoft.jscript.dll + 2008-07-27 18:03:10 14,360 ----a-w c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.18111_none_fccd2e54917fe47c\sbs_microsoft.jscript.dll + 2008-07-27 17:58:30 14,360 ----a-w c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.22230_none_fd402afdaaaea2d1\sbs_microsoft.jscript.dll + 2008-07-27 18:00:22 14,904 ----a-w c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.16720_none_f5ad60ba98e5129e\sbs_microsoft.vsa.vb.codedomprocessor.dll + 2008-07-27 17:55:49 14,904 ----a-w c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.20883_none_f5f91edbb230a613\sbs_microsoft.vsa.vb.codedomprocessor.dll + 2008-07-27 18:03:10 14,904 ----a-w c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.18111_none_f79f6f969602a0f5\sbs_microsoft.vsa.vb.codedomprocessor.dll + 2008-07-27 17:58:30 14,904 ----a-w c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.22230_none_f8126c3faf315f4a\sbs_microsoft.vsa.vb.codedomprocessor.dll + 2008-07-27 18:00:22 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.16720_none_61341d4d3a39619e\sbs_mscordbi.dll + 2008-07-27 17:55:49 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.20883_none_617fdb6e5384f513\sbs_mscordbi.dll + 2008-07-27 18:03:10 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.18111_none_63262c293756eff5\sbs_mscordbi.dll + 2008-07-27 17:58:30 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.22230_none_639928d25085ae4a\sbs_mscordbi.dll + 2008-07-27 18:00:22 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.16720_none_9f5dffc77038aef0\sbs_mscorrc.dll + 2008-07-27 17:55:49 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.20883_none_9fa9bde889844265\sbs_mscorrc.dll + 2008-07-27 18:03:10 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.18111_none_a1500ea36d563d47\sbs_mscorrc.dll + 2008-07-27 17:58:30 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.22230_none_a1c30b4c8684fb9c\sbs_mscorrc.dll + 2008-07-27 18:00:22 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.16720_none_e401d368df1b12c0\sbs_mscorsec.dll + 2008-07-27 17:55:49 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.20883_none_e44d9189f866a635\sbs_mscorsec.dll + 2008-07-27 18:03:10 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.18111_none_e5f3e244dc38a117\sbs_mscorsec.dll + 2008-07-27 17:58:30 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.22230_none_e666deedf5675f6c\sbs_mscorsec.dll + 2008-07-27 18:00:22 14,384 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.16720_none_bd4e76fe38514ab5\sbs_system.configuration.install.dll + 2008-07-27 17:55:49 14,384 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.20883_none_bd9a351f519cde2a\sbs_system.configuration.install.dll + 2008-07-27 18:03:10 14,384 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.18111_none_bf4085da356ed90c\sbs_system.configuration.install.dll + 2008-07-27 17:58:30 14,384 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.22230_none_bfb382834e9d9761\sbs_system.configuration.install.dll + 2008-07-27 18:00:22 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.16720_none_fc8de474efb056bd\sbs_system.data.dll + 2008-07-27 17:55:49 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.20883_none_fcd9a29608fbea32\sbs_system.data.dll + 2008-07-27 18:03:10 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.18111_none_fe7ff350eccde514\sbs_system.data.dll + 2008-07-27 17:58:30 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.22230_none_fef2effa05fca369\sbs_system.data.dll + 2008-07-27 18:00:22 14,376 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.16720_none_5f2d7cf328bb48aa\sbs_system.enterpriseservices.dll + 2008-07-27 17:55:49 14,376 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.20883_none_5f793b144206dc1f\sbs_system.enterpriseservices.dll + 2008-07-27 18:03:10 14,376 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.18111_none_611f8bcf25d8d701\sbs_system.enterpriseservices.dll + 2008-07-27 17:58:30 14,376 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.22230_none_619288783f079556\sbs_system.enterpriseservices.dll + 2008-07-27 18:00:22 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.16720_none_91b3897b707a12a8\sbs_VsaVb7rt.dll + 2008-07-27 17:55:49 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.20883_none_91ff479c89c5a61d\sbs_VsaVb7rt.dll + 2008-07-27 18:03:10 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.18111_none_93a598576d97a0ff\sbs_VsaVb7rt.dll + 2008-07-27 17:58:30 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.22230_none_9418950086c65f54\sbs_VsaVb7rt.dll + 2008-07-27 18:00:22 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.16720_none_fe9f152188a71eb9\sbs_wminet_utils.dll + 2008-07-27 17:55:49 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.20883_none_feead342a1f2b22e\sbs_wminet_utils.dll + 2008-07-27 18:03:10 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.18111_none_009123fd85c4ad10\sbs_wminet_utils.dll + 2008-07-27 17:58:30 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.22230_none_010420a69ef36b65\sbs_wminet_utils.dll + 2008-07-27 18:00:22 16,896 ----a-w c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.16720_none_730a240a07e5914d\sbscmp10.dll + 2008-07-27 17:55:49 16,896 ----a-w c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.20883_none_7355e22b213124c2\sbscmp10.dll + 2008-07-27 18:03:10 16,896 ----a-w c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.18111_none_74fc32e605031fa4\sbscmp10.dll + 2008-07-27 17:58:30 16,896 ----a-w c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.22230_none_756f2f8f1e31ddf9\sbscmp10.dll + 2008-07-27 18:00:26 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.16720_none_54f78ae6608fe120\sbscmp20_mscorlib.dll + 2008-07-27 17:55:55 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.20883_none_3e2fa18a7a322613\sbscmp20_mscorlib.dll + 2008-07-27 18:03:14 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.18111_none_54d26f9c60e1edc1\sbscmp20_mscorlib.dll + 2008-07-27 17:58:34 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.22230_none_3e06e0387a8766d4\sbscmp20_mscorlib.dll + 2008-07-27 18:00:22 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.16720_none_7db29add493b7e7f\sbscmp20_mscorwks.dll + 2008-07-27 17:55:49 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.20883_none_7dfe58fe628711f4\sbscmp20_mscorwks.dll + 2008-07-27 18:03:10 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.18111_none_7fa4a9b946590cd6\sbscmp20_mscorwks.dll + 2008-07-27 17:58:31 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.22230_none_8017a6625f87cb2b\sbscmp20_mscorwks.dll + 2008-07-27 18:00:22 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.16720_none_4b551485ea019eb3\sbscmp20_perfcounter.dll + 2008-07-27 17:55:49 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.20883_none_4ba0d2a7034d3228\sbscmp20_perfcounter.dll + 2008-07-27 18:03:10 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.18111_none_4d472361e71f2d0a\sbscmp20_perfcounter.dll + 2008-07-27 17:58:31 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.22230_none_4dba200b004deb5f\sbscmp20_perfcounter.dll + 2008-07-27 18:00:22 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.16720_none_647b8d4369ff4ca5\SharedReg12.dll + 2008-07-27 17:55:49 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.20883_none_64c74b64834ae01a\SharedReg12.dll + 2008-07-27 18:03:10 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.18111_none_666d9c1f671cdafc\SharedReg12.dll + 2008-07-27 17:58:31 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.22230_none_66e098c8804b9951\SharedReg12.dll + 2008-07-27 18:00:26 118,784 ----a-w c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5afe5731cbebfefe\shfusion.dll + 2008-07-27 17:55:55 118,784 ----a-w c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_44366dd5e58e43f1\shfusion.dll + 2008-07-27 18:03:14 118,784 ----a-w c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5ad93be7cc3e0b9f\shfusion.dll + 2008-07-27 17:58:34 118,784 ----a-w c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_440dac83e5e384b2\shfusion.dll + 2008-07-27 18:00:26 95,232 ----a-w c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a636a70dcbde39f5\ShFusRes.dll + 2008-07-27 17:55:55 95,232 ----a-w c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8f6ebdb1e5807ee8\ShFusRes.dll + 2008-07-27 18:03:14 95,232 ----a-w c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a6118bc3cc304696\ShFusRes.dll + 2008-07-27 17:58:34 95,232 ----a-w c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8f45fc5fe5d5bfa9\ShFusRes.dll + 2008-07-27 18:00:26 392,184 ----a-w c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_1415c3a3fa85eb80\SOS.dll + 2008-07-27 17:55:55 392,184 ----a-w c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fd4dda4814283073\SOS.dll + 2008-07-27 18:03:14 392,184 ----a-w c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_13f0a859fad7f821\SOS.dll + 2008-07-27 17:58:34 392,184 ----a-w c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fd2518f6147d7134\SOS.dll + 2008-07-27 18:00:28 81,400 ----a-w c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_61378f49539876ca\TLBREF.DLL + 2008-07-27 17:55:56 81,400 ----a-w c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_4a6fa5ed6d3abbbd\TLBREF.DLL + 2008-07-27 18:03:16 81,400 ----a-w c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_611273ff53ea836b\TLBREF.DLL + 2008-07-27 17:58:36 81,400 ----a-w c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_4a46e49b6d8ffc7e\TLBREF.DLL + 2008-07-27 18:00:28 1,172,472 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.16720_none_40151493a5ee7836\vbc.exe + 2008-07-27 17:55:56 1,172,472 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.20883_none_294d2b37bf90bd29\vbc.exe + 2008-07-27 18:03:16 1,172,472 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_3feff949a64084d7\vbc.exe + 2008-07-27 17:58:36 1,172,472 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_292469e5bfe5fdea\vbc.exe + 2008-07-27 18:00:22 193,016 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.16720_none_9b66959baa339139\vbc7ui.dll + 2008-07-27 17:55:49 193,016 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.20883_none_849eac3fc3d5d62c\vbc7ui.dll + 2008-07-27 18:03:10 193,016 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.18111_none_9b417a51aa859dda\vbc7ui.dll + 2008-07-27 17:58:31 193,016 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.22230_none_8475eaedc42b16ed\vbc7ui.dll + 2008-07-27 18:00:28 438,272 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_36c546033798e90a\webengine.dll + 2008-07-27 17:55:56 438,272 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1ffd5ca7513b2dfd\webengine.dll + 2008-07-27 18:03:16 438,272 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_36a02ab937eaf5ab\webengine.dll + 2008-07-27 17:58:36 438,272 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1fd49b5551906ebe\webengine.dll + 2008-07-27 18:00:28 37,896 ----a-w c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_7357fe437a1ad1ff\WMINet_Utils.dll + 2008-07-27 17:55:56 37,896 ----a-w c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_5c9014e793bd16f2\WMINet_Utils.dll + 2008-07-27 18:03:16 37,896 ----a-w c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_7332e2f97a6cdea0\WMINet_Utils.dll + 2008-07-27 17:58:36 37,896 ----a-w c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_5c675395941257b3\WMINet_Utils.dll + 2008-07-27 18:00:26 53,248 ----a-w c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.16720_none_173a294b153205b9\RegAsm.exe + 2008-07-27 17:55:54 53,248 ----a-w c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.20883_none_00723fef2ed44aac\RegAsm.exe + 2008-07-27 18:03:14 53,248 ----a-w c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.18111_none_17150e011584125a\RegAsm.exe + 2008-07-27 17:58:34 53,248 ----a-w c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.22230_none_00497e9d2f298b6d\RegAsm.exe + 2008-07-27 18:00:26 32,768 ----a-w c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.16720_none_ea5553f167a4fe69\RegSvcs.exe + 2008-07-27 17:55:54 32,768 ----a-w c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.20883_none_d38d6a958147435c\RegSvcs.exe + 2008-07-27 18:03:14 32,768 ----a-w c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.18111_none_ea3038a767f70b0a\RegSvcs.exe + 2008-07-27 17:58:34 32,768 ----a-w c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.22230_none_d364a943819c841d\RegSvcs.exe + 2008-07-27 18:00:27 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.16720_none_f35be08bdcd55c80\System.Data.OracleClient.dll + 2008-07-27 17:55:55 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.20883_none_dc93f72ff677a173\System.Data.OracleClient.dll + 2008-07-27 18:03:15 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.18111_none_f336c541dd276921\System.Data.OracleClient.dll + 2008-07-27 17:58:35 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.22230_none_dc6b35ddf6cce234\System.Data.OracleClient.dll + 2008-07-27 18:00:26 2,933,248 ----a-w c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.16720_none_94bc651bb3dd8769\System.Data.dll + 2008-07-27 17:55:55 2,933,248 ----a-w c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.20883_none_7df47bbfcd7fcc5c\System.Data.dll + 2008-07-27 18:03:15 2,933,248 ----a-w c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.18111_none_949749d1b42f940a\System.Data.dll + 2008-07-27 17:58:35 2,933,248 ----a-w c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.22230_none_7dcbba6dcdd50d1d\System.Data.dll + 2008-07-27 18:00:27 258,048 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.dll + 2008-07-27 18:19:30 113,664 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.Wrapper.dll + 2008-07-27 17:55:55 258,048 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6fc766fbdb\System.EnterpriseServices.dll + 2008-07-27 18:15:31 113,664 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6fc766fbdb\System.EnterpriseServices.Wrapper.dll + 2008-07-27 18:03:15 258,048 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881ae16c389\System.EnterpriseServices.dll + 2008-07-27 18:22:54 113,664 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881ae16c389\System.EnterpriseServices.Wrapper.dll + 2008-07-27 17:58:35 258,048 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.dll + 2008-07-27 18:19:59 113,664 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.Wrapper.dll + 2008-07-27 18:00:27 261,632 ----a-w c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.16720_none_13b0b874683b2e16\System.Transactions.dll + 2008-07-27 17:55:55 261,632 ----a-w c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.20883_none_fce8cf1881dd7309\System.Transactions.dll + 2008-07-27 18:03:15 261,632 ----a-w c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.18111_none_138b9d2a688d3ab7\System.Transactions.dll + 2008-07-27 17:58:35 261,632 ----a-w c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.22230_none_fcc00dc68232b3ca\System.Transactions.dll + 2008-07-27 18:00:27 5,238,784 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16720_none_f74db0bb1630f0b7\System.Web.dll + 2008-07-27 17:55:55 5,238,784 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.20883_none_e085c75f2fd335aa\System.Web.dll + 2008-07-27 18:03:15 5,238,784 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.18111_none_f72895711682fd58\System.Web.dll + 2008-07-27 17:58:35 5,238,784 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.22230_none_e05d060d3028766b\System.Web.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-18 125952] "RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616] "Google Update"="c:\users\Rajiv\AppData\Local\Google\Update\GoogleUpdate.exe" [2008-09-16 133104] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-11-17 815104] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-01-28 133656] "ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2006-10-03 81920] "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2006-10-03 221184] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-01-28 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-01-28 166424] "HostManager"="c:\program files\Common Files\AOL\1178322383\ee\AOLSoftware.exe" [2006-09-25 50736] "Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2006-11-27 1540096] "mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2007-11-01 582992] "McENUI"="c:\progra~1\McAfee\MHN\McENUI.exe" [2007-11-30 1164576] "McPvTray"="c:\program files\McAfee\Anti-Theft\McPvTray.exe" [2008-05-28 655360] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-05 148888] c:\users\Rajiv\AppData\Roaming\Microsoft\Windows\Templates\Start Menu\Programs\Startup\ Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2007-04-30 50688] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.i420"= i420vfw.dll [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] backup=c:\windows\pss\Adobe Reader Speed Launch.lnk.CommonStartup backupExtension=.CommonStartup [HKLM\~\startupfolder\C:^Users^Rajiv^AppData^Roaming^Microsoft^Windows^Templates^Start Menu^Programs^Startup^GameSpot Download Manager.lnk] backup=c:\windows\pss\GameSpot Download Manager.lnk.Startup backupExtension=.Startup [HKLM\~\startupfolder\C:^Users^Rajiv^AppData^Roaming^Microsoft^Windows^Templates^Start Menu^Programs^Startup^Run Google Web Accelerator.lnk] backup=c:\windows\pss\Run Google Web Accelerator.lnk.Startup backupExtension=.Startup [HKLM\~\startupfolder\C:^Users^Rajiv^AppData^Roaming^Microsoft^Windows^Templates^Start Menu^Programs^Startup^ScreenHunter 5.0 Free.lnk] path=c:\users\Rajiv\AppData\Roaming\Microsoft\Windows\Templates\Start Menu\Programs\Startup\ScreenHunter 5.0 Free.lnk backup=c:\windows\pss\ScreenHunter 5.0 Free.lnk.Startup backupExtension=.Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent] --a------ 2009-01-08 09:55 98304 c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter] --a------ 2008-08-13 17:32 206064 c:\program files\Dell Support Center\bin\sprtcmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dscactivate] --a------ 2007-11-15 09:24 16384 c:\program files\Dell Support Center\gs_agent\custom\dsca.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ECenter] --a------ 2006-11-17 13:19 17920 c:\dell\E-Center\EULALauncher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] --a----t- 2008-09-16 16:19 133104 c:\users\Rajiv\AppData\Local\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] --a------ 2007-08-24 06:00 33648 c:\program files\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a------ 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService] --------- 2007-05-02 18:16 184320 c:\program files\Dell\MediaDirect\PCMService.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2008-09-06 14:09 413696 c:\program files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec PIF AlertEng] --a------ 2008-01-29 16:38 583048 c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg] --------- 2000-05-11 00:00 90112 c:\windows\Updreg.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VolPanel] --------- 2006-11-27 08:14 180224 c:\program files\Creative\SBAudigy\Volume Panel\VolPanlu.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] --a------ 2008-01-18 22:38 1008184 c:\program files\Windows Defender\MSASCui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SigmatelSysTrayApp] --a------ 2007-02-07 21:11 303104 c:\windows\sttray.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] "EnableFirewall"= 0 (0x0) "DefaultOutboundAction"= 0 (0x0) "DefaultInboundAction"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{AA747008-D2B1-4DE7-8334-BDCCD2001213}"= UDP:c:\program files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent "{3F8491BF-68E4-44BD-9AF4-A0FF56BAA7F6}"= UDP:c:\program files\Common Files\AOL\ACS\AOLDial.exe:AOL Connectivity Service Dialer "{B07413E8-ED81-411B-AA75-2DE491B8F601}"= TCP:c:\program files\Common Files\AOL\ACS\AOLDial.exe:AOL Connectivity Service Dialer "{A6D08B7C-43F6-40C1-8808-2F8110167081}"= UDP:c:\program files\Common Files\AOL\ACS\AOLacsd.exe:AOL Connectivity Service "{83431BB3-EC18-41F9-B5C2-2A6468DC93A5}"= TCP:c:\program files\Common Files\AOL\ACS\AOLacsd.exe:AOL Connectivity Service "{4A0721E7-E2FA-48E5-A370-40A23AFED3F4}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes "{A53A227E-1537-4444-B2F6-1CAD761C2FDC}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes "{D54CB161-438C-463F-8979-65C58CCF56C3}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger "{900E6A25-24C3-45C8-986D-20792E9C274E}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger "{AAB69A77-462D-4CB6-BA31-236C661939C5}"= UDP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server "{36864236-98A0-47AD-978C-D4A5B8850CD2}"= TCP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server "{0F5E95A8-EE86-4DE8-84C0-DFC7EDF78ADC}"= UDP:c:\program files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent "{9DC00AF6-C62E-4F59-A716-DAA0309373C3}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook "{E03F8235-F3D1-41EF-98E9-18BE09FDA106}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove "{258C0819-E37E-450D-9CCE-7C06A50B9E0E}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove "{39B287EA-3582-4AAB-99F1-4BB8FC7EF65E}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{ECDCA5AF-F20A-49C6-BE32-508C92527C14}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{7C0F20A8-666D-48A4-9814-FEFBAD65ED8C}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader "{800A0467-5540-4D5C-A77B-7D76E09FA870}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader "{41306905-11FD-46BD-A59F-06AD58B0F201}"= UDP:c:\program files\Common Files\AOL\1178322383\ee\aolsoftware.exe:AOL Services "{DF11D323-1CD1-4C6B-B890-CE6BB64EF78F}"= TCP:c:\program files\Common Files\AOL\1178322383\ee\aolsoftware.exe:AOL Services "{CFD17B7A-21AB-4114-B3A1-8D087DD1A128}"= UDP:c:\program files\AIM6\aim6.exe:AIM "{A08EA919-35DD-40C2-B448-C9577521F93E}"= TCP:c:\program files\AIM6\aim6.exe:AIM "{643B4E2B-E16A-44D2-92DA-D3FE9D7D9074}"= UDP:c:\program files\Unreal Tournament 3\Binaries\UT3.exe:Unreal Tournament 3 "{336AB49F-DBE9-411C-8527-C06C7C96009F}"= TCP:c:\program files\Unreal Tournament 3\Binaries\UT3.exe:Unreal Tournament 3 "{F482BFD6-6FC2-489B-AE15-7A3DE0166118}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader "{57DB33C2-F27D-4F5E-98E7-A82DAFC76179}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader "{7E2A3217-5CA6-488C-944C-5ED2DEBD3BAF}"= UDP:c:\program files\Common Files\AOL\1178322383\ee\aolsoftware.exe:AOL Services "{522BB1D0-EE89-46C4-9ED3-13F6A10A5B3E}"= TCP:c:\program files\Common Files\AOL\1178322383\ee\aolsoftware.exe:AOL Services "{A285F57E-C08A-47BF-B0B1-8E579A78B6C1}"= UDP:c:\program files\AIM6\aim6.exe:AIM "{A7B94DC7-8CC4-48E1-8593-8F8AE051D960}"= TCP:c:\program files\AIM6\aim6.exe:AIM "{EFEEFAD7-8D83-4899-ADDD-5B9820FD27F3}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{1071A4FA-5428-40C9-9E81-DC0A58894B1B}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "TCP Query User{F66EC930-1186-46F8-8AEC-7CD79B9F3405}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox "UDP Query User{FB1E9F0F-B80B-4891-8043-F65C42A60EA4}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox "TCP Query User{933D26AE-CCE9-4F3D-8818-39FC44E0E1C2}c:\\program files\\macromedia\\dreamweaver 8\\dreamweaver.exe"= UDP:c:\program files\macromedia\dreamweaver 8\dreamweaver.exe:Dreamweaver 8 "UDP Query User{57D07298-048B-4466-9BA1-7BBE2C7C9366}c:\\program files\\macromedia\\dreamweaver 8\\dreamweaver.exe"= TCP:c:\program files\macromedia\dreamweaver 8\dreamweaver.exe:Dreamweaver 8 "{ECCD0308-3CCB-4AC2-9523-9F7BF088F226}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes "{6BB76BF1-FF08-4116-B40D-3EC5947D2FA9}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes "{E01B9144-3ECF-4D7B-B41B-6DB884A005C4}"= UDP:c:\users\Rajiv\AppData\Roaming\Facebook\facebook.exe:Facebook "{E3FD8D6D-C3B0-45BD-B328-8B00EB5724A4}"= TCP:c:\users\Rajiv\AppData\Roaming\Facebook\facebook.exe:Facebook "TCP Query User{E499054B-BC5E-4160-AD77-45E5CA255E20}c:\\program files\\macromedia\\dreamweaver 8\\dreamweaver.exe"= UDP:c:\program files\macromedia\dreamweaver 8\dreamweaver.exe:Dreamweaver 8 "UDP Query User{CCA10086-8DB2-4114-88B7-AE263814403A}c:\\program files\\macromedia\\dreamweaver 8\\dreamweaver.exe"= TCP:c:\program files\macromedia\dreamweaver 8\dreamweaver.exe:Dreamweaver 8 "{39E88427-6F4D-4197-919E-8BADABCE0A9D}"= UDP:c:\program files\Samsung\Samsung New PC Studio\npsasvr.exe:KTF MUSIC AoD Server "{64E54E0D-7A13-46D8-994C-03C7D4126020}"= TCP:c:\program files\Samsung\Samsung New PC Studio\npsasvr.exe:KTF MUSIC AoD Server "{87E680B3-182D-45ED-889D-640528A14DFF}"= UDP:c:\program files\Samsung\Samsung New PC Studio\npsvsvr.exe:KTF MUSIC VoD Server "{C5DEB228-D919-499D-A4ED-5ACF9254EB1A}"= TCP:c:\program files\Samsung\Samsung New PC Studio\npsvsvr.exe:KTF MUSIC VoD Server "TCP Query User{1A04B4E4-B94A-4763-BC21-E39E80245732}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire "UDP Query User{B4858618-5E72-4567-A087-7A3E480BF4F9}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire "{C433B7DC-FA70-4A40-AF91-5C3009EA13DC}"= Disabled:UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{0E3A3436-907F-4882-B95B-FA18FC0B3E3C}"= Disabled:TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{0DC64835-FF49-4706-B817-A7755230E2DA}"= Disabled:UDP:c:\program files\RelevantKnowledge\rlvknlg.exe:rlvknlg.exe "{A6D782CB-9DAD-4DF4-A621-098B943B7ACC}"= Disabled:TCP:c:\program files\RelevantKnowledge\rlvknlg.exe:rlvknlg.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "EnableFirewall"= 0 (0x0) "DoNotAllowExceptions"= 1 (0x1) R0 cdburner;cdburner;c:\windows\System32\drivers\cdburner.sys [2009-01-14 15872] R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [2009-02-22 64160] R0 McPvDrv;McPvDrv;c:\windows\System32\drivers\McPvDrv.sys [2008-05-28 61688] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2009-03-01 206096] S2 gupdate1c98fc2ec2bb25e;Google Update Service (gupdate1c98fc2ec2bb25e);c:\program files\Google\Update\GoogleUpdate.exe [2009-02-15 133104] S3 AsAudioDevice_354;AsAudioDevice_354;c:\windows\System32\drivers\AsAudioDevice_354.sys [2009-01-14 16640] S3 FsUsbExDisk;FsUsbExDisk;c:\windows\System32\FsUsbExDisk.Sys [2009-01-21 36608] S3 LTXMD_VAC;Litex Media Virtual Audio Cable (WDM);c:\windows\System32\drivers\lmvac.sys [2009-01-14 18912] S3 wsvad_driver;WS Audio Device;c:\windows\System32\drivers\VirtualAudio.sys [2009-01-14 16896] S4 FsUsbExService;FsUsbExService;c:\windows\System32\FsUsbExService.Exe [2009-01-21 233472] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G] \shell\AutoRun\command - G:\LaunchU3.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{451d4035-fb1f-11db-a10a-00197ee89bf7}] \shell\AutoRun\command - F:\LaunchU3.exe . Contents of the 'Scheduled Tasks' folder 2009-02-22 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [] 2009-03-06 c:\windows\Tasks\GoogleUpdateTaskMachine.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-02-15 15:12] 2009-02-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-300775179-2714954865-3135053195-1000.job - c:\users\Rajiv\AppData\Local\Google\Update\GoogleUpdate.exe [2008-09-16 16:19] 2009-03-01 c:\windows\Tasks\McDefragTask.job - c:\progra~1\mcafee\mqc\QcConsol.exe [2007-12-04 13:32] 2009-03-01 c:\windows\Tasks\McQcTask.job - c:\progra~1\mcafee\mqc\QcConsol.exe [2007-12-04 13:32] 2009-02-14 c:\windows\Tasks\SmartDefrag.job - c:\program files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe [2009-01-14 13:15] 2009-02-14 c:\windows\Tasks\SmartDefrag.job - c:\program files\IObit\IObit SmartDefrag\ [2009-02-13 16:06] 2009-03-06 c:\windows\Tasks\User_Feed_Synchronization-{426F55CC-BD12-4C0D-9D3F-1A7EE5244D22}.job - c:\windows\system32\msfeedssync.exe [2008-01-18 22:33] . - - - - ORPHANS REMOVED - - - - HKCU-Run-Aim6 - (no file) . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ig?hl=en&source=iglk uDefault_Search_URL = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm Trusted Zone: internet Trusted Zone: mcafee.com Trusted Zone: microsoft.com\*.update Trusted Zone: microsoft.com\update Trusted Zone: windowsupdate.com\download FF - ProfilePath - c:\users\Rajiv\AppData\Roaming\Mozilla\Firefox\Profiles\4ivj4yrs.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - prefs.js: browser.startup.homepage - chrome://fastdial/content/fastdial.html 1 file(s) moved. FF - component: c:\program files\Google\Google Gears\Firefox\components\gears.dll FF - component: c:\program files\McAfee\SiteAdvisor\components\McFFPlg.dll FF - component: c:\users\Rajiv\AppData\Roaming\Mozilla\Firefox\Profiles\4ivj4yrs.default\extensions\{3502a070-ea2f-11dd-ba2f-0800200c9a66}\components\mintray-9178506d-2005072516-trunk.dll FF - component: c:\users\Rajiv\AppData\Roaming\Mozilla\Firefox\Profiles\4ivj4yrs.default\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}\components\XpcomOpusConnector.dll FF - component: c:\users\Rajiv\AppData\Roaming\Mozilla\Firefox\Profiles\4ivj4yrs.default\extensions\[removed]\components\coolirisstub.dll FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll FF - plugin: c:\program files\Google\Update\1.2.141.5\npGoogleOneClick7.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npff_gdm.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npigl.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npsharedview.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll FF - plugin: c:\program files\Photosynth\npPhotosynthMozilla.dll FF - plugin: c:\users\Rajiv\AppData\Local\Google\Update\1.2.141.5\npGoogleOneClick7.dll ---- FIREFOX POLICIES ---- user_pref('capability.policy.policynames', 'localfilelinks');user_pref('capability.policy.localfilelinks.sites', 'hxxp://www.webmynd.com http://www.google.com');user_pref('capability.policy.localfilelinks.checkloaduri.enabled', 'allAccess');. ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-03-06 06:23:43 Windows 6.0.6001 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aac\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flac\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogg\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pls\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.spx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" [HKEY_USERS\.Default\CMI-CreateHive{274AB9BD-5778-42E7-84B9-863B8D8DF87A}\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice] @Denied: (2) (LocalSystem) "Progid"="YMP.Media" . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'Explorer.exe'(1548) c:\program files\RocketDock\RocketDock.dll c:\program files\McAfee\SiteAdvisor\saHook.dll c:\windows\system32\btncopy.dll c:\program files\ArcSoft\PhotoImpression 5\share\pihook.dll c:\program files\Roxio\Drag-to-Disc\Shellex.dll c:\windows\system32\DLAAPI_W.DLL c:\program files\Roxio\Drag-to-Disc\ShellRes.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\System32\audiodg.exe c:\windows\System32\WLTRYSVC.EXE c:\windows\System32\BCMWLTRY.EXE c:\windows\System32\rundll32.exe c:\progra~1\COMMON~1\McAfee\McProxy\McProxy.exe c:\progra~1\McAfee\VIRUSS~1\Mcshield.exe c:\program files\McAfee\MPF\MpfSrv.exe c:\program files\McAfee\MSK\msksrver.exe c:\windows\System32\rpcnet.exe c:\progra~1\McAfee\MSC\mcmscsvc.exe c:\progra~1\McAfee.com\Agent\mcagent.exe c:\windows\System32\igfxsrvc.exe c:\combofix\hidec.exe c:\windows\System32\wbem\unsecapp.exe c:\windows\ehome\ehmsas.exe c:\windows\System32\verclsid.exe c:\program files\McAfee\Anti-Theft\McUICnt.exe c:\progra~1\COMMON~1\McAfee\MNA\McNASvc.exe c:\progra~1\McAfee\MSC\mcuimgr.exe c:\combofix\Catchme.tmp . ************************************************************************** . Completion time: 2009-03-06 6:32:18 - machine was rebooted ComboFix-quarantined-files.txt 2009-03-06 14:30:24 ComboFix2.txt 2009-02-28 20:22:57 Pre-Run: 40,498,688,000 bytes free Post-Run: 40,080,547,840 bytes free 1618 --- E O F --- 2009-03-01 02:32:04