ComboFix 12-07-30.03 - Neil 03/08/2012 19:34:48.4.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.4008.2368 [GMT 3:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe Command switches used :: c:\users\Neil\Desktop\CFScript.txt AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} FW: COMODO Firewall *Disabled* {7DB03214-694B-060B-1600-BD4715C36DBB} SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: COMODO Defense+ *Disabled/Updated* {FEEA52D5-051E-08DD-07EF-2F009097607D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:\users\Neil\AppData\Roaming\Microsoft\Installer\{F7C1C17E-70E3-475F-BD52-EA554391F15D}\ARPPRODUCTICON.exe" "c:\users\Neil\AppData\Roaming\Microsoft\Installer\{F7C1C17E-70E3-475F-BD52-EA554391F15D}\GameShadow.exe_0A3DE514292C4EBA987823B82B0B2BA2.exe" "c:\users\Neil\AppData\Roaming\Microsoft\Installer\{F7C1C17E-70E3-475F-BD52-EA554391F15D}\GameShadow.exe1_0A3DE514292C4EBA987823B82B0B2BA2.exe" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Neil\AppData\Roaming\uTorrent c:\users\Neil\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9.btapp c:\users\Neil\AppData\Roaming\uTorrent\apps\player.btapp c:\users\Neil\AppData\Roaming\uTorrent\apps\plus.btapp c:\users\Neil\AppData\Roaming\uTorrent\apps\whatsnew-ut.btapp c:\users\Neil\AppData\Roaming\uTorrent\dht.dat c:\users\Neil\AppData\Roaming\uTorrent\dht.dat.old c:\users\Neil\AppData\Roaming\uTorrent\dht_feed.dat c:\users\Neil\AppData\Roaming\uTorrent\dht_feed.dat.old c:\users\Neil\AppData\Roaming\uTorrent\dlimagecache\10E6FBE4D921B475FA5FEC6E9A535A540D6FEED1 c:\users\Neil\AppData\Roaming\uTorrent\dlimagecache\32F529521A3DEC709F97F761F192AABF29BDC408 c:\users\Neil\AppData\Roaming\uTorrent\resume.dat c:\users\Neil\AppData\Roaming\uTorrent\resume.dat.old c:\users\Neil\AppData\Roaming\uTorrent\rss.dat c:\users\Neil\AppData\Roaming\uTorrent\rss.dat.old c:\users\Neil\AppData\Roaming\uTorrent\settings.dat c:\users\Neil\AppData\Roaming\uTorrent\settings.dat.old c:\windows\msxml4-KB2721691-enu.LOG . . ((((((((((((((((((((((((( Files Created from 2012-07-03 to 2012-08-03 ))))))))))))))))))))))))))))))) . . 2012-08-03 16:40 . 2012-08-03 16:40 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2012-08-03 16:40 . 2012-08-03 16:40 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-08-01 06:12 . 2012-08-01 06:12 -------- d-----w- c:\windows\Sun 2012-08-01 06:12 . 2012-08-01 06:12 -------- d-----w- c:\users\Neil\AppData\Local\Aimersoft 2012-08-01 06:12 . 2012-08-01 06:12 -------- d-----w- c:\program files (x86)\Common Files\Aimersoft 2012-08-01 06:11 . 2012-08-01 06:11 -------- d-----w- c:\program files (x86)\Aimersoft 2012-08-01 05:38 . 2012-08-01 05:38 -------- d-----w- C:\VritualRoot 2012-07-31 15:04 . 2011-03-11 06:23 1657216 ----a-w- c:\windows\system32\drivers\ntfs.sys 2012-07-31 15:04 . 2011-03-11 06:23 187264 ----a-w- c:\windows\system32\drivers\storport.sys 2012-07-31 15:04 . 2011-03-11 06:18 2566144 ----a-w- c:\windows\system32\esent.dll 2012-07-31 15:04 . 2011-03-11 05:39 1686016 ----a-w- c:\windows\SysWow64\esent.dll 2012-07-31 15:04 . 2011-03-11 06:23 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys 2012-07-31 15:04 . 2011-03-11 06:15 96768 ----a-w- c:\windows\system32\fsutil.exe 2012-07-31 15:04 . 2011-03-11 06:23 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys 2012-07-31 15:04 . 2011-03-11 06:23 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys 2012-07-31 15:04 . 2011-03-11 06:22 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys 2012-07-31 15:04 . 2011-03-11 06:22 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys 2012-07-31 15:04 . 2011-03-11 05:37 74240 ----a-w- c:\windows\SysWow64\fsutil.exe 2012-07-31 15:04 . 2011-03-11 04:31 91136 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS 2012-07-31 14:17 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll 2012-07-31 14:17 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll 2012-07-31 14:16 . 2012-06-12 03:02 3147264 ----a-w- c:\windows\system32\win32k.sys 2012-07-31 13:56 . 2012-07-31 13:56 -------- d-----w- c:\windows\system32\SPReview 2012-07-31 13:56 . 2012-07-31 13:56 -------- d-----w- c:\windows\system32\EventProviders 2012-07-31 13:12 . 2012-06-09 05:30 14165504 ----a-w- c:\windows\system32\shell32.dll 2012-07-31 13:12 . 2012-06-06 05:50 2003968 ----a-w- c:\windows\system32\msxml6.dll 2012-07-31 13:12 . 2012-06-06 05:50 1880064 ----a-w- c:\windows\system32\msxml3.dll 2012-07-31 13:12 . 2012-06-06 05:09 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll 2012-07-31 13:12 . 2012-06-06 05:09 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll 2012-07-31 13:11 . 2012-03-03 05:40 1170944 ----a-w- c:\windows\SysWow64\d3d10warp.dll 2012-07-31 13:11 . 2012-03-03 05:40 218624 ----a-w- c:\windows\SysWow64\d3d10_1core.dll 2012-07-31 13:11 . 2012-03-03 06:29 1837568 ----a-w- c:\windows\system32\d3d10warp.dll 2012-07-31 13:11 . 2012-03-03 05:40 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll 2012-07-31 13:11 . 2012-03-03 05:40 739840 ----a-w- c:\windows\SysWow64\d2d1.dll 2012-07-31 13:11 . 2012-03-03 05:40 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll 2012-07-31 13:11 . 2012-03-03 06:29 1541120 ----a-w- c:\windows\system32\DWrite.dll 2012-07-31 13:11 . 2012-03-03 06:29 320512 ----a-w- c:\windows\system32\d3d10_1core.dll 2012-07-31 13:11 . 2012-03-03 06:29 197120 ----a-w- c:\windows\system32\d3d10_1.dll 2012-07-31 13:11 . 2012-03-03 06:29 902656 ----a-w- c:\windows\system32\d2d1.dll 2012-07-31 13:11 . 2011-02-24 05:32 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2012-07-31 13:11 . 2011-02-24 06:30 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2012-07-31 13:09 . 2012-01-04 09:03 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll 2012-07-31 13:08 . 2010-11-02 04:41 135168 ----a-w- c:\windows\SysWow64\XpsRasterService.dll 2012-07-31 13:07 . 2012-04-24 05:59 182272 ----a-w- c:\windows\system32\cryptsvc.dll 2012-07-31 13:06 . 2012-02-15 06:27 1031680 ----a-w- c:\windows\system32\rdpcore.dll 2012-07-31 13:06 . 2011-08-15 04:25 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll 2012-07-31 13:06 . 2011-08-15 05:08 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll 2012-07-31 13:05 . 2012-03-30 11:09 1895280 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-07-31 13:05 . 2012-04-02 04:40 936960 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll 2012-07-31 13:05 . 2012-04-02 05:26 1732096 ----a-w- c:\program files\Windows Journal\NBDoc.DLL 2012-07-31 13:05 . 2012-04-02 05:24 1367552 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2012-07-31 13:05 . 2012-04-02 05:24 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll 2012-07-31 13:05 . 2012-04-02 05:24 1393664 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll 2012-07-31 13:05 . 2012-06-06 05:09 987136 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll 2012-07-31 13:05 . 2012-06-06 05:50 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll 2012-07-31 11:54 . 2012-07-31 11:54 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service 2012-07-31 11:54 . 2012-07-31 11:54 770384 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr100.dll 2012-07-31 11:54 . 2012-07-31 11:54 68576 ----a-w- c:\program files (x86)\Mozilla Firefox\mozglue.dll 2012-07-31 11:54 . 2012-07-31 11:54 573920 ----a-w- c:\program files (x86)\Mozilla Firefox\gkmedias.dll 2012-07-31 11:54 . 2012-07-31 11:54 421200 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp100.dll 2012-07-31 11:54 . 2012-07-31 11:54 157608 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice_installer.exe 2012-07-31 11:54 . 2012-07-31 11:54 113120 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice.exe 2012-07-28 16:10 . 2012-07-28 16:10 -------- d-----w- c:\program files (x86)\Common Files\Java 2012-07-28 16:09 . 2012-07-28 16:09 -------- d-----w- c:\program files (x86)\Oracle 2012-07-28 15:39 . 2012-07-28 15:39 -------- d-----w- c:\program files (x86)\Gophoto.it 2012-07-27 18:07 . 2012-07-27 18:07 -------- d-----w- c:\program files (x86)\ESET 2012-07-26 18:44 . 2012-07-26 18:44 -------- d-----w- c:\users\Neil\AppData\Roaming\AVG2012 2012-07-26 18:39 . 2012-07-26 18:39 -------- d-----w- c:\users\Neil\AppData\Local\AVG Secure Search 2012-07-26 18:39 . 2012-07-26 18:39 -------- d-----w- c:\programdata\AVG Secure Search 2012-07-26 18:39 . 2012-07-26 18:39 31080 ----a-w- c:\windows\system32\drivers\avgtpx64.sys 2012-07-26 18:39 . 2012-07-26 18:39 -------- d-----w- c:\program files (x86)\Common Files\AVG Secure Search 2012-07-26 18:39 . 2012-07-26 18:39 -------- d-----w- c:\program files (x86)\AVG Secure Search 2012-07-26 18:37 . 2012-07-26 18:37 -------- d-----w- c:\windows\SysWow64\drivers\AVG 2012-07-26 18:36 . 2012-07-26 18:36 -------- d-----w- C:\$AVG 2012-07-26 18:36 . 2012-07-31 14:02 -------- d-----w- c:\windows\system32\drivers\AVG 2012-07-26 18:36 . 2012-07-30 05:52 -------- d-----w- c:\programdata\AVG2012 2012-07-26 18:35 . 2012-07-26 18:35 -------- d-----w- c:\program files (x86)\AVG 2012-07-26 18:26 . 2012-07-31 14:03 -------- d-----w- c:\programdata\MFAData 2012-07-26 14:21 . 2012-07-26 14:40 -------- d-----w- c:\programdata\AVAST Software 2012-07-26 14:21 . 2012-07-26 14:21 -------- d-----w- c:\program files\AVAST Software 2012-07-24 07:04 . 2012-07-15 23:40 9133488 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{659E5291-D64A-4FA9-B683-6725EE09FBA2}\mpengine.dll 2012-07-22 20:57 . 2012-07-22 20:57 98304 ----a-w- c:\windows\system32\drivers\ew_jucdcacm.sys 2012-07-22 20:57 . 2012-07-22 20:57 87040 ----a-w- c:\windows\system32\drivers\ew_jubusenum.sys 2012-07-22 20:57 . 2012-07-22 20:57 72192 ----a-w- c:\windows\system32\drivers\ew_jucdcecm.sys 2012-07-22 20:57 . 2012-07-22 20:57 417280 ----a-w- c:\windows\system32\drivers\ewusbwwan.sys 2012-07-22 20:57 . 2012-07-22 20:57 32768 ----a-w- c:\windows\system32\drivers\ewdcsc.sys 2012-07-22 20:57 . 2012-07-22 20:57 28672 ----a-w- c:\windows\system32\drivers\ew_juextctrl.sys 2012-07-22 20:57 . 2012-07-22 20:57 223232 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys 2012-07-22 20:57 . 2012-07-22 20:57 22016 ----a-w- c:\windows\system32\drivers\ew_hwupgrade.sys 2012-07-22 20:57 . 2012-07-22 20:57 218624 ----a-w- c:\windows\system32\drivers\ew_juwwanecm.sys 2012-07-22 20:57 . 2012-07-22 20:57 13952 ----a-w- c:\windows\system32\drivers\ew_usbenumfilter.sys 2012-07-22 20:57 . 2012-07-22 20:57 117248 ----a-w- c:\windows\system32\drivers\ew_hwusbdev.sys 2012-07-22 20:57 . 2012-07-22 20:57 1001472 ----a-w- c:\windows\system32\drivers\mod7700.sys 2012-07-21 03:36 . 2012-07-21 03:36 -------- d-----w- C:\FRST 2012-07-15 21:27 . 2012-07-15 21:27 -------- d-----w- c:\users\Neil\AppData\Roaming\Malwarebytes 2012-07-15 21:26 . 2012-07-15 21:26 -------- d-----w- c:\programdata\Malwarebytes 2012-07-15 21:26 . 2012-07-15 21:26 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-07-15 21:26 . 2012-07-03 10:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-07-14 20:27 . 2012-07-14 20:27 -------- d-sh--w- c:\windows\SysWow64\%APPDATA% 2012-07-10 21:17 . 2012-07-12 22:46 -------- d-----w- c:\programdata\CPA_VA 2012-07-10 20:59 . 2012-07-10 21:08 -------- d-----w- c:\programdata\Comodo 2012-07-10 20:59 . 2012-07-10 20:59 -------- d-----w- c:\program files\COMODO 2012-07-10 20:59 . 2012-07-10 20:59 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll 2012-07-10 20:59 . 2012-07-10 20:59 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll 2012-07-10 13:39 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-07-10 13:39 . 2012-03-01 06:45 220672 ----a-w- c:\windows\system32\wintrust.dll 2012-07-10 13:39 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll 2012-07-10 13:39 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll 2012-07-10 13:39 . 2012-03-01 05:49 172544 ----a-w- c:\windows\SysWow64\wintrust.dll 2012-07-10 13:39 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll 2012-07-10 13:39 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll 2012-07-09 08:47 . 2012-07-22 20:33 -------- d-----w- c:\programdata\SecTaskMan 2012-07-09 08:47 . 2012-07-09 10:05 -------- d-----w- c:\program files (x86)\Security Task Manager 2012-07-09 08:32 . 2011-02-18 06:33 31232 ----a-w- c:\windows\system32\prevhost.exe 2012-07-09 08:32 . 2011-02-18 05:33 31232 ----a-w- c:\windows\SysWow64\prevhost.exe 2012-07-08 21:08 . 2012-07-08 21:08 -------- d-----w- c:\windows\SysWow64\My Vaults 2012-07-08 19:42 . 2012-07-08 19:42 -------- d-----w- c:\programdata\bdch 2012-07-08 15:10 . 2012-07-08 15:10 -------- d-----w- C:\found.000 2012-07-08 14:33 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll 2012-07-08 14:33 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe 2012-07-08 14:33 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll 2012-07-08 14:33 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll 2012-07-08 14:33 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll 2012-07-08 14:33 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll 2012-07-08 14:33 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-07-31 14:02 . 2012-03-09 18:04 59701280 ----a-w- c:\windows\system32\MRT.exe 2012-07-30 05:48 . 2011-05-16 21:30 45056 ----a-w- c:\windows\system32\acovcnt.exe 2012-07-22 20:57 . 2012-03-05 08:24 1490656 ----a-w- c:\windows\system32\WdfCoInstaller01007.dll 2012-07-22 20:57 . 2012-03-05 08:24 1490656 ----a-w- c:\windows\system32\drivers\WdfCoInstaller01007.dll 2012-07-05 19:06 . 2012-07-04 07:04 772544 ----a-w- c:\windows\SysWow64\npdeployJava1.dll 2012-07-05 19:06 . 2012-03-09 14:54 687544 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-07-03 16:21 . 2011-10-23 18:44 285328 ----a-w- c:\windows\system32\aswBoot.exe 2012-06-07 10:34 . 2012-06-07 10:34 419488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-06-07 10:34 . 2012-03-12 12:46 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl . . ((((((((((((((((((((((((((((( SnapShot_2012-07-31_12.16.02 ))))))))))))))))))))))))))))))))))))))))) . + 2012-07-31 13:10 . 2010-12-21 05:38 51200 c:\windows\SysWOW64\wscapi.dll + 2012-07-31 13:09 . 2012-06-02 04:42 96768 c:\windows\SysWOW64\sspicli.dll - 2012-03-07 12:14 . 2011-11-17 05:35 96768 c:\windows\SysWOW64\sspicli.dll + 2012-07-31 13:10 . 2010-12-21 05:38 14336 c:\windows\SysWOW64\slwga.dll - 2012-03-07 12:14 . 2011-11-17 05:39 22016 c:\windows\SysWOW64\secur32.dll + 2012-07-31 13:09 . 2012-06-02 04:48 22016 c:\windows\SysWOW64\secur32.dll - 2009-07-14 00:13 . 2009-07-14 01:14 86528 c:\windows\SysWOW64\SearchFilterHost.exe + 2012-07-31 13:10 . 2011-05-04 04:52 86528 c:\windows\SysWOW64\SearchFilterHost.exe - 2009-07-14 00:12 . 2009-07-14 01:15 59392 c:\windows\SysWOW64\msscntrs.dll + 2012-07-31 13:10 . 2011-05-04 04:52 59392 c:\windows\SysWOW64\msscntrs.dll + 2012-07-31 13:09 . 2012-04-20 05:06 67584 c:\windows\SysWOW64\mshtmled.dll - 2012-03-07 12:17 . 2011-12-16 07:56 12800 c:\windows\SysWOW64\msfeedssync.exe + 2012-07-31 13:09 . 2012-04-20 05:03 12800 c:\windows\SysWOW64\msfeedssync.exe + 2012-07-31 13:09 . 2012-04-20 05:06 64512 c:\windows\SysWOW64\msfeedsbs.dll - 2012-03-07 12:17 . 2011-12-16 07:59 64512 c:\windows\SysWOW64\msfeedsbs.dll - 2012-03-07 12:17 . 2011-12-16 08:02 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2012-07-31 13:09 . 2012-05-15 03:08 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2012-07-31 13:09 . 2012-04-20 05:05 44544 c:\windows\SysWOW64\licmgr10.dll - 2012-03-07 12:17 . 2011-12-16 07:58 44544 c:\windows\SysWOW64\licmgr10.dll + 2012-07-31 13:09 . 2012-05-15 03:06 48128 c:\windows\SysWOW64\jsproxy.dll - 2012-03-07 12:17 . 2011-12-16 07:58 48128 c:\windows\SysWOW64\jsproxy.dll + 2012-03-19 20:25 . 2012-03-19 20:25 58880 c:\windows\SysWOW64\igdde32.dll + 2012-07-31 13:10 . 2010-12-21 05:34 80384 c:\windows\SysWOW64\davclnt.dll + 2012-07-31 13:10 . 2010-12-21 06:16 97280 c:\windows\system32\wscsvc.dll - 2009-07-13 23:48 . 2009-07-14 01:41 97280 c:\windows\system32\wscsvc.dll + 2012-07-31 13:10 . 2010-12-21 06:16 62976 c:\windows\system32\wscapi.dll + 2011-10-08 17:47 . 2012-08-01 06:48 74824 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2011-05-16 21:16 . 2012-07-31 16:00 48398 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2012-07-31 16:00 40568 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2011-10-08 10:19 . 2012-07-31 16:00 13678 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3022402605-2101226938-1445187523-1001_UserData.bin + 2012-07-31 13:10 . 2010-12-21 06:15 15360 c:\windows\system32\slwga.dll + 2012-07-31 13:09 . 2012-04-26 05:34 76288 c:\windows\system32\rdpwsx.dll - 2009-07-14 00:17 . 2009-07-14 01:41 76288 c:\windows\system32\rdpwsx.dll + 2012-07-31 13:10 . 2011-05-04 05:28 75264 c:\windows\system32\msscntrs.dll - 2009-07-14 00:29 . 2009-07-14 01:41 75264 c:\windows\system32\msscntrs.dll + 2012-07-31 13:09 . 2012-04-20 06:22 97792 c:\windows\system32\mshtmled.dll - 2012-03-07 12:17 . 2011-12-16 08:38 12288 c:\windows\system32\msfeedssync.exe + 2012-07-31 13:09 . 2012-04-20 06:18 12288 c:\windows\system32\msfeedssync.exe + 2012-07-31 13:09 . 2012-04-20 06:22 82944 c:\windows\system32\msfeedsbs.dll - 2012-03-07 12:17 . 2011-12-16 08:42 82944 c:\windows\system32\msfeedsbs.dll - 2012-03-07 12:17 . 2011-12-16 08:45 95232 c:\windows\system32\migration\WininetPlugin.dll + 2012-07-31 13:09 . 2012-05-15 03:56 95232 c:\windows\system32\migration\WininetPlugin.dll + 2012-07-31 13:09 . 2012-04-20 06:22 57856 c:\windows\system32\licmgr10.dll - 2012-03-07 12:17 . 2011-12-16 08:41 57856 c:\windows\system32\licmgr10.dll + 2012-07-31 13:09 . 2012-05-15 03:52 64512 c:\windows\system32\jsproxy.dll - 2012-03-07 12:17 . 2011-12-16 08:41 64512 c:\windows\system32\jsproxy.dll + 2011-04-22 07:38 . 2012-03-19 19:17 63488 c:\windows\system32\igfxsrvc.dll + 2012-03-19 20:31 . 2012-03-19 20:31 79360 c:\windows\system32\igdde64.dll + 2012-07-31 13:56 . 2012-07-31 13:56 13312 c:\windows\system32\EventProviders\spcmsg.dll + 2009-07-14 05:30 . 2012-07-31 15:58 86016 c:\windows\system32\DriverStore\infpub.dat - 2009-07-14 05:30 . 2012-07-23 09:22 86016 c:\windows\system32\DriverStore\infpub.dat + 2012-07-31 15:04 . 2011-03-11 04:31 91136 c:\windows\system32\DriverStore\FileRepository\usbstor.inf_amd64_neutral_dd8b7470ecdd8b8b\USBSTOR.SYS + 2012-07-31 13:07 . 2011-03-25 03:22 30720 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbuhci.sys + 2012-07-31 13:07 . 2011-03-25 03:22 25600 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbohci.sys + 2012-07-31 13:07 . 2011-03-25 03:22 52224 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbehci.sys + 2012-07-31 13:07 . 2011-03-29 03:32 30720 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_32b891a75fdd3ea3\usbuhci.sys + 2012-07-31 13:07 . 2011-03-29 03:32 25600 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_32b891a75fdd3ea3\usbohci.sys + 2012-07-31 13:07 . 2011-03-29 03:32 52224 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_32b891a75fdd3ea3\usbehci.sys + 2012-07-31 13:07 . 2011-03-25 03:23 98816 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_d378b476be3d939d\usbccgp.sys + 2012-07-31 13:07 . 2011-03-29 03:32 99328 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_0fee94e08ee0fbda\usbccgp.sys + 2012-03-19 19:09 . 2012-03-19 19:09 52736 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\OpenCL64.dll + 2012-03-19 19:09 . 2012-03-19 19:09 51200 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\OpenCL.dll + 2012-03-19 20:42 . 2012-03-19 20:42 90112 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igxpco64.dll + 2012-03-19 19:17 . 2012-03-19 19:17 63488 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxsrvc.dll + 2012-03-19 19:12 . 2012-03-19 19:12 25088 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxexps32.dll + 2012-03-19 19:17 . 2012-03-19 19:17 28672 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxexps.dll + 2012-03-19 20:31 . 2012-03-19 20:31 79360 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdde64.dll + 2012-03-19 20:25 . 2012-03-19 20:25 58880 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdde32.dll + 2012-03-19 19:09 . 2012-03-19 19:09 94208 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\IccLibDll_x64.dll + 2010-10-19 20:34 . 2010-10-19 20:34 56344 c:\windows\system32\DriverStore\FileRepository\heci.inf_amd64_neutral_b21f869920c8c3fa\HECIx64.sys + 2012-03-10 09:42 . 2011-04-28 03:58 80384 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_6c7b4ac630551f33\BTHUSB.SYS + 2009-07-14 00:06 . 2009-07-14 00:06 41984 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_6c7b4ac630551f33\bthenum.sys + 2012-07-31 15:04 . 2011-03-11 06:22 27008 c:\windows\system32\DriverStore\FileRepository\amdsata.inf_amd64_neutral_66a166f5508d8f1c\amdxata.sys + 2012-07-31 13:07 . 2011-03-29 03:32 30720 c:\windows\system32\drivers\usbuhci.sys - 2009-07-14 00:06 . 2009-07-14 00:06 30720 c:\windows\system32\drivers\usbuhci.sys + 2012-07-31 13:07 . 2011-03-29 03:32 25600 c:\windows\system32\drivers\usbohci.sys - 2009-07-14 00:06 . 2009-07-14 00:06 25600 c:\windows\system32\drivers\usbohci.sys + 2012-07-31 13:07 . 2011-03-29 03:32 52224 c:\windows\system32\drivers\usbehci.sys + 2012-07-31 13:07 . 2011-03-29 03:32 99328 c:\windows\system32\drivers\usbccgp.sys + 2012-07-31 13:07 . 2012-02-15 04:46 23552 c:\windows\system32\drivers\tdtcp.sys - 2009-07-14 00:16 . 2009-07-14 00:16 23552 c:\windows\system32\drivers\tdtcp.sys + 2012-07-31 13:07 . 2012-03-17 07:55 75632 c:\windows\system32\drivers\partmgr.sys - 2012-03-07 12:14 . 2011-11-17 07:17 95088 c:\windows\system32\drivers\ksecdd.sys + 2012-07-31 13:09 . 2012-06-02 05:38 95088 c:\windows\system32\drivers\ksecdd.sys + 2010-10-19 20:34 . 2010-10-19 20:34 56344 c:\windows\system32\drivers\HECIx64.sys - 2011-04-22 07:36 . 2010-09-22 01:59 56344 c:\windows\system32\drivers\HECIx64.sys + 2012-07-31 13:08 . 2011-04-22 20:18 27008 c:\windows\system32\drivers\Diskdump.sys - 2011-01-12 18:01 . 2011-01-12 18:01 27008 c:\windows\system32\drivers\Diskdump.sys + 2012-03-10 09:42 . 2011-04-28 03:58 80384 c:\windows\system32\drivers\BTHUSB.SYS - 2011-10-09 01:06 . 2012-07-31 11:37 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2011-10-09 01:06 . 2012-08-03 16:13 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-10-09 01:06 . 2012-07-31 11:37 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2011-10-09 01:06 . 2012-08-03 16:13 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2012-07-31 11:37 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2012-08-03 16:13 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-02-12 12:22 . 2012-07-31 16:00 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2012-02-12 12:22 . 2012-07-31 11:39 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:46 . 2012-07-31 16:01 78512 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2012-02-12 12:22 . 2012-07-31 11:39 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2012-02-12 12:22 . 2012-07-31 16:00 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2012-02-12 12:22 . 2012-07-31 11:39 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-02-12 12:22 . 2012-07-31 16:00 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2011-10-08 10:31 . 2012-07-31 11:39 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2011-10-08 10:31 . 2012-08-03 15:59 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2011-10-08 10:31 . 2012-08-03 15:59 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2011-10-08 10:31 . 2012-07-31 11:39 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2011-10-30 12:49 . 2012-07-10 14:41 23040 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe + 2011-10-30 12:49 . 2012-07-31 13:54 23040 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe - 2011-10-30 12:49 . 2012-07-10 14:41 61440 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe + 2011-10-30 12:49 . 2012-07-31 13:54 61440 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe + 2011-10-30 12:49 . 2012-07-31 13:54 27136 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe - 2011-10-30 12:49 . 2012-07-10 14:41 27136 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe - 2011-10-30 12:49 . 2012-07-10 14:41 11264 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe + 2011-10-30 12:49 . 2012-07-31 13:54 11264 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe + 2011-10-30 12:49 . 2012-07-31 13:54 86016 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe - 2011-10-30 12:49 . 2012-07-10 14:41 86016 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe + 2011-10-30 12:49 . 2012-07-31 13:54 12288 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe - 2011-10-30 12:49 . 2012-07-10 14:41 12288 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe + 2012-07-31 18:38 . 2012-07-31 18:38 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\cf409e6576e3acec611838a755293418\System.Windows.Presentation.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\0e8a192d6df9aa905653ddce81fa3895\System.Web.DynamicData.Design.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\ef1f41de2634a23063369e7eb1cac97b\stdole.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\ecc5750e8d62675bf59eb202eeeeacbe\PresentationFontCache.ni.exe + 2012-07-31 14:43 . 2012-07-31 14:43 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\cc29df25d166ceed89d259b00e2bba9e\PresentationCFFRasterizer.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\dd71ed714dc374e3d85824c17795e706\Microsoft.WSMan.Runtime.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\b8dac004fdabbb2dc12830dcd22fed29\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\6b86a80d8cb8fb51252e0cd8fe697f9f\Microsoft.Windows.Diagnosis.SDEngine.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\64c811070a4d05e238e27d2a6e9bed25\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4eaff8355f942bb1a95300aeb2882602\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\3453bb2216048726659887ecaf5cce4a\Microsoft.Windows.Diagnosis.SDHost.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\12abdc966e63bcb3077c71c6483762c3\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll + 2012-07-31 14:42 . 2012-07-31 14:42 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\e0e2b0cdfa700bc21e09ddac3a9b46cc\Microsoft.VisualC.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c341c5df5ab35bb87765f39688c1e7ec\Microsoft.MediaCenter.iTv.Hosting.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\62299472064bb88c63cdfa740cc34f1d\LoadMxf.ni.exe + 2012-07-31 16:20 . 2012-07-31 16:20 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\4ba55ae7274a85c8ae32a36aa8bcbfc5\ehiUPnP.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\f9bd420501d5877ff7dd7fe308663935\ehiTVMSMusic.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\c1ba413fc8eb57b417a2de4cf678e4f6\dfsvc.ni.exe + 2012-07-31 14:43 . 2012-07-31 14:43 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\0bc383bf9841cca7654fe938399b3a07\Accessibility.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\1a432706876ec408c6da802db3c3df1b\WindowsLiveWriter.ni.exe + 2012-07-31 16:15 . 2012-07-31 16:15 80896 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ba867ca3904c3f26e2283c2b7117345c\WindowsLive.Writer.Passport.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\68b5806af0df6ce86027bacb7dc37233\UIAutomationProvider.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\b0b664ed5c18ac51259abb7902671370\System.Windows.Presentation.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\f5c5517bf252bf6c4d8de833d2111309\System.Web.DynamicData.Design.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\bdf3aabfa0a15d557aec32505a5eaaee\System.ComponentModel.DataAnnotations.ni.dll + 2012-07-31 14:48 . 2012-07-31 14:48 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\99bb6d93ce5daed24761530fa32ed5f4\System.AddIn.Contract.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\5357cca887f53e1007fc9cf4c0c9a412\stdole.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\b0cdc419b6f2b0ddf0cda5f157e67516\PresentationFontCache.ni.exe + 2012-07-31 14:44 . 2012-07-31 14:44 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\8ac4be1ad8f1aae0c23366c9ce0724e0\PresentationCFFRasterizer.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\1af767233028c3165de880775391c53f\napcrypt.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\b9935982ad038d7a02f7931a8ee2977b\Microsoft.WSMan.Runtime.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ea54c98d0fa82cdb0bf5ec9b50463d75\Microsoft.Windows.Diagnosis.SDEngine.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ddf3add57c84af5d63b3a2398ed5e1a4\Microsoft.Windows.Diagnosis.SDHost.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\bd26bb6b78c6c02df886f26342b5e76a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6a491bf821cc13223f288eb72176ffc7\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6a1cb87d9cb795b53eab2c57e2d7db48\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\62e634be25913db13e84a26296cee020\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\5c234eea7e7d54a466ad00d9ac238e6a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\dc44431123bc3e6b39dbea49ac1f1963\Microsoft.Vsa.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\b69ac98f94e80b659eac618c6142ea9b\Microsoft.VisualC.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\6ddfa12f22ada63da088e98223858b69\Microsoft.Build.Framework.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\2f7754efa196f832b12b4133f0eae060\Microsoft.Build.Framework.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\094c7076aed91bda969c01f72d4bb63a\ehiUserXp.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\3c44431071abcaba099902fb72392688\dfsvc.ni.exe + 2012-07-31 14:44 . 2012-07-31 14:44 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\34f340b0c113f7216a55dd7c82a69cc2\Accessibility.ni.dll + 2012-07-31 13:09 . 2012-04-26 05:28 9216 c:\windows\system32\rdrmemptylst.exe + 2012-08-01 10:11 . 2012-08-01 10:11 9560 c:\windows\system32\NetworkList\Icons\{12B9275D-37C9-4F75-BF22-9D7CDD0268A0}_48.bin + 2012-08-01 10:11 . 2012-08-01 10:11 4280 c:\windows\system32\NetworkList\Icons\{12B9275D-37C9-4F75-BF22-9D7CDD0268A0}_32.bin + 2012-08-01 10:11 . 2012-08-01 10:11 2456 c:\windows\system32\NetworkList\Icons\{12B9275D-37C9-4F75-BF22-9D7CDD0268A0}_24.bin + 2012-07-31 13:07 . 2011-03-25 03:22 7936 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbd.sys + 2012-07-31 13:07 . 2011-03-29 03:32 7936 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_32b891a75fdd3ea3\usbd.sys + 2012-03-19 19:17 . 2012-03-19 19:17 9216 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\IGFXDEVLib.dll - 2009-07-14 00:06 . 2009-07-14 00:06 7936 c:\windows\system32\drivers\usbd.sys + 2012-07-31 13:07 . 2011-03-29 03:32 7936 c:\windows\system32\drivers\usbd.sys - 2011-01-12 17:10 . 2012-07-31 11:35 2190 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat + 2011-01-12 17:10 . 2012-07-31 15:56 2190 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat + 2012-07-31 15:58 . 2012-07-31 15:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2012-07-31 11:37 . 2012-07-31 11:37 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2012-07-31 11:37 . 2012-07-31 11:37 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-07-31 15:58 . 2012-07-31 15:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2011-10-30 12:49 . 2012-07-10 14:41 4096 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2011-10-30 12:49 . 2012-07-31 13:54 4096 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2012-07-31 13:10 . 2011-03-12 11:31 442880 c:\windows\SysWOW64\XpsPrint.dll - 2009-07-14 00:20 . 2009-07-14 01:16 180224 c:\windows\SysWOW64\xmllite.dll + 2012-07-31 13:10 . 2011-06-16 04:35 180224 c:\windows\SysWOW64\xmllite.dll - 2012-03-07 12:17 . 2011-12-16 08:02 981504 c:\windows\SysWOW64\wininet.dll + 2012-07-31 13:09 . 2012-05-15 03:08 981504 c:\windows\SysWOW64\wininet.dll + 2012-07-31 13:10 . 2010-12-21 05:38 350720 c:\windows\SysWOW64\winhttp.dll + 2012-07-31 13:10 . 2010-12-21 05:38 204800 c:\windows\SysWOW64\WebClnt.dll + 2012-07-31 13:09 . 2012-04-20 05:07 132096 c:\windows\SysWOW64\url.dll - 2012-03-07 12:17 . 2011-12-16 08:02 132096 c:\windows\SysWOW64\url.dll + 2012-07-31 13:10 . 2010-12-21 05:38 204288 c:\windows\SysWOW64\upnp.dll + 2012-07-31 13:10 . 2011-05-04 04:52 164352 c:\windows\SysWOW64\SearchProtocolHost.exe - 2009-07-14 00:14 . 2009-07-14 01:14 164352 c:\windows\SysWOW64\SearchProtocolHost.exe + 2012-07-31 13:10 . 2011-05-04 04:52 428032 c:\windows\SysWOW64\SearchIndexer.exe - 2009-07-14 00:14 . 2009-07-14 01:14 428032 c:\windows\SysWOW64\SearchIndexer.exe + 2012-07-31 13:09 . 2012-06-02 04:48 225280 c:\windows\SysWOW64\schannel.dll + 2012-07-31 13:07 . 2012-02-15 05:44 826368 c:\windows\SysWOW64\rdpcore.dll - 2009-07-14 00:01 . 2009-07-14 01:16 826368 c:\windows\SysWOW64\rdpcore.dll - 2009-07-13 23:33 . 2009-07-14 01:16 219136 c:\windows\SysWOW64\ncrypt.dll + 2012-07-31 13:09 . 2012-06-02 04:47 219136 c:\windows\SysWOW64\ncrypt.dll - 2012-03-07 12:17 . 2011-12-16 07:59 606208 c:\windows\SysWOW64\mstime.dll + 2012-07-31 13:09 . 2012-04-20 05:06 606208 c:\windows\SysWOW64\mstime.dll + 2012-07-31 13:10 . 2011-05-04 04:52 666624 c:\windows\SysWOW64\mssvp.dll - 2009-07-14 00:13 . 2009-07-14 01:15 666624 c:\windows\SysWOW64\mssvp.dll + 2012-07-31 13:10 . 2011-05-04 04:52 197120 c:\windows\SysWOW64\mssphtb.dll - 2009-07-14 00:14 . 2009-07-14 01:15 197120 c:\windows\SysWOW64\mssphtb.dll + 2012-07-31 13:10 . 2011-05-04 04:52 337408 c:\windows\SysWOW64\mssph.dll - 2009-07-14 00:13 . 2009-07-14 01:15 337408 c:\windows\SysWOW64\mssph.dll + 2012-07-31 13:09 . 2012-04-20 05:06 627200 c:\windows\SysWOW64\msfeeds.dll + 2012-07-31 13:10 . 2012-04-17 04:45 716800 c:\windows\SysWOW64\jscript.dll - 2012-03-07 12:10 . 2011-02-18 05:35 716800 c:\windows\SysWOW64\jscript.dll + 2012-03-19 20:44 . 2012-03-19 20:44 276248 c:\windows\SysWOW64\IntelCpHeciSvc.exe + 2012-03-19 19:09 . 2012-03-19 19:09 519680 c:\windows\SysWOW64\iglhsip32.dll + 2012-03-19 19:09 . 2012-03-19 19:09 177152 c:\windows\SysWOW64\iglhcp32.dll + 2012-03-19 20:31 . 2012-03-19 20:31 963912 c:\windows\SysWOW64\igkrng600.bin + 2012-03-19 19:11 . 2012-03-19 19:11 325120 c:\windows\SysWOW64\igfxdv32.dll + 2012-03-19 19:09 . 2012-03-19 19:09 237056 c:\windows\SysWOW64\igfxcmrt32.dll + 2012-03-19 20:31 . 2012-03-19 20:31 261208 c:\windows\SysWOW64\igfcg600m.bin - 2012-03-07 12:17 . 2011-12-16 07:58 176640 c:\windows\SysWOW64\ieui.dll + 2012-07-31 13:09 . 2012-04-20 05:05 176640 c:\windows\SysWOW64\ieui.dll + 2012-07-31 13:09 . 2012-04-20 05:05 185856 c:\windows\SysWOW64\iepeers.dll - 2012-03-07 12:17 . 2011-12-16 07:58 185856 c:\windows\SysWOW64\iepeers.dll - 2012-03-07 12:17 . 2011-12-16 07:58 381440 c:\windows\SysWOW64\iedkcs32.dll + 2012-07-31 13:09 . 2012-04-20 05:05 381440 c:\windows\SysWOW64\iedkcs32.dll + 2012-07-31 13:07 . 2012-04-24 04:47 139264 c:\windows\SysWOW64\cryptsvc.dll + 2012-07-31 13:07 . 2012-04-24 04:47 103936 c:\windows\SysWOW64\cryptnet.dll + 2009-07-14 04:54 . 2012-08-03 16:12 114688 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54 . 2012-07-31 11:37 114688 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54 . 2012-07-31 11:37 196608 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2012-08-03 16:12 196608 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 00:37 . 2009-07-14 01:41 229888 c:\windows\system32\XpsRasterService.dll + 2012-07-31 13:08 . 2010-11-02 05:18 229888 c:\windows\system32\XpsRasterService.dll + 2012-07-31 13:10 . 2011-03-12 12:03 662528 c:\windows\system32\XpsPrint.dll - 2009-07-14 00:41 . 2009-07-14 01:41 199680 c:\windows\system32\xmllite.dll + 2012-07-31 13:10 . 2011-06-16 05:31 199680 c:\windows\system32\xmllite.dll + 2012-07-31 13:10 . 2010-12-21 06:16 442880 c:\windows\system32\winhttp.dll + 2012-07-31 13:10 . 2010-12-21 06:16 258048 c:\windows\system32\WebClnt.dll + 2011-10-08 16:34 . 2012-08-03 16:07 471286 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin + 2012-07-31 13:09 . 2012-04-20 06:25 134144 c:\windows\system32\url.dll - 2012-03-07 12:17 . 2011-12-16 08:45 134144 c:\windows\system32\url.dll + 2012-07-31 13:10 . 2010-12-21 06:15 264192 c:\windows\system32\upnp.dll + 2012-07-31 13:56 . 2012-07-31 13:56 263168 c:\windows\system32\SPReview\spwizui.dll + 2012-07-31 13:56 . 2012-07-31 13:56 301568 c:\windows\system32\SPReview\spreview.exe + 2012-07-31 13:56 . 2012-07-31 13:56 238592 c:\windows\system32\SPReview\sperror.dll - 2009-07-14 00:30 . 2009-07-14 01:39 249856 c:\windows\system32\SearchProtocolHost.exe + 2012-07-31 13:10 . 2011-05-04 05:24 249856 c:\windows\system32\SearchProtocolHost.exe + 2012-07-31 13:10 . 2011-05-04 05:24 593408 c:\windows\system32\SearchIndexer.exe - 2009-07-14 00:32 . 2009-07-14 01:39 593408 c:\windows\system32\SearchIndexer.exe - 2009-07-14 00:29 . 2009-07-14 01:39 113664 c:\windows\system32\SearchFilterHost.exe + 2012-07-31 13:10 . 2011-05-04 05:24 113664 c:\windows\system32\SearchFilterHost.exe + 2012-07-31 13:09 . 2012-06-02 05:27 340992 c:\windows\system32\schannel.dll - 2012-03-07 12:14 . 2011-11-17 07:10 340992 c:\windows\system32\schannel.dll - 2009-07-14 00:17 . 2009-07-14 01:41 149504 c:\windows\system32\rdpcorekmts.dll + 2012-07-31 13:09 . 2012-04-26 05:34 149504 c:\windows\system32\rdpcorekmts.dll + 2012-07-31 13:08 . 2012-05-02 05:32 208896 c:\windows\system32\profsvc.dll - 2009-07-14 02:36 . 2012-07-29 16:03 689102 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2012-08-03 16:10 689102 c:\windows\system32\perfh009.dat - 2009-07-14 02:36 . 2012-07-29 16:03 135206 c:\windows\system32\perfc009.dat + 2009-07-14 02:36 . 2012-08-03 16:10 135206 c:\windows\system32\perfc009.dat - 2009-07-13 23:57 . 2009-07-14 01:41 509952 c:\windows\system32\ntshrui.dll + 2012-07-31 13:09 . 2012-01-04 09:58 509952 c:\windows\system32\ntshrui.dll - 2009-07-13 23:49 . 2009-07-14 01:41 307200 c:\windows\system32\ncrypt.dll + 2012-07-31 13:09 . 2012-06-02 05:27 307200 c:\windows\system32\ncrypt.dll + 2012-07-31 13:10 . 2011-05-04 05:28 779264 c:\windows\system32\mssvp.dll - 2009-07-14 00:30 . 2009-07-14 01:41 779264 c:\windows\system32\mssvp.dll - 2009-07-14 00:32 . 2009-07-14 01:41 288256 c:\windows\system32\mssphtb.dll + 2012-07-31 13:10 . 2011-05-04 05:28 288256 c:\windows\system32\mssphtb.dll + 2012-07-31 13:10 . 2011-05-04 05:28 491520 c:\windows\system32\mssph.dll - 2009-07-14 00:30 . 2009-07-14 01:41 491520 c:\windows\system32\mssph.dll + 2012-07-31 13:09 . 2012-04-20 06:22 736256 c:\windows\system32\msfeeds.dll + 2012-07-31 13:10 . 2012-04-17 05:38 851968 c:\windows\system32\jscript.dll + 2012-03-19 19:09 . 2012-03-19 19:09 524800 c:\windows\system32\iglhsip64.dll + 2012-03-19 19:09 . 2012-03-19 19:09 213504 c:\windows\system32\iglhcp64.dll + 2012-03-19 20:31 . 2012-03-19 20:31 963912 c:\windows\system32\igkrng600.bin + 2012-03-19 20:44 . 2012-03-19 20:44 509720 c:\windows\system32\igfxsrvc.exe + 2012-03-19 19:18 . 2012-03-19 19:18 386560 c:\windows\system32\igfxpph.dll - 2011-04-22 07:38 . 2011-01-27 00:22 142336 c:\windows\system32\igfxdo.dll + 2012-03-19 19:16 . 2012-03-19 19:16 142336 c:\windows\system32\igfxdo.dll + 2012-03-19 19:17 . 2012-03-19 19:17 434688 c:\windows\system32\igfxdev.dll + 2012-03-19 19:09 . 2012-03-19 19:09 193024 c:\windows\system32\igfxcmrt64.dll + 2012-03-19 20:31 . 2012-03-19 20:31 261208 c:\windows\system32\igfcg600m.bin - 2012-03-07 12:17 . 2011-12-16 08:40 247808 c:\windows\system32\ieui.dll + 2012-07-31 13:09 . 2012-04-20 06:21 247808 c:\windows\system32\ieui.dll - 2012-03-07 12:17 . 2011-12-16 08:40 256000 c:\windows\system32\iepeers.dll + 2012-07-31 13:09 . 2012-04-20 06:21 256000 c:\windows\system32\iepeers.dll - 2012-03-07 12:17 . 2011-12-16 08:40 445952 c:\windows\system32\iedkcs32.dll + 2012-07-31 13:09 . 2012-04-20 06:21 445952 c:\windows\system32\iedkcs32.dll + 2011-04-22 07:38 . 2012-03-19 19:17 110592 c:\windows\system32\hccutils.dll + 2009-07-14 04:45 . 2012-07-31 14:39 413120 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 04:45 . 2012-07-10 03:31 413120 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 05:30 . 2012-07-23 09:22 143360 c:\windows\system32\DriverStore\infstrng.dat + 2009-07-14 05:30 . 2012-07-31 15:56 143360 c:\windows\system32\DriverStore\infstrng.dat + 2009-07-14 05:30 . 2012-07-31 15:58 143360 c:\windows\system32\DriverStore\infstor.dat - 2009-07-14 05:30 . 2012-07-22 20:57 143360 c:\windows\system32\DriverStore\infstor.dat + 2012-07-31 13:07 . 2011-03-25 03:23 324608 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbport.sys + 2012-07-31 13:07 . 2011-03-25 03:23 343040 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbhub.sys + 2012-07-31 13:07 . 2011-03-29 03:32 324608 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_32b891a75fdd3ea3\usbport.sys + 2012-07-31 13:07 . 2011-03-29 03:32 343040 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_32b891a75fdd3ea3\usbhub.sys + 2012-07-31 13:07 . 2011-03-25 03:23 343040 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_d378b476be3d939d\usbhub.sys + 2012-07-31 13:07 . 2011-03-29 03:32 343040 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_0fee94e08ee0fbda\usbhub.sys + 2012-07-31 15:04 . 2011-03-11 06:23 166272 c:\windows\system32\DriverStore\FileRepository\nvraid.inf_amd64_neutral_38e464dbe521cc7f\nvstor.sys + 2012-07-31 15:04 . 2011-03-11 06:23 148352 c:\windows\system32\DriverStore\FileRepository\nvraid.inf_amd64_neutral_38e464dbe521cc7f\nvraid.sys + 2012-03-19 20:03 . 2012-03-19 20:03 236544 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\IntelOpenCL64.dll + 2012-03-19 20:00 . 2012-03-19 20:00 188416 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\IntelOpenCL32.dll + 2012-03-19 20:44 . 2012-03-19 20:44 276248 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\IntelCpHeciSvc.exe + 2012-03-19 19:09 . 2012-03-19 19:09 524800 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\iglhsip64.dll + 2012-03-19 19:09 . 2012-03-19 19:09 519680 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\iglhsip32.dll + 2012-03-19 19:09 . 2012-03-19 19:09 213504 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\iglhcp64.dll + 2012-03-19 19:09 . 2012-03-19 19:09 177152 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\iglhcp32.dll + 2012-03-19 20:37 . 2012-03-19 20:37 755188 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igkrng700.bin + 2012-03-19 20:31 . 2012-03-19 20:31 963912 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igkrng600.bin + 2012-03-19 20:44 . 2012-03-19 20:44 170264 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxtray.exe + 2012-03-19 19:18 . 2012-03-19 19:18 410624 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxTMM.dll + 2012-03-19 20:44 . 2012-03-19 20:44 509720 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxsrvc.exe + 2012-03-19 19:18 . 2012-03-19 19:18 386560 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxpph.dll + 2012-03-19 20:44 . 2012-03-19 20:44 439064 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxpers.exe + 2012-03-19 20:44 . 2012-03-19 20:44 250136 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxext.exe + 2012-03-19 19:11 . 2012-03-19 19:11 325120 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxdv32.dll + 2012-03-19 19:16 . 2012-03-19 19:16 142336 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxdo.dll + 2012-03-19 19:17 . 2012-03-19 19:17 434688 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxdev.dll + 2012-03-19 19:09 . 2012-03-19 19:09 193024 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxcmrt64.dll + 2012-03-19 19:09 . 2012-03-19 19:09 237056 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxcmrt32.dll + 2012-03-19 20:37 . 2012-03-19 20:37 561508 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfcg700m.bin + 2012-03-19 20:31 . 2012-03-19 20:31 261208 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfcg600m.bin + 2012-03-19 20:03 . 2012-03-19 20:03 591872 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdrcl64.dll + 2012-03-19 20:00 . 2012-03-19 20:00 518144 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdrcl32.dll + 2012-03-19 20:31 . 2012-03-19 20:31 145804 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igcompkrng600.bin + 2012-03-19 20:44 . 2012-03-19 20:44 398616 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\hkcmd.exe + 2012-03-19 19:17 . 2012-03-19 19:17 110592 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\hccutils.dll + 2012-03-19 19:17 . 2012-03-19 19:17 172032 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\gfxSrvc.dll + 2012-03-19 20:44 . 2012-03-19 20:44 184600 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\difx64.exe + 2012-07-31 15:04 . 2011-03-11 06:23 410496 c:\windows\system32\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0033117673c16921\iaStorV.sys + 2009-07-14 00:06 . 2009-07-14 01:39 229376 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_6c7b4ac630551f33\fsquirt.exe + 2012-03-10 09:42 . 2011-04-28 03:58 552448 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_6c7b4ac630551f33\bthport.sys + 2012-07-31 15:04 . 2011-03-11 06:22 107904 c:\windows\system32\DriverStore\FileRepository\amdsata.inf_amd64_neutral_66a166f5508d8f1c\amdsata.sys + 2009-07-14 05:31 . 2012-07-31 15:55 399360 c:\windows\system32\DriverStore\drvindex.dat - 2009-07-14 05:31 . 2011-05-16 21:02 399360 c:\windows\system32\DriverStore\drvindex.dat + 2012-07-31 13:07 . 2011-03-29 03:32 324608 c:\windows\system32\drivers\usbport.sys - 2009-07-14 00:06 . 2009-07-14 00:06 324608 c:\windows\system32\drivers\usbport.sys + 2012-07-31 13:07 . 2011-03-29 03:32 343040 c:\windows\system32\drivers\usbhub.sys - 2011-05-16 21:00 . 2009-12-04 07:26 343040 c:\windows\system32\drivers\usbhub.sys - 2009-07-14 00:16 . 2009-07-14 00:16 204800 c:\windows\system32\drivers\rdpwd.sys + 2012-07-31 13:07 . 2012-04-28 03:50 204800 c:\windows\system32\drivers\rdpwd.sys - 2012-03-07 12:14 . 2011-11-17 07:17 152432 c:\windows\system32\drivers\ksecpkg.sys + 2012-07-31 13:09 . 2012-06-02 05:38 152432 c:\windows\system32\drivers\ksecpkg.sys + 2012-07-31 13:08 . 2009-09-26 06:20 223448 c:\windows\system32\drivers\fvevol.sys - 2009-07-13 23:22 . 2009-07-14 01:43 223448 c:\windows\system32\drivers\fvevol.sys + 2012-07-31 13:08 . 2011-01-26 06:53 265088 c:\windows\system32\drivers\dxgmms1.sys + 2012-07-31 13:08 . 2011-01-26 06:53 982912 c:\windows\system32\drivers\dxgkrnl.sys + 2012-07-31 13:09 . 2012-06-02 05:37 459216 c:\windows\system32\drivers\cng.sys + 2012-03-10 09:42 . 2011-04-28 03:58 552448 c:\windows\system32\drivers\bthport.sys + 2012-03-19 20:44 . 2012-03-19 20:44 184600 c:\windows\system32\difx64.exe + 2012-07-31 13:10 . 2010-12-21 06:10 100864 c:\windows\system32\davclnt.dll + 2012-07-31 13:07 . 2012-04-24 05:59 140288 c:\windows\system32\cryptnet.dll - 2009-07-14 05:12 . 2012-07-30 06:16 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-07-14 05:12 . 2012-07-31 16:03 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2011-01-12 17:42 . 2011-01-12 17:42 144384 c:\windows\system32\cdd.dll + 2012-07-31 13:08 . 2011-01-26 06:31 144384 c:\windows\system32\cdd.dll + 2009-07-14 05:01 . 2012-07-31 15:56 383880 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2012-07-31 13:10 . 2012-04-06 00:45 172128 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationHostDLL.dll + 2012-07-31 13:10 . 2012-04-23 22:38 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll + 2012-07-31 13:10 . 2012-01-04 02:48 486144 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll + 2012-07-31 13:10 . 2012-04-06 00:49 131168 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll + 2012-07-31 13:10 . 2012-04-23 22:37 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2012-07-31 13:10 . 2012-01-04 02:51 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2012-07-31 13:10 . 2012-01-04 02:51 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2012-07-31 13:10 . 2012-01-04 02:51 996112 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2011-10-30 12:49 . 2012-07-31 13:54 409600 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe - 2011-10-30 12:49 . 2012-07-10 14:41 409600 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe + 2011-10-30 12:49 . 2012-07-31 13:54 286720 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe - 2011-10-30 12:49 . 2012-07-10 14:41 286720 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe - 2011-10-30 12:49 . 2012-07-10 14:41 249856 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe + 2011-10-30 12:49 . 2012-07-31 13:54 249856 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe - 2011-10-30 12:49 . 2012-07-10 14:41 794624 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe + 2011-10-30 12:49 . 2012-07-31 13:54 794624 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe - 2011-10-30 12:49 . 2012-07-10 14:41 135168 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe + 2011-10-30 12:49 . 2012-07-31 13:54 135168 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe + 2011-10-30 12:49 . 2012-07-31 13:54 593920 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe - 2011-10-30 12:49 . 2012-07-10 14:41 593920 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe + 2012-07-31 18:38 . 2012-07-31 18:38 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\3fbaee209e13d65183d2d802cf053f10\WsatConfig.ni.exe + 2012-07-31 18:38 . 2012-07-31 18:38 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\0599e722d086c85c54a6dc71de5781f5\WindowsFormsIntegration.ni.dll + 2012-07-31 14:43 . 2012-07-31 14:43 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\f0e602dd94327e6eea126e72cb24c4a3\UIAutomationTypes.ni.dll + 2012-07-31 14:43 . 2012-07-31 14:43 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\ef1cc397129c81ecb60431633b7d6f94\UIAutomationProvider.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\2adb36011c54ef24dff70bef5e31a71a\UIAutomationClient.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\ecf332ee723fd33a408a00e926935c4a\TaskScheduler.ni.dll + 2012-07-31 18:37 . 2012-07-31 18:37 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\b0bc5a1ed5648bbe61d4ceb1b4bde03d\System.Xml.Linq.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\2c66bb8492ad0ccd7c86eb204a86f16a\System.Web.Routing.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\9a541383d78143dc386512b092cb58a9\System.Web.RegularExpressions.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\e3ca70a436f9c8a0cb178f3fe0d15ce6\System.Web.Entity.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\4a722f8a9668af77c08a921ec5d249f2\System.Web.Entity.Design.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\5e3e171d6b46739a8f89e2a589de1062\System.Web.DynamicData.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\8f8685c0362ccfae34c1c958fc43bf40\System.Web.Abstractions.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\348482b8eb60eb9595a313ed706fa074\System.Transactions.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\993018172a83c2431adeb6a309aa27cf\System.ServiceProcess.ni.dll + 2012-07-31 14:42 . 2012-07-31 14:42 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\3fbac653667adb06ac98561f57049751\System.Security.ni.dll + 2012-07-31 14:43 . 2012-07-31 14:43 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\3805923cd6a0d7c9c4c872c1ede4619d\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\c944f6d1355c8e02be1b6adb9022efd8\System.Net.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\984398a06970ec18178ddf072de6167e\System.Messaging.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\27bb4472bb5e4fe714126010e7c615ca\System.Management.Instrumentation.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 569344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\beb72e4d0964165386096323e4494003\System.IO.Log.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\0e83d3c8f7e6295055548caa2a1a3743\System.IdentityModel.Selectors.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\b48bd4bfbc25e5fb2b6bbc0627bb7aad\System.EnterpriseServices.Wrapper.dll + 2012-07-31 14:47 . 2012-07-31 14:47 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\a650d1b1ee920b0fecfe5e8342217265\System.Drawing.Design.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\3d2da45f50b57ab5871ff32fa9a0fa71\System.DirectoryServices.Protocols.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 493056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\c1999d1e18a7c62be8765f97398c1b7c\System.Data.Services.Design.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\2e18ba464979573aa3dcf04e07e79d87\System.Data.DataSetExtensions.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\58d7e28f550aa89ebc5046b960525b46\System.Configuration.Install.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\3de11837ee6fc7bda6f50bdc8eed68ce\System.ComponentModel.DataAnnotations.ni.dll + 2012-07-31 14:48 . 2012-07-31 14:48 890880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\eb850c90fad10f90fa495be2efa5d8ec\System.AddIn.ni.dll + 2012-07-31 14:48 . 2012-07-31 14:48 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\236fe667af3ca016ae66a5b08fb94bd8\System.AddIn.Contract.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\9cf7f4430b8c379ca9bfe4428932af5e\sysglobl.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\510283052ba3df05080787d71eb6fa31\SMSvcHost.ni.exe + 2012-07-31 16:19 . 2012-07-31 16:19 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\97ef3ca694f50f101c0b369e3c3528cc\SMDiagnostics.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\dc82ea5f368056cb5340c270bb75becb\PresentationFramework.Classic.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\76933856fb4dd9f9cf17136aac2ca38c\PresentationFramework.Luna.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\5a95213214431ffa96c6e4dbfa36345e\PresentationFramework.Aero.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\57138d0d992b152869c9bb250e9d3735\PresentationFramework.Royale.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\33ae5cf0b1603f19a9c66e376b4cdcda\napsnap.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\5c28e1b5ec388ca1b62f229a068b9842\napinit.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\4a034fcf374482db0b2cb8a7f661608c\naphlpr.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\41854d8487d49fad7f177425b6c781f7\napcrypt.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\02fa94543dd6ba737d98562e9a42e519\MSBuild.ni.exe + 2012-07-31 16:20 . 2012-07-31 16:20 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\bf084532afc235bb8947191850be2dbd\MMCFxCommon.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 681472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\d4a321be6b1775b27e878d5866ac9b6d\Microsoft.WSMan.Management.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\bdfc36a270290eeff2dfa72949ff20ca\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\915c41bb932618c4abf94b123df9ceae\Microsoft.Vsa.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\b90d3fa08fb2f482ec06283b20bf4525\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f50a903783750e4c093cbf105f334ead\Microsoft.PowerShell.Security.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\65d6ad0aa6d85a25d2840ab5f7d7405c\Microsoft.PowerShell.GraphicalHost.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3acefb890be23403069123754db8a8d1\Microsoft.PowerShell.ConsoleHost.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\2708d6ea3f3db7891db1a609018064d8\Microsoft.PowerShell.Commands.Diagnostics.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\fe529847ae6fd62b1ef4e0ce5ab14569\Microsoft.MediaCenter.Sports.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\611f809f625bafde88d989c624f5fd0f\Microsoft.MediaCenter.ITVVM.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\4817b5f63709e4dbf02cfa2f1fbf68dd\Microsoft.MediaCenter.Interop.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\390ab84a69a72771f8c15596c3918ca3\Microsoft.MediaCenter.iTv.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\29c42a85dce9c813e64c8c7e7c1a713c\Microsoft.MediaCenter.Playback.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\10492ed390f72165b7701b0b209f41b1\Microsoft.MediaCenter.Mheg.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 219648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\0e7cbd0361f32288ba6d9010608fffb9\Microsoft.MediaCenter.iTv.Media.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 797696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\e357bfb6a7358070a31cfb315e1094b8\Microsoft.ManagementConsole.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\6f1c7692333bbe4aba03d4c68cd56210\Microsoft.Build.Utilities.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\05ab0f916af911347d5b7fda20fab3e3\Microsoft.Build.Utilities.v3.5.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\a92742de12c5358a722d9b81f4c93f8b\Microsoft.Build.Framework.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\4d843288146d5c6ddcd942e1d68b510b\Microsoft.Build.Framework.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\9435c4788924ed688417b3087ff5cdd2\Microsoft.Build.Conversion.v3.5.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft-Windows-H#\1302272bd95a6d5bbeaf3e1a832f2552\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\d0c9c13cbeb5e9d29c3300c7dc6ad18f\Mcx2Dvcs.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\b65913a9eb492b4ec40363f59badb1cb\mcupdate.ni.exe + 2012-07-31 16:20 . 2012-07-31 16:20 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\6de88da68ff92581d1bce3deaa25d9c0\mcstoredb.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\3cbc899f004a3144820b162f339cc299\mcplayerinterop.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\1ee690ef6472178228e84214d7f136ad\mcGlidHostObj.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\07d8613ab03648bcfed976e469523541\MCESidebarCtrl.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\bef11fb4617a18e0cdb5c7673308f0d8\EventViewer.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\80ae3deb3ce5b39e8134838689f5e616\ehRecObj.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 661504 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\81a510ea5fd14aa30ff41d4fc7f74161\ehiWUapi.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 933888 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\608233581ceee7892045ebae25b48248\ehiwmp.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 145408 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\0ff5bc978a9279d484cdf59d919e60df\ehiUserXp.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 196096 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiiTv\75957f1e4c465eb8053fb9f235c5c696\ehiiTv.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\165c31078ab64ffe338512b778f3a645\ehiExtens.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 110080 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiBmlDataCarousel\097208918b41f71a55e52cf2e8a14b9e\ehiBmlDataCarousel.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 126976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiActivScp\e59e98a748cfb940f1ec7032d0d634c9\ehiActivScp.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\3266ef1067584da5503061cb4c694b82\ehExtHost.ni.exe + 2012-07-31 16:19 . 2012-07-31 16:19 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\f5cd36f9696a44997ffb61cc38067006\ehCIR.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\e7e8991e9dfce879c22b2647edb72287\CustomMarshalers.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\bad60d21de09740f3c2a498fa4aaa7b0\ComSvcConfig.ni.exe + 2012-07-31 16:19 . 2012-07-31 16:19 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\a7fd2038556fca7f411cf6f0a62c1671\BDATunePIA.ni.dll + 2012-07-31 16:18 . 2012-07-31 16:18 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2aac794e7890acc1a1430e065e16b31a\WsatConfig.ni.exe + 2012-07-31 16:15 . 2012-07-31 16:15 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\6d36415d112502a7caa26e9f820d5d40\WindowsLiveLocal.WriterPlugin.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 890880 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fd608a3bdd95583e529f6cfd09ea508d\WindowsLive.Writer.HtmlEditor.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e040c9e32d2b6ec6aab2e0d55df8642a\WindowsLive.Writer.Interop.SHDocVw.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 374272 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b0d93c27a1512f1e183d493a98a258b8\WindowsLive.Writer.Interop.Mshtml.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 326144 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a2eabb622ff50b13d07663ca850dc9cc\WindowsLive.Writer.SpellChecker.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 156672 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\86c96bfbe5de573276fc26f399fd3731\WindowsLive.Writer.HtmlParser.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 101376 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6e37db6e9e816c1d9256b90f7789a56f\WindowsLive.Writer.Api.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 665600 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6d38d66d7de5edc1d8eeb0ed87b2cd4e\WindowsLive.Writer.Interop.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\67f056fb8191ce58de52db1e630a2682\WindowsLive.Writer.BrowserControl.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 871424 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\667d1e0a5aa56ade6ba642cfce278541\WindowsLive.Writer.BlogClient.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\622cc6fc755d7bf5c554fe7b304129b5\WindowsLive.Writer.Mshtml.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 780800 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\61c901fce489d94641e6f23a59d18aeb\WindowsLive.Writer.Controls.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3148862dd79c7c2333744db526407107\WindowsLive.Writer.Instrumentation.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1ea8fd04329eb255703c5079bbd63a10\WindowsLive.Writer.FileDestinations.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 122368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\11382c33e41c7b289d93f3868ac5eaff\WindowsLive.Writer.Extensibility.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 223232 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\dbd733a7f6bbf4c145a30004fe9cb932\WindowsLive.Client.ni.dll + 2012-07-31 16:18 . 2012-07-31 16:18 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\961b28b18dc304d4434ca9938abd1d60\WindowsFormsIntegration.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\5e398c245811fe932ce6bcf68664e307\UIAutomationTypes.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\42378a09ba2a003848de7d2cfeb1c56a\UIAutomationClient.ni.dll + 2012-07-31 16:18 . 2012-07-31 16:18 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\58b6523c5167dd748a679e8a46330c32\TaskScheduler.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\496033ebd93c3381e4ba09486bf23cc3\System.Xml.Linq.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\e8583c3f80cd2a94f552a64b4953dde2\System.Web.Routing.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\e6a25bb61babf2ad6d6fa3256a2ea41a\System.Web.RegularExpressions.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\394765924d5b924fe87103c943abc69c\System.Web.Extensions.Design.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\4b72a66912627a66c65ebc8ce8d82e91\System.Web.Entity.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\973d534cb631a5c9c7ea74842056332d\System.Web.Entity.Design.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\c80448d686095317e9019f48572b03e0\System.Web.DynamicData.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\a5f548d874a19f075ca408ac46e57d72\System.Web.Abstractions.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\61fbbd8bc7d76972115b292b132ff2d1\System.Transactions.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b7a7f9c607e09bfa03c07b5ff3a8ae3\System.ServiceProcess.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 680960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\61af058c2bc079f28397a29ed145fbc7\System.Security.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\35fcbda2532ece23d09a044aa2ef62a4\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0c00b1a8336dd4c1bd1ebce7780f20b4\System.Runtime.Remoting.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\cd8ad97063680071342f13d12376fd17\System.Net.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\9023843c5179d58bd814b64f440679a1\System.Messaging.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 997888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\3f9dee1ce0ccb42145293a5bfcbe7205\System.Management.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\c9986072b91eb63728d4843ae798e121\System.Management.Instrumentation.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\870427539c6829f750490719470bfa22\System.IO.Log.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\f93d41cf41160cc660aea5eb8be181d6\System.IdentityModel.Selectors.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\558fa6c6131f14af258f94291a5d19d6\System.EnterpriseServices.Wrapper.dll + 2012-07-31 14:45 . 2012-07-31 14:45 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\558fa6c6131f14af258f94291a5d19d6\System.EnterpriseServices.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\4e3449df387e6a0680d25969da6f965a\System.Drawing.Design.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 887808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\bbede691e8386ac49379edad37eb7e3c\System.DirectoryServices.AccountManagement.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\77fb2ee5038b95bb20353a305918df9e\System.DirectoryServices.Protocols.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\4c7d1e5492f79ac7217577e45a06f559\System.Data.Services.Client.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 356864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\35dfab6426c2a64cae53944e19623dca\System.Data.Services.Design.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 762880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\71d6318c39c6ee8abb7c3ae61cf2fd4f\System.Data.Entity.Design.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\4f1cef2fd7b12da72654f2522f169d2e\System.Data.DataSetExtensions.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb079eab134fd1a752ad91db13274110\System.Configuration.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\f96bc91c85c7aafc6cc0f04742359564\System.Configuration.Install.ni.dll + 2012-07-31 14:48 . 2012-07-31 14:48 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\db477bc003958f524c72bc30040f0899\System.AddIn.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\51f227c6d989cd851b46ac157df263a3\sysglobl.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4bc345ee664ca736a30a7fafd8c5a16c\SMSvcHost.ni.exe + 2012-07-31 16:15 . 2012-07-31 16:15 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\26a852935ab27c328a148effb43a76bf\SMDiagnostics.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\fcdfda3443709bbe8d0a44cf2e0e1660\PresentationFramework.Classic.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\fc626095c194be137bceb219934b06a7\PresentationFramework.Aero.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d85fc1508cff1e635f87b4afb4f4cc9a\PresentationFramework.Luna.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\056f7ed4e914569f97b47631c0ade534\PresentationFramework.Royale.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\0e9f88f220b048e2b0d2c8e3801e1fbd\napsnap.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\821bb293acac9e6fbb0dc69087e2a172\napinit.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\5de0fa9a3f84bad3c0827c3f77387c25\naphlpr.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\b31fec98f29b3530a72c044d36c88cfa\MSBuild.ni.exe + 2012-07-31 16:16 . 2012-07-31 16:16 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\1f10581674c9eb08c896e21fc1f43be4\MMCFxCommon.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 531456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\530aebd2f4fb78e463e4622b53fa1d29\Microsoft.WSMan.Management.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\0329bf8cfafd687cee2b2d682d182ce9\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ec25dcf853949dc1b1055f0a8d3d3817\Microsoft.PowerShell.Commands.Diagnostics.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d664a2c965541177d610a2deffd28a29\Microsoft.PowerShell.Security.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 785920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d3719732987a18c70428002240fa0271\Microsoft.PowerShell.Commands.Management.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\83032d78b29cd09caf0ef69d05d33cd3\Microsoft.PowerShell.GraphicalHost.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\6140e4423431468afff328b69276bd43\Microsoft.PowerShell.ConsoleHost.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\49af28b21e53bc36f58c371995dfae1a\Microsoft.ManagementConsole.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\a3163f28829b22e3ae962dbaa9216028\Microsoft.Build.Utilities.v3.5.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4e130bab9541f548007f649552225772\Microsoft.Build.Utilities.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c617adec91d29b55d0690ace389d1b46\Microsoft.Build.Engine.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\aa7fe29b3123fc147df14c38b18aed9d\Microsoft.Build.Conversion.v3.5.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\6b3830a6c3f619389a49d05164a9306f\mcstoredb.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\491bfb35b47079843c7faecb5b67787d\EventViewer.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\44cb15eb402bd0ca508daca85020225a\ehRecObj.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\ae72fa5ad8bbb6651ebe2c56dabbd193\ehiVidCtl.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\f627a0274101e3dae80ddcde40885795\ehiProxy.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\b052b90444da59b2ebd1d6485cf49605\ehiExtens.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\97a8bea875e2f88da466cfa59340a528\ehExtHost32.ni.exe + 2012-07-31 16:15 . 2012-07-31 16:15 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\1435db5dea878f59191dc112a40e2185\CustomMarshalers.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\1d948af5bf966ad1277936a6e30f91e3\ComSvcConfig.ni.exe + 2012-07-31 16:15 . 2012-07-31 16:15 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\7ac2fa31914eca722b63ebd994550211\BDATunePIA.ni.dll + 2012-07-31 13:10 . 2012-04-23 22:37 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-07-31 13:10 . 2012-04-06 00:49 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll - 2009-07-13 21:10 . 2009-06-10 21:14 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll + 2012-07-31 13:11 . 2012-04-06 00:49 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2009-07-14 00:35 . 2009-06-10 21:14 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2012-07-31 13:11 . 2012-04-06 00:45 357376 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll - 2009-07-14 01:01 . 2009-06-10 20:30 357376 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-07-31 13:11 . 2012-04-06 00:49 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll - 2009-07-14 00:35 . 2009-06-10 21:14 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll - 2011-01-12 18:02 . 2011-01-12 18:02 135168 c:\windows\AppPatch\AppPatch64\AcXtrnal.dll + 2012-07-31 13:08 . 2011-03-04 06:17 135168 c:\windows\AppPatch\AppPatch64\AcXtrnal.dll - 2011-01-12 18:02 . 2011-01-12 18:02 347648 c:\windows\AppPatch\AppPatch64\AcLayers.dll + 2012-07-31 13:08 . 2011-03-04 06:17 347648 c:\windows\AppPatch\AppPatch64\AcLayers.dll + 2012-07-31 13:09 . 2012-04-20 05:07 1230336 c:\windows\SysWOW64\urlmon.dll - 2012-03-07 12:17 . 2011-12-16 08:02 1230336 c:\windows\SysWOW64\urlmon.dll + 2012-07-31 13:10 . 2011-05-04 04:53 1553920 c:\windows\SysWOW64\tquery.dll + 2012-07-31 13:08 . 2012-05-04 10:08 3902320 c:\windows\SysWOW64\ntoskrnl.exe + 2012-07-31 13:08 . 2012-05-04 10:08 3958128 c:\windows\SysWOW64\ntkrnlpa.exe + 2012-07-31 13:10 . 2011-05-04 04:52 1401856 c:\windows\SysWOW64\mssrch.dll - 2009-07-14 00:13 . 2009-07-14 01:15 1401856 c:\windows\SysWOW64\mssrch.dll + 2012-07-31 13:07 . 2012-04-07 11:34 2342400 c:\windows\SysWOW64\msi.dll + 2012-07-31 13:09 . 2012-04-20 05:06 6028288 c:\windows\SysWOW64\mshtml.dll + 2012-03-19 19:09 . 2012-03-19 19:09 2321408 c:\windows\SysWOW64\igfxcmjit32.dll + 2012-03-19 20:26 . 2012-03-19 20:26 6120960 c:\windows\SysWOW64\igdumd32.dll + 2011-04-22 07:38 . 2012-03-19 20:11 7795200 c:\windows\SysWOW64\igd10umd32.dll - 2012-03-07 12:17 . 2011-12-16 07:58 2072576 c:\windows\SysWOW64\iertutil.dll + 2012-07-31 13:09 . 2012-04-20 05:05 2072576 c:\windows\SysWOW64\iertutil.dll + 2012-07-31 13:08 . 2010-06-26 05:14 1495040 c:\windows\SysWOW64\ExplorerFrame.dll - 2009-07-13 23:44 . 2009-07-14 01:15 1495040 c:\windows\SysWOW64\ExplorerFrame.dll + 2012-07-31 13:10 . 2011-02-26 05:33 2614784 c:\windows\SysWOW64\explorer.exe + 2012-07-31 13:07 . 2012-04-24 04:47 1156608 c:\windows\SysWOW64\crypt32.dll - 2009-07-14 04:54 . 2012-07-31 11:37 2260992 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2012-08-03 16:12 2260992 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2012-03-07 12:17 . 2011-12-16 08:45 1197568 c:\windows\system32\wininet.dll + 2012-07-31 13:09 . 2012-05-15 03:56 1197568 c:\windows\system32\wininet.dll + 2012-07-31 13:09 . 2012-04-20 06:25 1501184 c:\windows\system32\urlmon.dll - 2012-03-07 12:17 . 2011-12-16 08:45 1501184 c:\windows\system32\urlmon.dll + 2012-07-31 13:10 . 2011-05-04 05:30 2326016 c:\windows\system32\tquery.dll - 2009-07-14 00:03 . 2009-07-14 01:41 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll + 2012-07-31 13:05 . 2012-04-02 05:24 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll + 2012-07-31 13:08 . 2012-05-04 10:52 5505392 c:\windows\system32\ntoskrnl.exe - 2012-03-07 12:17 . 2011-12-16 08:42 1026560 c:\windows\system32\mstime.dll + 2012-07-31 13:09 . 2012-04-20 06:23 1026560 c:\windows\system32\mstime.dll + 2012-07-31 13:10 . 2011-05-04 05:28 2228224 c:\windows\system32\mssrch.dll - 2009-07-14 00:35 . 2009-07-14 01:41 2228224 c:\windows\system32\mssrch.dll + 2012-07-31 13:07 . 2012-04-07 12:18 3213824 c:\windows\system32\msi.dll + 2012-07-31 13:09 . 2012-04-20 06:22 9373696 c:\windows\system32\mshtml.dll + 2012-03-19 19:09 . 2012-03-19 19:09 2967040 c:\windows\system32\igfxcmjit64.dll + 2012-03-19 20:31 . 2012-03-19 20:31 8087040 c:\windows\system32\igdumd64.dll + 2011-04-22 07:38 . 2012-03-19 20:22 9605632 c:\windows\system32\igd10umd64.dll + 2012-07-31 13:09 . 2012-04-20 06:21 2458624 c:\windows\system32\iertutil.dll - 2012-03-07 12:17 . 2011-12-16 08:40 2458624 c:\windows\system32\iertutil.dll + 2012-07-31 13:08 . 2010-11-02 05:12 1133568 c:\windows\system32\FntCache.dll - 2009-07-13 23:57 . 2009-07-14 01:40 1863680 c:\windows\system32\ExplorerFrame.dll + 2012-07-31 13:08 . 2010-06-26 05:31 1863680 c:\windows\system32\ExplorerFrame.dll + 2011-06-26 22:37 . 2011-06-26 22:37 2753536 c:\windows\system32\DriverStore\FileRepository\netathrx.inf_amd64_neutral_c80644765b536276\athrx.sys + 2012-03-19 19:16 . 2012-03-19 19:16 9007616 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxress.dll + 2012-03-19 19:09 . 2012-03-19 19:09 2967040 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxcmjit64.dll + 2012-03-19 19:09 . 2012-03-19 19:09 2321408 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igfxcmjit32.dll + 2012-03-19 20:31 . 2012-03-19 20:31 8087040 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdumd64.dll + 2012-03-19 20:26 . 2012-03-19 20:26 6120960 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdumd32.dll + 2012-03-19 20:03 . 2012-03-19 20:03 3749888 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdbcl64.dll + 2012-03-19 20:00 . 2012-03-19 20:00 2866688 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdbcl32.dll + 2012-03-19 20:22 . 2012-03-19 20:22 9605632 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igd10umd64.dll + 2012-03-19 20:11 . 2012-03-19 20:11 7795200 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igd10umd32.dll + 2012-03-19 20:44 . 2012-03-19 20:44 5888792 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\GfxUI.exe + 2011-06-26 22:37 . 2011-06-26 22:37 2753536 c:\windows\system32\drivers\athrx.sys + 2012-07-31 13:07 . 2012-04-24 05:59 1460224 c:\windows\system32\crypt32.dll + 2009-07-14 04:45 . 2012-07-31 16:00 3798234 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat - 2009-07-14 04:45 . 2012-07-30 05:50 3798234 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2011-10-26 18:43 . 2012-07-31 15:56 1229464 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3022402605-2101226938-1445187523-1001-8192.dat + 2012-07-31 13:10 . 2012-04-06 00:45 2255952 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll + 2012-07-31 13:06 . 2012-03-21 22:28 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll - 2012-03-07 12:09 . 2011-03-29 22:26 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll - 2012-03-07 10:56 . 2011-10-31 23:16 3182592 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll + 2012-07-31 13:10 . 2012-01-04 02:48 3182592 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll + 2012-07-31 13:06 . 2012-03-21 22:28 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll - 2009-07-13 20:37 . 2009-06-10 20:40 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll - 2012-03-07 12:52 . 2011-07-08 22:32 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll + 2012-07-31 13:10 . 2012-01-04 02:48 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll + 2012-07-31 13:10 . 2012-01-04 02:48 1577744 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll + 2012-07-31 13:10 . 2012-01-04 02:48 1765136 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll + 2012-07-31 13:10 . 2012-04-06 00:49 1737296 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll - 2012-03-07 12:09 . 2011-03-29 22:31 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2012-07-31 13:06 . 2012-03-21 22:29 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2012-03-07 10:56 . 2011-10-31 23:17 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2012-07-31 13:10 . 2012-01-04 02:51 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2012-07-31 13:06 . 2012-03-21 22:29 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll - 2009-07-13 20:46 . 2009-06-10 21:23 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2012-07-31 13:10 . 2012-01-04 02:51 5917456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2012-07-31 13:10 . 2012-01-04 02:51 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2012-03-07 12:52 . 2011-07-08 22:35 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2011-01-15 06:46 . 2011-01-15 06:46 2049536 c:\windows\Installer\4461f3.msi + 2012-06-29 11:33 . 2012-06-29 11:33 6063616 c:\windows\Installer\3885ac.msp - 2011-01-12 17:28 . 2011-01-12 17:28 2870272 c:\windows\explorer.exe + 2012-07-31 13:10 . 2011-02-26 06:23 2870272 c:\windows\explorer.exe + 2012-07-31 14:42 . 2012-07-31 14:42 4927488 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\7cdb4f5d0ff25c672e52a333ee394bb8\WindowsBase.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 1458688 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\916d509de3e37ffe61381dc35ee84575\UIAutomationClientsideProviders.ni.dll + 2012-07-31 14:42 . 2012-07-31 14:42 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\c40cbbdf7af03daedb16f4d9ef1b6f5f\System.Xml.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 1817600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\5e8951a5428e1e760a668b48983988f8\System.WorkflowServices.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 2707456 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\13dec2cd87ea433f1746027ccbaa3bc4\System.Workflow.Runtime.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 5955072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\1c1764b9120f6a73ebdfb58b8e4ab9df\System.Workflow.ComponentModel.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\254e69d8d12742213f715fc860aad36f\System.Workflow.Activities.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\35b994e63fbc2836f32326e9f5862a1b\System.Web.Services.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\991f0a84aef8729bde6ae7d9a5ee3eab\System.Web.Mobile.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 3043840 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\1c19687f7c7c4dc03e75c0d23646def6\System.Web.Extensions.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\116bbcff5d5ec37d4606353e4d79fb07\System.Web.Extensions.Design.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\070cd8d59ce62cb6dc5d38b9fecd3858\System.Speech.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\f486134488aa17c44b14af6038a5c8cf\System.ServiceModel.Web.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\f37d2ca916cafdabe1c4f6f9c6b2c518\System.Runtime.Serialization.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\17bf0932e5c6cb8ba59046456f13328d\System.Runtime.Remoting.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 1453568 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\86a3611cdef98c49edd41c3cb52d5b81\System.Printing.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 1408512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\bc4eb71543857d07a7401eab3a93d412\System.Management.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 1433088 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\8310af7cfed169c2e806347dfd31ed03\System.IdentityModel.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\b48bd4bfbc25e5fb2b6bbc0627bb7aad\System.EnterpriseServices.ni.dll + 2012-07-31 14:43 . 2012-07-31 14:43 2318336 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\6ea40f2da0e2321428a7bdd387e475fd\System.Drawing.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 1229824 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\d0f7e6fad3bf0b055fa9b1d0e5d43305\System.DirectoryServices.AccountManagement.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\09fa848feffe98e25571f12ba6533b71\System.DirectoryServices.ni.dll + 2012-07-31 14:43 . 2012-07-31 14:43 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\817485fd285d4ceca00b5a2f54127187\System.Deployment.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 8692736 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\d223792883556acb200a74d695a1c2c5\System.Data.ni.dll + 2012-07-31 14:42 . 2012-07-31 14:42 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\e2bf05478288e42b7d5b3953303b43ea\System.Data.SqlXml.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 1846272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\027818d739a4d16c6c6a6d3a3f97d5ed\System.Data.Services.ni.dll + 2012-07-31 18:38 . 2012-07-31 18:38 1289728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\ce4bbe0a9167e14e22e97c188649ef95\System.Data.Services.Client.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\a3f0cb65205bc8101de152a3049efa53\System.Data.OracleClient.ni.dll + 2012-07-31 18:37 . 2012-07-31 18:37 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\611d21d7fb315802ca1880a6f1c0b8b4\System.Data.Linq.ni.dll + 2012-07-31 18:37 . 2012-07-31 18:37 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\4aeeafaf88950db2b1412aa9c1dfc542\System.Data.Entity.Design.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\fb0a7c597f43ec6c1fa7eb5c1404cac3\System.Core.ni.dll + 2012-07-31 14:42 . 2012-07-31 14:42 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\dcadcfb938ccdd3f70859fdcdd329ec5\System.Configuration.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 3101696 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\ace65925339dc7a67f7d5801d305fea7\ReachFramework.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\bb6de6dc7e0983ff5d5eb50e4d303401\PresentationUI.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 1881088 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\42dad1fa286c2dfef840436e0117f195\PresentationBuildTasks.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\fcfebf142d7794efa4d9f3442b4078b0\Narrator.ni.exe + 2012-07-31 16:27 . 2012-07-31 16:27 2327040 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\53fc273e6830f8ed9f4a6861bd9e3259\MMCEx.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 7966208 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\cbd80a405506069dcbc40bcf9e35cdbe\MIGUIControls.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\c43123085590686ee0fe2157c6cf78c8\Microsoft.VisualBasic.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 1598464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\f0d782756caeea9306a63de672c6da6e\Microsoft.Transactions.Bridge.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f99d492441caaf40f1825b2fb1bb018d\Microsoft.PowerShell.Commands.Management.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 2175488 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\e67017ef44edf5abace08749ba07b3b8\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-07-31 16:27 . 2012-07-31 16:27 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\b2a90c6f1e99fd284159c30dfe2f34e8\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 5351424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\57340a7859df958d29fa5caa530dcf5f\Microsoft.PowerShell.Editor.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\cc1a3125cc25ececf6bdd96313e1b43d\Microsoft.MediaCenter.Shell.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\cb5ff04ccae6b9da5dbe37a6ae0fa6c1\Microsoft.MediaCenter.Bml.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b6af7cba1817dc28bdcea3f0552b05f3\Microsoft.MediaCenter.UI.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 1516032 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\77cfbc9d38b1f0ba1dda1acbf8dc864e\Microsoft.MediaCenter.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\5940bb2af41ce045c35a68977ce3d1f6\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 3208192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\729baa115f5b270a3b161e72ef7f5351\Microsoft.JScript.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\a036f49088456b29078f9450be06443f\Microsoft.Ink.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\9293388abb9fd1c2e63ae6224b5f1631\Microsoft.Build.Tasks.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 2677760 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\1f21383dca22c1a8cbe08f00f26150df\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\dc5d8b624b01a2a1db10e4ed5be18b93\Microsoft.Build.Engine.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\3a40ad58fa2e38681f57c1f1e641e329\Microsoft.Build.Engine.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\dc68964376339f9b71d002094cb3f0ca\mcstore.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 4086784 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\c83d93208a390e05a61e34216be32d35\mcepg.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 2184192 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\5d36ff5947a27bcb6028b1341799f15d\ehiVidCtl.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 1201664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\2260f0ed059f4db1564c6015bb1a591d\ehiProxy.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 7024640 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a7ba166d071b6c4650f3fdef2321ec4e\WindowsLive.Writer.PostEditor.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 1284608 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9f05d2b7a479acc3efea5c158a2eafcf\WindowsLive.Writer.ApplicationFramework.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 2193408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\547717b1682ad67202170414ff19f0b8\WindowsLive.Writer.CoreServices.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 1346560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\143cfc2f76b5805c4beb24767c11398d\WindowsLive.Writer.Localization.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b68fdf2c95b93fc5006a092c11eed07c\WindowsBase.ni.dll + 2012-07-31 16:18 . 2012-07-31 16:18 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\7f102c92f212048da706c724d5809f12\UIAutomationClientsideProviders.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 7952384 c:\windows\assembly\NativeImages_v2.0.50727_32\System\2ebb3c259eab50af565e3a8dba6ad20e\System.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 5453312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5c85c9c42e1b8a8760de82ecb4c7d582\System.Xml.ni.dll + 2012-07-31 16:18 . 2012-07-31 16:18 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\b345f2895557e6ef39b94aebdeb4a57e\System.WorkflowServices.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 1914880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\fd5cec6034bba6b7c0c9b8429b6f2222\System.Workflow.Runtime.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\7ad53a4ed45b577ddc8f80aa5c8e012d\System.Workflow.ComponentModel.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 2994688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\5c617f481e72820be334a511ad7e0648\System.Workflow.Activities.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\675c8bd801698993255d100c3b350d4b\System.Web.Services.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\e950097b782a3726f9ec9a2662944e73\System.Web.Mobile.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 2403840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\99d890cec9c7b5d0883d2d84ad98a457\System.Web.Extensions.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\f68d50b9cfb466c62939548433943b3f\System.Speech.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\b744ac6047519b7b186db4d77a78ca0c\System.ServiceModel.Web.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\3848d7865bda88a9e94e03480b5ada2f\System.Runtime.Serialization.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\da97dedec4a2fd679a2c45b6e91b2481\System.Printing.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 8871936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\c9b40cfc4764cf4f9585897f6d2d6110\System.Management.Automation.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 1072128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\f77eb3dd20db5f2277636d4e700a2a2a\System.IdentityModel.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ebefde27b0ef7f39bb49c493b34a602c\System.Drawing.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\027d378a0f7111c18fb687d2948088a9\System.DirectoryServices.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\37aa8a6e1a69671c23eb916417629682\System.Deployment.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 6618624 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\294d439cfe959b5528ca81d37d3d502f\System.Data.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e8dd334aba14a540d9ac95e372564310\System.Data.SqlXml.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 1328640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\30664d5f93b99eb6e51900ec8137909d\System.Data.Services.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\e05825b235c398d3148bbac51abab75d\System.Data.OracleClient.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\98bbe3c24de8dfbbfa6faa685fac7632\System.Data.Linq.ni.dll + 2012-07-31 16:17 . 2012-07-31 16:17 9921024 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\e7f8e31dd8f015e08388619be47e632c\System.Data.Entity.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\c366ebd7f33816762268154efc68176d\System.Core.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 2147328 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\bc8043d2368e7bf80b49af314de3a562\ReachFramework.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\1b357b8f86096b51ac50f1d7c90fd9b9\PresentationUI.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 1449984 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\178be2ae406d87f35b4f22458af0d448\PresentationBuildTasks.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\edd366eb04c2fe0aaabba01c5a2105e0\Narrator.ni.exe + 2012-07-31 16:16 . 2012-07-31 16:16 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\e143c439fa3698366c4b2b1911a5f8f2\MMCEx.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\66183b1d79527c54e9d5ffdd8f8fda69\MIGUIControls.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3eaec5bc57c67c3b24ca2bb281ca249d\Microsoft.VisualBasic.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 1092608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\7f5335e134e48d154c8cc8aa5d1d9cce\Microsoft.Transactions.Bridge.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b02bdb4f1d9b1e3fb1c5b79838e371e4\Microsoft.PowerShell.Editor.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 1705472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\6a81878ac094031e85d9b01001dee716\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4f309ae82c753663e09a9a4cdb8375e1\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\f606df7f73ca8fb4ad5fc8edf23c3a88\Microsoft.MediaCenter.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\3e794c9f632eef8f63037605644b2385\Microsoft.MediaCenter.UI.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 2332672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\45c2fc4880b3ea85ee32d106553d5484\Microsoft.JScript.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\4c9b801dd450ef4344d43ba63cd8928f\Microsoft.Ink.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d7fe0033c89960de70477f3a3bf6f139\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\608fbe1dfdc8d81dacec493fb0359ff4\Microsoft.Build.Tasks.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\cf8b29164df493cae5121e9da162150a\Microsoft.Build.Engine.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\9118d768723cabeb71ee31c9ae817dd5\mcstore.ni.dll + 2012-07-31 16:16 . 2012-07-31 16:16 3025920 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\9b8e2dfba66cb800d532e0f9596b336f\mcepg.ni.dll + 2012-07-31 13:10 . 2012-04-06 00:49 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2012-03-07 12:10 . 2010-03-02 23:24 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2012-03-07 10:56 . 2011-10-31 23:17 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2012-07-31 13:10 . 2012-01-04 02:51 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2012-07-31 13:10 . 2012-03-21 22:29 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2012-03-07 12:09 . 2011-03-29 22:31 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-07-31 13:06 . 2012-03-21 22:29 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2009-07-13 20:46 . 2009-06-10 21:23 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-07-31 13:10 . 2012-04-06 00:49 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll - 2012-03-07 12:10 . 2010-03-02 23:24 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-07-31 13:10 . 2012-04-06 00:45 2255952 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll + 2012-07-31 13:10 . 2012-04-06 00:45 3997696 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-03-07 12:52 . 2011-07-08 22:32 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-07-31 13:10 . 2012-01-04 02:48 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-07-31 13:10 . 2012-04-06 00:49 1737296 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll + 2012-07-31 13:10 . 2012-04-06 00:49 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-03-07 12:10 . 2010-03-02 23:24 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-03-07 12:52 . 2011-07-08 22:35 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-07-31 13:10 . 2012-01-04 02:51 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-07-31 13:12 . 2012-06-09 04:46 12868608 c:\windows\SysWOW64\shell32.dll + 2012-07-31 13:09 . 2012-04-20 05:05 11019776 c:\windows\SysWOW64\ieframe.dll + 2009-07-14 02:34 . 2012-08-03 16:24 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2012-07-31 13:09 . 2012-04-20 06:21 12405760 c:\windows\system32\ieframe.dll + 2012-03-19 20:32 . 2012-03-19 20:32 14745600 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdkmd64.sys + 2012-03-19 19:55 . 2012-03-19 19:55 28992000 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdfcl64.dll + 2012-03-19 19:43 . 2012-03-19 19:43 23460864 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\igdfcl32.dll + 2012-03-19 19:33 . 2012-03-19 19:33 17226240 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\ig7icd64.dll + 2012-03-19 19:23 . 2012-03-19 19:23 13024256 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\ig7icd32.dll + 2012-03-19 19:31 . 2012-03-19 19:31 18137088 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\ig4icd64.dll + 2012-03-19 19:21 . 2012-03-19 19:21 13212672 c:\windows\system32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_2b61513fe1a7b941\ig4icd32.dll + 2012-03-19 20:32 . 2012-03-19 20:32 14745600 c:\windows\system32\drivers\igdkmd64.sys + 2012-07-31 13:10 . 2012-01-04 02:48 10005264 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll + 2012-07-31 14:42 . 2012-07-31 14:42 10605056 c:\windows\assembly\NativeImages_v2.0.50727_64\System\6ec488b702c100ad5d3e712db0e88554\System.ni.dll + 2012-07-31 14:43 . 2012-07-31 14:43 17382912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\ced1d3b0790804426463ad06a61f180e\System.Windows.Forms.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 15252992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\f6514b690596d60ca9f4fa64e14a8355\System.Web.ni.dll + 2012-07-31 16:19 . 2012-07-31 16:19 23812096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\de361406af8223de5eaa109782ea8272\System.ServiceModel.ni.dll + 2012-07-31 16:21 . 2012-07-31 16:21 11898880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\e8015a653e9913ada402b8361ced3d7e\System.Management.Automation.ni.dll + 2012-07-31 14:47 . 2012-07-31 14:47 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\dfb7152260d641e49ec1ecf0f2df0f37\System.Design.ni.dll + 2012-07-31 18:37 . 2012-07-31 18:37 13757952 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\b0920f4fb4f89400b383e2db88209bf5\System.Data.Entity.ni.dll + 2012-07-31 14:46 . 2012-07-31 14:46 19173376 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\916af5e5c39e1226e0b87a80e3a979f2\PresentationFramework.ni.dll + 2012-07-31 14:43 . 2012-07-31 14:43 16517120 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\ea90a194614680a484a25b6ccc4df754\PresentationCore.ni.dll + 2012-07-31 14:42 . 2012-07-31 14:42 15568896 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\9a7b48ad2929bc93362ec42cd4573f87\mscorlib.ni.dll + 2012-07-31 16:20 . 2012-07-31 16:20 25462272 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\a1484b74816bb58e5a5e59cc750fc3bd\ehshell.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\009c50fb69919b90fb233cb4c35d0ad7\System.Windows.Forms.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 11824128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\84fbf353f91385690a3e4e982aa6930e\System.Web.ni.dll + 2012-07-31 16:15 . 2012-07-31 16:15 17400320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\7900b4e8c860d8b4a3c1f98047c3c1a3\System.ServiceModel.ni.dll + 2012-07-31 14:45 . 2012-07-31 14:45 10578432 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\1321319c8922886e520d2821b5a64dca\System.Design.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 14325760 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\517358eb2fd962a942dd1ea6afc5b93e\PresentationFramework.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 12218880 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\e9d0ba41128f363f2390c7e630129c2b\PresentationCore.ni.dll + 2012-07-31 14:44 . 2012-07-31 14:44 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\5858678a79aae31262b0214424245d06\mscorlib.ni.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] 2012-07-26 18:39 2086496 ----a-w- c:\program files (x86)\AVG Secure Search\12.1.0.21\AVG Secure Search_toolbar.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\12.1.0.21\AVG Secure Search_toolbar.dll" [2012-07-26 2086496] . [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SanDiskSecureAccess_Manager.exe"="c:\users\Neil\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe" [2011-06-29 27311232] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-02-15 17146504] "ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-06 222496] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "Nuance PDF Reader-reminder"="c:\program files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" [2008-11-03 328992] "SonicMasterTray"="c:\program files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe" [2010-07-10 984400] "Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-23 1601536] "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-08-17 5732992] "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-10-07 170624] "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712] "PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2012-04-19 336952] "COMODO"="c:\program files\COMODO\COMODO GeekBuddy\CLPSLA.exe" [2011-11-23 213304] "CPA"="c:\program files\COMODO\COMODO GeekBuddy\VALA.exe" [2011-11-23 184120] "AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008] "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-07-26 1147488] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296] "Aimersoft Helper Compact.exe"="c:\program files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe" [2012-02-20 1666560] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ AsusVibeLauncher.lnk - c:\program files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe [2011-1-12 548528] FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe [2011-5-17 12862] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\guard32.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "midi2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS] @="Service" . R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe [2012-07-04 5160568] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-12 135664] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-15 158856] R2 Web Assistant Updater;Web Assistant Updater;c:\program files\Web Assistant\ExtensionUpdaterService.exe [x] R2 Zain e-GO. RunOuc;Zain e-GO. OUC;c:\program files (x86)\Zain e-GO\UpdateDog\ouc.exe [2012-07-22 655712] R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2012-07-22 117248] R3 ewusbmbb;HUAWEI USB-WWAN miniport;c:\windows\system32\DRIVERS\ewusbwwan.sys [2012-07-22 417280] R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-31 113120] R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys [2010-08-03 290920] R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-09 1255736] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184] S0 aswNdis2;avast! Firewall Core Firewall Service; [x] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944] S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-02-21 25960] S1 aswFW;avast! TDI Firewall driver; [x] S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2010-07-26 17024] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-02-22 289872] S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-03-19 383808] S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2012-07-26 31080] S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2012-03-11 577824] S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2012-03-11 43248] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928] S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [2011-03-03 379520] S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416] S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-03-13 138400] S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-03-13 74912] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288] S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-11-23 1267000] S2 hshld;Hotspot Shield Service;c:\program files (x86)\Hotspot Shield\bin\openvpnas.exe [2012-04-10 542552] S2 HssWd;Hotspot Shield Monitoring Service;c:\program files (x86)\Hotspot Shield\bin\hsswd.exe [2012-04-02 329544] S2 HWDeviceService64.exe;HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe [2011-03-14 346976] S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080] S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-02-22 2009704] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-04-16 13832] S2 TurboBoost;Intel(R) Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-04-16 134928] S2 vToolbarUpdater12.1.5;vToolbarUpdater12.1.5;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.1.5\ToolbarUpdater.exe [2012-07-26 830048] S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2011-03-13 36000] S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2011-12-23 124496] S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776] S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2011-03-13 298656] S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-03-13 28832] S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2011-03-13 201376] S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2011-03-13 55456] S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2011-03-13 154272] S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2011-03-13 280224] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-12-13 138024] S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2012-07-22 87040] S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440] S3 MEIx64;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800] . . Contents of the 'Scheduled Tasks' folder . 2012-08-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-12 17:19] . 2012-08-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-12 17:19] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B] @="{6D4133E5-0742-4ADC-8A8C-9303440F7190}" [HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}] 2009-11-26 05:49 70656 ------w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O] @="{64174815-8D98-4CE6-8646-4C039977D808}" [HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}] 2009-11-26 05:49 70656 ------w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ASUS WebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2010-03-16 1754448] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-10 167960] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-10 391704] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-10 418328] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-01-18 2188904] "ETDCtrl"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU] "AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-03-13 617120] "AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-03-13 379552] "IntelTBRunOnce"="wscript.exe" [2009-07-14 168960] "COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-03-11 9569096] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\guard64.dll . ------- Supplementary Scan ------- . uLocal Page = c:\windows\system32\blank.htm mStart Page = about:blank IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{4F7687F2-934B-4FE0-B68F-E2AD42FAD8D0}: NameServer = 8.26.56.26,156.154.70.22 TCP: Interfaces\{8646602E-03A4-4875-B020-DB4813EBEC71}: NameServer = 10.93.56.1 TCP: Interfaces\{87E2C2A3-91E2-498B-A848-A273AED51E55}: NameServer = 8.26.56.26,156.154.70.22 TCP: Interfaces\{9DBE4EE5-D582-41BF-9AB0-A20BF777C485}: NameServer = 62.209.25.157 62.209.25.158 TCP: Interfaces\{BD284B74-1B79-4D48-AAC3-C5DF43D45AFD}: NameServer = 83.136.58.187 83.136.56.53 Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\12.1.5\ViProtocol.dll FF - ProfilePath - c:\users\Neil\AppData\Roaming\Mozilla\Firefox\Profiles\la1abbud.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ FF - prefs.js: keyword.URL - hxxps://isearch.avg.com/search?cid=%7B4e86c3c8-95d4-44be-b22b-ed35ce4e0db3%7D&mid=65972714926c47d0b3d6d15756fbc5fd-f19972368392ff3292e29babfdfb8758265d8111&ds=AVG&v=12.1.0.21&lang=en&pr=fr&d=2012-07-26%2021%3A39%3A10&sap=ku&q= FF - user.js: keyword.enabled - 1 FF - user.js: general.useragent.extra.brc - . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-3022402605-2101226938-1445187523-1001\Software\SecuROM\License information*] "datasecu"=hex:25,9d,8a,71,5a,75,c4,97,e8,30,ea,a7,58,f4,84,2d,2b,22,b6,47,2a, c9,a8,40,a0,32,96,09,7f,78,dd,cc,86,6e,9c,c3,42,d0,f3,05,c7,31,15,2a,37,f1,\ "rkeysecu"=hex:44,df,bd,07,ab,a6,ab,ad,a5,32,e3,b7,b3,c7,22,3c . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}] @Denied: (A 2) (Everyone) @="IFlashBroker3" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2012-08-03 19:41:59 ComboFix-quarantined-files.txt 2012-08-03 16:41 ComboFix2.txt 2012-07-31 12:18 ComboFix3.txt 2012-07-25 15:28 ComboFix4.txt 2012-07-22 20:54 . Pre-Run: 102,283,833,344 bytes free Post-Run: 102,743,838,720 bytes free . - - End Of File - - C9AE23946AD449AEBE5EBD46C0C2D245