Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Eddie » January 22nd, 2009, 7:48 pm

Thank you so much for existing!
Heres my HijackThis Log>>

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:33:40 PM, on 1/22/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Windows\system32\igfxext.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\AirPort\APAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\igfxsrvc.exe
C:\Users\test\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/ ... ch/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.us.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [AirPort Base Station Agent] "C:\Program Files\AirPort\APAgent.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

--
End of file - 8144 bytes
Eddie
Active Member
 
Posts: 9
Joined: January 22nd, 2009, 7:38 pm
Advertisement
Register to Remove

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Sharagoz » January 24th, 2009, 3:21 pm

Hello Eddie, welcome to MWR
Please take note of the following before we begin the cleaning process:
  • The whole process will usually take at least a week complete, sometimes several weeks depending on the severity of the infection and how promptly you and me are able to reply, so please stay patient
  • Hang in there until I give you the 'All clean'. If you leave prematurely because your computer seems to be back to its old self, the risk of re-infection will be very high
  • Perform all actions in the order given
  • The instructions I give expect that you're using an account with administrator privileges and that the language of your operating system is English.
  • Dont be afraid to ask questions if something is unclear or you run into issues during cleaning steps
  • I recommend you read through each set of instructions before you actually perform them

1) Create an uninstall list
  • Launch Hijackthis
  • Click the Open the Misc Tools section button
  • Click the Open Uninstall Manager button.
  • Click the Save list button.
  • Include this log in your next reply

2) Get a new HiJackThis log
  • Launch Hijackthis
  • Click on the Do a system scan and save a logfile button
  • HJT will run a scan and a log will open in Notepad
  • Include this log in your next reply

Questions:
Can you describe what issues you are experiencing that makes you belive your computer is infected?
Have you done anything to try and solve this issue before posting here?
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Eddie » January 25th, 2009, 7:59 pm

Thank you so much for your help. I can not wait to get this process started. Unfortunately, I'm in New York til Tuesday so will not be able begin until then. I will follow every direction to a T and will keep our dialogue going until blessed with the "All Clear".

Avast is my current virus protection program as well as windows defender. I've received Avast warnings regarding the virus and am unable to move it to the chest or do anything to it for that matter. I believe the virus prohibits my comp from downloading and installing updates from defender (and probably other programs I am unaware of).

I'll be able to check this post from time to time from a friends comp, but will definitely be in touch ASAP when I get home. Again, thank you so much!
Eddie
Active Member
 
Posts: 9
Joined: January 22nd, 2009, 7:38 pm

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Sharagoz » January 25th, 2009, 8:04 pm

I'll be here when you get back, see you then
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Eddie » January 29th, 2009, 2:10 am

I'm back from NY and am ready to get down to business. I do have a couple questions - you asked for me to include my "uninstall list" and "hijackthis log" in my reply. . .did you mean to copy and paste it in the body or attach the saved files (I did both)? Also, during this process should I limit the use of my computer? What about the Internet?

1)
My uninstall list:

Acer Assist
Acer Crystal Eye webcam
Acer Crystal Eye webcam
Acer GridVista
Acer Mobility Center Plug-In
Acer Registration
Acer ScreenSaver
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Default Language CS3
Adobe Device Central CS3
Adobe Dreamweaver CS3
Adobe Dreamweaver CS3
Adobe ExtendScript Toolkit 2
Adobe Extension Manager CS3
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Flash Player 9 ActiveX
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Photoshop CS3
Adobe Reader 8.1.0
Adobe Setup
Adobe Setup
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS3
Agere Systems HDA Modem
AirPort
Apple Mobile Device Support
Apple Software Update
avast! Antivirus
Azureus Vuze
Big Kahuna Reef 2
Bonjour
Broadcom Gigabit Integrated Controller
DivX Codec
DivX Converter
DivX Player
DivX Web Player
DVD Shrink 3.2
HijackThis 2.0.2
Intel(R) Graphics Media Accelerator Driver
Intel(R) Matrix Storage Manager
iTunes
Launch Manager
LiveUpdate 3.2 (Symantec Corporation)
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.0.5)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
Nero 8
neroxml
Netflix Movie Viewer
NTI Backup NOW! 4.7
NTI CD & DVD-Maker
Orion
PDF Settings
PowerProducer 3.72
QuickTime
Realtek High Definition Audio Driver
Rhapsody
Rhapsody Player Engine
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
Safari
Synaptics Pointing Device Driver
VCRedistSetup
Winbond CIR Drivers
WinRAR archiver
Yahoo! Toolbar

2) My HiJackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:33:40 PM, on 1/22/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Windows\system32\igfxext.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\AirPort\APAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\igfxsrvc.exe
C:\Users\test\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/ ... ch/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.us.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [AirPort Base Station Agent] "C:\Program Files\AirPort\APAgent.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

--
End of file - 8144 bytes
You do not have the required permissions to view the files attached to this post.
Eddie
Active Member
 
Posts: 9
Joined: January 22nd, 2009, 7:38 pm

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Sharagoz » January 29th, 2009, 4:29 pm

you asked for me to include my "uninstall list" and "hijackthis log" in my reply. . .did you mean to copy and paste it in the body or attach the saved files

I ment to post it directly in the reply, not as an attachment. If something needs to be attached I'll be spesific about doing exactly that. :)

P2P warning
You have Azureus Vuze installed on your computer. This is a peer-to-peer program used to share files between computers.
There are several issues related to this:
  • P2P programs are notorious for being bundled with unwanted adware/spyware programs
  • Poorly configured P2P programs can share more files than you want them too, including personal files
  • Since its impossible to establish the source of which you are copying files from, you will always be at a certan risk every time you download a file. Malware written to spesifically spread through P2P networks are becoming an increasing problem and may be the source of your current infection. Even if you can trust the P2P program itself, you can never trust the sources you download from.

By MWR policy I am forced to ask that you uninstall this program if you wish me to further help you with your malware issues.
For more info, read MWR policy on P2P programs

To uninstall the program, go to Add/Remove Programs and uninstall the following:
Azureus Vuze

If you chose to continue, do the below.

1) Download and run DDS by sUBs
  • Download DDS from one of the links below and save it to your desktop
    Link1 | Link2 | Link3
  • Double-click the file to run the tool
  • A black window will stay open while the tool runs
  • Wait for the scan to finish (this will only take a couple of minutes), and two logs to open in separate notepad documents
  • Include both these logs in your next reply

2) Download and run GMER
  • Download gmer.zip by GMER from here and extract it to a folder on your desktop
  • Double click on gmer.exe to launch the program
  • If asked, allow the gmer.sys driver to load
  • If it warns you about rootkit activity and asks if you want to run scan, click OK
  • If you don't get a warning, click the Rootkit/Malware tab and then Scan
  • Once the scan has finished, click copy
  • A log will now be copied to the clipboard
  • Paste it into your next reply by pressing CTRL+V

Logs I need:
    Both DDS logs
    GMER log
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Eddie » January 29th, 2009, 6:45 pm

As instructed I deleted Azureus and am more than willing to delete anything to get back to running at 100%. On the right had side of the gmer program, after the scan, there is a check box with the C:\ and D:\ drives. I'm sure you would have given me instructions if I needed to do anything other than what you asked, but wanted to let you know that the C:\ box was checked and the D:\ was not. . . this may or may not be relevant, just wanted to let you know just case. Also, I realize I should mention that I store my music and many other files I accessed regularly on a portable hard drive (500gig). I'd say its running 75% of the time that I am on my laptop. Could this also be infected? If so, will you be able to help me with that as well?

Once I get the all clear, will I be able to run plug ins like Firefox's Speed Dial? Maybe the better question is, would you advise against running plug ins or will that not be an issue?


- DDS log:

DDS (Ver_09-01-07.01) - NTFSx86
Run by test at 17:01:59.62 on Thu 01/29/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.112 [GMT -5:00]

AV: avast! antivirus 4.8.1201 [VPS 090129-0] *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Acer\Mobility Center\MobilityService.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Users\test\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\AirPort\APAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\test\Downloads\dds.com

============== Pseudo HJT Report ===============

uStart Page = hxxp://en.us.acer.yahoo.com/
uSEARCH PAGE = hxxp://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
uSearch Bar = hxxp://us.rd.yahoo.com/customize/ycomp/ ... ch/ie.html
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page = hxxp://en.us.acer.yahoo.com
mDefault_Page_URL = hxxp://en.us.acer.yahoo.com
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - No File
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [Acer Tour Reminder]
uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\nero\lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [AdobeUpdater] c:\program files\common files\adobe\updater5\AdobeUpdater.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe"
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [LManager] c:\progra~1\launch~1\QtZgAcer.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [PLFSet] rundll32.exe c:\windows\PLFSet.dll,PLFDefSetting
mRun: [Acer Product Registration] "c:\program files\acer registration\ACE1.exe" /startup
mRun: [Acer Assist Launcher] c:\program files\acer assist\launcher.exe
mRun: [eRecoveryService]
mRun: [Acer Tour Reminder] c:\acer\acertour\Reminder.exe
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [NeroFilterCheck] c:\program files\common files\nero\lib\NeroCheck.exe
mRun: [NBKeyScan] "c:\program files\nero\nero8\nero backitup\NBKeyScan.exe"
mRun: [AirPort Base Station Agent] "c:\program files\airport\APAgent.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [Skytel] Skytel.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
dRun: [Acer Tour Reminder] c:\acer\acertour\Reminder.exe
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
Notify: igfxcui - igfxdev.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\test\appdata\roaming\mozilla\firefox\profiles\rd9hluzq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - plugin: c:\users\test\appdata\roaming\mozilla\firefox\profiles\rd9hluzq.default\extensions\moveplayer@movenetworks.com\platform\winnt_x86-msvc\plugins\npmnqmp071101000055.dll

============= SERVICES / DRIVERS ===============

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-4-3 78416]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2007-7-22 180736]
R3 winbondcir;Winbond IR Transceiver;c:\windows\system32\drivers\winbondcir.sys [2007-3-28 43008]
R4 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-4-3 20560]
R4 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2008-2-6 50768]

=============== Created Last 30 ================

2009-01-29 17:00 250 a------- c:\windows\gmer.ini
2009-01-21 23:20 167,499,777 a------- c:\windows\MEMORY.DMP
2009-01-21 21:41 <DIR> --d----- c:\program files\Trend Micro
2009-01-06 18:42 <DIR> --d----- c:\program files\iPod
2009-01-06 18:42 <DIR> --d----- c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-06 18:42 <DIR> --d----- c:\program files\iTunes
2009-01-06 18:42 <DIR> --d----- c:\progra~2\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}

==================== Find3M ====================

2009-01-06 18:35 86,016 a------- c:\windows\inf\infstor.dat
2009-01-06 18:35 51,200 a------- c:\windows\inf\infpub.dat
2009-01-06 18:35 143,360 a------- c:\windows\inf\infstrng.dat
2008-12-20 10:45 0 a---h--- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-12-18 17:43 174 a--sh--- c:\program files\desktop.ini
2008-12-18 17:32 665,600 a------- c:\windows\inf\drvindex.dat
2008-12-18 13:49 101,888 a------- c:\windows\system32\ifxcardm.dll
2008-12-18 13:49 82,432 a------- c:\windows\system32\axaltocm.dll
2008-10-31 22:44 52,736 a------- c:\windows\apppatch\iebrshim.dll
2008-10-31 22:44 2,154,496 a------- c:\windows\apppatch\AcGenral.dll
2008-10-31 22:44 541,696 a------- c:\windows\apppatch\AcLayers.dll
2008-10-31 22:44 460,288 a------- c:\windows\apppatch\AcSpecfc.dll
2008-10-31 22:44 173,056 a------- c:\windows\apppatch\AcXtrnal.dll
2008-10-31 22:44 28,672 a------- c:\windows\system32\Apphlpdm.dll
2008-10-31 20:21 4,240,384 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2006-11-02 07:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 07:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 07:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 07:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat
2008-06-10 03:31 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\history\history.ie5\index.dat
2008-06-10 03:31 32,768 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2008-06-10 03:31 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\cookies\index.dat

============= FINISH: 17:03:55.31 ===============



DDS "attach" log -

DDS (Ver_09-01-07.01)

Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 2/5/2008 1:38:05 PM
System Uptime: 1/29/2009 4:10:57 PM (1 hours ago)

Motherboard: Acer, Inc. | | Nestos
Processor: Intel(R) Pentium(R) Dual CPU T2330 @ 1.60GHz | U2E1 | 1600/133mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 69 GiB total, 40.542 GiB free.
D: is FIXED (NTFS) - 69 GiB total, 63.8 GiB free.
E: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================


==== Installed Programs ======================

Acer Assist
Acer Crystal Eye webcam
Acer GridVista
Acer Mobility Center Plug-In
Acer Registration
Acer ScreenSaver
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Default Language CS3
Adobe Device Central CS3
Adobe Dreamweaver CS3
Adobe ExtendScript Toolkit 2
Adobe Extension Manager CS3
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Flash Player 9 ActiveX
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Reader 8.1.0
Adobe Setup
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS3
Agere Systems HDA Modem
AirPort
Apple Mobile Device Support
Apple Software Update
AutoUpdate
avast! Antivirus
Big Kahuna Reef 2
Bonjour
Broadcom Gigabit Integrated Controller
DivX Codec
DivX Converter
DivX Player
DivX Web Player
DVD Shrink 3.2
HijackThis 2.0.2
Intel(R) Graphics Media Accelerator Driver
Intel(R) Matrix Storage Manager
iTunes
Launch Manager
LightScribe 1.4.142.1
LiveUpdate 3.2 (Symantec Corporation)
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft XML Parser
Move Networks Media Player for Internet Explorer
Mozilla Firefox (3.0.5)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
Nero 8
neroxml
Netflix Movie Viewer
NTI Backup NOW! 4.7
NTI CD & DVD-Maker
Orion
PDF Settings
PowerProducer 3.72
QuickTime
Realtek High Definition Audio Driver
Rhapsody
Rhapsody Player Engine
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
Safari
Synaptics Pointing Device Driver
VCRedistSetup
Winbond CIR Drivers
WinRAR archiver
Yahoo! Toolbar

==== End Of File ===========================



Gmer log

GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2009-01-29 17:20:22
Windows 6.0.6001 Service Pack 1


---- System - GMER 1.0.14 ----

Code 8B0C7098 ZwEnumerateKey
Code 85D154D8 ZwFlushInstructionCache
Code 8B10A4F8 ZwQueryValueKey
Code 85D1544D IofCallDriver

---- Kernel code sections - GMER 1.0.14 ----

.text ntkrnlpa.exe!IofCallDriver 81CBFF6F 5 Bytes JMP 85D15452
PAGE ntkrnlpa.exe!ZwFlushInstructionCache 81DB630B 5 Bytes JMP 85D154DC
PAGE ntkrnlpa.exe!ZwQueryValueKey 81E09B57 5 Bytes JMP 8B10A4FC
PAGE ntkrnlpa.exe!ZwEnumerateKey 81E0BBB4 5 Bytes JMP 8B0C709C

---- User IAT/EAT - GMER 1.0.14 ----

IAT C:\Windows\system32\services.exe[632] @ C:\Windows\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 00060002
IAT C:\Windows\system32\services.exe[632] @ C:\Windows\system32\services.exe [KERNEL32.dll!CreateProcessW] 00060000
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [744F7BA4] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [745398C5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [744FD3C8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [744EF527] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [744F7599] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [744EE43D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [7452B33D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [744FD68A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [744F012E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [744F0095] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [744E71F3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [7457D802] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [745175E1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [744EDAE1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [744E668F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [744E66BA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[3012] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [744F1E45] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Program Files\WinRAR\WinRAR.exe[3648] @ C:\Windows\system32\OLE32.DLL [msvcrt.dll!free] [6A2BF563] C:\Windows\AppPatch\AcSpecfc.DLL (Windows Compatibility DLL/Microsoft Corporation)

---- Devices - GMER 1.0.14 ----

AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\tdx \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\tdx \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

---- Services - GMER 1.0.14 ----

Service C:\Windows\system32\drivers\msqpdxqnsrumea.sys (*** hidden *** ) [SYSTEM] msqpdxserv.sys <-- ROOTKIT !!!

---- Registry - GMER 1.0.14 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys@start 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys@type 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys@imagepath \systemroot\system32\drivers\msqpdxqnsrumea.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys@group file system
Reg HKLM\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys\modules
Reg HKLM\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys\modules@msqpdxserv \\?\globalroot\systemroot\system32\drivers\msqpdxqnsrumea.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys\modules@msqpdxl \\?\globalroot\systemroot\system32\msqpdxmewtfbso.dll
Reg HKLM\SYSTEM\ControlSet003\Services\msqpdxserv.sys
Reg HKLM\SYSTEM\ControlSet003\Services\msqpdxserv.sys@start 1
Reg HKLM\SYSTEM\ControlSet003\Services\msqpdxserv.sys@type 1
Reg HKLM\SYSTEM\ControlSet003\Services\msqpdxserv.sys@imagepath \systemroot\system32\drivers\msqpdxqnsrumea.sys
Reg HKLM\SYSTEM\ControlSet003\Services\msqpdxserv.sys@group file system
Reg HKLM\SYSTEM\ControlSet003\Services\msqpdxserv.sys\modules
Reg HKLM\SYSTEM\ControlSet003\Services\msqpdxserv.sys\modules@msqpdxserv \\?\globalroot\systemroot\system32\drivers\msqpdxqnsrumea.sys
Reg HKLM\SYSTEM\ControlSet003\Services\msqpdxserv.sys\modules@msqpdxl \\?\globalroot\systemroot\system32\msqpdxmewtfbso.dll
Reg HKLM\SOFTWARE\Classes\msqpdxvx
Reg HKLM\SOFTWARE\Classes\msqpdxvx@msqpdxrun 71
Reg HKLM\SOFTWARE\Classes\msqpdxvx@msqpdxpff 8326
Reg HKLM\SOFTWARE\Classes\msqpdxvx@msqpdxaff 3435
Reg HKLM\SOFTWARE\Classes\msqpdxvx@msqpdxinfo ?}gx~yc?~c?cblnnbvkonrlomNPRS
Reg HKLM\SOFTWARE\Classes\msqpdxvx@msqpdxid qfy?|y?v?cc??ad??`?knmk?gS'VT%]'#X-
Reg HKLM\SOFTWARE\Classes\msqpdxvx@msqpdxsrv 1745024793
Reg HKLM\SOFTWARE\Classes\msqpdxvx@msqpdxpos 5}~p|zu~?p4biedba`az

---- EOF - GMER 1.0.14 ----
Eddie
Active Member
 
Posts: 9
Joined: January 22nd, 2009, 7:38 pm

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Sharagoz » January 29th, 2009, 7:32 pm

You may have an infection that is capable of infecting removable storage devices.
If you have any that's currently connected, or has been connected since you noticed the infection, do not connect them to any other computers.
It's best to just keep these connected to this computer until we have completed the disinfection process.

I have prepared a fix for you and posted it for approval.
As I am only an undergrad at this uni I need to have all my fixes approved by a teacher before they can be posted.
The downside with this is that things take a little more time. The upside is that you'll have two set of eyes checking your logs, so you can be sure nothing will be missed, and the teachers here are among the best malware removers you'll find anywhere, online or not, so you can feel confident you are in the right hands.
The initial waiting time can take up to 48hrs, depending on how busy the teachers are, so please stay patient.
Once a teacher finds a free slot we'll be on our way to a clean computer, and the subsequent replies will usually be faster.
In the top left corner of your opening post there is a link called Subscribe topic. If you click it you will be subscribed to this thread and will receive instant email notification of new replies. For most people this works better than periodically checking back here to see if there's any new posts.
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Eddie » January 29th, 2009, 8:48 pm

Okay. Sounds great. I cant thank you guys enough. I haven't connected the external hard drive for some time, and won't until we talk about again. In the meantime to what capacity do you recommend that I use the computer? Should I limit internet use or is it fine to go about everything as I normally would?
Eddie
Active Member
 
Posts: 9
Joined: January 22nd, 2009, 7:38 pm

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Sharagoz » January 30th, 2009, 5:32 am

Use the computer like you normally would, but dont connect any external storage devices or run scans on your own
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Sharagoz » February 1st, 2009, 11:26 am

1) Enable System Restore
You seem to have system restore disabled. This is not recommended as system restore can be used to repair system errors.
I strongly recommend you run the below procedure to enable it.
  • Click the start button, right-click on Computer and chose Properties
  • Select System protection in the left-hand menu
  • Put a checkmark next to the system drive
    (System drive will have a name similar to Local Disk (C:) (System) )
  • Click Apply and then Create to create a new restore point
  • After the restore point is created, click OK to save settings and exit

2) Temporarily disable on-access protection
Windows Defender
  • Open Windows Defender
  • Select Tools and then General Settings
  • Scroll down, and under Real Time Protection Options uncheck Turn on real-time protection
  • Select Save
  • We'll re-enable Windows Defender after we're done cleaning your computer.
Avast
  • Right-click on the blue Avast icon in the system tray (next to the clock in the bottom right corner of your screen) and chose Stop On-Access Protection
  • We'll enable Avast again after the next step

3) Download and Run ComboFix
  • Visit this webpage for download links and and instructions on how to properly run ComboFix:
    http://www.bleepingcomputer.com/combofix/how-to-use-combofix
    Make sure you install the recovery consol as instructed beforehand
    The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time and can be a lifesaver later.
    Once installed, you should see a blue screen prompt that says:
    The Recovery Console was successfully installed.
  • Run ComboFix as instructed by the tutorial. When ComboFix is finished running, a log will be opened. Include this log in your next reply.

Enable Avast again after this step by right-clicking on the Avast icon and chosing Enable on-access protection

4) Get a new HiJackThis log
  • Launch Hijackthis
  • Click on the Do a system scan and save a logfile button
  • HJT will run a scan and a log will open in Notepad
  • Include this log in your next reply

Logs I need:
ComboFix log
New HJT log

I store my music and many other files I accessed regularly on a portable hard drive (500gig).
Could this also be infected? If so, will you be able to help me with that as well?

Yes, there may be infected files on that drive and we'll have it scanned at a later point.
In fact, the infection your computer has are capable of spreading through removable storage devices, so after the above steps are completed, plug the external drive into the computer and leave it there until we are finished. Do not connect any new external storage devices until we are finished, and if any are currently plugged in, leave them there until we have disinfected them.
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Eddie » February 2nd, 2009, 8:28 pm

Sharagoz wrote:You seem to have system restore disabled. This is not recommended as system restore can be used to repair system errors.
I strongly recommend you run the below procedure to enable it.

- I followed the steps listed, but from this end my system restore was enabled, it seemed to be. When I first accessed it, the last back up was on 01-31-09. That said, I completed the instructions to the best of my ability, today being the most recent restore point.


Regarding the external hard drive. . .I do not currently have it with me. Will this hinder our progress forward? Or will I be able to debug it at a later point?

Again, Thank You.

Following are the two logs requested:

1) comboFix log:


ComboFix 09-02-02.03 - test 2009-02-02 18:17:07.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.265 [GMT -5:00]
Running from: c:\users\test\Downloads\ComboFix.exe
AV: avast! antivirus 4.8.1201 [VPS 090202-1] *On-access scanning disabled* (Updated)
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\resycled
c:\windows\system32\drivers\msqpdxqnsrumea.sys
c:\windows\system32\msqpdxmewtfbso.dll
c:\windows\system32\x64
D:\Autorun.inf
D:\resycled

.
((((((((((((((((((((((((( Files Created from 2009-01-02 to 2009-02-02 )))))))))))))))))))))))))))))))
.

2009-01-29 17:00 . 2009-01-29 17:11 250 --a------ c:\windows\gmer.ini
2009-01-21 23:20 . 2009-02-02 17:32 204,733,633 --a------ c:\windows\MEMORY.DMP
2009-01-21 21:41 . 2009-01-21 21:41 <DIR> d-------- c:\program files\Trend Micro
2009-01-06 18:42 . 2009-01-06 18:42 <DIR> d-------- c:\users\All Users\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-06 18:42 . 2009-01-06 18:42 <DIR> d-------- c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-06 18:42 . 2009-01-06 18:42 <DIR> d-------- c:\program files\iTunes
2009-01-06 18:42 . 2009-01-06 18:42 <DIR> d-------- c:\program files\iPod
2009-01-06 18:38 . 2009-01-06 18:39 <DIR> d-------- c:\program files\QuickTime

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-30 21:13 --------- d-----w c:\program files\Rhapsody
2009-01-29 21:54 --------- d-----w c:\program files\Azureus
2009-01-20 06:34 --------- d-----w c:\program files\VideoLAN
2009-01-19 01:42 --------- d-----w c:\users\test\AppData\Roaming\Azureus
2009-01-06 23:42 --------- d-----w c:\program files\Common Files\Apple
2009-01-04 19:53 --------- d-----w c:\program files\Safari
2008-12-31 06:14 --------- d-----w c:\users\Weezy\AppData\Roaming\DivX
2008-12-30 23:29 --------- d-----w c:\users\Weezy\AppData\Roaming\Apple Computer
2008-12-30 23:23 --------- d-----w c:\users\Weezy\AppData\Roaming\Nero
2008-12-30 23:23 --------- d-----w c:\users\Weezy\AppData\Roaming\Leadertech
2008-12-30 23:23 --------- d-----w c:\users\Weezy\AppData\Roaming\Acer
2008-12-20 15:45 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-12-18 22:43 174 --sha-w c:\program files\desktop.ini
2008-12-18 22:34 --------- d-----w c:\program files\Windows Sidebar
2008-12-18 22:34 --------- d-----w c:\program files\Windows Photo Gallery
2008-12-18 22:34 --------- d-----w c:\program files\Windows Mail
2008-12-18 22:34 --------- d-----w c:\program files\Windows Journal
2008-12-18 22:34 --------- d-----w c:\program files\Windows Defender
2008-12-18 22:34 --------- d-----w c:\program files\Windows Collaboration
2008-12-18 22:34 --------- d-----w c:\program files\Windows Calendar
2008-12-18 18:49 82,432 ----a-w c:\windows\System32\axaltocm.dll
2008-12-18 18:49 101,888 ----a-w c:\windows\System32\ifxcardm.dll
2008-12-14 07:41 --------- d-----w c:\program files\Graboid
2008-12-14 07:31 --------- d-----w c:\programdata\Launcher
2008-12-10 06:23 --------- d-----w c:\users\test\AppData\Roaming\dvdcss
2008-12-10 05:11 --------- d-----w c:\users\test\AppData\Roaming\vlc
2008-06-10 08:31 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2008-06-10 08:31 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2008-06-10 08:31 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2007-12-13 1688872]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-06-12 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-09 857648]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2007-06-28 707080]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-03-08 40048]
"PLFSet"="c:\windows\PLFSet.dll" [2007-04-25 45056]
"Acer Product Registration"="c:\program files\Acer Registration\ACE1.exe" [2007-02-02 3383296]
"Acer Assist Launcher"="c:\program files\Acer Assist\launcher.exe" [2007-02-02 1261568]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-15 79224]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
"AirPort Base Station Agent"="c:\program files\AirPort\APAgent.exe" [2008-05-20 737280]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-11 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-11 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-11 133656]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-28 c:\windows\RtHDVCpl.exe]
"Skytel"="Skytel.exe" [2007-05-28 c:\windows\SkyTel.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{CF669FE5-752C-48A6-882E-2D617768A4B9}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{42853471-E900-403D-AAF8-5758DF35F60B}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"TCP Query User{9050FB32-9B42-4B00-B620-1485B1970271}c:\\program files\\azureus\\azureus.exe"= UDP:c:\program files\azureus\azureus.exe:Azureus
"UDP Query User{9BCCA92B-0305-413E-8ECE-2D151A81224C}c:\\program files\\azureus\\azureus.exe"= TCP:c:\program files\azureus\azureus.exe:Azureus
"TCP Query User{38B08054-AA06-48E3-9644-8117D4F63A92}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= UDP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"UDP Query User{4B2B161D-B5CA-453D-B023-17F946C3878A}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= TCP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"TCP Query User{4AF43561-BD7D-4595-B94F-51FCE1CECB75}c:\\program files\\rhapsody\\rhapsody.exe"= UDP:c:\program files\rhapsody\rhapsody.exe:RealNetworks Rhapsody
"UDP Query User{6DC38EA4-7AAF-4635-8FDB-A5DB5D535848}c:\\program files\\rhapsody\\rhapsody.exe"= TCP:c:\program files\rhapsody\rhapsody.exe:RealNetworks Rhapsody
"TCP Query User{0AF11667-FFF4-423D-B47A-555D05E0202D}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= UDP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"UDP Query User{69FBD1D6-9508-4206-805D-C422AD7C8C83}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= TCP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"{432E0A4A-7F4A-41FC-9631-F350A01E2605}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{BC5F53F2-02AA-48BF-B1F3-67C9776CA0D8}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{1D0952FE-B4BA-4E3C-8139-BF9F62827533}"= UDP:c:\program files\AirPort\APAgent.exe:APAgent
"{C62E4EF8-BD90-4815-B01D-B52273FF6F28}"= TCP:c:\program files\AirPort\APAgent.exe:APAgent
"{887F0571-B52A-44D0-B1B2-0B5579342728}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{B1524AB5-68FD-498B-80CD-B4046C101419}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{BB6901CE-20BF-4164-8835-3BE905D96F01}"= UDP:c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:Veoh Web Player
"{0B075390-87C8-4FD5-8E21-8D3D41E28F2C}"= TCP:c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:Veoh Web Player
"TCP Query User{6C06AF26-B849-40CF-BF61-28234740854D}c:\\aptana\\aptana studio\\jre\\bin\\javaw.exe"= UDP:c:\aptana\aptana studio\jre\bin\javaw.exe:Java(TM) Platform SE binary
"UDP Query User{26162860-D337-4DC6-A9DD-031E8F458E49}c:\\aptana\\aptana studio\\jre\\bin\\javaw.exe"= TCP:c:\aptana\aptana studio\jre\bin\javaw.exe:Java(TM) Platform SE binary
"{443C84A6-DFB2-4020-891D-CF354AAA392B}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{E4D72E3F-60E2-490E-B007-10F92D777EC9}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [2008-04-03 78416]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2008-04-03 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2008-02-06 50768]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [2007-07-22 180736]
R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [2007-03-28 43008]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com f:
\shell\Open\command - resycled\boot.com f:

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{47957a90-f111-11dc-80e5-ca366b4e1c4a}]
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com f:
\shell\Open\command - resycled\boot.com f:

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9568d692-ec64-11dc-9476-ed2549b1298f}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d2b7c44a-d4db-11dc-a1af-ee02c3ea3063}]
\shell\AutoRun\command - F:\Launch.exe
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-Acer Tour Reminder - (no file)
HKLM-Run-Acer Tour Reminder - c:\acer\AcerTour\Reminder.exe
HKLM-Run-eRecoveryService - (no file)
HKU-Default-Run-Acer Tour Reminder - c:\acer\AcerTour\Reminder.exe


.
------- Supplementary Scan -------
.
uStart Page = hxxp://en.us.acer.yahoo.com/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page = hxxp://en.us.acer.yahoo.com
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
FF - ProfilePath - c:\users\test\AppData\Roaming\Mozilla\Firefox\Profiles\rd9hluzq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - plugin: c:\users\test\AppData\Roaming\Mozilla\Firefox\Profiles\rd9hluzq.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071101000055.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-02 18:22:14
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...


c:\users\test\AppData\Local\Temp\catchme.dll 53248 bytes executable

scan completed successfully
hidden files: 1

**************************************************************************
.
Completion time: 2009-02-02 18:24:39
ComboFix-quarantined-files.txt 2009-02-02 23:24:36

Pre-Run: 41,383,477,248 bytes free
Post-Run: 41,431,158,784 bytes free

172 --- E O F --- 2008-12-20 08:10:33


2) HJT log from 02-02-09

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:02:14 PM, on 2/2/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\AirPort\APAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Users\test\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [AirPort Base Station Agent] "C:\Program Files\AirPort\APAgent.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

--
End of file - 6904 bytes
Eddie
Active Member
 
Posts: 9
Joined: January 22nd, 2009, 7:38 pm

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Sharagoz » February 4th, 2009, 12:17 pm

You need to disable Avast again before the next step.

1) Run ComboFix with CFScript
  • Right-click on your desktop, select New -> Text file
  • Name the file CFScript.txt
  • Open CFScript.txt and copy the contents of the code box below into it, save and close
    Code: Select all
    KillAll::
    
    Folder::
    c:\program files\Azureus
    c:\users\test\AppData\Roaming\Azureus
    
    Registry::
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "TCP Query User{9050FB32-9B42-4B00-B620-1485B1970271}c:\\program files\\azureus\\azureus.exe"=-
    "UDP Query User{9BCCA92B-0305-413E-8ECE-2D151A81224C}c:\\program files\\azureus\\azureus.exe"=-
    
    [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
    
    [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{47957a90-f111-11dc-80e5-ca366b4e1c4a}]
    
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
    
    [-HKEY_CLASSES_ROOT\CLSID\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
    
  • Press the windows key and the R key at the same time to open the Run dialog box
  • Copy the command below into the Run box and press Enter
    Code: Select all
    ComboFix "%userprofile%\desktop\CFScript.txt"
  • ComboFix should now start
  • When ComboFix has finished scanning, a log will open
  • Include this log in your next reply

Enable Avast again

2) Emptying the trusted zone
This step is optional.
Having a web site in your trusted zone means that this site has more or less complete access to your computer when you visit that site.
This is not recommeneded unless you trust the site 100% and its absolutly necessary for something on that site to work.
You have these entries in your trusted zone:
real.com\rhap-app-4-0
real.com\rhapreg

I recommend you remove them unless you got a good reason not to.
If you wish to the remove them, do this
  • Press the windows key and the R key at the same time to open the Run dialog box
  • Type inetcpl.cpl and press Enter
  • Select the Security tab in the control panel that opens
  • Select Trusted sites and click the Sites button
  • Select the sites you want to remove and click the Remove button

Regarding the external hard drive. . .I do not currently have it with me. Will this hinder our progress forward? Or will I be able to debug it at a later point?

Below Im providing you with the procedure for disinfecting your external storage devices, so you can run it once you get the drive back.
Run the same procedure on any other such devices you suspect may be infected.

Running Flash Disinfector
  • Download Flash_Disinfector and save it to your desktop.
  • Double-click on Flash_Disinfector.exe to launch the program
  • You will be prompted to plug in your flash drives. Plug them in if they aren't already.
  • Flash_Disinfector will start disinfecting your flash and hard drives. This takes a few seconds. Your desktop will disappear in the meantime.
  • When done, a message box will appear. Click OK. Your desktop should now appear. If it does not, press Ctrl + Shift + Esc to open Task Manager.
  • Click on File > New Task (Run...). Type in explorer.exe and press Enter. Your desktop should now appear.
  • Once you have run this procedure there may be some left over folders you need to delete. To find these folders you will probably have to enable the viewing of hidden files. Here's how you do that:
    • Press the windows key and the R key at the same time to open the Run dialog box
    • Type control folders and press enter
    • A control panel should now open.
    • Select the View tab.
    • Under the Hidden files and folders heading select Show hidden files and folders.
    • Uncheck the Hide extensions for known file types option.
    • Uncheck the Hide protected operating system files (recommended) option and click Yes at the warning prompt.
    • Click Apply
    • Click OK
  • Now visit all the drives (external and non external) and delete this folder if you find it
    X:\resycled
    (Here X represents the drive letter)
  • Be sure not to delete the legitimate folder that may be present called recycled

Post back the ComboFix log as well as a new HJT log
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Eddie » February 5th, 2009, 7:51 pm

So, it seems as though the end may be in site. Again, I want to extend my gratitude for all of your help. Though this virus had not yet crippled my computer I felt it was only a matter of time. This idea caused much apprehension and stress each time I turned it on. Its great to have my comp back (well, it will when the "all clear" is given), all thanks to this forum. Right now, unfortunately, I am unemployed and am unable to donate anything. In time - maybe weeks, maybe months - this will change, and when it does I will be back to make my donation.

Regarding:
You have these entries in your trusted zone:
real.com\rhap-app-4-0
real.com\rhapreg
I recommend you remove them unless you got a good reason not to.

I have no issue removing these entries, but before I do could you offer an idea as to what they are? Personally, I think they may have to do with Rhapsody. Does that sound right? If so, are they necessary?
or
If its not Rhapsody, and I later realize why they are listed as trusted, will it be as simple as going back to security and adding them to the trusted sites?



The comboFix and HJT logs follow:

1) comboFix log:
ComboFix 09-02-05.01 - test 2009-02-05 16:08:48.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.123 [GMT -5:00]
Running from: c:\users\test\Downloads\ComboFix.exe
Command switches used :: c:\users\test\desktop\CFScript.txt
AV: avast! antivirus 4.8.1201 [VPS 090205-1] *On-access scanning disabled* (Updated)
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Azureus
c:\program files\Azureus\plugins\azemp\azemp_1.9.11.jar
c:\program files\Azureus\plugins\azemp\azemp_1.9.11.zip
c:\program files\Azureus\plugins\azemp\azemp_2.0.11.jar
c:\program files\Azureus\plugins\azemp\azemp_2.0.11.zip
c:\program files\Azureus\plugins\azemp\azemp_2.0.14.jar
c:\program files\Azureus\plugins\azemp\azemp_2.0.14.zip
c:\program files\Azureus\plugins\azemp\azemp_2.0.16.jar
c:\program files\Azureus\plugins\azemp\azemp_2.0.16.zip
c:\program files\Azureus\plugins\azemp\azemp_2.0.32.jar
c:\program files\Azureus\plugins\azemp\azemp_2.0.32.zip
c:\program files\Azureus\plugins\azemp\azmplay.exe.bak
c:\program files\Azureus\plugins\azemp\cp1250-a.raw.bak
c:\program files\Azureus\plugins\azemp\cp1250-b.raw.bak
c:\program files\Azureus\plugins\azemp\font.desc.bak
c:\program files\Azureus\plugins\azemp\osd-mplayer-a.raw.bak
c:\program files\Azureus\plugins\azemp\osd-mplayer-b.raw.bak
c:\program files\Azureus\plugins\azemp\plugin.properties.bak
c:\program files\Azureus\plugins\azemp\plugin.properties_1.9.11
c:\program files\Azureus\plugins\azemp\plugin.properties_2.0.11
c:\program files\Azureus\plugins\azemp\plugin.properties_2.0.14
c:\program files\Azureus\plugins\azemp\plugin.properties_2.0.16
c:\program files\Azureus\plugins\azemp\plugin.properties_2.0.32
c:\program files\Azureus\plugins\azupdater\azupdater_1.8.8.zip
c:\program files\Azureus\plugins\azupdater\azupdaterpatcher_1.8.8.jar
c:\program files\Azureus\plugins\azupdater\plugin.properties.bak
c:\program files\Azureus\plugins\azupdater\plugin.properties_1.8.8
c:\program files\Azureus\plugins\azupdater\Updater.jar.bak
c:\program files\Azureus\plugins\azupnpav\azupnpav_0.2.0.jar
c:\program files\Azureus\plugins\azupnpav\azupnpav_0.2.0.zip
c:\program files\Azureus\plugins\azupnpav\azupnpav_0.2.1.jar
c:\program files\Azureus\plugins\azupnpav\azupnpav_0.2.1.zip
c:\program files\Azureus\plugins\azupnpav\azupnpav_0.2.2.jar
c:\program files\Azureus\plugins\azupnpav\azupnpav_0.2.2.zip
c:\program files\Azureus\plugins\azupnpav\plugin.properties.bak
c:\program files\Azureus\plugins\azupnpav\plugin.properties_0.2.0
c:\program files\Azureus\plugins\azupnpav\plugin.properties_0.2.1
c:\program files\Azureus\plugins\azupnpav\plugin.properties_0.2.2
c:\users\test\AppData\Roaming\Azureus
c:\users\test\AppData\Roaming\Azureus\.certs
c:\users\test\AppData\Roaming\Azureus\.keystore
c:\users\test\AppData\Roaming\Azureus\.lock
c:\users\test\AppData\Roaming\Azureus\active\06066421CA1F18C67D1213C5E9C1C71E0E122F09.dat
c:\users\test\AppData\Roaming\Azureus\active\06066421CA1F18C67D1213C5E9C1C71E0E122F09.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\1A7276991DE996D360E28E2935E484481B4F6FFC.dat
c:\users\test\AppData\Roaming\Azureus\active\1A7276991DE996D360E28E2935E484481B4F6FFC.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\3B599A1212DED2252FC11CCA8A3504A4D12D2CC9.dat
c:\users\test\AppData\Roaming\Azureus\active\3B599A1212DED2252FC11CCA8A3504A4D12D2CC9.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\3CCE35092E698A585FA74FA8662F448CA9C4D859.dat
c:\users\test\AppData\Roaming\Azureus\active\3CCE35092E698A585FA74FA8662F448CA9C4D859.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\46DD3667F88C4F7C7147FAA8A793C3CBBBCDFDA5.dat
c:\users\test\AppData\Roaming\Azureus\active\46DD3667F88C4F7C7147FAA8A793C3CBBBCDFDA5.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\56EDE2178418B2912A044AA4D97C5928E7DE1C37.dat
c:\users\test\AppData\Roaming\Azureus\active\56EDE2178418B2912A044AA4D97C5928E7DE1C37.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\6088BD231F7433E3335D9FA4A97D18A6E4252DDD.dat
c:\users\test\AppData\Roaming\Azureus\active\6088BD231F7433E3335D9FA4A97D18A6E4252DDD.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\6382885541B60B50DA2708D9DC7CAEFDB15FDC6B.dat
c:\users\test\AppData\Roaming\Azureus\active\6382885541B60B50DA2708D9DC7CAEFDB15FDC6B.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\8AD065C8237580CA29305D8A330700DD9E642131.dat
c:\users\test\AppData\Roaming\Azureus\active\8AD065C8237580CA29305D8A330700DD9E642131.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\94B04A614EDC83FC3B2447F3C477CD0C5DEB4399.dat
c:\users\test\AppData\Roaming\Azureus\active\94B04A614EDC83FC3B2447F3C477CD0C5DEB4399.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\AE30976FCA82E232BAF0F6F7F8AC5E4B7E4A7324.dat
c:\users\test\AppData\Roaming\Azureus\active\AE30976FCA82E232BAF0F6F7F8AC5E4B7E4A7324.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\B5B7CCADD373A6C002AB23035E2844F28498CD0B.dat
c:\users\test\AppData\Roaming\Azureus\active\B5B7CCADD373A6C002AB23035E2844F28498CD0B.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\BBB609366AAAF690EFE4920D35E93D72F41BAFE1.dat
c:\users\test\AppData\Roaming\Azureus\active\BBB609366AAAF690EFE4920D35E93D72F41BAFE1.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\BDF5F945E5AAF9DC5E773E3D4D60830939137779.dat
c:\users\test\AppData\Roaming\Azureus\active\BDF5F945E5AAF9DC5E773E3D4D60830939137779.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\C4AECA25A765805E83C05662FA3D0E6D78BF19A9.dat
c:\users\test\AppData\Roaming\Azureus\active\C4AECA25A765805E83C05662FA3D0E6D78BF19A9.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\cache.dat
c:\users\test\AppData\Roaming\Azureus\active\D327E5E33CD1EA399AAE5C1CB7E99B7E92BF49CA.dat
c:\users\test\AppData\Roaming\Azureus\active\D327E5E33CD1EA399AAE5C1CB7E99B7E92BF49CA.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\DF11CCB7AC19248C2D2BC76E01169AA1A9A6A99C.dat
c:\users\test\AppData\Roaming\Azureus\active\DF11CCB7AC19248C2D2BC76E01169AA1A9A6A99C.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\E38B519793B3CF314CEE748D630AC9670269FD7C.dat
c:\users\test\AppData\Roaming\Azureus\active\E38B519793B3CF314CEE748D630AC9670269FD7C.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\E545524D9470CC3A0D720FA4D2DA8536530BE7C9.dat
c:\users\test\AppData\Roaming\Azureus\active\E545524D9470CC3A0D720FA4D2DA8536530BE7C9.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\F3D0886158974DF1F9A9606325077BFFBDD02374.dat
c:\users\test\AppData\Roaming\Azureus\active\F3D0886158974DF1F9A9606325077BFFBDD02374.dat.bak
c:\users\test\AppData\Roaming\Azureus\active\F6881D2BCC76389BCFB1F3EA35A1ECB12520F117.dat
c:\users\test\AppData\Roaming\Azureus\active\F6881D2BCC76389BCFB1F3EA35A1ECB12520F117.dat.bak
c:\users\test\AppData\Roaming\Azureus\azureus.config
c:\users\test\AppData\Roaming\Azureus\azureus.config.bak
c:\users\test\AppData\Roaming\Azureus\azureus.statistics
c:\users\test\AppData\Roaming\Azureus\azureus.statistics.bak
c:\users\test\AppData\Roaming\Azureus\banips.config
c:\users\test\AppData\Roaming\Azureus\banips.config.bak
c:\users\test\AppData\Roaming\Azureus\dht\addresses.dat
c:\users\test\AppData\Roaming\Azureus\dht\contacts.dat
c:\users\test\AppData\Roaming\Azureus\dht\diverse.dat
c:\users\test\AppData\Roaming\Azureus\dht\general.dat
c:\users\test\AppData\Roaming\Azureus\dht\net3\addresses.dat
c:\users\test\AppData\Roaming\Azureus\dht\net3\contacts.dat
c:\users\test\AppData\Roaming\Azureus\dht\net3\diverse.dat
c:\users\test\AppData\Roaming\Azureus\dht\net3\version.dat
c:\users\test\AppData\Roaming\Azureus\dht\version.dat
c:\users\test\AppData\Roaming\Azureus\downloads.config
c:\users\test\AppData\Roaming\Azureus\downloads.config.bak
c:\users\test\AppData\Roaming\Azureus\filters.config
c:\users\test\AppData\Roaming\Azureus\friends.config
c:\users\test\AppData\Roaming\Azureus\friends.config.bak
c:\users\test\AppData\Roaming\Azureus\ipfilter.cache
c:\users\test\AppData\Roaming\Azureus\logs\alerts_1.log
c:\users\test\AppData\Roaming\Azureus\logs\AutoSpeed_1.log
c:\users\test\AppData\Roaming\Azureus\logs\AutoSpeed_2.log
c:\users\test\AppData\Roaming\Azureus\logs\AutoSpeedSearchHistory_1.log
c:\users\test\AppData\Roaming\Azureus\logs\AutoSpeedSearchHistory_2.log
c:\users\test\AppData\Roaming\Azureus\logs\clientid_1.log
c:\users\test\AppData\Roaming\Azureus\logs\debug_1.log
c:\users\test\AppData\Roaming\Azureus\logs\debug_2.log
c:\users\test\AppData\Roaming\Azureus\logs\Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\MetaSearch_1.log
c:\users\test\AppData\Roaming\Azureus\logs\MetaSearch_Engine_2985913845.txt
c:\users\test\AppData\Roaming\Azureus\logs\MetaSearch_Engine_3.txt
c:\users\test\AppData\Roaming\Azureus\logs\NetStatus_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_alerts_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_AutoSpeed_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_AutoSpeed_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_AutoSpeedSearchHistory_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_AutoSpeedSearchHistory_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_clientid_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_debug_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_debug_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_MetaSearch_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_MetaSearch_Engine_2985913845.txt
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_MetaSearch_Engine_3.txt
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_NetStatus_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_seltrace_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_seltrace_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_SpeedMan_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_SpeedMan_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_Subscriptions_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_thread_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_thread_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.ads_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.CMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.emp_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.MD_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.PMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.PMsgr_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231805794422_v3.Stream_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_alerts_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_AutoSpeed_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_AutoSpeed_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_AutoSpeedSearchHistory_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_AutoSpeedSearchHistory_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_clientid_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_debug_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_debug_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_MetaSearch_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_MetaSearch_Engine_2985913845.txt
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_MetaSearch_Engine_3.txt
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_NetStatus_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_seltrace_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_seltrace_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_SpeedMan_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_SpeedMan_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_Subscriptions_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_thread_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_thread_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.ads_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.CMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.emp_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.MD_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.PMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.PMsgr_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1231877621621_v3.Stream_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_alerts_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_AutoSpeed_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_AutoSpeed_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_AutoSpeedSearchHistory_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_AutoSpeedSearchHistory_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_clientid_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_debug_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_debug_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_MetaSearch_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_MetaSearch_Engine_2985913845.txt
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_MetaSearch_Engine_3.txt
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_NetStatus_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_seltrace_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_seltrace_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_SpeedMan_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_SpeedMan_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_Subscriptions_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_thread_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_thread_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.ads_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.CMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.emp_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.MD_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.PMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.PMsgr_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232047521659_v3.Stream_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_alerts_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_AutoSpeed_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_AutoSpeed_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_AutoSpeedSearchHistory_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_AutoSpeedSearchHistory_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_clientid_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_debug_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_debug_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_MetaSearch_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_MetaSearch_Engine_2985913845.txt
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_MetaSearch_Engine_3.txt
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_NetStatus_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_seltrace_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_seltrace_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_SpeedMan_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_SpeedMan_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_Subscriptions_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_thread_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_thread_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.ads_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.CMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.emp_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.MD_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.PMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.PMsgr_2.log
c:\users\test\AppData\Roaming\Azureus\logs\save\1232328721934_v3.Stream_1.log
c:\users\test\AppData\Roaming\Azureus\logs\seltrace_1.log
c:\users\test\AppData\Roaming\Azureus\logs\seltrace_2.log
c:\users\test\AppData\Roaming\Azureus\logs\SpeedMan_1.log
c:\users\test\AppData\Roaming\Azureus\logs\SpeedMan_2.log
c:\users\test\AppData\Roaming\Azureus\logs\Subscriptions_1.log
c:\users\test\AppData\Roaming\Azureus\logs\thread_1.log
c:\users\test\AppData\Roaming\Azureus\logs\thread_2.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.ads_1.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.CMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.emp_1.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.Friends_1.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.Friends_2.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.MD_1.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.PMsgr_1.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.PMsgr_2.log
c:\users\test\AppData\Roaming\Azureus\logs\v3.Stream_1.log
c:\users\test\AppData\Roaming\Azureus\media\azpd\WGCGCIE4XJR3ZVJUQWEYEZMHLXOMQX26.azpd
c:\users\test\AppData\Roaming\Azureus\media\azpd\XQFNIFFHA3E5LGXU7CONEOZI3WZOBL2F.azpd
c:\users\test\AppData\Roaming\Azureus\metasearch.config
c:\users\test\AppData\Roaming\Azureus\metasearch.config.bak
c:\users\test\AppData\Roaming\Azureus\net\pm_19262.dat
c:\users\test\AppData\Roaming\Azureus\net\pm_6128.dat
c:\users\test\AppData\Roaming\Azureus\net\pm_7015.dat
c:\users\test\AppData\Roaming\Azureus\net\pm_default.dat
c:\users\test\AppData\Roaming\Azureus\restart.bat
c:\users\test\AppData\Roaming\Azureus\sidebarauto.config
c:\users\test\AppData\Roaming\Azureus\sidebarauto.config.bak
c:\users\test\AppData\Roaming\Azureus\subs\080CBFDD763057C0601E.vuze
c:\users\test\AppData\Roaming\Azureus\subs\413EC2BA7525B84F2F19.vuze
c:\users\test\AppData\Roaming\Azureus\subs\8060C3313C66DF45F383.vuze
c:\users\test\AppData\Roaming\Azureus\subs\87ADF8E41A1DB5628FEF.vuze
c:\users\test\AppData\Roaming\Azureus\subs\87ADF8E41A1DB5628FEF.vuze.bak
c:\users\test\AppData\Roaming\Azureus\subscriptions.config
c:\users\test\AppData\Roaming\Azureus\subscriptions.config.bak
c:\users\test\AppData\Roaming\Azureus\tables.config
c:\users\test\AppData\Roaming\Azureus\tables.config.bak
c:\users\test\AppData\Roaming\Azureus\timingstats.dat
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23654.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23655.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23656.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23657.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23658.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23659.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23660.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23661.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23662.tmp
c:\users\test\AppData\Roaming\Azureus\tmp\AZU23663.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\-=[SUMOTorrent.com]=-_VA-Buju_Banton_Presents-Jamrock_Classics_Vol_1-Retail_CD-2008-RKS_ST1496138.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\((Demonoid.com))-Top_Chef_Season_4_Episode_14_Finale.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[[Demonoid.com]]-(8_Books)_Led_Zeppelin_Tab_Collection_5719762.3766 [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] [BOOK CD] 39 Progressive Solos For Classical Guitar II (Guitar Tab Book).rar.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] 77.Guitar.Tab.Books[PDF] [ jamtracks]Arkzero.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] Beck - Modern Guilt 2008.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] download-1.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] download.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] Guitar Ebooks.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] Guitar PDF Books.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] Jacks.Teen.America.6.[DVDRIP][English](pornorip.net).torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] Led Zeppelin - Led Zeppelin III {Original master} (1970) [EAC - VBR HQ mp3s].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] Lily_Thai_The_Cleaning_Girl_-_GREAT_MOVIE.4052549.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] Phish.Loose.Jams.mp3.InsectEffect.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] Technique Bookpack (12 Books) (FIX) [Guitar] [TAB].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[isoHunt] The Ultimate White Pages Guitar Vol. 1.rar.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[SUMOTorrent.com]_Buju.Banton-Inna.Heights.(10th.Anniversary.Edition).Retail.2008-_PB4260239.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[SUMOTorrent.com]_Buju_Banton_-_The_Best_Of_Buju_Banton_Vol.1_(2007)_-_Reggae_[www.spynova.net].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\[www.seedpeer.com] Adobe Dreamweaver Cs3 Key Generator With Activation.SEEDPEER.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\_________Dreams_Of_Freedom__Ambient_Translations_Of_Bob_Marley_In_Dub____Bill_Laswell__VBR_kbps__col.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\_p_3__Kings_of_Leon___Youth__amp__Young_Manhood.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\36 Bass Guitar books (www.softzone.org) [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Adobe Photoshop CS3 Extended Crack 3967056 TPB.torrent -moNova.org- .torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Adobe_CS3_Collection_[All_Adobe_CS3_Products__One_Keygen]_RkChim.4408762.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Adobe_Dreamweaver_CS3_KEYGEN__Thee-Wuggles-_.4305024.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Aesop_Rock-None_Shall_Pass-2007-C4.3804088.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\All_Bass_Guitar_Books__Total_37_Books_-Fenopy.com.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Angel_Tears_-_Angel_Tears_[vol1][1998][Downtempo__Ambient].3646903.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Apollo_Sunshine___192kbps.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Arcade Fire - Funeral.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Arcade_Fire___Neon_Bible.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\AZ_42637.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\AZ_51968.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\AZU10528.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU10530.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU21309.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU24008.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU24011.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU24397.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU25477.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU25482.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU25484.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU25812.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU26203.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU26207.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU3027.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU3031.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU36732.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU36742.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU36955.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU43522.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU46213.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU46217.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU49936.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU49944.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU63116.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU63123.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU63860.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU7545.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU8824.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU8826.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\AZU8830.tmp
c:\users\test\AppData\Roaming\Azureus\torrents\Band_of_Horses_Cease_to_Begin_2007_JUST.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Bass-Guitar E-books [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Bass-Guitar eBooks Pack2 [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Bass various books-1.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Battles___Discography.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Beck-discography.3638222.TPB [mininova]-1.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Beck-Odelay-Deluxe_Edition-2CD-2008-FNT [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Bill_Laswell___Imaginary_Cuba__eac_flac_cue_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Black_Mountain___In_The_Future__Deluxe_Edition___2008_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Block_Party___Silent_Alarm___ogg_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Boards_of_Canada_Official_Discography_As_Listed_On_Their_Website.4023121.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Broken_Social_Scene_Discography.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Caribou - Andorra [2007] [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Daft_Punk_-_Alive_2007___Encore_[Splitted_into_tracks].3899036.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Daft_Punk_Discography.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Death_Cube_K_discography__Buckethead_Bill_Laswell_______1192170_7602.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Del_Tha_Funkee_Homosapien_-_6_Albums.3391077.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Details_for_Ima_Robot__Ima_Robot__2003__MP3_VBR__With_Cover_Art_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Dizzee_Rascal___Maths_and_English_192kbps_mp3___SNiDE.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Dj_Jazzy_Jeff_And_The_Fresh_Prince_Collections_2006_CEC.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Downset.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Drive_Time_Spanish__Learn_Spanish_While_You_Drive__4CD_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Duran_duran___Red_carpet_massacre__2007_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Ed Rush Optical Collection [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Edo_G_Featuring_Pete_Rock_-_My_Own_Worst_Enemy_(2004).3589073.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Erykah_Badu_New_Amerykah_Part_One__4th_World_War__2008_C4.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Fabrizio De Andre - Discografia completa [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Fear_Of_A_Black_Planet.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Fela_Kuti_12_cd_kl_torrent.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\fela_kuti_1969_1989 [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Flea DEMOS [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Foo_Fighters___Echoes__Silence__Patience_And_Grace__2007__CD_SkidVid_XviD_Cov_192Kbps.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Frank_Zappa.3571091.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Freeway_Free_At_Last__Retail__2007_WHOA.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Ghostland_Observatory___2008___Robotique_Majestique.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Girl_Talk_-_Discography.3967074.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Gnarls Barkley - The Odd Couple [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Goapele - Change it All [[Demonoid com]] [www.Fulldls.com]-2.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Good_Life__The_Best_of_Pete_Rock___CL_Smooth.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Gram Parsons & The Flying Burrito Brothers - Gram Parsons Archives Vol. 1, Live At The Avalo [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Grateful_Dead_From_the_Mars_Hotel_FLAC_Log_Cue_Art_REQ.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Guru___Jazzmatazz_Vol_3___Streetsoul_ex___torrent_pl___flokark_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Guru___Jazzmatazz_Vol_4___The_Hip_Hop_Jazz_Messenger___Back_to_the_Future_2007_rar.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Hot_Chip___Made_In_The_Dark__2008_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\I________m_Not_There_-_OST.3912547.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Iggy_And_The_Stooges_Raw_Power.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\ima_robot___search_and_destroy.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Jhon_Patitucci___Ultimate_play_along_vol1__method_for_bass_cd_book__.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Jimi_Hendrix_Electric_Ladyland_complete_album_tablature.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\John_Peel_Torrent_Compilation_1_of_17.3859197.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\John_Peel_Torrent_Compilation_3_of_17.3864972.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Kevin Drew - Spirit If [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Kings_Of_Leon___Because_Of_The_Times__2007__CD_SkidVid_Cov_192Kbps.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Kings_of_Leon___MSN_Live___Hammersmith_Apollo__18_04_2007_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Kings_of_Leon_Aha_Shake_Heartbreak_Darkside_RG_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Led Zeppelin III tablature[colombo-bt.org] [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Led Zeppelin IV tablature[colombo-bt.org] [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Led_Zeppelin.3253779.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Led_Zeppelin_-_Led_Zeppelin_I.3864113.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Led_Zeppelin___Led_Zeppelin_I__Original_master___1969___EAC___VBR_HQ_mp3s_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Led_Zeppelin_I.3941474.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Led_Zeppelin_I.4037416.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Led_Zeppelin_IV_-_MP3_128_Kbps____Review___Lyrics.3680196.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Les Claypool [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Les_Savy_Fav___Lets_Stay_Friends__Advance_2007____Rock_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Lovage___Music_To_Make_Love_To_Your_Old_Lady_By.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Macromedia_Dreamweaver_Serial.txt.3678380.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Maghrebika with Bill Laswell - Neftakhir(2006)192Kbs [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Manu_Chao_Clandestino_Darkside_RG_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Marcus_Miller___Marcus__2008____Jazz.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Mark Knopfler - Kill To Get Crimson 2007 - Rock [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Me__Shell_NdegeOcello-The_World_Has_Made_Me.._(2007)_Soul-R_B.3838614.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\MGMT - Oracular Spectacular 320 kbs (2007) [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Mice_Parade__Discography_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Mike_Patton.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Mike_Patton_Collection.3678289.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Miles_Davis_-_Bill_Laswell.3330040.TPB [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Moby_Grape_Moby_Grape_Darkside_RG_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Morphine.3462300.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Mum - Finally We Are No One (2002) English and Islandic version [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Mum -2004- Summer Make Good [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Mum___Yesterday_Was_Dramatic__Today_Is_OK__2000__MPC_BrainDead__ENiAC.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Nas-Untitled[Nigger]-(Retail_Explicit_08)-FozzyBear.4273713.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Nero_8_Ultra_Edition_v8_2_8_0___KeyGen.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Nero_9_0_9_4b_Multilanguage___Serial_Keys__Full_Final_Version_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Omar_Rodriguez_Lopez__mars_volta__solo_records.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Ong-bak.2003.DVDRip.Xvid.Int-EDRP.3245963.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\PATSY_CLINE_4_CDS.3845752.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Peeping_Tom_(Mike_Patton).3495234.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Pete Rock - Underground Classics [2006] [Hip Hop] [www.file24ever.com] [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Pete_Rock_-_NY__s_Finest.4042021.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Pete_Rock_3_CDs_Petestrumentals_Soul_Survivor_Surviving_Elements.3463118.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Pete_Rock_We_Roll_Feat_Jim_Jones___Promo_CDS__2007_EGO.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish - 11-22-97 - Hampton, VA - (FOB) Schoeps CMBI-mk4 - new source to circulation.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish Vegas 96 LOSSLESS [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\phish.phall1997-12-12.shnfphish.phall1997-12-12.shnf.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_-_Vegas_96_(2007)_-_Rock_.3910377.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish___Deer_Creek__Noblesville__IN__08_11_1997_shn_id_30445__Neumann_TLM170___10_years_ago_today_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish___Pepsi_Arena__Albany__NY__12_12_1997__Neumann_U87___10_years_ago_today_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish__McNichols_Arena__Denver__CO__11_16_1997__10_years_ago_today_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish__McNichols_Arena__Denver__CO__11_17_1997__Neumann_KM184___10_years_ago_today_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_07_25_1997_Dallas__Texas_Starplex_Amphitheatre__Schoeps_CMC6_mk41_gt__Oade_Pre_amp_gt__Sony_SB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_11_19_97_Assembly_Hall__U__of_Illinois__Champaign__IL.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_11_29_97_Worcester_Centrum__Worcester__MA.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_11_30_1997_Worcester_Centrum__Worcester__MA.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_12_31_1990_Boston_World_Trade_Center__Boston__MA__HAPPY_NYE_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\phish_1994_06_22_veterans_memorial_coliseum___columbus__oh__new_source__akg_461___READ_THE_BOOK___.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_1994_2004_-Fenopy.com.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_1997_12_06_Auburn_Hills__Michigan.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_Box_Set.3306354.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_ph1997_12_13_80924_flac16.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish_phish1997_11_21.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Phish+-+8-11-2004+-+Greatwoods%2C+Mansfield%2C+Ma.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Plaid___9_albums.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Porcupine Tree - Nil Recurring EP [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Porcupine_Tree___We_Lost_The_Skyline__2008__MP3__ENiAC.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Posthuman_-_Discography_1999-2007.4230036.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Radiohead tabs [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Red_Hot_Chili_Peppers___Blood_Sugar_Sex_Magik__Guitar_Bass_Tab_Book_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Sascha_Funke___Mango.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Saul_Williams_-_Niggy_Tardust_320kbps_(2007).3868011.TPB-1.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Sharon_Jones___The_Dap-Kings_-_[2007]_100_Days__100_Nights.3936427.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Sly And The Family Stone - Fresh [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Sly_and_the_Family_Stone___Stand-1.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Sonic_Youth_Daydream_Nation_Darkside_RG_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Sound_Tribe_Sector_9___Red_Rocks___9_9_2006__AKG_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Spoon___Ga_Ga_Ga_Ga_Ga___Bonus_Disc__Get_Nice___2007_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Squarepusher_Collected_-_16_Albums_[Electronica].3564374.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Squirrel_Nut_Zippers_-_Perennial_Favorites_(1998).3635806.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\sts9-2003-06-03.shnf [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\STS9-2007-06-15-Bonnaroo.3948879.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\STS9 - Sound Tribe Sector 9 Re-Generation All 3 - Performances - SBD [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Styles_P-Super_Gangster__Extraordinary_Gentleman-2007-C4.3913280.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Swizz_Beatz___One_Man_Band_Man__2007____Rap_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The Darjeeling Limited[2007]DvDrip[Eng]-FXG [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The Mars Volta - Bedlam in the Goliath [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The Real Book 5th Ed - Bass Clef pdf [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_Black_Album___Pete_Rock_Remix.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_Chemical_Brothers_-_9_Albums.3243602.TPB [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_Go_Team__-_Proof_of_Youth_(2007).3779590.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_Great_Collection_of_Classic_Soul.3823979.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_Hives___The_Black_And_White_Album_2007_YSP.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_Killers-Sawdust-2007-404 [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_Killers___Hot_Fuss.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_New_Deal_2008_03_06___LANGERADO___Schoeps_MK5__FOB_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\the_Omega_Moos___June_27th__2008___The_Temptress_Rocks_Off_Boat_Cruise___NY__NY____New_Deal___Umphre.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\The_Von_Bondies_-_Pawn_Shoppe_Heart_(Album).3948982.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\There.Will.Be.Blood.REPACK.DVDSCR.XViD-mVs [myBittorrent.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Thurston Moore - Trees Outside The Academy [2007] [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Timbaland-Present_Shock_Value_(Deluxe_Edition)-2CD-2007-SMO.3787613.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Tom Waits - Discography, [MP3 192-320 kbps].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Tortoise-Discografia.rar [mininova].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Venetian_Snares_Discography_(1999_-_2007)_[Breakcore_IDM].3823677.TPB.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Wax Poetic- Nublu Sessions [www.Fulldls.com].torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Yeasayer___All_Hours_Cymbals__2007_.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Young_Marble_Giants_Colossal_Youth.torrent
c:\users\test\AppData\Roaming\Azureus\torrents\Youssou_N__Dour___Rokku_Mi_Rokka__Give_and_Take___2007_.torrent
c:\users\test\AppData\Roaming\Azureus\tracker.config
c:\users\test\AppData\Roaming\Azureus\tracker.config.bad
c:\users\test\AppData\Roaming\Azureus\tracker.config.bad1
c:\users\test\AppData\Roaming\Azureus\tracker.config.bak
c:\users\test\AppData\Roaming\Azureus\tracker.config.bak.bad
c:\users\test\AppData\Roaming\Azureus\unsentdata.config
c:\users\test\AppData\Roaming\Azureus\unsentdata.config.bak
c:\users\test\AppData\Roaming\Azureus\update.log
c:\users\test\AppData\Roaming\Azureus\update.properties
c:\users\test\AppData\Roaming\Azureus\v3.Friends.dat
c:\users\test\AppData\Roaming\Azureus\v3.Friends.dat.bak
c:\users\test\AppData\Roaming\Azureus\VuzeActivities.config
c:\users\test\AppData\Roaming\Azureus\VuzeActivities.config.bak

.
((((((((((((((((((((((((( Files Created from 2009-01-05 to 2009-02-05 )))))))))))))))))))))))))))))))
.

2009-02-02 19:52 . 2008-06-19 20:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll
2009-02-02 19:52 . 2008-06-19 20:14 622,080 --a------ c:\windows\System32\icardagt.exe
2009-02-02 19:52 . 2008-06-19 20:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll
2009-02-02 19:52 . 2008-06-19 20:14 97,800 --a------ c:\windows\System32\infocardapi.dll
2009-02-02 19:52 . 2008-06-19 20:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll
2009-02-02 19:52 . 2008-06-19 20:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl
2009-02-02 19:52 . 2008-06-19 20:14 11,264 --a------ c:\windows\System32\icardres.dll
2009-02-02 19:51 . 2008-06-19 20:14 326,160 --a------ c:\windows\System32\PresentationHost.exe
2009-02-02 19:44 . 2008-07-27 13:03 282,112 --a------ c:\windows\System32\mscoree.dll
2009-02-02 19:44 . 2008-07-27 13:03 96,760 --a------ c:\windows\System32\dfshim.dll
2009-02-02 19:44 . 2008-07-27 13:03 41,984 --a------ c:\windows\System32\netfxperf.dll
2009-02-02 19:43 . 2008-07-27 13:03 158,720 --a------ c:\windows\System32\mscorier.dll
2009-02-02 19:43 . 2008-07-27 13:03 83,968 --a------ c:\windows\System32\mscories.dll
2009-02-02 19:35 . 2008-12-15 21:42 288,768 --a------ c:\windows\System32\drivers\srv.sys
2009-01-29 17:00 . 2009-01-29 17:11 250 --a------ c:\windows\gmer.ini
2009-01-21 23:20 . 2009-02-02 17:32 204,733,633 --a------ c:\windows\MEMORY.DMP
2009-01-21 21:41 . 2009-01-21 21:41 <DIR> d-------- c:\program files\Trend Micro
2009-01-06 18:42 . 2009-01-06 18:42 <DIR> d-------- c:\users\All Users\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-06 18:42 . 2009-01-06 18:42 <DIR> d-------- c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-06 18:42 . 2009-01-06 18:42 <DIR> d-------- c:\program files\iTunes
2009-01-06 18:42 . 2009-01-06 18:42 <DIR> d-------- c:\program files\iPod
2009-01-06 18:38 . 2009-01-06 18:39 <DIR> d-------- c:\program files\QuickTime

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-03 01:09 --------- d-----w c:\program files\Windows Mail
2009-01-30 21:13 --------- d-----w c:\program files\Rhapsody
2009-01-20 06:34 --------- d-----w c:\program files\VideoLAN
2009-01-06 23:42 --------- d-----w c:\program files\Common Files\Apple
2009-01-04 19:53 --------- d-----w c:\program files\Safari
2008-12-31 06:14 --------- d-----w c:\users\Weezy\AppData\Roaming\DivX
2008-12-30 23:29 --------- d-----w c:\users\Weezy\AppData\Roaming\Apple Computer
2008-12-30 23:23 --------- d-----w c:\users\Weezy\AppData\Roaming\Nero
2008-12-30 23:23 --------- d-----w c:\users\Weezy\AppData\Roaming\Leadertech
2008-12-30 23:23 --------- d-----w c:\users\Weezy\AppData\Roaming\Acer
2008-12-20 15:45 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-12-18 22:43 174 --sha-w c:\program files\desktop.ini
2008-12-18 22:34 --------- d-----w c:\program files\Windows Sidebar
2008-12-18 22:34 --------- d-----w c:\program files\Windows Photo Gallery
2008-12-18 22:34 --------- d-----w c:\program files\Windows Journal
2008-12-18 22:34 --------- d-----w c:\program files\Windows Defender
2008-12-18 22:34 --------- d-----w c:\program files\Windows Collaboration
2008-12-18 22:34 --------- d-----w c:\program files\Windows Calendar
2008-12-14 07:41 --------- d-----w c:\program files\Graboid
2008-12-14 07:31 --------- d-----w c:\programdata\Launcher
2008-12-10 06:23 --------- d-----w c:\users\test\AppData\Roaming\dvdcss
2008-12-10 05:11 --------- d-----w c:\users\test\AppData\Roaming\vlc
2008-06-10 08:31 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2008-06-10 08:31 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2008-06-10 08:31 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
.

((((((((((((((((((((((((((((( snapshot@2009-02-02_18.23.03.51 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-05 11:26:08 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2008-07-27 18:03:11 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2008-01-05 11:26:17 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2008-07-27 18:03:12 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2008-01-05 11:21:39 151,552 ----a-w c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-06-20 01:14:31 163,840 ----a-w c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2008-01-05 11:26:32 4,444,160 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2008-10-13 22:26:54 4,546,560 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2008-01-05 11:21:53 4,174,336 ----a-w c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2008-11-24 23:34:46 4,210,688 ----a-w c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2008-11-24 23:34:49 1,736,528 ----a-w c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
- 2008-01-05 11:26:54 483,840 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2008-10-13 22:26:57 486,400 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2008-01-05 11:26:54 3,036,160 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2008-07-27 18:03:15 2,933,248 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2008-01-05 11:26:55 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2008-01-19 03:22:55 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2008-07-27 18:22:54 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2008-01-05 11:21:55 346,624 ----a-w c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2008-06-20 01:14:43 368,640 ----a-w c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2008-01-05 11:26:59 261,120 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2008-07-27 18:03:15 261,632 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2008-01-05 11:26:59 5,431,296 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2008-10-13 22:26:58 5,242,880 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2008-01-05 11:25:52 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2008-07-27 18:03:10 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2008-01-05 11:25:59 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2008-07-27 18:03:11 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2008-01-05 11:21:39 159,744 ----a-w c:\windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\ComSvcConfig.exe
+ 2008-06-20 01:14:31 168,968 ----a-w c:\windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\ComSvcConfig.exe
- 2008-01-05 11:26:08 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2008-07-27 18:03:11 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2008-01-05 11:26:11 5,120 ----a-w c:\windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe
+ 2008-07-27 18:03:11 5,120 ----a-w c:\windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe
- 2008-01-05 11:26:12 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2008-07-27 18:03:12 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2008-01-05 11:26:12 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2008-07-27 18:03:12 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2008-01-05 11:26:13 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2008-07-27 18:03:12 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2009-02-03 00:56:54 106,496 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
- 2008-01-05 11:26:17 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2008-07-27 18:03:12 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-02-03 00:56:54 733,184 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2008-01-05 11:26:17 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2008-07-27 18:03:12 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-02-03 00:56:55 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-02-03 00:56:55 802,816 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
- 2008-01-05 11:26:17 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2008-07-27 18:03:12 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2009-02-03 00:56:55 94,208 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
- 2008-01-05 11:26:17 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2008-07-27 18:03:12 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2008-01-05 11:26:19 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2008-07-27 18:03:12 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2008-01-05 11:21:39 397,312 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2008-06-20 01:14:31 397,312 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2008-01-05 11:26:19 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-27 18:03:12 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2008-01-05 11:26:23 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-27 18:03:12 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2008-01-05 11:26:23 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-27 18:03:12 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2008-01-05 11:26:23 671,744 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2008-07-27 18:03:12 659,456 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2009-02-03 00:56:54 41,984 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
- 2006-10-20 01:14:05 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2008-07-27 18:03:12 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2008-01-05 11:26:24 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-27 18:03:12 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2008-01-05 11:26:23 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2008-07-27 18:03:12 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2006-10-20 01:14:05 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2008-07-27 18:03:12 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2008-01-05 11:21:52 602,112 ----a-w c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2008-06-20 01:14:42 598,016 ----a-w c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
- 2008-01-05 11:21:52 32,768 ----a-w c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
+ 2008-06-20 01:14:44 32,768 ----a-w c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
- 2008-01-05 11:21:53 36,864 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
+ 2008-06-20 01:14:44 46,104 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
- 2008-01-05 11:21:53 184,320 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2008-06-20 01:14:43 196,608 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2008-01-05 11:21:53 131,072 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2008-06-20 01:14:43 139,264 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2008-01-05 11:21:53 376,832 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2008-06-20 01:14:43 397,312 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2008-01-05 11:21:54 151,552 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2008-06-20 01:14:43 163,840 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2008-01-05 11:21:53 5,210,112 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2008-11-24 23:34:47 5,283,840 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2008-01-05 11:21:55 897,024 ----a-w c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2008-06-20 01:14:44 864,256 ----a-w c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2008-01-05 11:21:55 528,384 ----a-w c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2008-06-20 01:14:43 528,384 ----a-w c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2009-02-03 00:56:56 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
- 2008-01-05 11:21:39 61,440 ----a-w c:\windows\assembly\GAC_MSIL\ServiceModelReg\3.0.0.0__b03f5f7f11d50a3a\ServiceModelReg.exe
+ 2008-06-20 01:14:31 156,688 ----a-w c:\windows\assembly\GAC_MSIL\ServiceModelReg\3.0.0.0__b03f5f7f11d50a3a\ServiceModelReg.exe
- 2008-01-05 11:21:39 102,400 ----a-w c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2008-06-20 01:14:31 110,592 ----a-w c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
- 2008-01-05 11:21:39 122,880 ----a-w c:\windows\assembly\GAC_MSIL\SMSvcHost\3.0.0.0__b03f5f7f11d50a3a\SMSvcHost.exe
+ 2008-06-20 01:14:31 132,096 ----a-w c:\windows\assembly\GAC_MSIL\SMSvcHost\3.0.0.0__b03f5f7f11d50a3a\SMSvcHost.exe
- 2008-01-05 11:26:54 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2008-07-27 18:03:14 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2009-02-03 00:56:57 45,056 ----a-w c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2009-02-03 00:56:57 163,840 ----a-w c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2009-02-03 00:57:02 57,344 ----a-w c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2008-01-05 11:26:54 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2008-07-27 18:03:14 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2008-01-05 11:26:54 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2008-07-27 18:03:14 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2009-02-03 00:56:58 667,648 ----a-w c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
+ 2009-02-03 00:56:58 53,248 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2009-02-03 00:56:58 229,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2009-02-03 00:56:59 2,879,488 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2009-02-03 00:56:53 684,032 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2009-02-03 00:58:00 294,912 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2009-02-03 00:56:52 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2009-02-03 00:58:00 442,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
- 2008-01-05 11:26:55 741,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2008-07-27 18:03:15 745,472 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2008-01-05 11:26:55 933,888 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2008-07-27 18:03:15 970,752 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2008-01-05 11:26:55 5,070,848 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2008-07-27 18:03:15 5,062,656 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2009-02-03 00:56:52 286,720 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2008-01-05 11:26:55 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2008-07-27 18:03:15 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2008-01-05 11:26:55 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2008-07-27 18:03:15 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2008-01-05 11:26:55 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2008-07-27 18:03:15 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2008-01-05 11:26:55 630,784 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2008-07-27 18:03:15 626,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2008-01-05 11:21:38 126,976 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:14:29 126,976 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2008-01-05 11:21:37 430,080 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2008-06-20 01:14:29 430,080 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2008-01-05 11:21:38 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2008-06-20 01:14:29 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2009-02-03 00:56:59 143,360 ----a-w c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2008-01-05 11:26:58 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2008-07-27 18:03:15 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2008-01-05 11:26:58 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2009-02-03 00:57:02 233,472 ----a-w c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2008-01-05 11:26:58 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2008-07-27 18:03:15 303,104 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2008-01-05 11:26:58 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-27 18:03:15 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2008-01-05 11:21:38 929,792 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2008-06-20 01:14:29 966,656 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2008-01-05 11:26:58 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2008-01-05 11:21:40 159,744 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
+ 2008-06-20 01:14:32 73,728 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
- 2008-01-05 11:21:40 32,768 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2008-06-20 01:14:33 32,768 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2009-02-03 00:56:51 569,344 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2008-01-05 11:21:38 5,971,968 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2008-11-24 23:34:36 5,931,008 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2008-01-05 11:26:58 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2008-07-27 18:03:15 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2009-02-03 00:57:03 77,824 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2009-02-03 00:57:03 32,768 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2009-02-03 00:58:01 229,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2009-02-03 00:57:00 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2009-02-03 00:58:00 139,264 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2009-02-03 00:57:04 335,872 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2009-02-03 00:58:01 1,277,952 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2008-01-05 11:26:59 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2008-07-27 18:03:15 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2008-01-05 11:26:59 90,112 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2008-07-27 18:03:15 77,824 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2009-02-03 00:57:06 61,440 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
- 2008-01-05 11:27:00 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2008-07-27 18:03:15 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2008-01-05 11:27:02 5,013,504 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2008-07-27 18:03:15 5,025,792 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2009-02-03 00:57:00 12,288 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2008-01-05 11:22:14 1,152,040 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2008-06-20 01:14:46 1,138,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
- 2008-01-05 11:22:15 1,635,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:14:47 1,630,208 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
- 2008-01-05 11:22:15 578,592 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2008-06-20 01:14:47 540,672 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2009-02-03 00:56:51 507,904 ----a-w c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2009-02-03 00:57:01 139,264 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2008-01-05 11:27:03 2,068,480 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2008-10-13 22:26:58 2,048,000 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2008-01-05 11:26:55 3,076,096 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-07-27 18:03:15 3,149,824 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2008-01-05 11:21:56 163,840 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2008-06-20 01:14:43 167,936 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2008-01-05 11:22:00 372,736 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:14:43 385,024 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2008-01-05 11:22:00 32,768 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2008-06-20 01:14:43 40,960 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2008-01-05 11:22:00 86,016 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2008-06-20 01:14:43 98,304 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2008-01-05 11:22:00 1,204,224 ----a-w c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2008-06-20 01:14:44 1,245,184 ----a-w c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2008-01-05 11:22:01 81,920 ----a-w c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2008-06-20 01:14:44 94,208 ----a-w c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2008-01-05 11:21:40 143,360 ----a-w c:\windows\assembly\GAC_MSIL\WsatConfig\3.0.0.0__b03f5f7f11d50a3a\WsatConfig.exe
+ 2008-06-20 01:14:33 152,576 ----a-w c:\windows\assembly\GAC_MSIL\WsatConfig\3.0.0.0__b03f5f7f11d50a3a\WsatConfig.exe
+ 2009-02-03 01:13:49 25,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\e66c5af83e8fb89b4dc5547ef663f4c8\Accessibility.ni.dll
+ 2009-02-03 01:17:32 842,240 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\660850afa77bfd5145eab2d362859404\AspNetMMCExt.ni.dll
+ 2009-02-03 01:17:33 386,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\8b8db66965a927b5070244d256709fe9\BDATunePIA.ni.dll
+ 2009-02-03 01:16:23 410,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\700b8218bf42b9c34c1202806960fc4e\ComSvcConfig.ni.exe
+ 2009-02-03 01:17:37 220,672 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\227b6533d7f1fdfb94558e22f83d7159\CustomMarshalers.ni.dll
+ 2009-02-03 01:17:37 14,336 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\79f0864babc826355d3642420230abad\dfsvc.ni.exe
+ 2009-02-03 01:17:38 220,160 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehCIR\0001077b9b4cce62554bf521aca63297\ehCIR.ni.dll
+ 2009-02-03 01:17:42 2,119,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehepg\410734c9e9bb30e23472ca2ebbe5a062\ehepg.ni.dll
+ 2009-02-03 01:17:49 305,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\5098a2055c443c7078cf9b8c8c9cd68a\ehepgdat.ni.dll
+ 2009-02-03 01:17:50 39,424 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtCOM\16021a3fe880179363ade2fd5d76fe0b\ehExtCOM.ni.dll
+ 2009-02-03 01:17:52 242,688 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost\5896e10daf4da0418a6e19a42a47c21e\ehExtHost.ni.exe
+ 2009-02-03 01:17:50 23,552 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtCOM\6dbd12480f119249468f90945e63cd7d\ehiExtCOM.ni.dll
+ 2009-02-03 01:17:52 160,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\de83e978bb105ef5c1c509d821b2b716\ehiExtens.ni.dll
+ 2009-02-03 01:17:53 565,760 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiPlay\982054f1e8d3a031f93f73b8d04c9c93\ehiPlay.ni.dll
+ 2009-02-03 01:17:38 965,632 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\d98eb25afa000fdbd568df63e209fd01\ehiProxy.ni.dll
+ 2009-02-03 01:17:54 55,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiReplay\fa98de6cbcf056d4d79c6fada3a06d5f\ehiReplay.ni.dll
+ 2009-02-03 01:17:48 57,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\e8bc543a751c904dd7e1c2ab2c06ae35\ehiUserXp.ni.dll
+ 2009-02-03 01:17:55 797,696 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\1833b673f7b5b687d8295702408ecf93\ehiVidCtl.ni.dll
+ 2009-02-03 01:17:55 338,432 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiwmp\9562343f3e6f6baf5058c7af4d5e7fc2\ehiwmp.ni.dll
+ 2009-02-03 01:17:56 103,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehiWUapi\7d21f43601837a5612c3683a6df8bf0a\ehiWUapi.ni.dll
+ 2009-02-03 01:17:59 1,721,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\45f19908f602a901134ebf5a95986293\ehRecObj.ni.dll
+ 2009-02-03 01:18:14 11,575,808 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ehshell\c07c4338f22c0b11f3dcfeae69d48894\ehshell.ni.dll
+ 2009-02-03 01:18:16 543,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\9d3bbd186caa7d4838248d7ea0abf867\EventViewer.ni.dll
+ 2009-02-03 01:18:15 68,608 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\loadmxf\fc224855f47caa5ea29753358ac27717\loadmxf.ni.exe
+ 2009-02-03 01:18:01 627,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\6a413bc5b335799558fac6b8a3c6cb83\mcstore.ni.dll
+ 2009-02-03 01:18:02 218,624 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\e0e85b15b5b51c8c9054099131c85c19\mcstoredb.ni.dll
+ 2009-02-03 01:18:25 253,440 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mcupdate\254849daae53ba18b1ff6892b27c63b4\mcupdate.ni.exe
+ 2009-02-03 01:18:15 238,592 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Mcx2Dvcs\54f957fb5fc7f4a161e4194615a7134d\Mcx2Dvcs.ni.dll
+ 2009-02-03 01:18:26 222,720 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\300b894f5f93950e037a3e965f18d19a\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2009-02-03 01:18:27 839,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\469f74b1a5c04d4d122298419a78ee5a\Microsoft.Build.Engine.ni.dll
+ 2009-02-03 01:17:36 1,888,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6be4f17a5301e550b4ba72e8c0954951\Microsoft.Build.Engine.ni.dll
+ 2009-02-03 01:18:28 65,024 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\0b3322dd033251dbfeb5ffaa63628e2b\Microsoft.Build.Framework.ni.dll
+ 2009-02-03 01:17:34 74,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\d05258f88517512acc1ba5ad8d0c44ff\Microsoft.Build.Framework.ni.dll
+ 2009-02-03 01:18:32 1,966,080 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\158f491d14b18b2c84dea624fa16f97e\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2009-02-03 01:18:30 1,620,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\51998ee525859b487f792fa991b578e0\Microsoft.Build.Tasks.ni.dll
+ 2009-02-03 01:18:34 175,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\141d01ee47d7293ff827c087bebc8f80\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2009-02-03 01:18:33 144,384 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\fb6b64d9951841d62e4a7fdb69773753\Microsoft.Build.Utilities.ni.dll
+ 2009-02-03 01:18:35 1,356,288 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\77c72d8ae1eb97866124ff94944eba65\Microsoft.Ink.ni.dll
+ 2009-02-03 01:17:29 2,332,160 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\d0c457bb6166af76d39e30b872b98680\Microsoft.JScript.ni.dll
+ 2009-02-03 01:18:17 550,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\ae044af516de3b58071f06237f346f08\Microsoft.ManagementConsole.ni.dll
+ 2009-02-03 01:18:01 217,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\29d1ffcc81bca8dd584cb2bba9c04920\Microsoft.MediaCenter.Shell.ni.dll
+ 2009-02-03 01:18:03 659,968 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\5f41a1a96011afae352a7808a8e45a50\Microsoft.MediaCenter.Sports.ni.dll
+ 2009-02-03 01:17:47 5,475,840 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\78f2ee94be0f6e03a64bdc8c2b29869e\Microsoft.MediaCenter.UI.ni.dll
+ 2009-02-03 01:17:50 582,656 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\d646d889e7a308e575ff3382f0883034\Microsoft.MediaCenter.ni.dll
+ 2009-02-03 01:17:18 386,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\d64dd85d512244087920e240e2ead636\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2009-02-03 01:17:16 1,093,120 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f19fe1d203e18c2002cc0a7cfbcc8000\Microsoft.Transactions.Bridge.ni.dll
+ 2009-02-03 01:18:40 1,712,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\10fc12b6bf6510f0b967d20a2b04c476\Microsoft.VisualBasic.ni.dll
+ 2009-02-03 01:13:51 15,872 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\73c0364cb7c03a06285567d8905e72a0\Microsoft.VisualC.ni.dll
+ 2009-02-03 01:17:30 55,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e20de95af9baeabe4d076fef079e1765\Microsoft.Vsa.ni.dll
+ 2009-02-03 01:18:22 6,338,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\7ea0a047d6a73d97d2d7c0d5477c59e2\MIGUIControls.ni.dll
+ 2009-02-03 01:18:43 1,534,464 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\9251d1eb8b2439954bc2f18ea4268ed2\MMCEx.ni.dll
+ 2009-02-03 01:18:18 283,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\683027751803820e53367579ad1c025c\MMCFxCommon.ni.dll
+ 2009-02-03 01:17:34 133,632 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\a6f1ced3df616396a4980276ce9324be\MSBuild.ni.exe
+ 2009-02-03 01:12:16 11,486,720 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\c068708e16abf0be77a21b9f29817d83\mscorlib.ni.dll
+ 2009-02-03 01:18:44 79,872 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\53285198805a96a48fddfd0179dadfc9\napcrypt.ni.dll
+ 2009-02-03 01:18:44 115,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\c9fcddbf15afb72d7bc8ac081f9b2a8a\naphlpr.ni.dll
+ 2009-02-03 01:18:45 110,080 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\73112fe6d1ba98baec29bb6a54af81ff\napinit.ni.dll
+ 2009-02-03 01:18:46 724,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\414c80f21207fd50457c33c7be16fba4\napsnap.ni.dll
+ 2009-02-03 01:18:48 2,538,496 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\155b02ef85edc0b1bce415aa278494c2\Narrator.ni.exe
+ 2009-02-03 01:18:50 1,451,008 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\291b46ea56e2487200a16d5f8c4f4e7b\PresentationBuildTasks.ni.dll
+ 2009-02-03 01:13:52 39,424 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\96166332e0d92f8b7fcd3a12fba9e758\PresentationCFFRasterizer.ni.dll
+ 2009-02-03 01:13:18 12,216,320 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\8a84d9c1f313d52f24bf191df15eead2\PresentationCore.ni.dll
+ 2009-02-03 01:13:20 47,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\7dba5af5f1c6d3d23d3f3b2b4d7ebc14\PresentationFontCache.ni.exe
+ 2009-02-03 01:14:17 368,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\024d3dc8d8df47a0420a382959c64fdf\PresentationFramework.Aero.ni.dll
+ 2009-02-03 01:14:21 258,048 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0d856d6e0abe60939bcaf53f704eb20a\PresentationFramework.Royale.ni.dll
+ 2009-02-03 01:14:15 14,327,808 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\4f15f4468f90ae42f43a74b94b064fae\PresentationFramework.ni.dll
+ 2009-02-03 01:14:20 539,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5bd736acc51b6b3404eb48966f04e02b\PresentationFramework.Luna.ni.dll
+ 2009-02-03 01:14:18 224,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d299c79f96ad1aaaffcefcc300507c39\PresentationFramework.Classic.ni.dll
+ 2009-02-03 01:18:55 1,657,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bdc87c67f45de6c8798344e2625d3801\PresentationUI.ni.dll
+ 2009-02-03 01:19:00 2,128,896 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\bbab0671945f6dfb330735832b8db69c\ReachFramework.ni.dll
+ 2009-02-03 01:17:20 320,512 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\09f0313dbe55d6d0d843fecc42a93420\ServiceModelReg.ni.exe
+ 2009-02-03 01:17:08 256,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\fe38867d2e5f029a61369d60cb366db6\SMDiagnostics.ni.dll
+ 2009-02-03 01:17:22 366,080 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\58de8d4959e4d79d8f992dd3ab045a72\SMSvcHost.ni.exe
+ 2009-02-03 01:17:39 44,032 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\04a42205422bcf3f2b07d10b96648c9a\stdole.ni.dll
+ 2009-02-03 01:20:11 232,448 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\559a52145a3500b9be72f13c1a3e1018\sysglobl.ni.dll
+ 2009-02-03 01:19:03 82,944 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\995b89ec2f32e0c5989f84a8a96ceb28\System.AddIn.Contract.ni.dll
+ 2009-02-03 01:19:03 633,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\e40798cf217d051ccb60ce51df76608a\System.AddIn.ni.dll
+ 2009-02-03 01:19:04 94,208 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\8e4110e20bba40ee1fe7f23aaff7d2ee\System.ComponentModel.DataAnnotations.ni.dll
+ 2009-02-03 01:13:32 141,312 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\d3915d0144a91ab76bfaad80d5d7308c\System.Configuration.Install.ni.dll
+ 2009-02-03 01:13:22 971,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\982c005f97eacba888acdda322c49362\System.Configuration.ni.dll
+ 2009-02-03 00:58:20 2,461,696 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\5600b8d6eb67044dea243b56e3a1006b\System.Core.ni.dll
+ 2009-02-03 01:14:25 2,295,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\7749403068ce1f517692d61ae5af97cb\System.Core.ni.dll
+ 2009-02-03 01:19:05 135,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\ae6e232c6323706a525ea09110674d84\System.Data.DataSetExtensions.ni.dll
+ 2009-02-03 01:19:51 756,736 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\959bf3a05aa862385201a0fc7ff82b7c\System.Data.Entity.Design.ni.dll
+ 2009-02-03 01:19:48 9,924,096 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\c17219ce79b8df5966381230bd9e2130\System.Data.Entity.ni.dll
+ 2009-02-03 01:14:38 2,516,480 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\62b42c4b95f35a32d08e0623c7e69f35\System.Data.Linq.ni.dll
+ 2009-02-03 00:58:32 2,658,304 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\a611674830d138f5108583623f412ab4\System.Data.Linq.ni.dll
+ 2009-02-03 01:16:42 1,115,136 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\aff131554aeba820851285057b7c73c5\System.Data.OracleClient.ni.dll
+ 2009-02-03 01:19:56 939,008 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\66e561a2111eb84b814de5ee29acfe6e\System.Data.Services.Client.ni.dll
+ 2009-02-03 01:19:58 354,816 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\d14d5cbf6da54f47fa2480aabc3287a4\System.Data.Services.Design.ni.dll
+ 2009-02-03 01:19:55 1,328,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\58408e7157a149ee82d88687489d61ed\System.Data.Services.ni.dll
+ 2009-02-03 01:13:31 2,510,336 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ec4643166993b2585f414046eb959037\System.Data.SqlXml.ni.dll
+ 2009-02-03 01:14:32 6,616,576 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\45d73bf5a07b8fd8a12fcf7d68e9b318\System.Data.ni.dll
+ 2009-02-03 01:13:51 1,801,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\341bad47d4e45c4b1a994ab574d18ccf\System.Deployment.ni.dll
+ 2009-02-03 01:14:48 10,683,392 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\1337348a119098c3225c4ab1843a4437\System.Design.ni.dll
+ 2009-02-03 01:20:00 881,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\4c8a9e6f92e1274ad537e52cbbfe63b1\System.DirectoryServices.AccountManagement.ni.dll
+ 2009-02-03 01:16:43 455,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8921bfdd4653796b3f71c0f55064bef2\System.DirectoryServices.Protocols.ni.dll
+ 2009-02-03 01:16:26 1,116,672 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c59a8a0f03578ceb0eadd3bd8ac20876\System.DirectoryServices.ni.dll
+ 2009-02-03 01:14:49 208,384 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\820cc14372f8725f0bae2dff459ec0d2\System.Drawing.Design.ni.dll
+ 2009-02-03 01:13:34 1,587,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\19d027c3381110e60c003f2c8bd307ee\System.Drawing.ni.dll
+ 2009-02-03 01:16:24 627,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7895f580432cd243f19aa40db58d38bc\System.EnterpriseServices.ni.dll
+ 2009-02-03 01:16:24 280,064 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7895f580432cd243f19aa40db58d38bc\System.EnterpriseServices.Wrapper.dll
+ 2009-02-03 01:17:15 212,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\b3e2a96dff5a63aaf7d7d974cdf40dcb\System.IdentityModel.Selectors.ni.dll
+ 2009-02-03 01:17:14 1,056,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\63d1eb27f55bfa47a1a9328172bfb604\System.IdentityModel.ni.dll
+ 2009-02-03 01:17:24 381,440 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\2e19d1e42380f35043e0a6083de30852\System.IO.Log.ni.dll
+ 2009-02-03 01:20:01 330,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\9c1bbc7a8431ba14f3138a9b9d0b2758\System.Management.Instrumentation.ni.dll
+ 2009-02-03 01:17:27 998,400 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\31729b33207d1093721f9e943302b900\System.Management.ni.dll
+ 2009-02-03 01:17:15 593,408 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\11312bae768c4e69dfd6d9a3f34c1e62\System.Messaging.ni.dll
+ 2009-02-03 01:20:02 621,056 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\892f786ce75bd2e0ca400a8dae347a58\System.Net.ni.dll
+ 2009-02-03 01:18:57 1,035,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\9def64da16f075e10ce1b0cb97e44646\System.Printing.ni.dll
+ 2009-02-03 01:16:28 771,584 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a4fd3b000abfd4712b02ec223df3e9dd\System.Runtime.Remoting.ni.dll
+ 2009-02-03 01:17:12 2,338,304 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\19ca73856f91e0fd4d5353a9373f8b6a\System.Runtime.Serialization.ni.dll
+ 2009-02-03 01:13:33 311,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\b404ce9f79efc15f7cb09da0881adeb9\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2009-02-03 01:13:32 676,352 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\91895552b86d90ec9e0bdda831f69521\System.Security.ni.dll
+ 2009-02-03 01:20:08 1,706,496 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\463d79ec2065b26873bffcd35615d00b\System.ServiceModel.Web.ni.dll
+ 2009-02-03 01:17:07 17,317,888 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\550d497e3f4cc73b5e323711edb1b592\System.ServiceModel.ni.dll
+ 2009-02-03 01:13:21 212,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ba71341e41687591124f9a5680cb0981\System.ServiceProcess.ni.dll
+ 2009-02-03 01:20:10 1,917,440 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\a4524eb304ba9694838780c3d707bb6e\System.Speech.ni.dll
+ 2009-02-03 01:16:25 627,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\9a01d9b5c7b5509bbc964881ce2be5a1\System.Transactions.ni.dll
+ 2009-02-03 01:20:12 141,312 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\3b49817ad348c94fc41bbf26fdde9eec\System.Web.Abstractions.ni.dll
+ 2009-02-03 01:20:18 36,864 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\40591112ed6a3fac4dbfa337c00d2122\System.Web.DynamicData.Design.ni.dll
+ 2009-02-03 01:20:17 547,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\6f2bb0a35c228aba6e3a02a1238beb20\System.Web.DynamicData.ni.dll
+ 2009-02-03 01:20:20 301,056 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\c52120bb862d84082d917c4bb0a738c5\System.Web.Entity.Design.ni.dll
+ 2009-02-03 01:20:19 328,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\1ecd0493d33f74af1d96570662979a66\System.Web.Entity.ni.dll
+ 2009-02-03 01:20:16 2,403,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\060fca61fc10971f381204ccb623fc58\System.Web.Extensions.ni.dll
+ 2009-02-03 01:20:23 859,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\40b16dc65e32c4b7800bbde94fd4f9b7\System.Web.Extensions.Design.ni.dll
+ 2009-02-03 01:20:25 2,209,280 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\50dbb91ff2cd5f634b7cc56fb2125d55\System.Web.Mobile.ni.dll
+ 2009-02-03 01:16:42 202,240 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\dc555eb256a646332b3154bc91bbdb27\System.Web.RegularExpressions.ni.dll
+ 2009-02-03 01:20:13 129,536 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\71e9648c03c18a69e85293da03413183\System.Web.Routing.ni.dll
+ 2009-02-03 01:16:40 1,840,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2e2615fe0b5497263891553e13b697c6\System.Web.Services.ni.dll
+ 2009-02-03 01:16:38 11,796,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\47b2e1d9030f551f685dfea0b618e7fd\System.Web.ni.dll
+ 2009-02-03 01:13:48 12,430,848 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6d75eb3ca10a514754f5e87cc2134f07\System.Windows.Forms.ni.dll
+ 2009-02-03 01:20:27 37,888 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\ade62baef300f037ae756f801663f9c5\System.Windows.Presentation.ni.dll
+ 2009-02-03 01:14:54 2,992,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\94d861111d5b68f7933155d15969e667\System.Workflow.Activities.ni.dll
+ 2009-02-03 01:15:00 4,514,304 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\d1567636059403190e60c4e7636a8e00\System.Workflow.ComponentModel.ni.dll
+ 2009-02-03 01:15:03 1,908,224 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\0a5e00b130eae939dbd0bfb215adc548\System.Workflow.Runtime.ni.dll
+ 2009-02-03 01:20:30 1,356,288 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\770bd1f92877fcca1e7d5520deb1524b\System.WorkflowServices.ni.dll
+ 2009-02-03 01:20:31 400,896 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\85e2233bc3d7c5cf8fc07f9a8ce241cd\System.Xml.Linq.ni.dll
+ 2009-02-03 01:13:27 5,450,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\38b9d09539b67b08ee996db6c71f8a9b\System.Xml.ni.dll
+ 2009-02-03 01:12:57 7,868,416 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\57ac9ba5419d6bf4b79f2979b0755428\System.ni.dll
+ 2009-02-03 01:20:33 235,520 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\514f3a2e1240411c66b5809b99ecb0e4\TaskScheduler.ni.dll
+ 2009-02-03 01:20:34 447,488 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\50adf5948f698ac2a6fd66a05c77fa6b\UIAutomationClient.ni.dll
+ 2009-02-03 01:20:35 1,049,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\bf4b41f6504f6e0bb9ebfe81ee898f41\UIAutomationClientsideProviders.ni.dll
+ 2009-02-03 01:13:52 60,928 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\0c6011681b9ff9fce5a7024cc945220f\UIAutomationProvider.ni.dll
+ 2009-02-03 01:13:52 187,904 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\3caf0510d20c5799d772066ce085b2dc\UIAutomationTypes.ni.dll
+ 2009-02-03 01:13:01 3,313,664 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\880639d34ff339510176a4c8b4251954\WindowsBase.ni.dll
+ 2009-02-03 01:20:37 240,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\41dcf4e0061193634534f67cea2d360e\WindowsFormsIntegration.ni.dll
+ 2009-02-03 01:17:26 321,536 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a3811d1d99a4643e21362276281045a7\WsatConfig.ni.exe
- 2005-10-20 12:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
+ 2005-10-21 01:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
- 2008-12-12 08:10:53 593,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-02-03 00:59:09 593,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2008-12-12 08:10:53 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-02-03 00:59:09 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2008-12-12 08:10:53 86,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-02-03 00:59:09 86,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2008-12-12 08:10:52 135,168 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-02-03 00:59:09 135,168 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2008-12-12 08:10:53 11,264 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-02-03 00:59:09 11,264 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2008-12-12 08:10:53 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-02-03 00:59:09 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2008-12-12 08:10:53 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-02-03 00:59:09 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2008-12-12 08:10:53 794,624 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-02-03 00:59:10 794,624 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2008-12-12 08:10:52 249,856 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-02-03 00:59:09 249,856 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2008-12-12 08:10:52 61,440 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-02-03 00:59:09 61,440 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2008-12-12 08:10:53 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-02-03 00:59:10 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2008-12-12 08:10:52 286,720 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-02-03 00:59:09 286,720 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2008-12-12 08:10:52 409,600 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-02-03 00:59:09 409,600 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2008-01-05 11:25:44 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2008-07-27 18:03:10 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
- 2008-01-05 11:25:44 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2008-07-27 18:03:10 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
- 2008-01-05 11:25:44 14,336 ----a-w c:\windows\Microsoft.NET\Framework\sbs_iehost.dll
+ 2008-07-27 18:03:10 14,336 ----a-w c:\windows\Microsoft.NET\Framework\sbs_iehost.dll
- 2008-01-05 11:25:45 14,360 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2008-07-27 18:03:10 14,360 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
- 2008-01-05 11:25:49 14,904 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2008-07-27 18:03:10 14,904 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
- 2008-01-05 11:25:49 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2008-07-27 18:03:10 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
- 2008-01-05 11:25:49 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2008-07-27 18:03:10 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
- 2008-01-05 11:25:49 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2008-07-27 18:03:10 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
- 2008-01-05 11:25:49 14,384 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2008-07-27 18:03:10 14,384 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
- 2008-01-05 11:25:49 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
+ 2008-07-27 18:03:10 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
- 2008-01-05 11:25:49 14,376 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2008-07-27 18:03:10 14,376 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
- 2008-01-05 11:25:49 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
+ 2008-07-27 18:03:10 14,344 ----a-w c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
- 2008-01-05 11:25:49 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2008-07-27 18:03:10 14,352 ----a-w c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
- 2008-01-05 11:25:49 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2008-07-27 18:03:10 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
- 2008-01-05 11:25:49 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-27 18:03:10 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
- 2008-01-05 11:25:49 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2008-07-27 18:03:10 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2008-01-05 11:25:49 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-27 18:03:10 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
- 2008-01-05 11:27:04 97,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2008-07-27 18:03:16 96,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
- 2006-10-20 01:13:36 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2008-07-27 18:03:10 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
- 2006-10-20 01:13:36 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2008-07-27 18:03:10 145,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2006-10-20 01:13:37 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-27 18:03:10 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
- 2006-10-20 01:13:37 183,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-27 18:03:10 193,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
- 2006-10-20 01:13:37 208,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2008-07-27 18:03:10 218,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2008-01-05 11:25:52 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-27 18:03:10 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
- 2008-01-05 11:25:52 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-27 18:03:10 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
- 2008-01-05 11:25:53 99,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2008-07-27 18:03:10 98,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2008-01-05 11:25:53 59,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-27 18:03:11 58,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- 2008-01-05 11:25:53 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-27 18:03:11 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
- 2008-01-05 11:25:53 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2008-07-27 18:03:11 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2008-01-05 11:25:54 17,928 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-27 18:03:11 17,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
- 2008-01-05 11:25:55 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-27 18:03:11 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
- 2008-01-05 11:25:56 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-27 18:03:11 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
- 2008-01-05 11:25:56 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-27 18:03:11 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
- 2008-01-05 11:25:56 32,776 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2008-07-27 18:03:11 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2008-01-05 11:25:56 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-27 18:03:11 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2008-01-05 11:25:57 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-27 18:03:11 34,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
- 2008-01-05 11:25:57 33,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-10-13 22:26:50 31,560 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2008-01-05 11:25:59 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2008-07-27 18:03:11 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2008-01-05 11:25:59 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-27 18:03:11 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2008-01-05 11:26:04 101,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2008-07-27 18:03:11 89,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
- 2008-01-05 11:26:04 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-27 18:03:11 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
- 2008-01-05 11:26:05 1,162,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2008-07-27 18:03:11 1,163,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
- 2008-01-05 11:26:08 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-27 18:03:11 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2008-01-05 11:26:08 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2008-07-27 18:03:11 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2008-01-05 11:26:08 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2008-07-27 18:03:11 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2008-01-05 11:26:09 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-27 18:03:11 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
- 2008-01-05 11:26:11 66,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2008-07-27 18:03:11 62,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
- 2008-01-05 11:26:11 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2008-07-27 18:03:11 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2008-01-05 11:26:11 575,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2008-07-27 18:03:11 575,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2008-01-05 11:26:12 36,344 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
+ 2008-07-27 18:03:11 36,344 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
- 2006-10-20 01:14:02 788,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2008-07-27 18:03:11 798,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
- 2008-01-05 11:26:12 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-27 18:03:11 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
- 2008-01-05 11:26:12 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2008-07-27 18:03:12 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2008-01-05 11:26:12 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2008-07-27 18:03:12 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2008-01-05 11:26:12 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-27 18:03:12 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
- 2008-01-05 11:26:13 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2008-07-27 18:03:12 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2008-01-05 11:26:13 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-27 18:03:12 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
- 2008-01-05 11:26:17 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-27 18:03:12 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2008-01-05 11:26:17 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2008-07-27 18:03:12 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2008-01-05 11:26:17 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-27 18:03:12 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2008-01-05 11:26:17 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-27 18:03:12 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2008-01-05 11:26:17 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2008-07-27 18:03:12 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2008-01-05 11:26:17 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2008-07-27 18:03:12 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2008-01-05 11:26:17 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2008-07-27 18:03:12 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2008-01-05 11:26:17 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-27 18:03:12 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
- 2008-01-05 11:26:19 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-27 18:03:12 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
- 2008-01-05 11:26:19 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-27 18:03:12 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2008-01-05 11:26:23 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-27 18:03:12 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2008-01-05 11:26:23 671,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2008-07-27 18:03:12 659,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2008-01-05 11:26:23 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-27 18:03:12 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2006-10-20 01:14:05 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-27 18:03:12 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
- 2008-01-05 11:26:23 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-27 18:03:12 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2008-01-05 11:26:24 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-27 18:03:12 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2006-10-20 01:14:05 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2008-07-27 18:03:12 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2008-01-05 11:26:24 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2008-07-27 18:03:12 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2008-01-05 11:26:25 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-27 18:03:12 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2008-01-05 11:26:29 822,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2008-10-13 22:26:53 990,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2008-01-05 11:26:30 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2008-07-27 18:03:12 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2008-01-05 11:26:30 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2008-07-27 18:03:12 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
- 2008-01-05 11:26:31 47,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2008-07-27 18:03:12 46,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
- 2008-01-05 11:26:31 348,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2008-10-13 22:26:53 364,872 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2008-01-05 11:26:31 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-27 18:03:12 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
- 2008-01-05 11:26:32 4,444,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2008-10-13 22:26:54 4,546,560 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2008-01-05 11:26:35 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2008-07-27 18:03:13 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
- 2008-01-05 11:26:35 340,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2008-07-27 18:03:13 345,600 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
- 2008-01-05 11:26:36 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-27 18:03:13 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
- 2008-01-05 11:26:41 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-27 18:03:13 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
- 2008-01-05 11:26:41 242,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2008-07-27 18:03:13 230,912 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
- 2008-01-05 11:26:41 70,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2008-07-27 18:03:13 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- 2008-01-05 11:26:41 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-27 18:03:13 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
- 2008-01-05 11:26:42 5,814,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2008-10-13 22:26:55 5,813,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2006-10-20 01:14:43 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-27 18:03:14 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
- 2008-01-05 11:26:51 101,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2008-07-27 18:03:14 100,856 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
- 2008-01-05 11:26:51 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-27 18:03:14 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
- 2008-01-05 11:26:51 89,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2008-07-27 18:03:14 88,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
- 2008-01-05 11:26:51 144,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2008-07-27 18:03:14 143,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
- 2008-01-05 11:26:54 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-27 18:03:14 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2008-01-05 11:26:54 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-27 18:03:14 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2008-01-05 11:26:54 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-27 18:03:14 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
- 2008-01-05 11:26:54 119,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2008-07-27 18:03:14 118,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
- 2008-01-05 11:26:54 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2008-07-27 18:03:14 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
- 2008-01-05 11:26:54 392,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2008-07-27 18:03:14 392,184 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2008-01-05 11:26:54 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-27 18:03:14 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
- 2008-01-05 11:26:54 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2008-07-27 18:03:14 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2008-01-05 11:26:54 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-27 18:03:14 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2008-01-05 11:26:54 3,036,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2008-07-27 18:03:15 2,933,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
- 2008-01-05 11:26:54 483,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-10-13 22:26:57 486,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
- 2008-01-05 11:26:55 741,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2008-07-27 18:03:15 745,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
- 2008-01-05 11:26:55 933,888 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2008-07-27 18:03:15 970,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
- 2008-01-05 11:26:55 5,070,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2008-07-27 18:03:15 5,062,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2008-01-05 11:26:55 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-27 18:03:15 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
- 2008-01-05 11:26:55 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-27 18:03:15 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2008-01-05 11:26:55 3,076,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2008-07-27 18:03:15 3,149,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2008-01-05 11:26:55 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-27 18:03:15 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2008-01-05 11:26:55 630,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2008-07-27 18:03:15 626,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2008-01-05 11:26:55 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
- 2008-01-05 11:26:58 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2008-07-27 18:03:15 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2008-01-19 03:22:55 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2008-07-27 18:22:54 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2008-01-05 11:26:58 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2008-07-27 18:03:15 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2008-01-05 11:26:58 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2008-01-05 11:26:58 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2008-07-27 18:03:15 303,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2008-01-05 11:26:58 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-27 18:03:15 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
- 2008-01-05 11:26:58 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2008-01-05 11:26:58 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2008-07-27 18:03:15 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2008-01-05 11:26:59 261,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2008-07-27 18:03:15 261,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2008-01-05 11:26:59 5,431,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2008-10-13 22:26:58 5,242,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2008-01-05 11:26:59 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2008-07-27 18:03:15 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2008-01-05 11:26:59 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2008-07-27 18:03:15 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
- 2008-01-05 11:27:00 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-27 18:03:15 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
- 2008-01-05 11:27:02 5,013,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2008-07-27 18:03:15 5,025,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2008-01-05 11:27:03 2,068,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-10-13 22:26:58 2,048,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
- 2008-01-05 11:27:03 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-27 18:03:16 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
- 2008-01-05 11:27:03 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-07-27 18:03:16 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- 2008-01-05 11:27:03 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-27 18:03:16 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2008-01-05 11:27:03 435,200 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2008-10-13 22:26:59 436,040 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2008-01-05 11:27:03 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-27 18:03:16 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
- 2008-01-05 11:21:39 159,744 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
+ 2008-06-20 01:14:31 168,968 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
- 2008-01-05 11:21:39 864,256 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
+ 2008-06-20 01:14:31 881,664 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
- 2008-01-05 11:21:39 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
+ 2008-06-20 01:14:31 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
- 2008-01-05 11:21:39 151,552 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-06-20 01:14:31 163,840 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
- 2008-01-19 07:31:57 2,560 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
+ 2008-06-20 01:14:31 11,280 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
- 2006-11-02 12:36:02 2,560 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll
+ 2008-06-20 01:14:31 11,288 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll
- 2008-01-05 11:21:39 61,440 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
+ 2008-06-20 01:14:31 156,688 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
- 2008-01-19 07:36:49 11,264 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2008-06-20 01:14:31 20,504 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
- 2008-01-05 11:21:39 112,656 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMConfigInstaller.exe
+ 2008-06-20 01:14:31 181,264 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMConfigInstaller.exe
- 2008-01-05 11:21:39 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2008-06-20 01:14:31 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
- 2008-01-05 11:21:39 122,880 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
+ 2008-06-20 01:14:31 132,096 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
- 2008-01-05 11:21:39 929,792 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2008-06-20 01:14:31 966,656 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
- 2008-01-05 11:21:40 5,971,968 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2008-11-24 23:34:37 5,931,008 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
- 2008-01-05 11:21:40 159,744 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2008-06-20 01:14:32 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
- 2008-01-05 11:21:40 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2008-06-20 01:14:33 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
- 2008-01-05 11:21:40 143,360 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
+ 2008-06-20 01:14:33 152,576 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
- 2008-01-05 11:21:52 76,312 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2008-06-20 01:14:44 71,160 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
- 2008-01-05 11:21:52 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-06-20 01:14:44 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
- 2008-01-05 11:21:53 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
+ 2008-06-20 01:14:44 46,104 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
- 2008-01-05 11:21:54 121,368 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2008-06-20 01:14:44 132,120 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
- 2008-01-05 11:21:55 897,024 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2008-06-20 01:14:44 864,256 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2008-11-24 23:34:49 1,736,528 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
- 2008-01-05 11:22:01 14,848 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe
+ 2008-06-20 01:14:45 25,616 ----a-w c:\windows\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe
+ 2008-07-30 04:40:48 168,448 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2008-07-30 04:40:48 233,976 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-07-30 04:40:48 41,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2008-07-30 04:40:48 41,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-30 04:40:48 41,984 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-30 04:40:48 1,548,280 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
+ 2008-07-30 04:40:48 78,856 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-30 04:40:48 95,224 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-30 04:15:24 225,490 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
+ 2008-07-29 23:47:34 97,280 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-29 23:47:34 276,984 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
+ 2008-07-29 23:47:34 1,064,448 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
+ 2008-07-29 23:47:34 177,152 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
+ 2008-07-29 23:47:34 269,304 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
+ 2008-07-29 23:47:34 113,152 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
+ 2008-07-29 23:47:34 84,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-29 23:47:34 125,440 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
+ 2008-07-29 23:47:34 126,464 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
+ 2008-07-29 23:47:34 130,048 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
+ 2008-07-29 23:47:34 137,728 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
+ 2008-07-29 23:47:34 122,368 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
+ 2008-07-29 23:47:34 133,120 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
+ 2008-07-29 23:47:34 111,104 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
+ 2008-07-29 23:47:34 132,096 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
+ 2008-07-29 23:47:34 128,512 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
+ 2008-07-29 23:47:34 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-29 23:47:34 94,720 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-29 23:47:34 129,024 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
+ 2008-07-29 23:47:34 121,856 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
+ 2008-07-29 23:47:34 128,512 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
+ 2008-07-29 23:47:34 122,880 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
+ 2008-07-29 23:47:34 123,904 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
+ 2008-07-29 23:47:34 121,344 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
+ 2008-07-29 23:47:34 121,344 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
+ 2008-07-29 23:47:34 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-29 23:47:34 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
+ 2008-07-29 23:47:34 131,584 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
+ 2008-07-29 23:47:34 110,080 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
+ 2008-07-29 23:47:34 1,364,992 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
+ 2008-07-29 23:47:34 1,054,208 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
+ 2008-07-29 23:47:34 632,320 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
+ 2008-07-29 23:47:34 413,184 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
+ 2008-07-29 23:47:34 689,152 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
+ 2008-07-29 23:47:34 102,904 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
+ 2008-07-29 23:47:34 89,592 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-29 23:47:34 108,536 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
+ 2008-07-29 23:47:34 108,536 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
+ 2008-07-29 23:47:34 111,608 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
+ 2008-07-29 23:47:34 113,656 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
+ 2008-07-29 23:47:34 106,488 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
+ 2008-07-29 23:47:34 112,120 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
+ 2008-07-29 23:47:34 101,368 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
+ 2008-07-29 23:47:34 111,096 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
+ 2008-07-29 23:47:34 110,072 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
+ 2008-07-29 23:47:34 95,224 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-29 23:47:34 92,664 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-29 23:47:34 108,536 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
+ 2008-07-29 23:47:34 106,488 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
+ 2008-07-29 23:47:34 109,048 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
+ 2008-07-29 23:47:34 107,512 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
+ 2008-07-29 23:47:34 107,000 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
+ 2008-07-29 23:47:34 105,976 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
+ 2008-07-29 23:47:34 106,488 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
+ 2008-07-29 23:47:34 89,080 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-29 23:47:34 110,072 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
+ 2008-07-29 23:47:34 111,096 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
+ 2008-07-29 23:47:34 107,512 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
+ 2008-07-29 23:47:34 984,056 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
+ 2008-07-30 04:40:48 802,816 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2008-07-30 04:40:48 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
+ 2008-07-30 04:40:48 41,984 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-30 04:40:48 91,136 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-30 04:40:48 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
+ 2008-07-30 04:40:48 1,720,824 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2008-07-30 04:40:48 196,104 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2008-07-30 04:40:48 70,648 ----a-w c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
- 2009-02-02 23:02:19 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-02-05 21:15:50 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-02-02 23:02:19 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-02-05 21:15:50 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-02-02 23:22:07 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2009-02-05 21:17:46 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT
- 2009-02-02 23:22:12 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2009-02-05 21:18:50 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2009-02-05 21:18:50 262,144 ---ha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
- 2009-02-02 23:07:32 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-02-05 21:16:13 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-02-02 23:07:32 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-02-05 21:16:13 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-02-02 23:07:32 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-02-05 21:16:13 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-02-02 22:57:11 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
+ 2009-02-05 21:08:06 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
- 2008-12-09 20:24:38 17,593,280 ----a-w c:\windows\System32\mrt.exe
+ 2009-01-10 01:35:28 20,853,704 ----a-w c:\windows\System32\mrt.exe
- 2006-10-20 01:15:07 6,144 ----a-w c:\windows\System32\MUI\0409\mscorees.dll
+ 2008-07-27 18:03:17 15,360 ----a-w c:\windows\System32\MUI\0409\mscorees.dll
- 2008-12-20 10:32:01 6,291,456 ----a-w c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2009-02-05 09:01:23 6,291,456 ----a-w c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
- 2009-02-02 23:04:37 9,600 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1973986091-4112378033-85387327-1000_UserData.bin
+ 2009-02-05 21:19:16 9,616 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1973986091-4112378033-85387327-1000_UserData.bin
- 2009-02-02 23:04:37 68,786 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2009-02-05 21:19:14 68,978 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2009-02-02 23:04:30 46,926 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-02-05 21:19:02 47,130 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
- 2009-01-31 22:54:19 212,796 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2009-02-04 19:52:12 218,306 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin
- 2008-01-05 11:22:01 308,760 ----a-w c:\windows\System32\XPSViewer\XPSViewer.exe
+ 2008-06-20 01:14:45 301,568 ----a-w c:\windows\System32\XPSViewer\XPSViewer.exe
- 2009-01-22 05:34:17 161,081,528 ----a-w c:\windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2009-02-03 00:57:30 188,281,508 ----a-w c:\windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2008-07-27 18:00:22 10,752 ----a-w c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6000.16720_none_4dd0dfd192a9f18b\Accessibility.dll
+ 2008-07-27 17:55:49 10,752 ----a-w c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6000.20883_none_3708f675ac4c367e\Accessibility.dll
+ 2008-07-27 18:03:10 10,752 ----a-w c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6001.18111_none_4dabc48792fbfe2c\Accessibility.dll
+ 2008-07-27 17:58:31 10,752 ----a-w c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6001.22230_none_36e03523aca1773f\Accessibility.dll
+ 2008-07-27 18:00:23 507,904 ----a-w c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6000.16720_none_809e9498963f10ba\AspNetMMCExt.dll
+ 2008-07-27 17:55:49 507,904 ----a-w c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6000.20883_none_69d6ab3cafe155ad\AspNetMMCExt.dll
+ 2008-07-27 18:03:11 507,904 ----a-w c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6001.18111_none_8079794e96911d5b\AspNetMMCExt.dll
+ 2008-07-27 17:58:31 507,904 ----a-w c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6001.22230_none_69ade9eab036966e\AspNetMMCExt.dll
+ 2008-06-20 01:17:49 168,968 ----a-w c:\windows\winsxs\msil_comsvcconfig_b03f5f7f11d50a3a_6.0.6000.16708_none_ebabc572d44a2a04\ComSvcConfig.exe
+ 2008-06-20 01:12:45 168,968 ----a-w c:\windows\winsxs\msil_comsvcconfig_b03f5f7f11d50a3a_6.0.6000.20864_none_d4e47b8eedebbb90\ComSvcConfig.exe
+ 2008-06-20 01:14:31 168,968 ----a-w c:\windows\winsxs\msil_comsvcconfig_b03f5f7f11d50a3a_6.0.6001.18096_none_eb90f188d492e6d7\ComSvcConfig.exe
+ 2008-06-20 01:13:18 168,968 ----a-w c:\windows\winsxs\msil_comsvcconfig_b03f5f7f11d50a3a_6.0.6001.22208_none_d4ba1a7aee429661\ComSvcConfig.exe
+ 2008-07-27 18:00:23 13,312 ----a-w c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6000.16720_none_18bd6f40a9b5d6a8\cscompmgd.dll
+ 2008-07-27 17:55:51 13,312 ----a-w c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6000.20883_none_01f585e4c3581b9b\cscompmgd.dll
+ 2008-07-27 18:03:11 13,312 ----a-w c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6001.18111_none_189853f6aa07e349\cscompmgd.dll
+ 2008-07-27 17:58:31 13,312 ----a-w c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6001.22230_none_01ccc492c3ad5c5c\cscompmgd.dll
+ 2008-07-27 18:00:23 5,120 ----a-w c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6000.16720_none_65f34b6e88aba3e7\dfsvc.exe
+ 2008-07-27 17:55:51 5,120 ----a-w c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6000.20883_none_4f2b6212a24de8da\dfsvc.exe
+ 2008-07-27 18:03:11 5,120 ----a-w c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6001.18111_none_65ce302488fdb088\dfsvc.exe
+ 2008-07-27 17:58:31 5,120 ----a-w c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6001.22230_none_4f02a0c0a2a3299b\dfsvc.exe
+ 2008-07-27 18:00:23 9,728 ----a-w c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6000.16720_none_7f06452c075a5a3c\IEExec.exe
+ 2008-07-27 17:55:51 9,728 ----a-w c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6000.20883_none_683e5bd020fc9f2f\IEExec.exe
+ 2008-07-27 18:03:12 9,728 ----a-w c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6001.18111_none_7ee129e207ac66dd\IEExec.exe
+ 2008-07-27 17:58:32 9,728 ----a-w c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6001.22230_none_68159a7e2151dff0\IEExec.exe
+ 2008-07-27 18:00:23 8,192 ----a-w c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6000.16720_none_ef94d833c4e430f8\IEExecRemote.dll
+ 2008-07-27 17:55:52 8,192 ----a-w c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6000.20883_none_d8cceed7de8675eb\IEExecRemote.dll
+ 2008-07-27 18:03:12 8,192 ----a-w c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6001.18111_none_ef6fbce9c5363d99\IEExecRemote.dll
+ 2008-07-27 17:58:32 8,192 ----a-w c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6001.22230_none_d8a42d85dedbb6ac\IEExecRemote.dll
+ 2008-07-27 18:00:23 77,824 ----a-w c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6000.16720_none_7e7f95c007bcf6b5\IEHost.dll
+ 2008-07-27 17:55:52 77,824 ----a-w c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6000.20883_none_67b7ac64215f3ba8\IEHost.dll
+ 2008-07-27 18:03:12 77,824 ----a-w c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6001.18111_none_7e5a7a76080f0356\IEHost.dll
+ 2008-07-27 17:58:32 77,824 ----a-w c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6001.22230_none_678eeb1221b47c69\IEHost.dll
+ 2008-07-27 18:00:23 6,656 ----a-w c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6000.16720_none_81aec2428b19ab74\IIEHost.dll
+ 2008-07-27 17:55:52 6,656 ----a-w c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6000.20883_none_6ae6d8e6a4bbf067\IIEHost.dll
+ 2008-07-27 18:03:12 6,656 ----a-w c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6001.18111_none_8189a6f88b6bb815\IIEHost.dll
+ 2008-07-27 17:58:32 6,656 ----a-w c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6001.22230_none_6abe1794a5113128\IIEHost.dll
+ 2008-07-27 18:00:24 40,960 ----a-w c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6000.16720_none_a7f9fcdcd724c803\jsc.exe
+ 2008-07-27 17:55:52 40,960 ----a-w c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6000.20883_none_91321380f0c70cf6\jsc.exe
+ 2008-07-27 18:03:12 40,960 ----a-w c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6001.18111_none_a7d4e192d776d4a4\jsc.exe
+ 2008-07-27 17:58:32 40,960 ----a-w c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6001.22230_none_9109522ef11c4db7\jsc.exe
+ 2008-07-27 18:00:24 348,160 ----a-w c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6000.16720_none_38c710b80e2e0c67\Microsoft.Build.Engine.dll
+ 2008-07-27 17:55:52 348,160 ----a-w c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6000.20883_none_21ff275c27d0515a\Microsoft.Build.Engine.dll
+ 2008-07-27 18:03:12 348,160 ----a-w c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6001.18111_none_38a1f56e0e801908\Microsoft.Build.Engine.dll
+ 2008-07-27 17:58:32 348,160 ----a-w c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6001.22230_none_21d6660a2825921b\Microsoft.Build.Engine.dll
+ 2008-07-27 18:00:24 36,864 ----a-w c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6000.16720_none_c2ee2c438342bfeb\Microsoft.Build.Framework.dll
+ 2008-07-27 17:55:52 36,864 ----a-w c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6000.20883_none_ac2642e79ce504de\Microsoft.Build.Framework.dll
+ 2008-07-27 18:03:12 36,864 ----a-w c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6001.18111_none_c2c910f98394cc8c\Microsoft.Build.Framework.dll
+ 2008-07-27 17:58:32 36,864 ----a-w c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6001.22230_none_abfd81959d3a459f\Microsoft.Build.Framework.dll
+ 2008-07-27 18:00:24 655,360 ----a-w c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6000.16720_none_9d87218c8cdc56ad\Microsoft.Build.Tasks.dll
+ 2008-07-27 17:55:52 655,360 ----a-w c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6000.20883_none_86bf3830a67e9ba0\Microsoft.Build.Tasks.dll
+ 2008-07-27 18:03:12 655,360 ----a-w c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6001.18111_none_9d6206428d2e634e\Microsoft.Build.Tasks.dll
+ 2008-07-27 17:58:32 655,360 ----a-w c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6001.22230_none_869676dea6d3dc61\Microsoft.Build.Tasks.dll
+ 2008-07-27 18:00:24 77,824 ----a-w c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6000.16720_none_e22f79faa4b204b9\Microsoft.Build.Utilities.dll
+ 2008-07-27 17:55:52 77,824 ----a-w c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6000.20883_none_cb67909ebe5449ac\Microsoft.Build.Utilities.dll
+ 2008-07-27 18:03:12 77,824 ----a-w c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6001.18111_none_e20a5eb0a504115a\Microsoft.Build.Utilities.dll
+ 2008-07-27 17:58:32 77,824 ----a-w c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6001.22230_none_cb3ecf4cbea98a6d\Microsoft.Build.Utilities.dll
+ 2008-07-27 18:00:24 749,568 ----a-w c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6000.16720_none_d253037d82bc5298\Microsoft.JScript.dll
+ 2008-07-27 17:55:52 749,568 ----a-w c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6000.20883_none_bb8b1a219c5e978b\Microsoft.JScript.dll
+ 2008-07-27 18:03:12 749,568 ----a-w c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6001.18111_none_d22de833830e5f39\Microsoft.JScript.dll
+ 2008-07-27 17:58:32 749,568 ----a-w c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6001.22230_none_bb6258cf9cb3d84c\Microsoft.JScript.dll
+ 2008-06-20 01:17:50 397,312 ----a-w c:\windows\winsxs\msil_microsoft.transactions.bridge_b03f5f7f11d50a3a_6.0.6000.16708_none_c8068fb7fd4c2123\Microsoft.Transactions.Bridge.dll
+ 2008-06-20 01:12:45 397,312 ----a-w c:\windows\winsxs\msil_microsoft.transactions.bridge_b03f5f7f11d50a3a_6.0.6000.20864_none_b13f45d416edb2af\Microsoft.Transactions.Bridge.dll
+ 2008-06-20 01:14:31 397,312 ----a-w c:\windows\winsxs\msil_microsoft.transactions.bridge_b03f5f7f11d50a3a_6.0.6001.18096_none_c7ebbbcdfd94ddf6\Microsoft.Transactions.Bridge.dll
+ 2008-06-20 01:13:18 397,312 ----a-w c:\windows\winsxs\msil_microsoft.transactions.bridge_b03f5f7f11d50a3a_6.0.6001.22208_none_b114e4c017448d80\Microsoft.Transactions.Bridge.dll
+ 2008-07-27 18:00:24 110,592 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6000.16720_none_5f627c4b1c7d41c7\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-27 17:55:52 110,592 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6000.20883_none_489a92ef361f86ba\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-27 18:03:12 110,592 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6001.18111_none_5f3d61011ccf4e68\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-27 17:58:32 110,592 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6001.22230_none_4871d19d3674c77b\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-27 18:00:24 372,736 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6000.16720_none_ed8ab03894e675b5\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-27 17:55:52 372,736 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6000.20883_none_d6c2c6dcae88baa8\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-27 18:03:12 372,736 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6001.18111_none_ed6594ee95388256\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-27 17:58:32 372,736 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6001.22230_none_d69a058aaeddfb69\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-27 18:00:24 28,672 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6000.16720_none_f2fe695d4c27dfa3\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-27 17:55:52 28,672 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6000.20883_none_dc36800165ca2496\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-27 18:03:12 28,672 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6001.18111_none_f2d94e134c79ec44\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-27 17:58:32 28,672 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6001.22230_none_dc0dbeaf661f6557\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-27 18:00:24 659,456 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6000.16720_none_adb388aa00e25dcd\Microsoft.VisualBasic.dll
+ 2008-07-27 17:55:52 659,456 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6000.20883_none_96eb9f4e1a84a2c0\Microsoft.VisualBasic.dll
+ 2008-07-27 18:03:12 659,456 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6001.18111_none_ad8e6d6001346a6e\Microsoft.VisualBasic.dll
+ 2008-07-27 17:58:32 659,456 ----a-w c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6001.22230_none_96c2ddfc1ad9e381\Microsoft.VisualBasic.dll
+ 2008-07-27 18:00:24 5,632 ----a-w c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6000.16720_none_8517de4eb185b862\Microsoft.VisualC.Dll
+ 2008-07-27 17:55:52 5,632 ----a-w c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6000.20883_none_6e4ff4f2cb27fd55\Microsoft.VisualC.Dll
+ 2008-07-27 18:03:12 5,632 ----a-w c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6001.18111_none_84f2c304b1d7c503\Microsoft.VisualC.Dll
+ 2008-07-27 17:58:32 5,632 ----a-w c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6001.22230_none_6e2733a0cb7d3e16\Microsoft.VisualC.Dll
+ 2008-07-27 18:00:24 12,800 ----a-w c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6000.16720_none_44a2019ef24603f4\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-27 17:55:52 12,800 ----a-w c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6000.20883_none_2dda18430be848e7\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-27 18:03:12 12,800 ----a-w c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6001.18111_none_447ce654f2981095\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-27 17:58:32 12,800 ----a-w c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6001.22230_none_2db156f10c3d89a8\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-27 18:00:24 32,768 ----a-w c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6000.16720_none_68752cae39ce89df\Microsoft.Vsa.dll
+ 2008-07-27 17:55:52 32,768 ----a-w c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6000.20883_none_51ad43525370ced2\Microsoft.Vsa.dll
+ 2008-07-27 18:03:12 32,768 ----a-w c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6001.18111_none_685011643a209680\Microsoft.Vsa.dll
+ 2008-07-27 17:58:32 32,768 ----a-w c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6001.22230_none_5184820053c60f93\Microsoft.Vsa.dll
+ 2008-07-27 18:00:24 7,168 ----a-w c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6000.16720_none_6723493acd9cb768\Microsoft_VsaVb.dll
+ 2008-07-27 17:55:52 7,168 ----a-w c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6000.20883_none_505b5fdee73efc5b\Microsoft_VsaVb.dll
+ 2008-07-27 18:03:12 7,168 ----a-w c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6001.18111_none_66fe2df0cdeec409\Microsoft_VsaVb.dll
+ 2008-07-27 17:58:32 7,168 ----a-w c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6001.22230_none_50329e8ce7943d1c\Microsoft_VsaVb.dll
+ 2008-06-20 01:18:02 598,016 ----a-w c:\windows\winsxs\msil_presentationbuildtasks_31bf3856ad364e35_6.0.6000.16708_none_9a4242103b6a941e\PresentationBuildTasks.dll
+ 2008-06-20 01:12:56 598,016 ----a-w c:\windows\winsxs\msil_presentationbuildtasks_31bf3856ad364e35_6.0.6000.20864_none_9a86fe2b54bc7632\PresentationBuildTasks.dll
+ 2008-06-20 01:14:42 598,016 ----a-w c:\windows\winsxs\msil_presentationbuildtasks_31bf3856ad364e35_6.0.6001.18096_none_9bc52ef038dbf0b3\PresentationBuildTasks.dll
+ 2008-06-20 01:13:30 598,016 ----a-w c:\windows\winsxs\msil_presentationbuildtasks_31bf3856ad364e35_6.0.6001.22208_none_9cb21d8151aec4d9\PresentationBuildTasks.dll
+ 2008-06-20 01:18:04 32,768 ----a-w c:\windows\winsxs\msil_presentationcffrasterizer_31bf3856ad364e35_6.0.6000.16708_none_3f3d5ab21a051242\PresentationCFFRasterizer.dll
+ 2008-06-20 01:12:57 32,768 ----a-w c:\windows\winsxs\msil_presentationcffrasterizer_31bf3856ad364e35_6.0.6000.20864_none_3f8216cd3356f456\PresentationCFFRasterizer.dll
+ 2008-06-20 01:14:44 32,768 ----a-w c:\windows\winsxs\msil_presentationcffrasterizer_31bf3856ad364e35_6.0.6001.18096_none_40c0479217766ed7\PresentationCFFRasterizer.dll
+ 2008-06-20 01:13:32 32,768 ----a-w c:\windows\winsxs\msil_presentationcffrasterizer_31bf3856ad364e35_6.0.6001.22208_none_41ad3623304942fd\PresentationCFFRasterizer.dll
+ 2008-06-20 01:18:04 46,104 ----a-w c:\windows\winsxs\msil_presentationfontcache_31bf3856ad364e35_6.0.6000.16708_none_0bec965db3069c77\PresentationFontCache.exe
+ 2008-06-20 01:12:57 46,104 ----a-w c:\windows\winsxs\msil_presentationfontcache_31bf3856ad364e35_6.0.6000.20864_none_0c315278cc587e8b\PresentationFontCache.exe
+ 2008-06-20 01:14:44 46,104 ----a-w c:\windows\winsxs\msil_presentationfontcache_31bf3856ad364e35_6.0.6001.18096_none_0d6f833db077f90c\PresentationFontCache.exe
+ 2008-06-20 01:13:32 46,104 ----a-w c:\windows\winsxs\msil_presentationfontcache_31bf3856ad364e35_6.0.6001.22208_none_0e5c71cec94acd32\PresentationFontCache.exe
+ 2008-06-20 01:18:02 196,608 ----a-w c:\windows\winsxs\msil_presentationframework.aero_31bf3856ad364e35_6.0.6000.16708_none_1769d892726be62d\PresentationFramework.Aero.dll
+ 2008-06-20 01:12:56 196,608 ----a-w c:\windows\winsxs\msil_presentationframework.aero_31bf3856ad364e35_6.0.6000.20864_none_17ae94ad8bbdc841\PresentationFramework.Aero.dll
+ 2008-06-20 01:14:43 196,608 ----a-w c:\windows\winsxs\msil_presentationframework.aero_31bf3856ad364e35_6.0.6001.18096_none_18ecc5726fdd42c2\PresentationFramework.Aero.dll
+ 2008-06-20 01:13:31 196,608 ----a-w c:\windows\winsxs\msil_presentationframework.aero_31bf3856ad364e35_6.0.6001.22208_none_19d9b40388b016e8\PresentationFramework.Aero.dll
+ 2008-06-20 01:18:02 139,264 ----a-w c:\windows\winsxs\msil_presentationframework.classic_31bf3856ad364e35_6.0.6000.16708_none_ae7b1b78e763e376\PresentationFramework.Classic.dll
+ 2008-06-20 01:12:56 139,264 ----a-w c:\windows\winsxs\msil_presentationframework.classic_31bf3856ad364e35_6.0.6000.20864_none_aebfd79400b5c58a\PresentationFramework.Classic.dll
+ 2008-06-20 01:14:43 139,264 ----a-w c:\windows\winsxs\msil_presentationframework.classic_31bf3856ad364e35_6.0.6001.18096_none_affe0858e4d5400b\PresentationFramework.Classic.dll
+ 2008-06-20 01:13:31 139,264 ----a-w c:\windows\winsxs\msil_presentationframework.classic_31bf3856ad364e35_6.0.6001.22208_none_b0eaf6e9fda81431\PresentationFramework.Classic.dll
+ 2008-06-20 01:18:03 397,312 ----a-w c:\windows\winsxs\msil_presentationframework.luna_31bf3856ad364e35_6.0.6000.16708_none_1644b1707315fdb0\PresentationFramework.Luna.dll
+ 2008-06-20 01:12:56 397,312 ----a-w c:\windows\winsxs\msil_presentationframework.luna_31bf3856ad364e35_6.0.6000.20864_none_16896d8b8c67dfc4\PresentationFramework.Luna.dll
+ 2008-06-20 01:14:43 397,312 ----a-w c:\windows\winsxs\msil_presentationframework.luna_31bf3856ad364e35_6.0.6001.18096_none_17c79e5070875a45\PresentationFramework.Luna.dll
+ 2008-06-20 01:13:31 397,312 ----a-w c:\windows\winsxs\msil_presentationframework.luna_31bf3856ad364e35_6.0.6001.22208_none_18b48ce1895a2e6b\PresentationFramework.Luna.dll
+ 2008-06-20 01:18:03 163,840 ----a-w c:\windows\winsxs\msil_presentationframework.royale_31bf3856ad364e35_6.0.6000.16708_none_98cd04df9416a86e\PresentationFramework.Royale.dll
+ 2008-06-20 01:12:56 163,840 ----a-w c:\windows\winsxs\msil_presentationframework.royale_31bf3856ad364e35_6.0.6000.20864_none_9911c0faad688a82\PresentationFramework.Royale.dll
+ 2008-06-20 01:14:43 163,840 ----a-w c:\windows\winsxs\msil_presentationframework.royale_31bf3856ad364e35_6.0.6001.18096_none_9a4ff1bf91880503\PresentationFramework.Royale.dll
+ 2008-06-20 01:13:31 163,840 ----a-w c:\windows\winsxs\msil_presentationframework.royale_31bf3856ad364e35_6.0.6001.22208_none_9b3ce050aa5ad929\PresentationFramework.Royale.dll
+ 2008-06-20 01:18:03 5,283,840 ----a-w c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6000.16708_none_74d95b94f6cef266\PresentationFramework.dll
+ 2008-11-24 23:44:27 5,283,840 ----a-w c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6000.16780_none_747ad9e4f7170736\PresentationFramework.dll
+ 2008-06-20 01:12:56 5,283,840 ----a-w c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6000.20864_none_751e17b01020d47a\PresentationFramework.dll
+ 2008-11-24 23:43:38 5,283,840 ----a-w c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6000.20964_none_751e19961020d1a1\PresentationFramework.dll
+ 2008-06-20 01:14:43 5,283,840 ----a-w c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6001.18096_none_765c4874f4404efb\PresentationFramework.dll
+ 2008-11-24 23:34:47 5,283,840 ----a-w c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6001.18173_none_766ee954f432c83b\PresentationFramework.dll
+ 2008-06-20 01:13:31 5,283,840 ----a-w c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6001.22208_none_774937060d132321\PresentationFramework.dll
+ 2008-11-24 23:57:19 5,283,840 ----a-w c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6001.22317_none_773d68b60d1c22e2\PresentationFramework.dll
+ 2008-06-20 01:18:04 864,256 ----a-w c:\windows\winsxs\msil_presentationui_31bf3856ad364e35_6.0.6000.16708_none_a9cc5a883f5a2a28\PresentationUI.dll
+ 2008-06-20 01:12:57 864,256 ----a-w c:\windows\winsxs\msil_presentationui_31bf3856ad364e35_6.0.6000.20864_none_aa1116a358ac0c3c\PresentationUI.dll
+ 2008-06-20 01:14:44 864,256 ----a-w c:\windows\winsxs\msil_presentationui_31bf3856ad364e35_6.0.6001.18096_none_ab4f47683ccb86bd\PresentationUI.dll
+ 2008-06-20 01:13:32 864,256 ----a-w c:\windows\winsxs\msil_presentationui_31bf3856ad364e35_6.0.6001.22208_none_ac3c35f9559e5ae3\PresentationUI.dll
+ 2008-06-20 01:18:03 528,384 ----a-w c:\windows\winsxs\msil_reachframework_31bf3856ad364e35_6.0.6000.16708_none_3fd11d340452ef41\ReachFramework.dll
+ 2008-06-20 01:12:56 528,384 ----a-w c:\windows\winsxs\msil_reachframework_31bf3856ad364e35_6.0.6000.20864_none_4015d94f1da4d155\ReachFramework.dll
+ 2008-06-20 01:14:43 528,384 ----a-w c:\windows\winsxs\msil_reachframework_31bf3856ad364e35_6.0.6001.18096_none_41540a1401c44bd6\ReachFramework.dll
+ 2008-06-20 01:13:31 528,384 ----a-w c:\windows\winsxs\msil_reachframework_31bf3856ad364e35_6.0.6001.22208_none_4240f8a51a971ffc\ReachFramework.dll
+ 2008-06-20 01:17:50 156,688 ----a-w c:\windows\winsxs\msil_servicemodelreg_b03f5f7f11d50a3a_6.0.6000.16708_none_4af00a98fbb62f75\ServiceModelReg.exe
+ 2008-06-20 01:12:45 156,688 ----a-w c:\windows\winsxs\msil_servicemodelreg_b03f5f7f11d50a3a_6.0.6000.20864_none_3428c0b51557c101\ServiceModelReg.exe
+ 2008-06-20 01:14:31 156,688 ----a-w c:\windows\winsxs\msil_servicemodelreg_b03f5f7f11d50a3a_6.0.6001.18096_none_4ad536aefbfeec48\ServiceModelReg.exe
+ 2008-06-20 01:13:19 156,688 ----a-w c:\windows\winsxs\msil_servicemodelreg_b03f5f7f11d50a3a_6.0.6001.22208_none_33fe5fa115ae9bd2\ServiceModelReg.exe
+ 2008-06-20 01:17:50 110,592 ----a-w c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6000.16708_none_9eb5a1ecafb1f95b\SMdiagnostics.dll
+ 2008-06-20 01:12:45 110,592 ----a-w c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6000.20864_none_87ee5808c9538ae7\SMdiagnostics.dll
+ 2008-06-20 01:14:31 110,592 ----a-w c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6001.18096_none_9e9ace02affab62e\SMdiagnostics.dll
+ 2008-06-20 01:13:19 110,592 ----a-w c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6001.22208_none_87c3f6f4c9aa65b8\SMdiagnostics.dll
+ 2008-06-20 01:17:50 132,096 ----a-w c:\windows\winsxs\msil_smsvchost_b03f5f7f11d50a3a_6.0.6000.16708_none_127d14a854218213\SMSvcHost.exe
+ 2008-06-20 01:12:45 132,096 ----a-w c:\windows\winsxs\msil_smsvchost_b03f5f7f11d50a3a_6.0.6000.20864_none_fbb5cac46dc3139f\SMSvcHost.exe
+ 2008-06-20 01:14:31 132,096 ----a-w c:\windows\winsxs\msil_smsvchost_b03f5f7f11d50a3a_6.0.6001.18096_none_126240be546a3ee6\SMSvcHost.exe
+ 2008-06-20 01:13:19 132,096 ----a-w c:\windows\winsxs\msil_smsvchost_b03f5f7f11d50a3a_6.0.6001.22208_none_fb8b69b06e19ee70\SMSvcHost.exe
+ 2008-07-27 18:00:26 110,592 ----a-w c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6000.16720_none_d505e94789d4c176\sysglobl.dll
+ 2008-07-27 17:55:55 110,592 ----a-w c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6000.20883_none_be3dffeba3770669\sysglobl.dll
+ 2008-07-27 18:03:14 110,592 ----a-w c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6001.18111_none_d4e0cdfd8a26ce17\sysglobl.dll
+ 2008-07-27 17:58:34 110,592 ----a-w c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6001.22230_none_be153e99a3cc472a\sysglobl.dll
+ 2008-07-27 18:00:26 81,920 ----a-w c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6000.16720_none_8be75bc7785395c1\System.Configuration.Install.dll
+ 2008-07-27 17:55:55 81,920 ----a-w c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6000.20883_none_751f726b91f5dab4\System.Configuration.Install.dll
+ 2008-07-27 18:03:14 81,920 ----a-w c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6001.18111_none_8bc2407d78a5a262\System.Configuration.Install.dll
+ 2008-07-27 17:58:34 81,920 ----a-w c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6001.22230_none_74f6b119924b1b75\System.Configuration.Install.dll
+ 2008-07-27 18:00:26 425,984 ----a-w c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6000.16720_none_2b4a6fa23668e266\System.configuration.dll
+ 2008-07-27 17:55:55 425,984 ----a-w c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6000.20883_none_14828646500b2759\System.configuration.dll
+ 2008-07-27 18:03:14 425,984 ----a-w c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6001.18111_none_2b25545836baef07\System.configuration.dll
+ 2008-07-27 17:58:34 425,984 ----a-w c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6001.22230_none_1459c4f45060681a\System.configuration.dll
+ 2008-07-27 18:00:27 745,472 ----a-w c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6000.16720_none_319e3f19a4acfb15\System.Data.SqlXml.dll
+ 2008-07-27 17:55:55 745,472 ----a-w c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6000.20883_none_1ad655bdbe4f4008\System.Data.SqlXml.dll
+ 2008-07-27 18:03:15 745,472 ----a-w c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6001.18111_none_317923cfa4ff07b6\System.Data.SqlXml.dll
+ 2008-07-27 17:58:35 745,472 ----a-w c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6001.22230_none_1aad946bbea480c9\System.Data.SqlXml.dll
+ 2008-07-27 18:00:27 970,752 ----a-w c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6000.16720_none_60211163309e66b3\System.Deployment.dll
+ 2008-07-27 17:55:55 970,752 ----a-w c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6000.20883_none_495928074a40aba6\System.Deployment.dll
+ 2008-07-27 18:03:15 970,752 ----a-w c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6001.18111_none_5ffbf61930f07354\System.Deployment.dll
+ 2008-07-27 17:58:35 970,752 ----a-w c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6001.22230_none_493066b54a95ec67\System.Deployment.dll
+ 2008-07-27 18:00:27 5,062,656 ----a-w c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6000.16720_none_b57005af02cc9524\System.Design.dll
+ 2008-07-27 17:55:55 5,062,656 ----a-w c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6000.20883_none_9ea81c531c6eda17\System.Design.dll
+ 2008-07-27 18:03:15 5,062,656 ----a-w c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6001.18111_none_b54aea65031ea1c5\System.Design.dll
+ 2008-07-27 17:58:35 5,062,656 ----a-w c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6001.22230_none_9e7f5b011cc41ad8\System.Design.dll
+ 2008-07-27 18:00:27 188,416 ----a-w c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.16720_none_af40550f540ba4b8\System.DirectoryServices.Protocols.dll
+ 2008-07-27 17:55:55 188,416 ----a-w c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.20883_none_98786bb36dade9ab\System.DirectoryServices.Protocols.dll
+ 2008-07-27 18:03:15 188,416 ----a-w c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.18111_none_af1b39c5545db159\System.DirectoryServices.Protocols.dll
+ 2008-07-27 17:58:35 188,416 ----a-w c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.22230_none_984faa616e032a6c\System.DirectoryServices.Protocols.dll
+ 2008-07-27 18:00:27 401,408 ----a-w c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.16720_none_56c449b3311fcd6d\System.DirectoryServices.dll
+ 2008-07-27 17:55:55 401,408 ----a-w c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.20883_none_3ffc60574ac21260\System.DirectoryServices.dll
+ 2008-07-27 18:03:15 401,408 ----a-w c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.18111_none_569f2e693171da0e\System.DirectoryServices.dll
+ 2008-07-27 17:58:35 401,408 ----a-w c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.22230_none_3fd39f054b175321\System.DirectoryServices.dll
+ 2008-07-27 18:00:27 81,920 ----a-w c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6000.16720_none_1c2e287cb016cb42\System.Drawing.Design.dll
+ 2008-07-27 17:55:55 81,920 ----a-w c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6000.20883_none_05663f20c9b91035\System.Drawing.Design.dll
+ 2008-07-27 18:03:15 81,920 ----a-w c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6001.18111_none_1c090d32b068d7e3\System.Drawing.Design.dll
+ 2008-07-27 17:58:35 81,920 ----a-w c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6001.22230_none_053d7dceca0e50f6\System.Drawing.Design.dll
+ 2008-07-27 18:00:27 626,688 ----a-w c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6000.16720_none_8fb93569f081bc50\System.Drawing.dll
+ 2008-07-27 17:55:55 626,688 ----a-w c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6000.20883_none_78f14c0e0a240143\System.Drawing.dll
+ 2008-07-27 18:03:15 626,688 ----a-w c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6001.18111_none_8f941a1ff0d3c8f1\System.Drawing.dll
+ 2008-07-27 17:58:35 626,688 ----a-w c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6001.22230_none_78c88abc0a794204\System.Drawing.dll
+ 2008-06-20 01:17:48 126,976 ----a-w c:\windows\winsxs\msil_system.identitymodel.selectors_b77a5c561934e089_6.0.6000.16708_none_ac128cd0734d07a3\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:12:43 126,976 ----a-w c:\windows\winsxs\msil_system.identitymodel.selectors_b77a5c561934e089_6.0.6000.20864_none_954b42ec8cee992f\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:14:29 126,976 ----a-w c:\windows\winsxs\msil_system.identitymodel.selectors_b77a5c561934e089_6.0.6001.18096_none_abf7b8e67395c476\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:13:17 126,976 ----a-w c:\windows\winsxs\msil_system.identitymodel.selectors_b77a5c561934e089_6.0.6001.22208_none_9520e1d88d457400\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:17:48 430,080 ----a-w c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6000.16708_none_1d7dbca843be4f0d\System.IdentityModel.dll
+ 2008-06-20 01:12:43 430,080 ----a-w c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6000.20864_none_06b672c45d5fe099\System.IdentityModel.dll
+ 2008-06-20 01:14:29 430,080 ----a-w c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6001.18096_none_1d62e8be44070be0\System.IdentityModel.dll
+ 2008-06-20 01:13:17 430,080 ----a-w c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6001.22208_none_068c11b05db6bb6a\System.IdentityModel.dll
+ 2008-06-20 01:17:48 131,072 ----a-w c:\windows\winsxs\msil_system.io.log_b03f5f7f11d50a3a_6.0.6000.16708_none_85205cc01ff30fa2\System.IO.Log.dll
+ 2008-06-20 01:12:43 131,072 ----a-w c:\windows\winsxs\msil_system.io.log_b03f5f7f11d50a3a_6.0.6000.20864_none_6e5912dc3994a12e\System.IO.Log.dll
+ 2008-06-20 01:14:29 131,072 ----a-w c:\windows\winsxs\msil_system.io.log_b03f5f7f11d50a3a_6.0.6001.18096_none_850588d6203bcc75\System.IO.Log.dll
+ 2008-06-20 01:13:17 131,072 ----a-w c:\windows\winsxs\msil_system.io.log_b03f5f7f11d50a3a_6.0.6001.22208_none_6e2eb1c839eb7bff\System.IO.Log.dll
+ 2008-07-27 18:00:27 372,736 ----a-w c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6000.16720_none_1f5b763e0c197b33\System.Management.dll
+ 2008-07-27 17:55:55 372,736 ----a-w c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6000.20883_none_08938ce225bbc026\System.Management.dll
+ 2008-07-27 18:03:15 372,736 ----a-w c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6001.18111_none_1f365af40c6b87d4\System.Management.dll
+ 2008-07-27 17:58:35 372,736 ----a-w c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6001.22230_none_086acb90261100e7\System.Management.dll
+ 2008-07-27 18:00:27 258,048 ----a-w c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.16720_none_2dd84bdf234f2daa\System.Messaging.dll
+ 2008-07-27 17:55:55 258,048 ----a-w c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.20883_none_171062833cf1729d\System.Messaging.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.18111_none_2db3309523a13a4b\System.Messaging.dll
+ 2008-07-27 17:58:35 258,048 ----a-w c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.22230_none_16e7a1313d46b35e\System.Messaging.dll
+ 2008-07-27 18:00:27 303,104 ----a-w c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6000.16720_none_c5ba723444dfcf3d\System.Runtime.Remoting.dll
+ 2008-07-27 17:55:55 303,104 ----a-w c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6000.20883_none_aef288d85e821430\System.Runtime.Remoting.dll
+ 2008-07-27 18:03:15 303,104 ----a-w c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6001.18111_none_c59556ea4531dbde\System.Runtime.Remoting.dll
+ 2008-07-27 17:58:35 303,104 ----a-w c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6001.22230_none_aec9c7865ed754f1\System.Runtime.Remoting.dll
+ 2008-07-27 18:00:27 131,072 ----a-w c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6000.16720_none_4838f505237d831c\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-27 17:55:55 131,072 ----a-w c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6000.20883_none_31710ba93d1fc80f\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-27 18:03:15 131,072 ----a-w c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.18111_none_4813d9bb23cf8fbd\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-27 17:58:35 131,072 ----a-w c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.22230_none_31484a573d7508d0\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-06-20 01:17:50 966,656 ----a-w c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6000.16708_none_d2461403b7e6edc1\System.Runtime.Serialization.dll
+ 2008-06-20 01:12:45 966,656 ----a-w c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6000.20864_none_bb7eca1fd1887f4d\System.Runtime.Serialization.dll
+ 2008-06-20 01:14:31 966,656 ----a-w c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.18096_none_d22b4019b82faa94\System.Runtime.Serialization.dll
+ 2008-06-20 01:13:19 966,656 ----a-w c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.22208_none_bb54690bd1df5a1e\System.Runtime.Serialization.dll
+ 2008-06-20 01:17:48 966,656 ----a-w c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6000.16708_none_0289499ddf8deef4\System.Runtime.Serialization.dll
+ 2008-06-20 01:12:43 966,656 ----a-w c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6000.20864_none_ebc1ffb9f92f8080\System.Runtime.Serialization.dll
+ 2008-06-20 01:14:29 966,656 ----a-w c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.18096_none_026e75b3dfd6abc7\System.Runtime.Serialization.dll
+ 2008-06-20 01:13:17 966,656 ----a-w c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.22208_none_eb979ea5f9865b51\System.Runtime.Serialization.dll
+ 2008-07-27 18:00:27 258,048 ----a-w c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6000.16720_none_9c2d1345cdee588e\System.Security.dll
+ 2008-07-27 17:55:55 258,048 ----a-w c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6000.20883_none_856529e9e7909d81\System.Security.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.18111_none_9c07f7fbce40652f\System.Security.dll
+ 2008-07-27 17:58:35 258,048 ----a-w c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.22230_none_853c6897e7e5de42\System.Security.dll
+ 2008-06-20 01:17:51 73,728 ----a-w c:\windows\winsxs\msil_system.servicemodel.install_b77a5c561934e089_6.0.6000.16708_none_6bc582a4368de5bd\System.ServiceModel.Install.dll
+ 2008-06-20 01:12:46 73,728 ----a-w c:\windows\winsxs\msil_system.servicemodel.install_b77a5c561934e089_6.0.6000.20864_none_54fe38c0502f7749\System.ServiceModel.Install.dll
+ 2008-06-20 01:14:32 73,728 ----a-w c:\windows\winsxs\msil_system.servicemodel.install_b77a5c561934e089_6.0.6001.18096_none_6baaaeba36d6a290\System.ServiceModel.Install.dll
+ 2008-06-20 01:13:20 73,728 ----a-w c:\windows\winsxs\msil_system.servicemodel.install_b77a5c561934e089_6.0.6001.22208_none_54d3d7ac5086521a\System.ServiceModel.Install.dll
+ 2008-06-20 01:17:51 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6000.16708_none_6c891ffa1263c737\System.ServiceModel.dll
+ 2008-11-24 23:44:18 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6000.16780_none_6c91d88a125bc4e7\System.ServiceModel.dll
+ 2008-06-20 01:12:46 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6000.20864_none_55c1d6162c0558c3\System.ServiceModel.dll
+ 2008-11-24 23:43:30 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6000.20964_none_55c1d5f22c055914\System.ServiceModel.dll
+ 2008-06-20 01:14:32 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.18096_none_6c6e4c1012ac840a\System.ServiceModel.dll
+ 2008-11-24 23:34:37 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.18173_none_6c6c8fb012ae04ca\System.ServiceModel.dll
+ 2008-06-20 01:13:20 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.22208_none_559775022c5c3394\System.ServiceModel.dll
+ 2008-11-24 23:57:12 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.22317_none_55988bf02c5b339b\System.ServiceModel.dll
+ 2008-06-20 01:17:51 32,768 ----a-w c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6000.16708_none_be3260a4e10e6861\System.ServiceModel.WasHosting.dll
+ 2008-06-20 01:12:47 32,768 ----a-w c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6000.20864_none_a76b16c0faaff9ed\System.ServiceModel.WasHosting.dll
+ 2008-06-20 01:14:33 32,768 ----a-w c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6001.18096_none_be178cbae1572534\System.ServiceModel.WasHosting.dll
+ 2008-06-20 01:13:21 32,768 ----a-w c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6001.22208_none_a740b5acfb06d4be\System.ServiceModel.WasHosting.dll
+ 2008-06-20 01:17:48 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6000.16708_none_a50d9dc68a554030\System.ServiceModel.dll
+ 2008-11-24 23:44:16 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6000.16780_none_a51656568a4d3de0\System.ServiceModel.dll
+ 2008-06-20 01:12:44 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6000.20864_none_8e4653e2a3f6d1bc\System.ServiceModel.dll
+ 2008-11-24 23:43:28 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6000.20964_none_8e4653bea3f6d20d\System.ServiceModel.dll
+ 2008-06-20 01:14:30 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.18096_none_a4f2c9dc8a9dfd03\System.ServiceModel.dll
+ 2008-11-24 23:34:36 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.18173_none_a4f10d7c8a9f7dc3\System.ServiceModel.dll
+ 2008-06-20 01:13:17 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.22208_none_8e1bf2cea44dac8d\System.ServiceModel.dll
+ 2008-11-24 23:57:11 5,931,008 ----a-w c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.22317_none_8e1d09bca44cac94\System.ServiceModel.dll
+ 2008-07-27 18:00:27 114,688 ----a-w c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6000.16720_none_5523dfad7c4203b6\System.ServiceProcess.dll
+ 2008-07-27 17:55:55 114,688 ----a-w c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6000.20883_none_3e5bf65195e448a9\System.ServiceProcess.dll
+ 2008-07-27 18:03:15 114,688 ----a-w c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6001.18111_none_54fec4637c941057\System.ServiceProcess.dll
+ 2008-07-27 17:58:35 114,688 ----a-w c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6001.22230_none_3e3334ff9639896a\System.ServiceProcess.dll
+ 2008-01-05 11:21:55 688,128 ----a-w c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6000.16708_none_080e70cf835a2dc3\System.Speech.dll
+ 2008-01-05 11:21:55 688,128 ----a-w c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6000.20864_none_08532cea9cac0fd7\System.Speech.dll
+ 2008-01-05 11:21:55 688,128 ----a-w c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6001.18096_none_09915daf80cb8a58\System.Speech.dll
+ 2008-01-05 11:21:55 688,128 ----a-w c:\windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6001.22208_none_0a7e4c40999e5e7e\System.Speech.dll
+ 2008-07-27 18:00:27 835,584 ----a-w c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6000.16720_none_d81670f9cfc68bea\System.Web.Mobile.dll
+ 2008-07-27 17:55:55 835,584 ----a-w c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6000.20883_none_c14e879de968d0dd\System.Web.Mobile.dll
+ 2008-07-27 18:03:15 835,584 ----a-w c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6001.18111_none_d7f155afd018988b\System.Web.Mobile.dll
+ 2008-07-27 17:58:35 835,584 ----a-w c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6001.22230_none_c125c64be9be119e\System.Web.Mobile.dll
+ 2008-07-27 18:00:27 77,824 ----a-w c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6000.16720_none_4db0d24c1e2d3469\System.Web.RegularExpressions.dll
+ 2008-07-27 17:55:55 77,824 ----a-w c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6000.20883_none_36e8e8f037cf795c\System.Web.RegularExpressions.dll
+ 2008-07-27 18:03:15 77,824 ----a-w c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6001.18111_none_4d8bb7021e7f410a\System.Web.RegularExpressions.dll
+ 2008-07-27 17:58:35 77,824 ----a-w c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6001.22230_none_36c0279e3824ba1d\System.Web.RegularExpressions.dll
+ 2008-07-27 18:00:27 839,680 ----a-w c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.16720_none_f2eba22fb1c64598\System.Web.Services.dll
+ 2008-07-27 17:55:55 839,680 ----a-w c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.20883_none_dc23b8d3cb688a8b\System.Web.Services.dll
+ 2008-07-27 18:03:15 839,680 ----a-w c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.18111_none_f2c686e5b2185239\System.Web.Services.dll
+ 2008-07-27 17:58:36 839,680 ----a-w c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.22230_none_dbfaf781cbbdcb4c\System.Web.Services.dll
+ 2008-07-27 18:00:27 5,025,792 ----a-w c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6000.16720_none_3111dd924337ab48\System.Windows.Forms.dll
+ 2008-07-27 17:55:55 5,025,792 ----a-w c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6000.20883_none_1a49f4365cd9f03b\System.Windows.Forms.dll
+ 2008-07-27 18:03:15 5,025,792 ----a-w c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6001.18111_none_30ecc2484389b7e9\System.Windows.Forms.dll
+ 2008-07-27 17:58:36 5,025,792 ----a-w c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6001.22230_none_1a2132e45d2f30fc\System.Windows.Forms.dll
+ 2008-06-20 01:18:06 1,138,688 ----a-w c:\windows\winsxs\msil_system.workflow.activities_31bf3856ad364e35_6.0.6000.16708_none_26c35517563cf101\System.Workflow.Activities.dll
+ 2008-06-20 01:12:59 1,138,688 ----a-w c:\windows\winsxs\msil_system.workflow.activities_31bf3856ad364e35_6.0.6000.20864_none_270811326f8ed315\System.Workflow.Activities.dll
+ 2008-06-20 01:14:46 1,138,688 ----a-w c:\windows\winsxs\msil_system.workflow.activities_31bf3856ad364e35_6.0.6001.18096_none_284641f753ae4d96\System.Workflow.Activities.dll
+ 2008-06-20 01:13:34 1,138,688 ----a-w c:\windows\winsxs\msil_system.workflow.activities_31bf3856ad364e35_6.0.6001.22208_none_293330886c8121bc\System.Workflow.Activities.dll
+ 2008-06-20 01:18:06 1,630,208 ----a-w c:\windows\winsxs\msil_system.workflow.componentmodel_31bf3856ad364e35_6.0.6000.16708_none_e69a31d9d339fc10\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:13:00 1,630,208 ----a-w c:\windows\winsxs\msil_system.workflow.componentmodel_31bf3856ad364e35_6.0.6000.20864_none_e6deedf4ec8bde24\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:14:47 1,630,208 ----a-w c:\windows\winsxs\msil_system.workflow.componentmodel_31bf3856ad364e35_6.0.6001.18096_none_e81d1eb9d0ab58a5\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:13:35 1,630,208 ----a-w c:\windows\winsxs\msil_system.workflow.componentmodel_31bf3856ad364e35_6.0.6001.22208_none_e90a0d4ae97e2ccb\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:18:07 540,672 ----a-w c:\windows\winsxs\msil_system.workflow.runtime_31bf3856ad364e35_6.0.6000.16708_none_d640ebedc22f16d0\System.Workflow.Runtime.dll
+ 2008-06-20 01:13:00 540,672 ----a-w c:\windows\winsxs\msil_system.workflow.runtime_31bf3856ad364e35_6.0.6000.20864_none_d685a808db80f8e4\System.Workflow.Runtime.dll
+ 2008-06-20 01:14:47 540,672 ----a-w c:\windows\winsxs\msil_system.workflow.runtime_31bf3856ad364e35_6.0.6001.18096_none_d7c3d8cdbfa07365\System.Workflow.Runtime.dll
+ 2008-06-20 01:13:35 540,672 ----a-w c:\windows\winsxs\msil_system.workflow.runtime_31bf3856ad364e35_6.0.6001.22208_none_d8b0c75ed873478b\System.Workflow.Runtime.dll
+ 2008-07-27 18:00:28 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.16720_none_81c62adf49000f9d\System.XML.dll
+ 2008-10-13 22:23:41 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.16762_none_81c9fe7748fca83b\System.XML.dll
+ 2008-07-27 17:55:56 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.20883_none_6afe418362a25490\System.XML.dll
+ 2008-10-13 22:25:14 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6000.20935_none_6af9125d62a70970\System.XML.dll
+ 2008-07-27 18:03:16 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.18111_none_81a10f9549521c3e\System.XML.dll
+ 2008-10-13 22:26:58 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.18155_none_81a4b59d494ee81e\System.XML.dll
+ 2008-07-27 17:58:36 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.22230_none_6ad5803162f79551\System.XML.dll
+ 2008-10-13 22:23:27 2,048,000 ----a-w c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.22286_none_6ad9f8f362f3adca\System.XML.dll
+ 2008-07-27 18:00:27 3,149,824 ----a-w c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6000.16720_none_dab5d0b95ba55950\System.dll
+ 2008-07-27 17:55:55 3,149,824 ----a-w c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6000.20883_none_c3ede75d75479e43\System.dll
+ 2008-07-27 18:03:15 3,149,824 ----a-w c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.18111_none_da90b56f5bf765f1\System.dll
+ 2008-07-27 17:58:35 3,149,824 ----a-w c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.22230_none_c3c5260b759cdf04\System.dll
+ 2008-06-20 01:18:03 167,936 ----a-w c:\windows\winsxs\msil_uiautomationclient_31bf3856ad364e35_6.0.6000.16708_none_1f46da1e8b11645a\UIAutomationClient.dll
+ 2008-06-20 01:12:57 167,936 ----a-w c:\windows\winsxs\msil_uiautomationclient_31bf3856ad364e35_6.0.6000.20864_none_1f8b9639a463466e\UIAutomationClient.dll
+ 2008-06-20 01:14:43 167,936 ----a-w c:\windows\winsxs\msil_uiautomationclient_31bf3856ad364e35_6.0.6001.18096_none_20c9c6fe8882c0ef\UIAutomationClient.dll
+ 2008-06-20 01:13:31 167,936 ----a-w c:\windows\winsxs\msil_uiautomationclient_31bf3856ad364e35_6.0.6001.22208_none_21b6b58fa1559515\UIAutomationClient.dll
+ 2008-06-20 01:18:03 385,024 ----a-w c:\windows\winsxs\msil_uiautomationclientsideproviders_31bf3856ad364e35_6.0.6000.16708_none_b50324b684e63181\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:12:57 385,024 ----a-w c:\windows\winsxs\msil_uiautomationclientsideproviders_31bf3856ad364e35_6.0.6000.20864_none_b547e0d19e381395\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:14:43 385,024 ----a-w c:\windows\winsxs\msil_uiautomationclientsideproviders_31bf3856ad364e35_6.0.6001.18096_none_b686119682578e16\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:13:31 385,024 ----a-w c:\windows\winsxs\msil_uiautomationclientsideproviders_31bf3856ad364e35_6.0.6001.22208_none_b77300279b2a623c\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:18:03 40,960 ----a-w c:\windows\winsxs\msil_uiautomationprovider_31bf3856ad364e35_6.0.6000.16708_none_706efb4a7cf1a096\UIAutomationProvider.dll
+ 2008-06-20 01:12:57 40,960 ----a-w c:\windows\winsxs\msil_uiautomationprovider_31bf3856ad364e35_6.0.6000.20864_none_70b3b765964382aa\UIAutomationProvider.dll
+ 2008-06-20 01:14:43 40,960 ----a-w c:\windows\winsxs\msil_uiautomationprovider_31bf3856ad364e35_6.0.6001.18096_none_71f1e82a7a62fd2b\UIAutomationProvider.dll
+ 2008-06-20 01:13:31 40,960 ----a-w c:\windows\winsxs\msil_uiautomationprovider_31bf3856ad364e35_6.0.6001.22208_none_72ded6bb9335d151\UIAutomationProvider.dll
+ 2008-06-20 01:18:03 98,304 ----a-w c:\windows\winsxs\msil_uiautomationtypes_31bf3856ad364e35_6.0.6000.16708_none_b6b19d6515224ae2\UIAutomationTypes.dll
+ 2008-06-20 01:12:57 98,304 ----a-w c:\windows\winsxs\msil_uiautomationtypes_31bf3856ad364e35_6.0.6000.20864_none_b6f659802e742cf6\UIAutomationTypes.dll
+ 2008-06-20 01:14:43 98,304 ----a-w c:\windows\winsxs\msil_uiautomationtypes_31bf3856ad364e35_6.0.6001.18096_none_b8348a451293a777\UIAutomationTypes.dll
+ 2008-06-20 01:13:31 98,304 ----a-w c:\windows\winsxs\msil_uiautomationtypes_31bf3856ad364e35_6.0.6001.22208_none_b92178d62b667b9d\UIAutomationTypes.dll
+ 2008-06-20 01:18:03 1,245,184 ----a-w c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6000.16708_none_9540b0033275cea4\WindowsBase.dll
+ 2008-06-20 01:12:57 1,245,184 ----a-w c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6000.20864_none_95856c1e4bc7b0b8\WindowsBase.dll
+ 2008-06-20 01:14:44 1,245,184 ----a-w c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6001.18096_none_96c39ce32fe72b39\WindowsBase.dll
+ 2008-06-20 01:13:32 1,245,184 ----a-w c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6001.22208_none_97b08b7448b9ff5f\WindowsBase.dll
+ 2008-06-20 01:18:03 94,208 ----a-w c:\windows\winsxs\msil_windowsformsintegration_31bf3856ad364e35_6.0.6000.16708_none_2700b43cd12f1f94\WindowsFormsIntegration.dll
+ 2008-06-20 01:12:57 94,208 ----a-w c:\windows\winsxs\msil_windowsformsintegration_31bf3856ad364e35_6.0.6000.20864_none_27457057ea8101a8\WindowsFormsIntegration.dll
+ 2008-06-20 01:14:44 94,208 ----a-w c:\windows\winsxs\msil_windowsformsintegration_31bf3856ad364e35_6.0.6001.18096_none_2883a11ccea07c29\WindowsFormsIntegration.dll
+ 2008-06-20 01:13:32 94,208 ----a-w c:\windows\winsxs\msil_windowsformsintegration_31bf3856ad364e35_6.0.6001.22208_none_29708fade773504f\WindowsFormsIntegration.dll
+ 2008-06-20 01:17:51 152,576 ----a-w c:\windows\winsxs\msil_wsatconfig_b03f5f7f11d50a3a_6.0.6000.16708_none_0900f841b7310e90\WsatConfig.exe
+ 2008-06-20 01:12:47 152,576 ----a-w c:\windows\winsxs\msil_wsatconfig_b03f5f7f11d50a3a_6.0.6000.20864_none_f239ae5dd0d2a01c\WsatConfig.exe
+ 2008-06-20 01:14:33 152,576 ----a-w c:\windows\winsxs\msil_wsatconfig_b03f5f7f11d50a3a_6.0.6001.18096_none_08e62457b779cb63\WsatConfig.exe
+ 2008-06-20 01:13:21 152,576 ----a-w c:\windows\winsxs\msil_wsatconfig_b03f5f7f11d50a3a_6.0.6001.22208_none_f20f4d49d1297aed\WsatConfig.exe
+ 2008-07-27 18:00:22 36,864 ----a-w c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6000.16720_none_18ed2252583dfd4f\aspnet_compiler.exe
+ 2008-07-27 17:55:49 36,864 ----a-w c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6000.20883_none_022538f671e04242\aspnet_compiler.exe
+ 2008-07-27 18:03:11 36,864 ----a-w c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_18c80708589009f0\aspnet_compiler.exe
+ 2008-07-27 17:58:31 36,864 ----a-w c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_01fc77a472358303\aspnet_compiler.exe
+ 2008-07-27 18:00:22 24,576 ----a-w c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6000.16720_none_098e0a5b18bfd415\aspnet_regbrowsers.exe
+ 2008-07-27 17:55:49 24,576 ----a-w c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6000.20883_none_f2c620ff32621908\aspnet_regbrowsers.exe
+ 2008-07-27 18:03:11 24,576 ----a-w c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6001.18111_none_0968ef111911e0b6\aspnet_regbrowsers.exe
+ 2008-07-27 17:58:31 24,576 ----a-w c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6001.22230_none_f29d5fad32b759c9\aspnet_regbrowsers.exe
+ 2008-07-27 18:00:22 106,496 ----a-w c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6000.16720_none_50001be1bbe18d26\aspnet_regsql.exe
+ 2008-07-27 17:55:49 106,496 ----a-w c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6000.20883_none_39383285d583d219\aspnet_regsql.exe
+ 2008-07-27 18:03:11 106,496 ----a-w c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6001.18111_none_4fdb0097bc3399c7\aspnet_regsql.exe
+ 2008-07-27 17:58:31 106,496 ----a-w c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6001.22230_none_390f7133d5d912da\aspnet_regsql.exe
+ 2008-07-27 18:00:23 106,496 ----a-w c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6000.16720_none_6bfcb0a8ef8c6f2e\CasPol.exe
+ 2008-07-27 17:55:49 106,496 ----a-w c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6000.20883_none_5534c74d092eb421\CasPol.exe
+ 2008-07-27 18:03:11 106,496 ----a-w c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6001.18111_none_6bd7955eefde7bcf\CasPol.exe
+ 2008-07-27 17:58:31 106,496 ----a-w c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6001.22230_none_550c05fb0983f4e2\CasPol.exe
+ 2008-07-27 18:00:23 69,120 ----a-w c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6000.16720_none_7265203191693c0b\CustomMarshalers.dll
+ 2008-07-27 17:55:51 69,120 ----a-w c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6000.20883_none_5b9d36d5ab0b80fe\CustomMarshalers.dll
+ 2008-07-27 18:03:11 69,120 ----a-w c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6001.18111_none_724004e791bb48ac\CustomMarshalers.dll
+ 2008-07-27 17:58:31 69,120 ----a-w c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6001.22230_none_5b747583ab60c1bf\CustomMarshalers.dll
+ 2008-06-20 01:17:49 881,664 ----a-w c:\windows\winsxs\x86_infocard_b77a5c561934e089_6.0.6000.16708_none_cbaeb523183b9d1c\infocard.exe
+ 2008-06-20 01:12:45 881,664 ----a-w c:\windows\winsxs\x86_infocard_b77a5c561934e089_6.0.6000.20864_none_b4e76b3f31dd2ea8\infocard.exe
+ 2008-06-20 01:14:31 881,664 ----a-w c:\windows\winsxs\x86_infocard_b77a5c561934e089_6.0.6001.18096_none_cb93e139188459ef\infocard.exe
+ 2008-06-20 01:13:18 881,664 ----a-w c:\windows\winsxs\x86_infocard_b77a5c561934e089_6.0.6001.22208_none_b4bd0a2b32340979\infocard.exe
+ 2008-07-27 18:00:24 28,672 ----a-w c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6000.16720_none_7b9d9e0320ce1b15\InstallUtil.exe
+ 2008-07-27 17:55:52 28,672 ----a-w c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6000.20883_none_64d5b4a73a706008\InstallUtil.exe
+ 2008-07-27 18:03:12 28,672 ----a-w c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6001.18111_none_7b7882b9212027b6\InstallUtil.exe
+ 2008-07-27 17:58:32 28,672 ----a-w c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6001.22230_none_64acf3553ac5a0c9\InstallUtil.exe
+ 2008-07-27 18:00:24 72,192 ----a-w c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6000.16720_none_0881a09d12cd922d\ISymWrapper.dll
+ 2008-07-27 17:55:52 72,192 ----a-w c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6000.20883_none_f1b9b7412c6fd720\ISymWrapper.dll
+ 2008-07-27 18:03:12 72,192 ----a-w c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6001.18111_none_085c8553131f9ece\ISymWrapper.dll
+ 2008-07-27 17:58:32 72,192 ----a-w c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6001.22230_none_f190f5ef2cc517e1\ISymWrapper.dll
+ 2008-12-08 23:22:10 2,410,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16787_none_f052600a6e8e5046\OESpamFilter.dat
+ 2008-12-08 23:23:32 2,410,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20972_none_f0e1cd3587a85293\OESpamFilter.dat
+ 2008-12-09 23:54:42 2,410,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18182_none_f2339d3e6bb96284\OESpamFilter.dat
+ 2008-12-09 23:55:37 2,410,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22327_none_f3031ce984a1d682\OESpamFilter.dat
+ 2008-12-16 03:14:37 290,304 ----a-w c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.0.6000.16789_none_d7c3afd4f985c7a2\srv.sys
+ 2008-12-16 03:07:02 290,816 ----a-w c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.0.6000.20976_none_d8551d94129dfc9d\srv.sys
+ 2008-12-16 02:42:39 288,768 ----a-w c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.0.6001.18185_none_d9a5ed52f6aff337\srv.sys
+ 2008-12-16 01:53:56 288,768 ----a-w c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.0.6001.22331_none_da619a780fa89f17\srv.sys
+ 2008-06-20 01:17:50 163,840 ----a-w c:\windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6.0.6000.16708_none_ef4812419297c719\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-06-20 01:12:45 163,840 ----a-w c:\windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6.0.6000.20864_none_d880c85dac3958a5\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-06-20 01:14:31 163,840 ----a-w c:\windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6.0.6001.18096_none_ef2d3e5792e083ec\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-06-20 01:13:19 163,840 ----a-w c:\windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6.0.6001.22208_none_d8566749ac903376\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-07-27 18:03:14 479,232 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcm80.dll
+ 2008-07-27 18:03:14 558,080 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcp80.dll
+ 2008-07-27 18:03:14 635,904 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcr80.dll
+ 2009-02-03 00:57:19 224,768 ----a-w c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_bcb86ed6ac711f91\msvcm90.dll
+ 2009-02-03 00:57:19 568,832 ----a-w c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_bcb86ed6ac711f91\msvcp90.dll
+ 2009-02-03 00:57:19 655,872 ----a-w c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_bcb86ed6ac711f91\msvcr90.dll
+ 2008-07-27 18:00:24 69,632 ----a-w c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.16720_none_81591d45b0e55432\MSBuild.exe
+ 2008-07-27 17:55:52 69,632 ----a-w c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.20883_none_6a9133e9ca879925\MSBuild.exe
+ 2008-07-27 18:03:12 69,632 ----a-w c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.18111_none_813401fbb13760d3\MSBuild.exe
+ 2008-07-27 17:58:32 69,632 ----a-w c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.22230_none_6a687297cadcd9e6\MSBuild.exe
+ 2008-07-27 18:00:24 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.16720_none_c7dc8a0ec1089f13\mscorlib.dll
+ 2008-10-13 22:23:37 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.16762_none_c7e05da6c10537b1\mscorlib.dll
+ 2008-07-27 17:55:52 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.20883_none_b114a0b2daaae406\mscorlib.dll
+ 2008-10-13 22:25:10 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.20935_none_b10f718cdaaf98e6\mscorlib.dll
+ 2008-07-27 18:03:13 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.18111_none_c7b76ec4c15aabb4\mscorlib.dll
+ 2008-10-13 22:26:54 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.18155_none_c7bb14ccc1577794\mscorlib.dll
+ 2008-07-27 17:58:33 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.22230_none_b0ebdf60db0024c7\mscorlib.dll
+ 2008-10-13 22:23:22 4,546,560 ----a-w c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.22286_none_b0f05822dafc3d40\mscorlib.dll
+ 2008-07-27 18:00:22 98,808 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_3921f539eb3d8e34\alink.dll
+ 2008-07-27 17:55:49 98,808 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_225a0bde04dfd327\alink.dll
+ 2008-07-27 18:03:10 98,808 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_38fcd9efeb8f9ad5\alink.dll
+ 2008-07-27 17:58:31 98,808 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_22314a8c053513e8\alink.dll
+ 2008-07-27 18:00:22 28,672 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.16720_none_6556da40a4b1aa70\alinkui.dll
+ 2008-07-27 17:55:49 28,672 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.20883_none_4e8ef0e4be53ef63\alinkui.dll
+ 2008-07-27 18:03:10 28,672 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.18111_none_6531bef6a503b711\alinkui.dll
+ 2008-07-27 17:58:31 28,672 ----a-w c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.22230_none_4e662f92bea93024\alinkui.dll
+ 2008-07-27 18:00:28 1,344,000 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.16720_none_7f3638c1b8807636\VsaVb7rt.dll
+ 2008-07-27 17:55:56 1,344,000 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.20883_none_686e4f65d222bb29\VsaVb7rt.dll
+ 2008-07-27 18:03:16 1,344,000 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.18111_none_7f111d77b8d282d7\VsaVb7rt.dll
+ 2008-07-27 17:58:36 1,344,000 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.22230_none_68458e13d277fbea\VsaVb7rt.dll
+ 2008-07-27 18:00:22 218,112 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.16720_none_50855fce2ae6758a\Vsavb7rtUI.dll
+ 2008-07-27 17:55:49 218,112 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.20883_none_39bd76724488ba7d\Vsavb7rtUI.dll
+ 2008-07-27 18:03:10 218,112 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.18111_none_506044842b38822b\Vsavb7rtUI.dll
+ 2008-07-27 17:58:31 218,112 ----a-w c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.22230_none_3994b52044ddfb3e\Vsavb7rtUI.dll
+ 2008-07-27 18:00:22 147,968 ----a-w c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.16720_none_6d811f76e797ee4e\AdoNetDiag.dll
+ 2008-07-27 17:55:49 147,968 ----a-w c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.20883_none_56b9361b013a3341\AdoNetDiag.dll
+ 2008-07-27 18:03:10 147,968 ----a-w c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.18111_none_6d5c042ce7e9faef\AdoNetDiag.dll
+ 2008-07-27 17:58:31 147,968 ----a-w c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.22230_none_569074c9018f7402\AdoNetDiag.dll
+ 2008-07-27 18:00:22 58,880 ----a-w c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_c55cc3986aa0f96b\AppLaunch.exe
+ 2008-07-27 17:55:49 58,880 ----a-w c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ae94da3c84433e5e\AppLaunch.exe
+ 2008-07-27 18:03:11 58,880 ----a-w c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c537a84e6af3060c\AppLaunch.exe
+ 2008-07-27 17:58:31 58,880 ----a-w c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae6c18ea84987f1f\AppLaunch.exe
+ 2008-07-27 18:00:22 22,024 ----a-w c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d5762fdb578fde3d\aspnet_filter.dll
+ 2008-07-27 17:55:49 22,024 ----a-w c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_beae467f71322330\aspnet_filter.dll
+ 2008-07-27 18:03:11 22,024 ----a-w c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d551149157e1eade\aspnet_filter.dll
+ 2008-07-27 17:58:31 22,024 ----a-w c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_be85852d718763f1\aspnet_filter.dll
+ 2008-07-27 18:00:22 17,416 ----a-w c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dda3740568b14f3b\aspnet_isapi.dll
+ 2008-07-27 17:55:49 17,416 ----a-w c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c6db8aa98253942e\aspnet_isapi.dll
+ 2008-07-27 18:03:11 17,416 ----a-w c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dd7e58bb69035bdc\aspnet_isapi.dll
+ 2008-07-27 17:58:31 17,416 ----a-w c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6b2c95782a8d4ef\aspnet_isapi.dll
+ 2008-07-27 18:00:24 97,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_90e8a24fd2d12b2d\MmcAspExt.dll
+ 2008-07-27 17:55:52 97,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7a20b8f3ec737020\MmcAspExt.dll
+ 2008-07-27 18:03:12 97,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_90c38705d32337ce\MmcAspExt.dll
+ 2008-07-27 17:58:32 97,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_79f7f7a1ecc8b0e1\MmcAspExt.dll
+ 2008-07-27 18:00:22 33,800 ----a-w c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_ddd04c5afc661a12\Aspnet_perf.dll
+ 2008-07-27 17:55:49 33,800 ----a-w c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c70862ff16085f05\Aspnet_perf.dll
+ 2008-07-27 18:03:11 33,800 ----a-w c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ddab3110fcb826b3\Aspnet_perf.dll
+ 2008-07-27 17:58:31 33,800 ----a-w c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6dfa1ad165d9fc6\Aspnet_perf.dll
+ 2008-07-27 18:00:22 84,480 ----a-w c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.16720_none_303fe2adfd729d2f\aspnet_rc.dll
+ 2008-07-27 17:55:49 84,480 ----a-w c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.20883_none_1977f9521714e222\aspnet_rc.dll
+ 2008-07-27 18:03:11 84,480 ----a-w c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.18111_none_301ac763fdc4a9d0\aspnet_rc.dll
+ 2008-07-27 17:58:31 84,480 ----a-w c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.22230_none_194f3800176a22e3\aspnet_rc.dll
+ 2008-07-27 18:00:22 33,288 ----a-w c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_124dc10f21a7964c\aspnet_regiis.exe
+ 2008-07-27 17:55:49 33,288 ----a-w c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_fb85d7b33b49db3f\aspnet_regiis.exe
+ 2008-07-27 18:03:11 33,288 ----a-w c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1228a5c521f9a2ed\aspnet_regiis.exe
+ 2008-07-27 17:58:31 33,288 ----a-w c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_fb5d16613b9f1c00\aspnet_regiis.exe
+ 2008-07-27 18:00:22 34,312 ----a-w c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_8142f10dc28972ea\aspnet_state.exe
+ 2008-07-27 17:55:49 34,312 ----a-w c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_6a7b07b1dc2bb7dd\aspnet_state.exe
+ 2008-07-27 18:03:11 34,312 ----a-w c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_811dd5c3c2db7f8b\aspnet_state.exe
+ 2008-07-27 17:58:31 34,312 ----a-w c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_6a52465fdc80f89e\aspnet_state.exe
+ 2008-07-27 18:00:23 33,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_c50edb888bf66284\aspnet_wp.exe
+ 2008-10-13 22:23:34 31,560 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16762_none_c512af208bf2fb22\aspnet_wp.exe
+ 2008-07-27 17:55:49 33,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ae46f22ca598a777\aspnet_wp.exe
+ 2008-10-13 22:25:08 31,560 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.20935_none_ae41c306a59d5c57\aspnet_wp.exe
+ 2008-07-27 18:03:11 33,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c4e9c03e8c486f25\aspnet_wp.exe
+ 2008-10-13 22:26:50 31,560 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.18155_none_c4ed66468c453b05\aspnet_wp.exe
+ 2008-07-27 17:58:31 33,792 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae1e30daa5ede838\aspnet_wp.exe
+ 2008-10-13 22:23:19 31,560 ----a-w c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.22286_none_ae22a99ca5ea00b1\aspnet_wp.exe
+ 2008-07-27 18:00:23 230,904 ----a-w c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_03362a9d8d7b9753\ilasm.exe
+ 2008-07-27 17:55:52 230,904 ----a-w c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ec6e4141a71ddc46\ilasm.exe
+ 2008-07-27 18:03:12 230,904 ----a-w c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_03110f538dcda3f4\ilasm.exe
+ 2008-07-27 17:58:32 230,904 ----a-w c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ec457fefa7731d07\ilasm.exe
+ 2008-07-27 18:00:27 57,392 ----a-w c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_52860d14b787880b\System.EnterpriseServices.Thunk.dll
+ 2008-07-27 17:55:55 57,392 ----a-w c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_3bbe23b8d129ccfe\System.EnterpriseServices.Thunk.dll
+ 2008-07-27 18:03:15 57,392 ----a-w c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5260f1cab7d994ac\System.EnterpriseServices.Thunk.dll
+ 2008-07-27 17:58:35 57,392 ----a-w c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_3b956266d17f0dbf\System.EnterpriseServices.Thunk.dll
+ 2008-07-27 18:00:23 105,464 ----a-w c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.16720_none_20f118a5f8b7c691\clrgc.exe
+ 2008-07-27 17:55:50 105,464 ----a-w c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.20883_none_0a292f4a125a0b84\clrgc.exe
+ 2008-07-27 18:03:11 105,464 ----a-w c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.18111_none_20cbfd5bf909d332\clrgc.exe
+ 2008-07-27 17:58:31 105,464 ----a-w c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.22230_none_0a006df812af4c45\clrgc.exe
+ 2008-07-27 18:00:23 89,608 ----a-w c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b30d9713c2a13a95\CORPerfMonExt.dll
+ 2008-07-27 17:55:50 89,608 ----a-w c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_9c45adb7dc437f88\CORPerfMonExt.dll
+ 2008-07-27 18:03:11 89,608 ----a-w c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b2e87bc9c2f34736\CORPerfMonExt.dll
+ 2008-07-27 17:58:31 89,608 ----a-w c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9c1cec65dc98c049\CORPerfMonExt.dll
+ 2008-07-27 18:00:23 80,376 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.16720_none_fe9ea81e2cc7a10d\csc.exe
+ 2008-07-27 17:55:50 80,376 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.20883_none_e7d6bec24669e600\csc.exe
+ 2008-07-27 18:03:11 80,376 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.18111_none_fe798cd42d19adae\csc.exe
+ 2008-07-27 17:58:31 80,376 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.22230_none_e7adfd7046bf26c1\csc.exe
+ 2008-07-27 18:00:23 1,163,768 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.16720_none_299326f9d18fcbcd\cscomp.dll
+ 2008-07-27 17:55:51 1,163,768 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.20883_none_12cb3d9deb3210c0\cscomp.dll
+ 2008-07-27 18:03:11 1,163,768 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.18111_none_296e0bafd1e1d86e\cscomp.dll
+ 2008-07-27 17:58:31 1,163,768 ----a-w c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.22230_none_12a27c4beb875181\cscomp.dll
+ 2008-07-27 18:00:22 145,408 ----a-w c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.16720_none_70fa2f2bea847d65\cscompui.dll
+ 2008-07-27 17:55:49 145,408 ----a-w c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.20883_none_5a3245d00426c258\cscompui.dll
+ 2008-07-27 18:03:10 145,408 ----a-w c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.18111_none_70d513e1ead68a06\cscompui.dll
+ 2008-07-27 17:58:31 145,408 ----a-w c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.22230_none_5a09847e047c0319\cscompui.dll
+ 2008-07-27 18:00:23 27,136 ----a-w c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dad3d84a4fe9cf2d\Culture.dll
+ 2008-07-27 17:55:51 27,136 ----a-w c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c40beeee698c1420\Culture.dll
+ 2008-07-27 18:03:11 27,136 ----a-w c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_daaebd00503bdbce\Culture.dll
+ 2008-07-27 17:58:31 27,136 ----a-w c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c3e32d9c69e154e1\Culture.dll
+ 2008-07-27 18:00:23 35,320 ----a-w c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.16720_none_e5e61fca33bbd736\cvtres.exe
+ 2008-07-27 17:55:51 35,320 ----a-w c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.20883_none_cf1e366e4d5e1c29\cvtres.exe
+ 2008-07-27 18:03:11 35,320 ----a-w c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.18111_none_e5c10480340de3d7\cvtres.exe
+ 2008-07-27 17:58:31 35,320 ----a-w c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.22230_none_cef5751c4db35cea\cvtres.exe
+ 2008-07-27 18:00:22 13,824 ----a-w c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d1bdbba018204fce\CvtResUI.dll
+ 2008-07-27 17:55:49 13,824 ----a-w c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_baf5d24431c294c1\CvtResUI.dll
+ 2008-07-27 18:03:10 13,824 ----a-w c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d198a05618725c6f\CvtResUI.dll
+ 2008-07-27 17:58:31 13,824 ----a-w c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_bacd10f23217d582\CvtResUI.dll
+ 2008-07-27 18:00:23 575,496 ----a-w c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.16720_none_d10442cb1462cc84\diasymreader.dll
+ 2008-07-27 17:55:51 575,496 ----a-w c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.20883_none_ba3c596f2e051177\diasymreader.dll
+ 2008-07-27 18:03:11 575,496 ----a-w c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.18111_none_d0df278114b4d925\diasymreader.dll
+ 2008-07-27 17:58:32 575,496 ----a-w c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.22230_none_ba13981d2e5a5238\diasymreader.dll
+ 2008-07-27 18:00:23 62,968 ----a-w c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_887641f8543b58cd\dfdll.dll
+ 2008-07-27 17:55:51 62,968 ----a-w c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_71ae589c6ddd9dc0\dfdll.dll
+ 2008-07-27 18:03:11 62,968 ----a-w c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_885126ae548d656e\dfdll.dll
+ 2008-07-27 17:58:31 62,968 ----a-w c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7185974a6e32de81\dfdll.dll
+ 2008-07-27 18:00:28 96,760 ----a-w c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.16720_none_768419d85fe38f05\dfshim.dll
+ 2008-07-27 17:55:56 96,760 ----a-w c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.20883_none_76cfd7f9792f227a\dfshim.dll
+ 2008-07-27 18:03:16 96,760 ----a-w c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.18111_none_787628b45d011d5c\dfshim.dll
+ 2008-07-27 17:58:36 96,760 ----a-w c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.22230_none_78e9255d762fdbb1\dfshim.dll
+ 2008-07-27 18:00:23 36,344 ----a-w c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.16720_none_cdc273811ae653eb\dw20.exe
+ 2008-07-27 17:55:51 36,344 ----a-w c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.20883_none_b6fa8a25348898de\dw20.exe
+ 2008-07-27 18:03:11 36,344 ----a-w c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.18111_none_cd9d58371b38608c\dw20.exe
+ 2008-07-27 17:58:32 36,344 ----a-w c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.22230_none_b6d1c8d334ddd99f\dw20.exe
+ 2008-07-27 18:00:23 798,224 ----a-w c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cf8a616af2a68bf7\EventLogMessages.dll
+ 2008-07-27 17:55:51 798,224 ----a-w c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b8c2780f0c48d0ea\EventLogMessages.dll
+ 2008-07-27 18:03:11 798,224 ----a-w c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_cf654620f2f89898\EventLogMessages.dll
+ 2008-07-27 17:58:32 798,224 ----a-w c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b899b6bd0c9e11ab\EventLogMessages.dll
+ 2008-07-27 18:00:23 18,936 ----a-w c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_02f7688b0a477a67\fusion.dll
+ 2008-07-27 17:55:51 18,936 ----a-w c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ec2f7f2f23e9bf5a\fusion.dll
+ 2008-07-27 18:03:11 18,936 ----a-w c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_02d24d410a998708\fusion.dll
+ 2008-07-27 17:58:32 18,936 ----a-w c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ec06bddd243f001b\fusion.dll
+ 2008-07-27 18:00:29 41,984 ----a-w c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.16720_none_9297cbea7e22b2e8\netfxperf.dll
+ 2008-07-27 17:55:56 41,984 ----a-w c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.20883_none_92e38a0b976e465d\netfxperf.dll
+ 2008-07-27 18:03:17 41,984 ----a-w c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.18111_none_9489dac67b40413f\netfxperf.dll
+ 2008-07-27 17:58:37 41,984 ----a-w c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.22230_none_94fcd76f946eff94\netfxperf.dll
+ 2008-07-27 18:00:24 65,032 ----a-w c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b6dc6c95d82f7e23\InstallUtilLib.dll
+ 2008-07-27 17:55:52 65,032 ----a-w c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a0148339f1d1c316\InstallUtilLib.dll
+ 2008-07-27 18:03:12 65,032 ----a-w c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b6b7514bd8818ac4\InstallUtilLib.dll
+ 2008-07-27 17:58:32 65,032 ----a-w c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9febc1e7f22703d7\InstallUtilLib.dll
+ 2008-07-27 18:00:24 998,408 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16720_none_2b477be306910f6b\mscordacwks.dll
+ 2008-10-13 22:23:36 990,032 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16762_none_2b4b4f7b068da809\mscordacwks.dll
+ 2008-07-27 17:55:52 998,408 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.20883_none_147f92872033545e\mscordacwks.dll
+ 2008-10-13 22:25:10 990,032 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.20935_none_147a63612038093e\mscordacwks.dll
+ 2008-07-27 18:03:12 998,408 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.18111_none_2b22609906e31c0c\mscordacwks.dll
+ 2008-10-13 22:26:53 990,032 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.18155_none_2b2606a106dfe7ec\mscordacwks.dll
+ 2008-07-27 17:58:32 998,408 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.22230_none_1456d1352088951f\mscordacwks.dll
+ 2008-10-13 22:23:21 990,032 ----a-w c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.22286_none_145b49f72084ad98\mscordacwks.dll
+ 2008-07-27 18:00:24 83,456 ----a-w c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_6d15d8a7c565aae6\mscordbc.dll
+ 2008-07-27 17:55:52 83,456 ----a-w c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_564def4bdf07efd9\mscordbc.dll
+ 2008-07-27 18:03:12 83,456 ----a-w c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_6cf0bd5dc5b7b787\mscordbc.dll
+ 2008-07-27 17:58:32 83,456 ----a-w c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_56252df9df5d309a\mscordbc.dll
+ 2008-07-27 18:00:24 308,224 ----a-w c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_704c45e65c1b155c\mscordbi.dll
+ 2008-07-27 17:55:52 308,224 ----a-w c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_59845c8a75bd5a4f\mscordbi.dll
+ 2008-07-27 18:03:12 308,224 ----a-w c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_70272a9c5c6d21fd\mscordbi.dll
+ 2008-07-27 17:58:32 308,224 ----a-w c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_595b9b3876129b10\mscordbi.dll
+ 2008-07-27 18:00:29 282,112 ----a-w c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.16720_none_b3641f8d59134c1c\mscoree.dll
+ 2008-07-27 17:55:56 282,112 ----a-w c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.20883_none_b3afddae725edf91\mscoree.dll
+ 2008-07-27 18:03:17 282,112 ----a-w c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.18111_none_b5562e695630da73\mscoree.dll
+ 2008-07-27 17:58:36 282,112 ----a-w c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.22230_none_b5c92b126f5f98c8\mscoree.dll
+ 2008-07-27 18:00:29 15,360 ----a-w c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.16720_none_175dada98e1713c9\mscorees.dll
+ 2008-07-27 17:55:56 15,360 ----a-w c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.20883_none_17a96bcaa762a73e\mscorees.dll
+ 2008-07-27 18:03:17 15,360 ----a-w c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.18111_none_194fbc858b34a220\mscorees.dll
+ 2008-07-27 17:58:37 15,360 ----a-w c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.22230_none_19c2b92ea4636075\mscorees.dll
+ 2008-07-27 18:00:24 46,592 ----a-w c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_eabc86bf6fd8fce5\mscorie.dll
+ 2008-07-27 17:55:52 46,592 ----a-w c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d3f49d63897b41d8\mscorie.dll
+ 2008-07-27 18:03:12 46,592 ----a-w c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ea976b75702b0986\mscorie.dll
+ 2008-07-27 17:58:32 46,592 ----a-w c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d3cbdc1189d08299\mscorie.dll
+ 2008-07-27 18:00:29 158,720 ----a-w c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.16720_none_7a962ef9ddf8e5ca\mscorier.dll
+ 2008-07-27 17:55:56 158,720 ----a-w c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.20883_none_7ae1ed1af744793f\mscorier.dll
+ 2008-07-27 18:03:17 158,720 ----a-w c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.18111_none_7c883dd5db167421\mscorier.dll
+ 2008-07-27 17:58:37 158,720 ----a-w c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.22230_none_7cfb3a7ef4453276\mscorier.dll
+ 2008-07-27 18:00:29 83,968 ----a-w c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.16720_none_bc2740c9f4b44e45\mscories.dll
+ 2008-07-27 17:55:56 83,968 ----a-w c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.20883_none_bc72feeb0dffe1ba\mscories.dll
+ 2008-07-27 18:03:17 83,968 ----a-w c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.18111_none_be194fa5f1d1dc9c\mscories.dll
+ 2008-07-27 17:58:37 83,968 ----a-w c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.22230_none_be8c4c4f0b009af1\mscories.dll
+ 2008-07-27 18:00:24 367,104 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_bf82ae7730dc9b9e\mscorjit.dll
+ 2008-10-13 22:23:37 364,872 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.16762_none_bf86820f30d9343c\mscorjit.dll
+ 2008-07-27 17:55:52 367,104 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a8bac51b4a7ee091\mscorjit.dll
+ 2008-10-13 22:25:10 364,872 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.20935_none_a8b595f54a839571\mscorjit.dll
+ 2008-07-27 18:03:12 367,104 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_bf5d932d312ea83f\mscorjit.dll
+ 2008-10-13 22:26:53 364,872 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.18155_none_bf613935312b741f\mscorjit.dll
+ 2008-07-27 17:58:33 367,104 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_a89203c94ad42152\mscorjit.dll
+ 2008-10-13 22:23:22 364,872 ----a-w c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.22286_none_a8967c8b4ad039cb\mscorjit.dll
+ 2008-07-27 18:00:24 94,208 ----a-w c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_c3051899495c0261\mscorld.dll
+ 2008-07-27 17:55:52 94,208 ----a-w c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ac3d2f3d62fe4754\mscorld.dll
+ 2008-07-27 18:03:12 94,208 ----a-w c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_c2dffd4f49ae0f02\mscorld.dll
+ 2008-07-27 17:58:33 94,208 ----a-w c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ac146deb63538815\mscorld.dll
+ 2008-07-27 18:00:28 96,768 ----a-w c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.16720_none_a586c87acc4ee451\mscormmc.dll
+ 2008-07-27 17:55:56 96,768 ----a-w c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.20883_none_a5d2869be59a77c6\mscormmc.dll
+ 2008-07-27 18:03:16 96,768 ----a-w c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.18111_none_a778d756c96c72a8\mscormmc.dll
+ 2008-07-27 17:58:36 96,768 ----a-w c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.22230_none_a7ebd3ffe29b30fd\mscormmc.dll
+ 2008-07-27 18:00:25 114,176 ----a-w c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f809cbf55be51514\mscorpe.dll
+ 2008-07-27 17:55:53 114,176 ----a-w c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_e141e29975875a07\mscorpe.dll
+ 2008-07-27 18:03:13 114,176 ----a-w c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f7e4b0ab5c3721b5\mscorpe.dll
+ 2008-07-27 17:58:33 114,176 ----a-w c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_e119214775dc9ac8\mscorpe.dll
+ 2008-07-27 18:00:25 345,600 ----a-w c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f04d2f859bf6b755\mscorrc.dll
+ 2008-07-27 17:55:53 345,600 ----a-w c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d9854629b598fc48\mscorrc.dll
+ 2008-07-27 18:03:13 345,600 ----a-w c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f028143b9c48c3f6\mscorrc.dll
+ 2008-07-27 17:58:33 345,600 ----a-w c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d95c84d7b5ee3d09\mscorrc.dll
+ 2008-07-27 18:00:25 77,312 ----a-w c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_11d75989f473c8ca\mscorsec.dll
+ 2008-07-27 17:55:53 77,312 ----a-w c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fb0f702e0e160dbd\mscorsec.dll
+ 2008-07-27 18:03:13 77,312 ----a-w c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_11b23e3ff4c5d56b\mscorsec.dll
+ 2008-07-27 17:58:33 77,312 ----a-w c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fae6aedc0e6b4e7e\mscorsec.dll
+ 2008-07-27 18:00:26 31,744 ----a-w c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a5bb7e77ee33a16c\mscorsecr.dll
+ 2008-07-27 17:55:54 31,744 ----a-w c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8ef3951c07d5e65f\mscorsecr.dll
+ 2008-07-27 18:03:14 31,744 ----a-w c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a596632dee85ae0d\mscorsecr.dll
+ 2008-07-27 17:58:34 31,744 ----a-w c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8ecad3ca082b2720\mscorsecr.dll
+ 2008-07-27 18:00:25 18,944 ----a-w c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_967eaf5860c6dda6\mscorsn.dll
+ 2008-07-27 17:55:53 18,944 ----a-w c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7fb6c5fc7a692299\mscorsn.dll
+ 2008-07-27 18:03:13 18,944 ----a-w c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9659940e6118ea47\mscorsn.dll
+ 2008-07-27 17:58:33 18,944 ----a-w c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7f8e04aa7abe635a\mscorsn.dll
+ 2008-07-27 18:00:25 230,912 ----a-w c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5b1627d403b6b0de\mscorsvc.dll
+ 2008-07-27 17:55:53 230,912 ----a-w c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.20883_none_444e3e781d58f5d1\mscorsvc.dll
+ 2008-07-27 18:03:13 230,912 ----a-w c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5af10c8a0408bd7f\mscorsvc.dll
+ 2008-07-27 17:58:33 230,912 ----a-w c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.22230_none_44257d261dae3692\mscorsvc.dll
+ 2008-07-27 18:00:25 69,632 ----a-w c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_201c2ab5e826014f\mscorsvw.exe
+ 2008-07-27 17:55:53 69,632 ----a-w c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_0954415a01c84642\mscorsvw.exe
+ 2008-07-27 18:03:13 69,632 ----a-w c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1ff70f6be8780df0\mscorsvw.exe
+ 2008-07-27 17:58:33 69,632 ----a-w c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_092b8008021d8703\mscorsvw.exe
+ 2008-07-27 18:00:25 19,456 ----a-w c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cec3db076487f2b9\mscortim.dll
+ 2008-07-27 17:55:53 19,456 ----a-w c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b7fbf1ab7e2a37ac\mscortim.dll
+ 2008-07-27 18:03:13 19,456 ----a-w c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ce9ebfbd64d9ff5a\mscortim.dll
+ 2008-07-27 17:58:33 19,456 ----a-w c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b7d330597e7f786d\mscortim.dll
+ 2008-07-27 18:00:25 5,815,296 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_328358fc2e900398\mscorwks.dll
+ 2008-10-13 22:23:38 5,813,576 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16762_none_32872c942e8c9c36\mscorwks.dll
+ 2008-07-27 17:55:53 5,815,296 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1bbb6fa04832488b\mscorwks.dll
+ 2008-10-13 22:25:11 5,813,576 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.20935_none_1bb6407a4836fd6b\mscorwks.dll
+ 2008-07-27 18:03:13 5,815,296 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_325e3db22ee21039\mscorwks.dll
+ 2008-10-13 22:26:55 5,813,576 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.18155_none_3261e3ba2ededc19\mscorwks.dll
+ 2008-07-27 17:58:33 5,815,296 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1b92ae4e4887894c\mscorwks.dll
+ 2008-10-13 22:23:23 5,813,576 ----a-w c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.22286_none_1b9727104883a1c5\mscorwks.dll
+ 2008-07-27 18:00:22 82,944 ----a-w c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.16720_none_399312dcb0de0ef0\NETFXSBS10.exe
+ 2008-07-27 17:55:49 82,944 ----a-w c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.20883_none_39ded0fdca29a265\NETFXSBS10.exe
+ 2008-07-27 18:03:10 82,944 ----a-w c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.18111_none_3b8521b8adfb9d47\NETFXSBS10.exe
+ 2008-07-27 17:58:30 82,944 ----a-w c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.22230_none_3bf81e61c72a5b9c\NETFXSBS10.exe
+ 2008-07-27 18:00:26 100,856 ----a-w c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_77e2e7244a50f2f9\ngen.exe
+ 2008-07-27 17:55:54 100,856 ----a-w c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_611afdc863f337ec\ngen.exe
+ 2008-07-27 18:03:14 100,856 ----a-w c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_77bdcbda4aa2ff9a\ngen.exe
+ 2008-07-27 17:58:34 100,856 ----a-w c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_60f23c76644878ad\ngen.exe
+ 2008-07-27 18:00:26 24,584 ----a-w c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dc5677122d543f36\normalization.dll
+ 2008-07-27 17:55:54 24,584 ----a-w c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c58e8db646f68429\normalization.dll
+ 2008-07-27 18:03:14 24,584 ----a-w c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dc315bc82da64bd7\normalization.dll
+ 2008-07-27 17:58:34 24,584 ----a-w c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c565cc64474bc4ea\normalization.dll
+ 2008-07-27 18:00:26 88,584 ----a-w c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_29fcfd8eff55da0a\PerfCounter.dll
+ 2008-07-27 17:55:54 88,584 ----a-w c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1335143318f81efd\PerfCounter.dll
+ 2008-07-27 18:03:14 88,584 ----a-w c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_29d7e244ffa7e6ab\PerfCounter.dll
+ 2008-07-27 17:58:34 88,584 ----a-w c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_130c52e1194d5fbe\PerfCounter.dll
+ 2008-07-27 18:00:26 143,360 ----a-w c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_9cbc7d3e49842763\peverify.dll
+ 2008-07-27 17:55:54 143,360 ----a-w c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_85f493e263266c56\peverify.dll
+ 2008-07-27 18:03:14 143,360 ----a-w c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9c9761f449d63404\peverify.dll
+ 2008-07-27 17:58:34 143,360 ----a-w c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_85cbd290637bad17\peverify.dll
+ 2008-07-27 18:00:22 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.16720_none_a4b3513de20981cb\sbs_diasymreader.dll
+ 2008-07-27 17:55:49 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.20883_none_a4ff0f5efb551540\sbs_diasymreader.dll
+ 2008-07-27 18:03:10 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.18111_none_a6a56019df271022\sbs_diasymreader.dll
+ 2008-07-27 17:58:30 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.22230_none_a7185cc2f855ce77\sbs_diasymreader.dll
+ 2008-07-27 18:00:22 14,336 ----a-w c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.16720_none_15bc4e0a4553cb65\sbs_iehost.dll
+ 2008-07-27 17:55:49 14,336 ----a-w c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.20883_none_16080c2b5e9f5eda\sbs_iehost.dll
+ 2008-07-27 18:03:10 14,336 ----a-w c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.18111_none_17ae5ce6427159bc\sbs_iehost.dll
+ 2008-07-27 17:58:30 14,336 ----a-w c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.22230_none_1821598f5ba01811\sbs_iehost.dll
+ 2008-07-27 18:00:22 14,360 ----a-w c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.16720_none_fadb1f7894625625\sbs_microsoft.jscript.dll
+ 2008-07-27 17:55:49 14,360 ----a-w c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.20883_none_fb26dd99adade99a\sbs_microsoft.jscript.dll
+ 2008-07-27 18:03:10 14,360 ----a-w c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.18111_none_fccd2e54917fe47c\sbs_microsoft.jscript.dll
+ 2008-07-27 17:58:30 14,360 ----a-w c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.22230_none_fd402afdaaaea2d1\sbs_microsoft.jscript.dll
+ 2008-07-27 18:00:22 14,904 ----a-w c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.16720_none_f5ad60ba98e5129e\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2008-07-27 17:55:49 14,904 ----a-w c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.20883_none_f5f91edbb230a613\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2008-07-27 18:03:10 14,904 ----a-w c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.18111_none_f79f6f969602a0f5\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2008-07-27 17:58:30 14,904 ----a-w c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.22230_none_f8126c3faf315f4a\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2008-07-27 18:00:22 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.16720_none_61341d4d3a39619e\sbs_mscordbi.dll
+ 2008-07-27 17:55:49 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.20883_none_617fdb6e5384f513\sbs_mscordbi.dll
+ 2008-07-27 18:03:10 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.18111_none_63262c293756eff5\sbs_mscordbi.dll
+ 2008-07-27 17:58:30 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.22230_none_639928d25085ae4a\sbs_mscordbi.dll
+ 2008-07-27 18:00:22 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.16720_none_9f5dffc77038aef0\sbs_mscorrc.dll
+ 2008-07-27 17:55:49 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.20883_none_9fa9bde889844265\sbs_mscorrc.dll
+ 2008-07-27 18:03:10 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.18111_none_a1500ea36d563d47\sbs_mscorrc.dll
+ 2008-07-27 17:58:30 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.22230_none_a1c30b4c8684fb9c\sbs_mscorrc.dll
+ 2008-07-27 18:00:22 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.16720_none_e401d368df1b12c0\sbs_mscorsec.dll
+ 2008-07-27 17:55:49 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.20883_none_e44d9189f866a635\sbs_mscorsec.dll
+ 2008-07-27 18:03:10 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.18111_none_e5f3e244dc38a117\sbs_mscorsec.dll
+ 2008-07-27 17:58:30 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.22230_none_e666deedf5675f6c\sbs_mscorsec.dll
+ 2008-07-27 18:00:22 14,384 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.16720_none_bd4e76fe38514ab5\sbs_system.configuration.install.dll
+ 2008-07-27 17:55:49 14,384 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.20883_none_bd9a351f519cde2a\sbs_system.configuration.install.dll
+ 2008-07-27 18:03:10 14,384 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.18111_none_bf4085da356ed90c\sbs_system.configuration.install.dll
+ 2008-07-27 17:58:30 14,384 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.22230_none_bfb382834e9d9761\sbs_system.configuration.install.dll
+ 2008-07-27 18:00:22 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.16720_none_fc8de474efb056bd\sbs_system.data.dll
+ 2008-07-27 17:55:49 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.20883_none_fcd9a29608fbea32\sbs_system.data.dll
+ 2008-07-27 18:03:10 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.18111_none_fe7ff350eccde514\sbs_system.data.dll
+ 2008-07-27 17:58:30 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.22230_none_fef2effa05fca369\sbs_system.data.dll
+ 2008-07-27 18:00:22 14,376 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.16720_none_5f2d7cf328bb48aa\sbs_system.enterpriseservices.dll
+ 2008-07-27 17:55:49 14,376 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.20883_none_5f793b144206dc1f\sbs_system.enterpriseservices.dll
+ 2008-07-27 18:03:10 14,376 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.18111_none_611f8bcf25d8d701\sbs_system.enterpriseservices.dll
+ 2008-07-27 17:58:30 14,376 ----a-w c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.22230_none_619288783f079556\sbs_system.enterpriseservices.dll
+ 2008-07-27 18:00:22 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.16720_none_91b3897b707a12a8\sbs_VsaVb7rt.dll
+ 2008-07-27 17:55:49 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.20883_none_91ff479c89c5a61d\sbs_VsaVb7rt.dll
+ 2008-07-27 18:03:10 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.18111_none_93a598576d97a0ff\sbs_VsaVb7rt.dll
+ 2008-07-27 17:58:30 14,344 ----a-w c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.22230_none_9418950086c65f54\sbs_VsaVb7rt.dll
+ 2008-07-27 18:00:22 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.16720_none_fe9f152188a71eb9\sbs_wminet_utils.dll
+ 2008-07-27 17:55:49 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.20883_none_feead342a1f2b22e\sbs_wminet_utils.dll
+ 2008-07-27 18:03:10 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.18111_none_009123fd85c4ad10\sbs_wminet_utils.dll
+ 2008-07-27 17:58:30 14,352 ----a-w c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.22230_none_010420a69ef36b65\sbs_wminet_utils.dll
+ 2008-07-27 18:00:22 16,896 ----a-w c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.16720_none_730a240a07e5914d\sbscmp10.dll
+ 2008-07-27 17:55:49 16,896 ----a-w c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.20883_none_7355e22b213124c2\sbscmp10.dll
+ 2008-07-27 18:03:10 16,896 ----a-w c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.18111_none_74fc32e605031fa4\sbscmp10.dll
+ 2008-07-27 17:58:30 16,896 ----a-w c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.22230_none_756f2f8f1e31ddf9\sbscmp10.dll
+ 2008-07-27 18:00:26 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.16720_none_54f78ae6608fe120\sbscmp20_mscorlib.dll
+ 2008-07-27 17:55:55 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.20883_none_3e2fa18a7a322613\sbscmp20_mscorlib.dll
+ 2008-07-27 18:03:14 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.18111_none_54d26f9c60e1edc1\sbscmp20_mscorlib.dll
+ 2008-07-27 17:58:34 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.22230_none_3e06e0387a8766d4\sbscmp20_mscorlib.dll
+ 2008-07-27 18:00:22 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.16720_none_7db29add493b7e7f\sbscmp20_mscorwks.dll
+ 2008-07-27 17:55:49 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.20883_none_7dfe58fe628711f4\sbscmp20_mscorwks.dll
+ 2008-07-27 18:03:10 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.18111_none_7fa4a9b946590cd6\sbscmp20_mscorwks.dll
+ 2008-07-27 17:58:31 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.22230_none_8017a6625f87cb2b\sbscmp20_mscorwks.dll
+ 2008-07-27 18:00:22 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.16720_none_4b551485ea019eb3\sbscmp20_perfcounter.dll
+ 2008-07-27 17:55:49 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.20883_none_4ba0d2a7034d3228\sbscmp20_perfcounter.dll
+ 2008-07-27 18:03:10 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.18111_none_4d472361e71f2d0a\sbscmp20_perfcounter.dll
+ 2008-07-27 17:58:31 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.22230_none_4dba200b004deb5f\sbscmp20_perfcounter.dll
+ 2008-07-27 18:00:22 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.16720_none_647b8d4369ff4ca5\SharedReg12.dll
+ 2008-07-27 17:55:49 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.20883_none_64c74b64834ae01a\SharedReg12.dll
+ 2008-07-27 18:03:10 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.18111_none_666d9c1f671cdafc\SharedReg12.dll
+ 2008-07-27 17:58:31 16,896 ----a-w c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.22230_none_66e098c8804b9951\SharedReg12.dll
+ 2008-07-27 18:00:26 118,784 ----a-w c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5afe5731cbebfefe\shfusion.dll
+ 2008-07-27 17:55:55 118,784 ----a-w c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_44366dd5e58e43f1\shfusion.dll
+ 2008-07-27 18:03:14 118,784 ----a-w c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5ad93be7cc3e0b9f\shfusion.dll
+ 2008-07-27 17:58:34 118,784 ----a-w c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_440dac83e5e384b2\shfusion.dll
+ 2008-07-27 18:00:26 95,232 ----a-w c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a636a70dcbde39f5\ShFusRes.dll
+ 2008-07-27 17:55:55 95,232 ----a-w c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8f6ebdb1e5807ee8\ShFusRes.dll
+ 2008-07-27 18:03:14 95,232 ----a-w c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a6118bc3cc304696\ShFusRes.dll
+ 2008-07-27 17:58:34 95,232 ----a-w c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8f45fc5fe5d5bfa9\ShFusRes.dll
+ 2008-07-27 18:00:26 392,184 ----a-w c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_1415c3a3fa85eb80\SOS.dll
+ 2008-07-27 17:55:55 392,184 ----a-w c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fd4dda4814283073\SOS.dll
+ 2008-07-27 18:03:14 392,184 ----a-w c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_13f0a859fad7f821\SOS.dll
+ 2008-07-27 17:58:34 392,184 ----a-w c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fd2518f6147d7134\SOS.dll
+ 2008-07-27 18:00:28 81,400 ----a-w c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_61378f49539876ca\TLBREF.DLL
+ 2008-07-27 17:55:56 81,400 ----a-w c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_4a6fa5ed6d3abbbd\TLBREF.DLL
+ 2008-07-27 18:03:16 81,400 ----a-w c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_611273ff53ea836b\TLBREF.DLL
+ 2008-07-27 17:58:36 81,400 ----a-w c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_4a46e49b6d8ffc7e\TLBREF.DLL
+ 2008-07-27 18:00:28 1,172,472 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.16720_none_40151493a5ee7836\vbc.exe
+ 2008-07-27 17:55:56 1,172,472 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.20883_none_294d2b37bf90bd29\vbc.exe
+ 2008-07-27 18:03:16 1,172,472 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_3feff949a64084d7\vbc.exe
+ 2008-07-27 17:58:36 1,172,472 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_292469e5bfe5fdea\vbc.exe
+ 2008-07-27 18:00:22 193,016 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.16720_none_9b66959baa339139\vbc7ui.dll
+ 2008-07-27 17:55:49 193,016 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.20883_none_849eac3fc3d5d62c\vbc7ui.dll
+ 2008-07-27 18:03:10 193,016 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.18111_none_9b417a51aa859dda\vbc7ui.dll
+ 2008-07-27 17:58:31 193,016 ----a-w c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.22230_none_8475eaedc42b16ed\vbc7ui.dll
+ 2008-07-27 18:00:28 438,272 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_36c546033798e90a\webengine.dll
+ 2008-10-13 22:23:41 436,040 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16762_none_36c9199b379581a8\webengine.dll
+ 2008-07-27 17:55:56 438,272 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1ffd5ca7513b2dfd\webengine.dll
+ 2008-10-13 22:25:15 436,040 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.20935_none_1ff82d81513fe2dd\webengine.dll
+ 2008-07-27 18:03:16 438,272 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_36a02ab937eaf5ab\webengine.dll
+ 2008-10-13 22:26:59 436,040 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.18155_none_36a3d0c137e7c18b\webengine.dll
+ 2008-07-27 17:58:36 438,272 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1fd49b5551906ebe\webengine.dll
+ 2008-10-13 22:23:28 436,040 ----a-w c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.22286_none_1fd91417518c8737\webengine.dll
+ 2008-07-27 18:00:28 37,896 ----a-w c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_7357fe437a1ad1ff\WMINet_Utils.dll
+ 2008-07-27 17:55:56 37,896 ----a-w c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_5c9014e793bd16f2\WMINet_Utils.dll
+ 2008-07-27 18:03:16 37,896 ----a-w c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_7332e2f97a6cdea0\WMINet_Utils.dll
+ 2008-07-27 17:58:36 37,896 ----a-w c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_5c675395941257b3\WMINet_Utils.dll
+ 2008-06-20 01:18:02 4,210,688 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16708_none_aa52d7cf92c6806a\PresentationCore.dll
+ 2008-06-20 01:18:04 1,738,760 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16708_none_aa52d7cf92c6806a\wpfgfx_v0300.dll
+ 2008-11-24 23:44:26 4,210,688 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16780_none_a9f4561f930e953a\PresentationCore.dll
+ 2008-11-24 23:44:28 1,736,528 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16780_none_a9f4561f930e953a\wpfgfx_v0300.dll
+ 2008-06-20 01:12:56 4,210,688 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20864_none_aa9793eaac18627e\PresentationCore.dll
+ 2008-06-20 01:12:58 1,738,760 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20864_none_aa9793eaac18627e\wpfgfx_v0300.dll
+ 2008-11-24 23:43:38 4,210,688 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20964_none_aa9795d0ac185fa5\PresentationCore.dll
+ 2008-11-24 23:43:39 1,736,528 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20964_none_aa9795d0ac185fa5\wpfgfx_v0300.dll
+ 2008-06-20 01:14:43 4,210,688 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18096_none_abd5c4af9037dcff\PresentationCore.dll
+ 2008-06-20 01:14:45 1,738,760 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18096_none_abd5c4af9037dcff\wpfgfx_v0300.dll
+ 2008-11-24 23:34:46 4,210,688 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18173_none_abe8658f902a563f\PresentationCore.dll
+ 2008-11-24 23:34:49 1,736,528 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18173_none_abe8658f902a563f\wpfgfx_v0300.dll
+ 2008-06-20 01:13:31 4,210,688 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22208_none_acc2b340a90ab125\PresentationCore.dll
+ 2008-06-20 01:13:33 1,738,760 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22208_none_acc2b340a90ab125\wpfgfx_v0300.dll
+ 2008-11-24 23:57:18 4,210,688 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22317_none_acb6e4f0a913b0e6\PresentationCore.dll
+ 2008-11-24 23:57:20 1,736,528 ----a-w c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22317_none_acb6e4f0a913b0e6\wpfgfx_v0300.dll
+ 2008-07-27 18:00:26 53,248 ----a-w c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.16720_none_173a294b153205b9\RegAsm.exe
+ 2008-07-27 17:55:54 53,248 ----a-w c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.20883_none_00723fef2ed44aac\RegAsm.exe
+ 2008-07-27 18:03:14 53,248 ----a-w c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.18111_none_17150e011584125a\RegAsm.exe
+ 2008-07-27 17:58:34 53,248 ----a-w c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.22230_none_00497e9d2f298b6d\RegAsm.exe
+ 2008-07-27 18:00:26 32,768 ----a-w c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.16720_none_ea5553f167a4fe69\RegSvcs.exe
+ 2008-07-27 17:55:54 32,768 ----a-w c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.20883_none_d38d6a958147435c\RegSvcs.exe
+ 2008-07-27 18:03:14 32,768 ----a-w c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.18111_none_ea3038a767f70b0a\RegSvcs.exe
+ 2008-07-27 17:58:34 32,768 ----a-w c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.22230_none_d364a943819c841d\RegSvcs.exe
+ 2008-07-27 18:00:27 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.16720_none_f35be08bdcd55c80\System.Data.OracleClient.dll
+ 2008-10-13 22:23:40 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.16762_none_f35fb423dcd1f51e\System.Data.OracleClient.dll
+ 2008-07-27 17:55:55 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.20883_none_dc93f72ff677a173\System.Data.OracleClient.dll
+ 2008-10-13 22:25:13 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.20935_none_dc8ec809f67c5653\System.Data.OracleClient.dll
+ 2008-07-27 18:03:15 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.18111_none_f336c541dd276921\System.Data.OracleClient.dll
+ 2008-10-13 22:26:57 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.18155_none_f33a6b49dd243501\System.Data.OracleClient.dll
+ 2008-07-27 17:58:35 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.22230_none_dc6b35ddf6cce234\System.Data.OracleClient.dll
+ 2008-10-13 22:23:26 486,400 ----a-w c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.22286_none_dc6fae9ff6c8faad\System.Data.OracleClient.dll
+ 2008-07-27 18:00:26 2,933,248 ----a-w c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.16720_none_94bc651bb3dd8769\System.Data.dll
+ 2008-07-27 17:55:55 2,933,248 ----a-w c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.20883_none_7df47bbfcd7fcc5c\System.Data.dll
+ 2008-07-27 18:03:15 2,933,248 ----a-w c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.18111_none_949749d1b42f940a\System.Data.dll
+ 2008-07-27 17:58:35 2,933,248 ----a-w c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.22230_none_7dcbba6dcdd50d1d\System.Data.dll
+ 2008-07-27 18:00:27 258,048 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.dll
+ 2008-07-27 18:19:30 113,664 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.Wrapper.dll
+ 2008-07-27 17:55:55 258,048 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6fc766fbdb\System.EnterpriseServices.dll
+ 2008-07-27 18:15:31 113,664 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6fc766fbdb\System.EnterpriseServices.Wrapper.dll
+ 2008-07-27 18:03:15 258,048 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881ae16c389\System.EnterpriseServices.dll
+ 2008-07-27 18:22:54 113,664 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881ae16c389\System.EnterpriseServices.Wrapper.dll
+ 2008-07-27 17:58:35 258,048 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.dll
+ 2008-07-27 18:19:59 113,664 ----a-w c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.Wrapper.dll
+ 2008-06-20 01:18:03 368,640 ----a-w c:\windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6000.16708_none_7162284d78ee8495\System.Printing.dll
+ 2008-06-20 01:12:56 368,640 ----a-w c:\windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6000.20864_none_71a6e468924066a9\System.Printing.dll
+ 2008-06-20 01:14:43 368,640 ----a-w c:\windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6001.18096_none_72e5152d765fe12a\System.Printing.dll
+ 2008-06-20 01:13:31 368,640 ----a-w c:\windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6001.22208_none_73d203be8f32b550\System.Printing.dll
+ 2008-07-27 18:00:27 261,632 ----a-w c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.16720_none_13b0b874683b2e16\System.Transactions.dll
+ 2008-07-27 17:55:55 261,632 ----a-w c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.20883_none_fce8cf1881dd7309\System.Transactions.dll
+ 2008-07-27 18:03:15 261,632 ----a-w c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.18111_none_138b9d2a688d3ab7\System.Transactions.dll
+ 2008-07-27 17:58:35 261,632 ----a-w c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.22230_none_fcc00dc68232b3ca\System.Transactions.dll
+ 2008-07-27 18:00:27 5,238,784 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16720_none_f74db0bb1630f0b7\System.Web.dll
+ 2008-10-13 22:23:40 5,242,880 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16762_none_f7518453162d8955\System.Web.dll
+ 2008-07-27 17:55:55 5,238,784 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.20883_none_e085c75f2fd335aa\System.Web.dll
+ 2008-10-13 22:25:14 5,242,880 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.20935_none_e08098392fd7ea8a\System.Web.dll
+ 2008-07-27 18:03:15 5,238,784 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.18111_none_f72895711682fd58\System.Web.dll
+ 2008-10-13 22:26:58 5,242,880 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.18155_none_f72c3b79167fc938\System.Web.dll
+ 2008-07-27 17:58:35 5,238,784 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.22230_none_e05d060d3028766b\System.Web.dll
+ 2008-10-13 22:23:27 5,242,880 ----a-w c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.22286_none_e0617ecf30248ee4\System.Web.dll
+ 2008-06-20 01:17:52 622,080 ----a-w c:\windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6000.16708_none_2ff970587479d632\icardagt.exe
+ 2008-06-20 01:12:47 622,080 ----a-w c:\windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6000.20864_none_303e2c738dcbb846\icardagt.exe
+ 2008-06-20 01:14:33 622,080 ----a-w c:\windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6001.18096_none_317c5d3871eb32c7\icardagt.exe
+ 2008-06-20 01:13:21 622,080 ----a-w c:\windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6001.22208_none_32694bc98abe06ed\icardagt.exe
+ 2008-06-20 01:17:52 11,264 ----a-w c:\windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6000.16708_none_0f2f11926daa5c1a\icardres.dll
+ 2008-06-20 01:12:47 11,264 ----a-w c:\windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6000.20864_none_0f73cdad86fc3e2e\icardres.dll
+ 2008-06-20 01:14:34 11,264 ----a-w c:\windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6001.18096_none_10b1fe726b1bb8af\icardres.dll
+ 2008-06-20 01:13:21 11,264 ----a-w c:\windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6001.22208_none_119eed0383ee8cd5\icardres.dll
+ 2008-06-20 01:17:52 97,800 ----a-w c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6000.16708_none_a208c058b2726d70\infocardapi.dll
+ 2008-06-20 01:12:47 97,800 ----a-w c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6000.20864_none_a24d7c73cbc44f84\infocardapi.dll
+ 2008-06-20 01:14:34 97,800 ----a-w c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6001.18096_none_a38bad38afe3ca05\infocardapi.dll
+ 2008-06-20 01:13:21 97,800 ----a-w c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6001.22208_none_a4789bc9c8b69e2b\infocardapi.dll
+ 2008-06-20 01:17:50 181,264 ----a-w c:\windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6000.16708_none_fe4321a01ff82159\SMConfigInstaller.exe
+ 2008-06-20 01:12:45 181,264 ----a-w c:\windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6000.20864_none_fe87ddbb394a036d\SMConfigInstaller.exe
+ 2008-06-20 01:14:31 181,264 ----a-w c:\windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6001.18096_none_ffc60e801d697dee\SMConfigInstaller.exe
+ 2008-06-20 01:13:19 181,264 ----a-w c:\windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6001.22208_none_00b2fd11363c5214\SMConfigInstaller.exe
+ 2008-06-20 01:17:50 11,280 ----a-w c:\windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6000.16708_none_768bf6749b33d781\ServiceModelEvents.dll
+ 2008-06-20 01:12:45 11,280 ----a-w c:\windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6000.20864_none_76d0b28fb485b995\ServiceModelEvents.dll
+ 2008-06-20 01:14:31 11,280 ----a-w c:\windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6001.18096_none_780ee35498a53416\ServiceModelEvents.dll
+ 2008-06-20 01:13:19 11,280 ----a-w c:\windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6001.22208_none_78fbd1e5b178083c\ServiceModelEvents.dll
+ 2008-06-20 01:17:50 11,288 ----a-w c:\windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6000.16708_none_c71e0ae74c96da14\ServiceModelInstallRC.dll
+ 2008-06-20 01:12:45 11,288 ----a-w c:\windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6000.20864_none_c762c70265e8bc28\ServiceModelInstallRC.dll
+ 2008-06-20 01:14:31 11,288 ----a-w c:\windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6001.18096_none_c8a0f7c74a0836a9\ServiceModelInstallRC.dll
+ 2008-06-20 01:13:19 11,288 ----a-w c:\windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6001.22208_none_c98de65862db0acf\ServiceModelInstallRC.dll
+ 2008-06-20 01:17:50 20,504 ----a-w c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6000.16708_none_a3ffcadd4e70a1cb\ServiceMonikerSupport.dll
+ 2008-06-20 01:12:45 20,504 ----a-w c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6000.20864_none_a44486f867c283df\ServiceMonikerSupport.dll
+ 2008-06-20 01:14:31 20,504 ----a-w c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6001.18096_none_a582b7bd4be1fe60\ServiceMonikerSupport.dll
+ 2008-06-20 01:13:19 20,504 ----a-w c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6001.22208_none_a66fa64e64b4d286\ServiceMonikerSupport.dll
+ 2008-06-20 01:17:48 126,976 ----a-w c:\windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6000.16708_none_63949d8530c1b03d\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:12:43 126,976 ----a-w c:\windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6000.20864_none_4ccd53a14a6341c9\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:14:29 126,976 ----a-w c:\windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6001.18096_none_6379c99b310a6d10\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:13:17 126,976 ----a-w c:\windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6001.22208_none_4ca2f28d4aba1c9a\System.IdentityModel.Selectors.dll
+ 2008-06-20 01:17:48 430,080 ----a-w c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6000.16708_none_25cbae22402e02cf\System.IdentityModel.dll
+ 2008-06-20 01:12:43 430,080 ----a-w c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6000.20864_none_0f04643e59cf945b\System.IdentityModel.dll
+ 2008-06-20 01:14:29 430,080 ----a-w c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6001.18096_none_25b0da384076bfa2\System.IdentityModel.dll
+ 2008-06-20 01:13:17 430,080 ----a-w c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6001.22208_none_0eda032a5a266f2c\System.IdentityModel.dll
+ 2008-06-20 01:17:48 131,072 ----a-w c:\windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6000.16708_none_da90e376bacdcee4\System.IO.Log.dll
+ 2008-06-20 01:12:43 131,072 ----a-w c:\windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6000.20864_none_c3c99992d46f6070\System.IO.Log.dll
+ 2008-06-20 01:14:29 131,072 ----a-w c:\windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6001.18096_none_da760f8cbb168bb7\System.IO.Log.dll
+ 2008-06-20 01:13:17 131,072 ----a-w c:\windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6001.22208_none_c39f387ed4c63b41\System.IO.Log.dll
+ 2008-06-20 01:17:48 966,656 ----a-w c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.16708_none_0763f56b20648936\System.Runtime.Serialization.dll
+ 2008-06-20 01:12:43 966,656 ----a-w c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.20864_none_f09cab873a061ac2\System.Runtime.Serialization.dll
+ 2008-06-20 01:14:29 966,656 ----a-w c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.18096_none_0749218120ad4609\System.Runtime.Serialization.dll
+ 2008-06-20 01:13:17 966,656 ----a-w c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.22208_none_f0724a733a5cf593\System.Runtime.Serialization.dll
+ 2008-06-20 01:17:48 5,931,008 ----a-w c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.16708_none_151c0556eb2446e8\System.ServiceModel.dll
+ 2008-11-24 23:44:16 5,931,008 ----a-w c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.16780_none_1524bde6eb1c4498\System.ServiceModel.dll
+ 2008-06-20 01:12:44 5,931,008 ----a-w c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.20864_none_fe54bb7304c5d874\System.ServiceModel.dll
+ 2008-11-24 23:43:28 5,931,008 ----a-w c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.20964_none_fe54bb4f04c5d8c5\System.ServiceModel.dll
+ 2008-06-20 01:14:30 5,931,008 ----a-w c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.18096_none_1501316ceb6d03bb\System.ServiceModel.dll
+ 2008-11-24 23:34:36 5,931,008 ----a-w c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.18173_none_14ff750ceb6e847b\System.ServiceModel.dll
+ 2008-06-20 01:13:17 5,931,008 ----a-w c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.22208_none_fe2a5a5f051cb345\System.ServiceModel.dll
+ 2008-11-24 23:57:11 5,931,008 ----a-w c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.22317_none_fe2b714d051bb34c\System.ServiceModel.dll
+ 2008-06-20 01:18:04 71,160 ----a-w c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6000.16708_none_a9d2d87807800ad7\PenIMC.dll
+ 2008-06-20 01:12:57 71,160 ----a-w c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6000.20864_none_aa17949320d1eceb\PenIMC.dll
+ 2008-06-20 01:14:44 71,160 ----a-w c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6001.18096_none_ab55c55804f1676c\PenIMC.dll
+ 2008-06-20 01:13:32 71,160 ----a-w c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6001.22208_none_ac42b3e91dc43b92\PenIMC.dll
+ 2008-06-20 01:18:02 598,016 ----a-w c:\windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6000.16708_none_4e2f046e504dbf2f\PresentationBuildTasks.dll
+ 2008-06-20 01:12:56 598,016 ----a-w c:\windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6000.20864_none_4e73c089699fa143\PresentationBuildTasks.dll
+ 2008-06-20 01:14:42 598,016 ----a-w c:\windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6001.18096_none_4fb1f14e4dbf1bc4\PresentationBuildTasks.dll
+ 2008-06-20 01:13:30 598,016 ----a-w c:\windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6001.22208_none_509edfdf6691efea\PresentationBuildTasks.dll
+ 2008-06-20 01:18:05 105,016 ----a-w c:\windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6000.16708_none_c7b724ab9124a824\PresentationCFFRasterizerNative_v0300.dll
+ 2008-06-20 01:12:58 105,016 ----a-w c:\windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6000.20864_none_c7fbe0c6aa768a38\PresentationCFFRasterizerNative_v0300.dll
+ 2008-06-20 01:14:45 105,016 ----a-w c:\windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6001.18096_none_c93a118b8e9604b9\PresentationCFFRasterizerNative_v0300.dll
+ 2008-06-20 01:13:33 105,016 ----a-w c:\windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6001.22208_none_ca27001ca768d8df\PresentationCFFRasterizerNative_v0300.dll
+ 2008-06-20 01:18:04 46,104 ----a-w c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6000.16708_none_03bb5c5f150048a8\PresentationFontCache.exe
+ 2008-06-20 01:12:57 46,104 ----a-w c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6000.20864_none_0400187a2e522abc\PresentationFontCache.exe
+ 2008-06-20 01:14:44 46,104 ----a-w c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6001.18096_none_053e493f1271a53d\PresentationFontCache.exe
+ 2008-06-20 01:13:32 46,104 ----a-w c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6001.22208_none_062b37d02b447963\PresentationFontCache.exe
+ 2008-06-20 01:18:02 196,608 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6000.16708_none_30a585270b6384ca\PresentationFramework.Aero.dll
+ 2008-06-20 01:12:56 196,608 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6000.20864_none_30ea414224b566de\PresentationFramework.Aero.dll
+ 2008-06-20 01:14:43 196,608 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6001.18096_none_3228720708d4e15f\PresentationFramework.Aero.dll
+ 2008-06-20 01:13:31 196,608 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6001.22208_none_3315609821a7b585\PresentationFramework.Aero.dll
+ 2008-06-20 01:18:02 139,264 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6000.16708_none_f28b0aca2c97e2a7\PresentationFramework.Classic.dll
+ 2008-06-20 01:12:56 139,264 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6000.20864_none_f2cfc6e545e9c4bb\PresentationFramework.Classic.dll
+ 2008-06-20 01:14:43 139,264 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6001.18096_none_f40df7aa2a093f3c\PresentationFramework.Classic.dll
+ 2008-06-20 01:13:31 139,264 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6001.22208_none_f4fae63b42dc1362\PresentationFramework.Classic.dll
+ 2008-06-20 01:18:03 397,312 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6000.16708_none_2f805e050c0d9c4d\PresentationFramework.Luna.dll
+ 2008-06-20 01:12:56 397,312 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6000.20864_none_2fc51a20255f7e61\PresentationFramework.Luna.dll
+ 2008-06-20 01:14:43 397,312 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6001.18096_none_31034ae5097ef8e2\PresentationFramework.Luna.dll
+ 2008-06-20 01:13:31 397,312 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6001.22208_none_31f039762251cd08\PresentationFramework.Luna.dll
+ 2008-06-20 01:18:03 163,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6000.16708_none_e8d6f689ad14b5dd\PresentationFramework.Royale.dll
+ 2008-06-20 01:12:56 163,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6000.20864_none_e91bb2a4c66697f1\PresentationFramework.Royale.dll
+ 2008-06-20 01:14:43 163,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6001.18096_none_ea59e369aa861272\PresentationFramework.Royale.dll
+ 2008-06-20 01:13:31 163,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6001.22208_none_eb46d1fac358e698\PresentationFramework.Royale.dll
+ 2008-06-20 01:18:03 5,283,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.16708_none_6ca8219658c89e97\PresentationFramework.dll
+ 2008-11-24 23:44:27 5,283,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.16780_none_6c499fe65910b367\PresentationFramework.dll
+ 2008-06-20 01:12:56 5,283,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.20864_none_6cecddb1721a80ab\PresentationFramework.dll
+ 2008-11-24 23:43:38 5,283,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.20964_none_6cecdf97721a7dd2\PresentationFramework.dll
+ 2008-06-20 01:14:43 5,283,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.18096_none_6e2b0e765639fb2c\PresentationFramework.dll
+ 2008-11-24 23:34:47 5,283,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.18173_none_6e3daf56562c746c\PresentationFramework.dll
+ 2008-06-20 01:13:31 5,283,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.22208_none_6f17fd076f0ccf52\PresentationFramework.dll
+ 2008-11-24 23:57:19 5,283,840 ----a-w c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.22317_none_6f0c2eb76f15cf13\PresentationFramework.dll
+ 2008-06-20 01:18:04 132,120 ----a-w c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6000.16708_none_6e2d32c922d172b5\PresentationHostDLL.dll
+ 2008-06-20 01:12:57 132,120 ----a-w c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6000.20864_none_6e71eee43c2354c9\PresentationHostDLL.dll
+ 2008-06-20 01:14:44 132,120 ----a-w c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6001.18096_none_6fb01fa92042cf4a\PresentationHostDLL.dll
+ 2008-06-20 01:13:32 132,120 ----a-w c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6001.22208_none_709d0e3a3915a370\PresentationHostDLL.dll
+ 2008-06-20 01:18:05 326,160 ----a-w c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6000.16708_none_6e15f8e122f01527\PresentationHost.exe
+ 2008-06-20 01:12:58 326,160 ----a-w c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6000.20864_none_6e5ab4fc3c41f73b\PresentationHost.exe
+ 2008-06-20 01:14:45 326,160 ----a-w c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6001.18096_none_6f98e5c1206171bc\PresentationHost.exe
+ 2008-06-20 01:13:33 326,160 ----a-w c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6001.22208_none_7085d452393445e2\PresentationHost.exe
+ 2008-06-20 01:18:05 43,544 ----a-w c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6000.16708_none_28acdc3c7ca15459\PresentationHostProxy.dll
+ 2008-06-20 01:12:58 43,544 ----a-w c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6000.20864_none_28f1985795f3366d\PresentationHostProxy.dll
+ 2008-06-20 01:14:45 43,544 ----a-w c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6001.18096_none_2a2fc91c7a12b0ee\PresentationHostProxy.dll
+ 2008-06-20 01:13:33 43,544 ----a-w c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6001.22208_none_2b1cb7ad92e58514\PresentationHostProxy.dll
+ 2008-06-20 01:18:05 781,344 ----a-w c:\windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6000.16708_none_54e7d16a49527fd6\PresentationNative_v0300.dll
+ 2008-06-20 01:12:58 781,344 ----a-w c:\windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6000.20864_none_552c8d8562a461ea\PresentationNative_v0300.dll
+ 2008-06-20 01:14:45 781,344 ----a-w c:\windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6001.18096_none_566abe4a46c3dc6b\PresentationNative_v0300.dll
+ 2008-06-20 01:13:33 781,344 ----a-w c:\windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6001.22208_none_5757acdb5f96b091\PresentationNative_v0300.dll
+ 2008-06-20 01:18:03 528,384 ----a-w c:\windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6000.16708_none_fe4bf0c02b8bb752\ReachFramework.dll
+ 2008-06-20 01:12:56 528,384 ----a-w c:\windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6000.20864_none_fe90acdb44dd9966\ReachFramework.dll
+ 2008-06-20 01:14:43 528,384 ----a-w c:\windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6001.18096_none_ffcedda028fd13e7\ReachFramework.dll
+ 2008-06-20 01:13:31 528,384 ----a-w c:\windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6001.22208_none_00bbcc3141cfe80d\ReachFramework.dll
+ 2008-01-05 11:21:55 688,128 ----a-w c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6000.16708_none_7fdeb5cb1f6006f4\System.Speech.dll
+ 2008-01-05 11:21:55 688,128 ----a-w c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6000.20864_none_802371e638b1e908\System.Speech.dll
+ 2008-01-05 11:21:55 688,128 ----a-w c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18096_none_8161a2ab1cd16389\System.Speech.dll
+ 2008-01-05 11:21:55 688,128 ----a-w c:\windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.22208_none_824e913c35a437af\System.Speech.dll
+ 2008-06-20 01:18:03 167,936 ----a-w c:\windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6000.16708_none_d89abdc0441aa5f7\UIAutomationClient.dll
+ 2008-06-20 01:12:57 167,936 ----a-w c:\windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6000.20864_none_d8df79db5d6c880b\UIAutomationClient.dll
+ 2008-06-20 01:14:43 167,936 ----a-w c:\windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6001.18096_none_da1daaa0418c028c\UIAutomationClient.dll
+ 2008-06-20 01:13:31 167,936 ----a-w c:\windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6001.22208_none_db0a99315a5ed6b2\UIAutomationClient.dll
+ 2008-06-20 01:18:03 385,024 ----a-w c:\windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6000.16708_none_52ddd5f551389366\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:12:57 385,024 ----a-w c:\windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6000.20864_none_532292106a8a757a\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:14:43 385,024 ----a-w c:\windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6001.18096_none_5460c2d54ea9effb\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:13:31 385,024 ----a-w c:\windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6001.22208_none_554db166677cc421\UIAutomationClientsideProviders.dll
+ 2008-06-20 01:18:03 40,960 ----a-w c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6000.16708_none_02be96e58dc41a05\UIAutomationProvider.dll
+ 2008-06-20 01:12:57 40,960 ----a-w c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6000.20864_none_03035300a715fc19\UIAutomationProvider.dll
+ 2008-06-20 01:14:43 40,960 ----a-w c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6001.18096_none_044183c58b35769a\UIAutomationProvider.dll
+ 2008-06-20 01:13:31 40,960 ----a-w c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6001.22208_none_052e7256a4084ac0\UIAutomationProvider.dll
+ 2008-06-20 01:18:03 98,304 ----a-w c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6000.16708_none_5b33e6fd9dc2c35f\UIAutomationTypes.dll
+ 2008-06-20 01:12:57 98,304 ----a-w c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6000.20864_none_5b78a318b714a573\UIAutomationTypes.dll
+ 2008-06-20 01:14:43 98,304 ----a-w c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6001.18096_none_5cb6d3dd9b341ff4\UIAutomationTypes.dll
+ 2008-06-20 01:13:31 98,304 ----a-w c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6001.22208_none_5da3c26eb406f41a\UIAutomationTypes.dll
+ 2008-06-20 01:18:03 1,245,184 ----a-w c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6000.16708_none_558ed2744a98566d\WindowsBase.dll
+ 2008-06-20 01:12:57 1,245,184 ----a-w c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6000.20864_none_55d38e8f63ea3881\WindowsBase.dll
+ 2008-06-20 01:14:44 1,245,184 ----a-w c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6001.18096_none_5711bf544809b302\WindowsBase.dll
+ 2008-06-20 01:13:32 1,245,184 ----a-w c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6001.22208_none_57feade560dc8728\WindowsBase.dll
+ 2008-06-20 01:18:03 94,208 ----a-w c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6000.16708_none_f83dd4f37ea24879\WindowsFormsIntegration.dll
+ 2008-06-20 01:12:57 94,208 ----a-w c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6000.20864_none_f882910e97f42a8d\WindowsFormsIntegration.dll
+ 2008-06-20 01:14:44 94,208 ----a-w c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6001.18096_none_f9c0c1d37c13a50e\WindowsFormsIntegration.dll
+ 2008-06-20 01:13:32 94,208 ----a-w c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6001.22208_none_faadb06494e67934\WindowsFormsIntegration.dll
+ 2008-06-20 01:18:04 25,616 ----a-w c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6000.16708_none_543012117fbf197d\XamlViewer_v0300.exe
+ 2008-06-20 01:12:58 25,616 ----a-w c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6000.20864_none_5474ce2c9910fb91\XamlViewer_v0300.exe
+ 2008-06-20 01:14:45 25,616 ----a-w c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6001.18096_none_55b2fef17d307612\XamlViewer_v0300.exe
+ 2008-06-20 01:13:33 25,616 ----a-w c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6001.22208_none_569fed8296034a38\XamlViewer_v0300.exe
+ 2008-06-20 01:18:05 301,568 ----a-w c:\windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6000.16708_none_c75532110b61771a\XPSViewer.exe
+ 2008-06-20 01:12:59 301,568 ----a-w c:\windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6000.20864_none_c799ee2c24b3592e\XPSViewer.exe
+ 2008-06-20 01:14:45 301,568 ----a-w c:\windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6001.18096_none_c8d81ef108d2d3af\XPSViewer.exe
+ 2008-06-20 01:13:33 301,568 ----a-w c:\windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6001.22208_none_c9c50d8221a5a7d5\XPSViewer.exe
+ 2008-06-20 01:18:06 1,138,688 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6000.16708_none_3087b8727ad0e447\System.Workflow.Activities.dll
+ 2008-06-20 01:12:59 1,138,688 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6000.20864_none_30cc748d9422c65b\System.Workflow.Activities.dll
+ 2008-06-20 01:14:46 1,138,688 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6001.18096_none_320aa552784240dc\System.Workflow.Activities.dll
+ 2008-06-20 01:13:34 1,138,688 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6001.22208_none_32f793e391151502\System.Workflow.Activities.dll
+ 2008-06-20 01:18:06 1,630,208 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6000.16708_none_8a05df0910e7dfb8\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:13:00 1,630,208 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6000.20864_none_8a4a9b242a39c1cc\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:14:47 1,630,208 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6001.18096_none_8b88cbe90e593c4d\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:13:35 1,630,208 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6001.22208_none_8c75ba7a272c1073\System.Workflow.ComponentModel.dll
+ 2008-06-20 01:18:07 540,672 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6000.16708_none_633ca329a2d930cc\System.Workflow.Runtime.dll
+ 2008-06-20 01:13:00 540,672 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6000.20864_none_63815f44bc2b12e0\System.Workflow.Runtime.dll
+ 2008-06-20 01:14:47 540,672 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6001.18096_none_64bf9009a04a8d61\System.Workflow.Runtime.dll
+ 2008-06-20 01:13:35 540,672 ----a-w c:\windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6001.22208_none_65ac7e9ab91d6187\System.Workflow.Runtime.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2007-12-13 1688872]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-06-12 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-09 857648]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2007-06-28 707080]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-03-08 40048]
"PLFSet"="c:\windows\PLFSet.dll" [2007-04-25 45056]
"Acer Product Registration"="c:\program files\Acer Registration\ACE1.exe" [2007-02-02 3383296]
"Acer Assist Launcher"="c:\program files\Acer Assist\launcher.exe" [2007-02-02 1261568]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-15 79224]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
"AirPort Base Station Agent"="c:\program files\AirPort\APAgent.exe" [2008-05-20 737280]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-11 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-11 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-11 133656]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-28 c:\windows\RtHDVCpl.exe]
"Skytel"="Skytel.exe" [2007-05-28 c:\windows\SkyTel.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{CF669FE5-752C-48A6-882E-2D617768A4B9}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{42853471-E900-403D-AAF8-5758DF35F60B}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"TCP Query User{38B08054-AA06-48E3-9644-8117D4F63A92}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= UDP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"UDP Query User{4B2B161D-B5CA-453D-B023-17F946C3878A}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= TCP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"TCP Query User{4AF43561-BD7D-4595-B94F-51FCE1CECB75}c:\\program files\\rhapsody\\rhapsody.exe"= UDP:c:\program files\rhapsody\rhapsody.exe:RealNetworks Rhapsody
"UDP Query User{6DC38EA4-7AAF-4635-8FDB-A5DB5D535848}c:\\program files\\rhapsody\\rhapsody.exe"= TCP:c:\program files\rhapsody\rhapsody.exe:RealNetworks Rhapsody
"TCP Query User{0AF11667-FFF4-423D-B47A-555D05E0202D}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= UDP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"UDP Query User{69FBD1D6-9508-4206-805D-C422AD7C8C83}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= TCP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"{432E0A4A-7F4A-41FC-9631-F350A01E2605}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{BC5F53F2-02AA-48BF-B1F3-67C9776CA0D8}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{1D0952FE-B4BA-4E3C-8139-BF9F62827533}"= UDP:c:\program files\AirPort\APAgent.exe:APAgent
"{C62E4EF8-BD90-4815-B01D-B52273FF6F28}"= TCP:c:\program files\AirPort\APAgent.exe:APAgent
"{887F0571-B52A-44D0-B1B2-0B5579342728}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{B1524AB5-68FD-498B-80CD-B4046C101419}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{BB6901CE-20BF-4164-8835-3BE905D96F01}"= UDP:c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:Veoh Web Player
"{0B075390-87C8-4FD5-8E21-8D3D41E28F2C}"= TCP:c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:Veoh Web Player
"TCP Query User{6C06AF26-B849-40CF-BF61-28234740854D}c:\\aptana\\aptana studio\\jre\\bin\\javaw.exe"= UDP:c:\aptana\aptana studio\jre\bin\javaw.exe:Java(TM) Platform SE binary
"UDP Query User{26162860-D337-4DC6-A9DD-031E8F458E49}c:\\aptana\\aptana studio\\jre\\bin\\javaw.exe"= TCP:c:\aptana\aptana studio\jre\bin\javaw.exe:Java(TM) Platform SE binary
"{443C84A6-DFB2-4020-891D-CF354AAA392B}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{E4D72E3F-60E2-490E-B007-10F92D777EC9}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [2008-04-03 78416]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2008-04-03 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2008-02-06 50768]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [2007-07-22 180736]
R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [2007-03-28 43008]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9568d692-ec64-11dc-9476-ed2549b1298f}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d2b7c44a-d4db-11dc-a1af-ee02c3ea3063}]
\shell\AutoRun\command - F:\Launch.exe
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://en.us.acer.yahoo.com/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page = hxxp://en.us.acer.yahoo.com
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
FF - ProfilePath - c:\users\test\AppData\Roaming\Mozilla\Firefox\Profiles\rd9hluzq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - plugin: c:\users\test\AppData\Roaming\Mozilla\Firefox\Profiles\rd9hluzq.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071101000055.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-05 16:18:41
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
c:\windows\System32\audiodg.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\System32\agrsmsvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
c:\acer\Mobility Center\MobilityService.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\acer\Empowering Technology\eRecovery\eRecoveryService.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\System32\wbem\unsecapp.exe
c:\program files\Launch Manager\QtZgAcer.EXE
c:\program files\Alwil Software\Avast4\ashDisp.exe
c:\windows\System32\igfxsrvc.exe
c:\windows\System32\igfxext.exe
c:\windows\System32\igfxsrvc.exe
c:\users\test\AppData\Local\Temp\RtkBtMnt.exe
c:\program files\Common Files\Nero\Lib\NMIndexingService.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Completion time: 2009-02-05 16:27:02 - machine was rebooted
ComboFix-quarantined-files.txt 2009-02-05 21:26:40
ComboFix2.txt 2009-02-02 23:24:41

Pre-Run: 38,044,536,832 bytes free
Post-Run: 37,915,021,312 bytes free

2566 --- E O F --- 2009-02-05 20:28:05



2) HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:43:23 PM, on 2/5/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\AirPort\APAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Users\test\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\Explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [AirPort Base Station Agent] "C:\Program Files\AirPort\APAgent.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

--
End of file - 6779 bytes
Eddie
Active Member
 
Posts: 9
Joined: January 22nd, 2009, 7:38 pm

Re: i think it begins at C:\Windows\System32\msqpdxmewtfbso.dll

Unread postby Sharagoz » February 6th, 2009, 4:27 pm

I have no issue removing these entries, but before I do could you offer an idea as to what they are? Personally, I think they may have to do with Rhapsody. Does that sound right? If so, are they necessary? or If its not Rhapsody, and I later realize why they are listed as trusted, will it be as simple as going back to security and adding them to the trusted sites?

Yes, they were probably added when you installed Rhapsody, and yes, re-adding them is as simple as you describe. :)

1) Download and run CCleaner
  • Download CCleaner from here
  • Install and launch CCleaner
  • Click the Options button and select Advanced
  • Uncheck the option "Only delete files in Windows Temp folders older than 48 hours"
  • Click the Cleaner button
  • If you wish to avoid being logged out of all websites you're currently logged into, make sure Cookies are unchecked for the web browser(s) you use. Internet Explorer is located under the Windows tab, other browsers are located under the Applications tab
  • Click the Run Cleaner button at the bottom right of the window
  • Click Yes at the prompt and let the cleaner finish
Note:
If there are more than one user account on this computer, run CCleaner using this procedure on all other user accounts as well

Disable Avast before the next two steps

2) Download and Run Malwarebytes Anti-Malware
  • Download Malwarebytes' Anti-Malware and install the program
  • At the end, make sure a checkmark is placed next to:
    o Update Malwarebytes' Anti-Malware
    o Launch Malwarebytes' Anti-Malware
  • Click Finish
  • If an update is found, it will download and install the latest version
  • Once the program has loaded, click Check for updates
  • Click select Perform quick scan, then click Scan to start scanning
  • When the scan is complete, click OK, then Show Results to view the results
  • Make sure that everything is checked, and click Remove Selected
  • When completed, a log will open in Notepad. Include this log in your next reply
Note:
If you for some reason lose the log, it can be retrieved manually from this location:
C:\Users\<your username>\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logsmbam-log-date (time).txt
You must enable the viewing of hidden files to access that AppData folder
(Start -> Run -> control folders -> View -> Show hidden files and folders)

3) Run ESET's online scanner
  • Launch Internet Explorer by right-clicking on it and chosing Run as administrator and then go here:
    http://www.eset.com/onlinescan/
  • Put a checkmark next to Yes, I accept the Terms of Use and click the Start button
  • When prompted about installing ActiveX, allow it and click Install
    The interface will load
  • Click Start
    The scanner will initialize and update itself
  • Once the scanner has loaded, leave both check boxes unchecked and click the Scan button
    Your computer will be scanned, this can take a while to complete
  • When the scan has finished, close Internet Explorer
  • A log will be located here
    C:\Program Files\EsetOnlineScanner\log.txt
  • Include this log in your next reply
Note:
If you get an error message saying that ESET Online Scan needs administration rights, you will need to temporarily disable User Account Control
(Start -> Control Panel -> User Accounts and Family Safety -> User accounts -> Turn User Account Control on or off)

Logs I need:
    MBAM log
    ESET log
    New HJT log
User avatar
Sharagoz
Retired Graduate
 
Posts: 985
Joined: February 22nd, 2008, 4:31 pm
Location: Norway
Advertisement
Register to Remove

Next

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 150 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware