thomaskex

dan was omdat ik toen toevallig met een projectje bezig was. Het kijken van filmpjes gaat tegenwoordig al wat gemakkelijker, maar de pc heeft nog steeds veel moeite met het laden van bepaalde pagina's, facebook bv..

Excuseer voor de late reactie, ben tijdje weg geweest. hier de link: http://speccy.piriform.com/results/lqVjV2k3iWseqFvCfaappXz ik heb het dan over filmpjes online, bv youtube of dergelijke. en wat je vroeg over die 'nieuwste drivers'.. sorry maar mijn computerkennis rijkt zelfs niet zo ver dat ik weet wat drivers zijn haha dus euhm. Komt dit ook bij de gewone updates te staan onder 'windows update'? want zo niet kan het zijn dat deze niet geïnstalleerd zijn..

en toch blijft de pc nog geregeld haperen en vooral filmpjes bekijken blijft een ramp..

ComboFix 11-08-27.01 - Thomas.leeters 28/08/2011 11:45:03.4.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.3959.2512 [GMT 2:00] Gestart vanuit: c:\users\Thomas.leeters\Downloads\ComboFix.exe gebruikte Opdracht switches :: c:\users\Thomas.leeters\Desktop\CFScript.txt AV: avast! Antivirus *Disabled/Outdated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Outdated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Nieuw herstelpunt werd aangemaakt . FILE :: "c:\users\Thomas.leeters\AppData\Local\BITD83C.tmp" "c:\windows\SysWow64\ConduitEngine.tmp" . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Thomas.leeters\AppData\Local\BITD83C.tmp c:\windows\SysWow64\ConduitEngine.tmp . . (((((((((((((((((((( Bestanden Gemaakt van 2011-07-28 to 2011-08-28 )))))))))))))))))))))))))))))) . . 2011-08-28 09:50 . 2011-08-28 09:50 -------- d-----w- c:\users\Thomas\AppData\Local\temp 2011-08-28 09:50 . 2011-08-28 09:50 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-08-26 10:56 . 2011-08-26 10:56 -------- d-----w- c:\users\Thomas\AppData\Local\Windows Live 2011-08-24 07:29 . 2011-07-09 05:26 2048 ----a-w- c:\windows\system32\tzres.dll 2011-08-24 07:29 . 2011-07-09 04:29 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2011-08-23 12:56 . 2011-08-23 12:56 388096 ----a-r- c:\users\Thomas.leeters\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-08-23 12:56 . 2011-08-23 12:56 -------- d-----w- c:\program files (x86)\Trend Micro 2011-08-23 12:30 . 2011-08-23 12:30 -------- d-----w- c:\users\Thomas.leeters\AppData\Roaming\Malwarebytes 2011-08-23 12:29 . 2011-07-06 17:52 41272 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys 2011-08-23 12:29 . 2011-08-23 12:29 -------- d-----w- c:\programdata\Malwarebytes 2011-08-23 12:29 . 2011-08-23 12:29 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-08-23 12:29 . 2011-07-06 17:52 25912 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-08-10 17:50 . 2011-08-25 19:13 -------- d-----w- c:\users\Thomas.leeters\AppData\Local\PokerStars.BE 2011-08-10 17:50 . 2011-08-16 19:56 -------- d-----w- c:\program files (x86)\PokerStars.BE . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-08-23 08:02 . 2011-05-26 19:12 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-07-16 04:26 . 2011-08-12 18:20 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2011-06-11 03:07 . 2011-07-13 23:43 3137536 ----a-w- c:\windows\system32\win32k.sys 2011-06-07 06:55 . 2011-04-26 09:44 20040 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys . . ((((((((((((((((((((((((((((( SnapShot_2011-08-27_20.07.07 ))))))))))))))))))))))))))))))))))))))))) . - 2009-07-14 04:54 . 2011-08-27 20:06 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2011-08-28 09:53 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2011-08-28 09:53 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2011-08-27 20:06 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2011-08-27 20:06 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2011-08-28 09:53 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-05-06 11:13 . 2011-08-27 20:26 54026 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin - 2009-07-14 05:10 . 2011-08-27 19:57 33572 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-08-27 20:26 33572 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-09-20 19:34 . 2011-08-27 20:26 12890 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2584799026-3689701089-3967051187-1001_UserData.bin - 2011-08-27 20:06 . 2011-08-27 20:06 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-08-28 09:51 . 2011-08-28 09:51 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-08-27 20:06 . 2011-08-27 20:06 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-08-28 09:51 . 2011-08-28 09:51 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2010-09-10 15:26 . 2011-08-28 00:53 264926 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin - 2009-07-14 05:01 . 2011-08-27 20:05 390636 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2009-07-14 05:01 . 2011-08-28 09:50 390636 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-04-17 12:57 . 2011-08-28 09:50 7139604 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2584799026-3689701089-3967051187-1001-8192.dat - 2011-04-17 12:57 . 2011-08-27 20:05 7139604 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2584799026-3689701089-3967051187-1001-8192.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-04-17 05:55 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760] "IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696] "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-10 135664] R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-10 135664] R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-12-27 31124344] R3 netr7364;Stuurprogramma voor RT73 USB draadloze LAN-kaart voor Vista;c:\windows\system32\DRIVERS\netr7364.sys [x] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] R4 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-04-08 312400] R4 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584] R4 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336] R4 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-04-17 305520] R4 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-03-18 2320920] R4 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x] S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-04-23 867360] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-03-08 250368] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] . . Inhoud van de 'Gedeelde Taken' map . 2011-08-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-10 16:52] . 2011-08-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-10 16:52] . 2011-08-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2584799026-3689701089-3967051187-1001Core.job - c:\users\Thomas.leeters\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-11 10:52] . 2011-08-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2584799026-3689701089-3967051187-1001UA.job - c:\users\Thomas.leeters\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-11 10:52] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-05-10 12:10 134384 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-04-17 05:58 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-29 9913376] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.be/ mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0813&m=aspire_5741g&r=27360910f455l04h4z175t56m2j860 mLocal Page = c:\windows\SysWOW64\blank.htm IE: &Verzenden naar OneNote - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105 IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000 IE: Free YouTube Download - c:\users\Thomas.leeters\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html IE: {{878AC5FC-BE78-4bae-896C-7F75B790A71E} - c:\program files (x86)\PokerStars.BE\PokerStarsUpdate.exe TCP: DhcpNameServer = 192.168.0.1 . - - - - ORPHANS VERWIJDERD - - - - . WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files\Alwil Software\Avast5\AvastSvc.exe c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE . ************************************************************************** . Voltooingstijd: 2011-08-28 12:01:14 - machine werd herstart ComboFix-quarantined-files.txt 2011-08-28 10:01 ComboFix2.txt 2011-08-27 20:12 . Pre-Run: 562.422.571.008 bytes beschikbaar Post-Run: 561.988.214.784 bytes beschikbaar . - - End Of File - - 508FBD26CB0926CE6501B8C78F8175D7

combofix is uiteindelijk gelukt, hier het logje: ComboFix 11-08-27.01 - Thomas.leeters 27/08/2011 22:00:08.3.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.3959.2764 [GMT 2:00] Gestart vanuit: c:\users\Thomas.leeters\Downloads\ComboFix.exe AV: avast! Antivirus *Disabled/Outdated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Outdated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2011-07-27 to 2011-08-27 )))))))))))))))))))))))))))))) . . 2011-08-27 20:05 . 2011-08-27 20:05 -------- d-----w- c:\users\Thomas\AppData\Local\temp 2011-08-27 20:05 . 2011-08-27 20:05 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-08-26 10:56 . 2011-08-26 10:56 -------- d-----w- c:\users\Thomas\AppData\Local\Windows Live 2011-08-24 07:29 . 2011-07-09 05:26 2048 ----a-w- c:\windows\system32\tzres.dll 2011-08-24 07:29 . 2011-07-09 04:29 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2011-08-23 12:56 . 2011-08-23 12:56 388096 ----a-r- c:\users\Thomas.leeters\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-08-23 12:56 . 2011-08-23 12:56 -------- d-----w- c:\program files (x86)\Trend Micro 2011-08-23 12:30 . 2011-08-23 12:30 -------- d-----w- c:\users\Thomas.leeters\AppData\Roaming\Malwarebytes 2011-08-23 12:29 . 2011-07-06 17:52 41272 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys 2011-08-23 12:29 . 2011-08-23 12:29 -------- d-----w- c:\programdata\Malwarebytes 2011-08-23 12:29 . 2011-08-23 12:29 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-08-23 12:29 . 2011-07-06 17:52 25912 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-08-10 17:50 . 2011-08-25 19:13 -------- d-----w- c:\users\Thomas.leeters\AppData\Local\PokerStars.BE 2011-08-10 17:50 . 2011-08-16 19:56 -------- d-----w- c:\program files (x86)\PokerStars.BE 2011-08-03 12:17 . 2011-08-03 12:17 0 ---ha-w- c:\users\Thomas.leeters\AppData\Local\BITD83C.tmp . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-08-23 08:02 . 2011-05-26 19:12 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-07-24 21:23 . 2011-07-24 21:23 0 ----a-w- c:\windows\SysWow64\ConduitEngine.tmp 2011-07-16 04:26 . 2011-08-12 18:20 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2011-06-11 03:07 . 2011-07-13 23:43 3137536 ----a-w- c:\windows\system32\win32k.sys 2011-06-07 06:55 . 2011-04-26 09:44 20040 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys . . ((((((((((((((((((((((((((((( SnapShot@2011-08-23_13.29.57 ))))))))))))))))))))))))))))))))))))))))) . + 2009-07-14 04:54 . 2011-08-27 20:06 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54 . 2011-08-23 13:31 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54 . 2011-08-23 13:31 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2011-08-27 20:06 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2011-08-23 13:31 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2011-08-27 20:06 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-05-06 11:13 . 2011-08-27 20:08 53938 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-08-27 19:57 33572 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-09-20 19:34 . 2011-08-25 11:36 12838 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2584799026-3689701089-3967051187-1001_UserData.bin - 2010-06-21 05:56 . 2011-08-23 13:00 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-06-21 05:56 . 2011-08-27 18:31 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-06-21 05:56 . 2011-08-23 13:00 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-06-21 05:56 . 2011-08-27 18:31 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2011-08-27 18:31 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2011-08-23 13:00 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-08-24 07:29 . 2011-07-09 05:29 49664 c:\windows\servicing\GC64\tzupd.exe - 2011-04-28 09:11 . 2010-11-20 13:25 49664 c:\windows\servicing\GC64\tzupd.exe + 2009-07-14 04:46 . 2011-08-27 18:05 91888 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat + 2011-02-14 08:14 . 2011-08-27 15:40 35088 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe - 2011-02-14 08:14 . 2011-08-13 08:06 35088 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe + 2011-02-14 08:14 . 2011-08-27 15:40 18704 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe - 2011-02-14 08:14 . 2011-08-13 08:06 18704 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe - 2011-02-14 08:14 . 2011-08-13 08:06 20240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe + 2011-02-14 08:14 . 2011-08-27 15:40 20240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe + 2011-08-24 07:51 . 2011-08-24 07:51 10240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\ed59e15a2a29d02c59dc383215cc85fc\System.Xml.Serialization.ni.dll + 2011-08-24 07:51 . 2011-08-24 07:51 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\1a9bcef8abe20b3c0d53c535d680350f\System.Windows.Presentation.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\0ee56d53077b281408cbf186e80ab175\System.Web.ApplicationServices.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\d53f3bf7a26f69ae3ad77f6732ebf9cf\System.AddIn.Contract.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\fbc331d848cf65928cc84de68eba079f\Microsoft.VisualC.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 28160 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\efffe1a223f8c52598b66ce3c1492462\Microsoft.Office.Tools.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 55808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\1c30d75751f7cda4856e1bc73b389397\Microsoft.Office.Tools.v4.0.Framework.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\c551f53c6da4e594269e79636aef9f62\dfsvc.ni.exe + 2011-08-24 07:45 . 2011-08-24 07:45 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\28f42eb8dddc9fd54d468171a8d2461d\Accessibility.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\c6b3db0c20b5084c5faa4de93ed30217\UIAutomationProvider.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\e9272ea6a64cd812c8320c7b87814fb1\System.Windows.Presentation.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\cd5644f2280e5c2a1749e0ce6fae0537\System.Web.ApplicationServices.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\cdbb7fd4b5c595b7dc682af5e4166ac4\System.ServiceModel.Channels.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\da33e7954f3ae1ea50f0b0b5e59db38d\System.AddIn.Contract.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\d994eb0d6fb4f664d1ec9cb4898417e6\Microsoft.VisualC.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 21504 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\994060706bebe79eb216514595d03c1e\Microsoft.Office.Tools.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 45056 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\420c6043a4327ed29aafc0554f05f3bb\Microsoft.Office.Tools.v4.0.Framework.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\67fbebb14b4302bc29b24aa914c4587c\Accessibility.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\f4b0a65a0cad6d091bb903fb5f7f490d\System.Windows.Presentation.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\055b996b602a243bd4fcbdde8accc09c\System.Web.DynamicData.Design.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\b33d58d0716cc4abc0183d5167bcdc2e\stdole.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\fe5b12605f26ab36c26f0a3b3c475dd5\PresentationFontCache.ni.exe + 2011-08-24 07:41 . 2011-08-24 07:41 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\a2a31e05462d32f9f49febd89f515738\PresentationCFFRasterizer.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\66019b987c020943413851e959ca80c2\Microsoft.WSMan.Runtime.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\f2ee738d8439bf9025e1234c6afbd7e8\Microsoft.Windows.Diagnosis.SDHost.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\e29ed5ad26446d196b4a5ea7e69c74e9\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\b1c9507f23021701932fca6306d0df0f\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\a4d48547af11390249b96fd1526ea514\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\636902d124bb3ee04ded9773d46f1d5d\Microsoft.Windows.Diagnosis.SDEngine.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\6096a2f20727ede39049c5f3628b9a60\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\e64111bd10d5f438c9583b792b3607e1\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\c78067e68ea2345bf59bc0d99157d783\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 87040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\aa2d67a0cadfb018e5325282d8c595de\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\a310ccba8cb2d0f3612a3efda20991ed\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 71680 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\861fcede19bd5fb41989b3cc06e936fb\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\65ced0afa728e411a0c76ea34e923a47\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 93696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\5eb5def892971d14e62ab7811989d3c9\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 84992 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\5709232cb4981c50ccf649b0bc1a83b8\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 86016 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\1864125315a30c5aaa9e6173ad304b61\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\ae0e01377a99fd22dde3dbea057fadb1\Microsoft.VisualC.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b1a1a072eba978666cefe4f99fc6401c\Microsoft.MediaCenter.iTv.Hosting.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\cdbee55e7f6c60f5cb56d6ec9f083951\LoadMxf.ni.exe + 2011-08-24 07:38 . 2011-08-24 07:38 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\16951451968fea951a2294c0ff4bd49e\ehiUPnP.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\867a57af137c4a524067cdbbf09766e0\ehiTVMSMusic.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\0c6cb1fd7a82938112cbea2c22e433df\dfsvc.ni.exe + 2011-08-24 07:35 . 2011-08-24 07:35 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\23ea8465ac746c69a6ed7fdf628d3e9c\Accessibility.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\66bf22d787e954e8b8c7fae7e102f9ed\WindowsLiveWriter.ni.exe + 2011-08-24 07:24 . 2011-08-24 07:24 81408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\be5d569caf396e249c17414d48d0fbce\WindowsLive.Writer.Passport.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\4a63fb97b3c648a28b8047697869ee7d\UIAutomationProvider.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\3ef94ae15e7d80bb818934265bb90c10\System.Windows.Presentation.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\dd2bb107a0bbac08a0ccaf93c8bb7490\System.Web.DynamicData.Design.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\54d33aa6cf3af2d6e28c7d46c0ce363f\System.ComponentModel.DataAnnotations.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e88e6ace53ab318210c1657483321e40\System.AddIn.Contract.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\cd32e850b908317981c109dd20a0d5b2\stdole.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\fe7afc935e0c66172577a1ded815993b\PresentationFontCache.ni.exe + 2011-08-24 07:28 . 2011-08-24 07:28 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\e5c56e2a79ebb350e0aa6805f4d5e649\PresentationCFFRasterizer.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\69b036f1479a9aa93430f2d1676032b2\napcrypt.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\ab2d4de59dee683a2f77123f671839ba\Microsoft.WSMan.Runtime.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\8a102c44ccfe60d131d7e350d149bf85\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\7ce6ebef5427853ecb5bd68da29f1fdd\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\405aa271df15b8ce1b0b970f37687152\Microsoft.Windows.Diagnosis.SDEngine.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\3442a002e4e5d93ca3895a29ba7adb74\Microsoft.Windows.Diagnosis.SDHost.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\20c20811d44ba8c9513f2f2ba96d7047\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\09a9791efe9f32a50bd01346f0b05666\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\034ab6a3d60fdfba641443f16efdf309\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\2ac41c859d5e5e84993a555e3eeaea90\Microsoft.Vsa.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\fa0ab046907e7ed154ce2ba749eebb52\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f356c4455ca50bd2b3d1707214229ad8\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ed51eed8990eaa5f896179536246e2da\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c7c2e573bd21ae78a0bac9bb3f22c567\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 43008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c5a915e87a37fdedf41ac24ee5f97bb1\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b282b2b3144437e0322d3c6c29e734d6\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a5ecad302fc05bdd3c4c1588888e9c6f\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\52c0087e6b085b9071b76bf892fb0486\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2bbedf650eb7a3c6aa2fc83595c95fd7\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1187f5edea526bfdc96a8ef9bee76566\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll + 2011-08-24 07:22 . 2011-08-24 07:22 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\f7ce61c1a288adc4c39512d9f6767daf\Microsoft.VisualC.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\b1e0b0f1963de66a8a88932ecd2542e8\Microsoft.Office.InfoPath.Permission.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\9152d7f0adafac97d853647ca783b8e4\Microsoft.Build.Framework.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\5c219cc49d452997a91d916309511e68\Microsoft.Build.Framework.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\ipdmctrl\78b07cfe3bef06b79e3acb960e619566\ipdmctrl.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\f7c52c2952cfb202ee40a3177a92f084\IAStorDataMgrSvc.ni.exe + 2011-08-24 07:25 . 2011-08-24 07:25 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\ac010bace23545b3a5b1825e5c7b046e\ehiUserXp.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\027211443c6da8187fe92e682c048cd5\dfsvc.ni.exe + 2011-08-24 07:22 . 2011-08-24 07:22 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\b614f2d2f13857c09c98b02944fc1c41\Accessibility.ni.dll + 2010-09-10 14:57 . 2011-08-26 10:55 8594 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2584799026-3689701089-3967051187-1000_UserData.bin - 2011-08-23 13:28 . 2011-08-23 13:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-08-27 20:06 . 2011-08-27 20:06 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-08-23 13:28 . 2011-08-23 13:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-08-27 20:06 . 2011-08-27 20:06 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-08-24 07:34 . 2011-08-24 07:34 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\ae9328346705878ddce9806a617e22fb\System.Xml.Serialization.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\6e92d6acd61891c52bb02c5fc21d9c73\dfsvc.ni.exe + 2010-09-16 21:53 . 2011-08-27 15:22 249278 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin + 2010-09-10 15:26 . 2011-08-27 19:49 264918 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2010-06-21 06:21 . 2011-08-23 22:53 701564 c:\windows\system32\perfh013.dat - 2010-06-21 06:21 . 2011-08-23 08:28 701564 c:\windows\system32\perfh013.dat - 2009-07-14 02:36 . 2011-08-23 08:28 616008 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2011-08-23 22:53 616008 c:\windows\system32\perfh009.dat + 2010-06-21 06:21 . 2011-08-23 22:53 133564 c:\windows\system32\perfc013.dat - 2010-06-21 06:21 . 2011-08-23 08:28 133564 c:\windows\system32\perfc013.dat - 2009-07-14 02:36 . 2011-08-23 08:28 106388 c:\windows\system32\perfc009.dat + 2009-07-14 02:36 . 2011-08-23 22:53 106388 c:\windows\system32\perfc009.dat + 2009-07-14 04:45 . 2011-08-27 17:58 417432 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 04:45 . 2011-07-14 11:10 417432 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 05:01 . 2011-08-23 13:27 390636 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2009-07-14 05:01 . 2011-08-27 20:05 390636 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-08-27 15:39 . 2011-08-27 15:39 217864 c:\windows\Installer\{90120000-006E-0413-0000-0000000FF1CE}\misc.exe - 2011-06-09 12:01 . 2011-06-09 12:01 217864 c:\windows\Installer\{90120000-006E-0413-0000-0000000FF1CE}\misc.exe - 2011-02-14 08:14 . 2011-08-13 08:06 888080 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe + 2011-02-14 08:14 . 2011-08-27 15:40 888080 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe + 2011-02-14 08:14 . 2011-08-27 15:40 272648 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe - 2011-02-14 08:14 . 2011-08-13 08:06 272648 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe - 2011-02-14 08:14 . 2011-08-13 08:06 922384 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe + 2011-02-14 08:14 . 2011-08-27 15:40 922384 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe + 2011-02-14 08:14 . 2011-08-27 15:40 845584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe - 2011-02-14 08:14 . 2011-08-13 08:06 845584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe - 2011-02-14 08:14 . 2011-08-13 08:06 217864 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe + 2011-02-14 08:14 . 2011-08-27 15:40 217864 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe + 2011-02-14 08:14 . 2011-08-27 15:40 159504 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe - 2011-02-14 08:14 . 2011-08-13 08:06 159504 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe + 2011-08-24 07:51 . 2011-08-24 07:51 336896 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\d3536aadcda3bf1628fd5cb912f0d4df\WindowsFormsIntegration.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\0bbce3d1912c29cdb65f7c7bfdfd8a01\UIAutomationTypes.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\65616f4785226d28371ccf809e213fa6\UIAutomationProvider.ni.dll + 2011-08-24 07:51 . 2011-08-24 07:51 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\cd62d82bb2e0ebe93c68c701a281d204\UIAutomationClient.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\70a6db2664fa1f7e996c58f81f63754d\System.Xml.Linq.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\321d4a33b1363649a45f47f8fbc107c9\System.Windows.Input.Manipulations.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\fbffd4e050d2e397f5b51bcbede33326\System.Transactions.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\41a328f3f1e01dd6d6c45ec27dfb8d12\System.ServiceProcess.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\8a3044d7b76d748396c01aec083a1b01\System.ServiceModel.Routing.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\4288f4e2ad790e4510344567c092ca68\System.ServiceModel.Channels.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\481e4462ee5dbf73d7f92d14505eabca\System.Security.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\93ea6aa98aa92eb1c27130599616cd48\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 987648 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\e01521d8c282ad1e79f9c8334cd4baef\System.Runtime.Remoting.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\0615b26e34fbb01ff661b827e8d80c97\System.Numerics.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\836b59a54e74d2a9350d9dbcbee44e7d\System.Net.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\e530f9f49dcc8196f1333f65d9e17a51\System.Messaging.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\ca30070d69a7575b9b3637fde765b533\System.Management.Instrumentation.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\1af1dc859f12d724d15c2f8ac01b7d84\System.IO.Log.ni.dll + 2011-08-24 07:49 . 2011-08-24 07:49 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\a236c6b9a7fa2dd99f840ffedb685464\System.IdentityModel.Selectors.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\a8ac353249c61750e03ace04cce91d12\System.EnterpriseServices.Wrapper.dll + 2011-08-24 07:45 . 2011-08-24 07:45 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\d0cb2f5412272538eead0de22ee232c1\System.Dynamic.ni.dll + 2011-08-24 07:49 . 2011-08-24 07:49 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\87240375600b6608957d4877632deacd\System.DirectoryServices.Protocols.ni.dll + 2011-08-24 07:49 . 2011-08-24 07:49 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\22c569ca3bf7de3f386881fdaaefcf5c\System.Device.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\848a93911e91183c5833abac3c19b8c7\System.Data.DataSetExtensions.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\9ef51cbff9a0a281683413ff85bdc67e\System.Configuration.Install.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\e5886d887164c57e7bbcff9eace93aff\System.ComponentModel.DataAnnotations.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\a618c2c8cd6669a1f562d583de816049\System.AddIn.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\c06a32f20b3a8c40bb9ee4caaa7f791f\System.Activities.DurableInstancing.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\898051ff62d86ecbb43c730672a5ce01\SMSvcHost.ni.exe + 2011-08-24 07:47 . 2011-08-24 07:47 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\2b6fb4f3fe65c3384cd588c84d5f426a\SMDiagnostics.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\e7d3ae8b894e645f195435b0d0cca3d5\PresentationFramework.Luna.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\9faf962dcc325fbdecde08f2b4b4de12\PresentationFramework.Classic.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\89a56671c51182608a36ddabf7f11579\PresentationFramework.Aero.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\1144c8dd74e20a85a56ea12af48cc763\PresentationFramework.Royale.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 992256 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\af9f6fd2787899c561547e314b3712ff\Microsoft.VisualStudio.Tools.Applications.ServerDocument.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 475136 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\94af5e7480a7f745bd33a83c1484ced4\Microsoft.VisualStudio.Tools.Applications.Hosting.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 169984 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\6a0777ea2673e1b8d4ac9f3de16eeb00\Microsoft.VisualStudio.Tools.Applications.Runtime.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 247808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\4c3405ca6f5c1fed56fcaae6ba983d6d\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 864256 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\466033d0c79f39de0812aa375a6e77a5\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 232448 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\01625938eaa5df5a4166536939a5ed1c\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 422400 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\78dbb63ddb830c7b67915373a26a64cb\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\2c6b57b8d66eb686e39af125a7b9cd3f\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\c59bf0bd748d734ef0668a001f0f85f3\Microsoft.Office.Tools.Common.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 993280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\8885efa7b18a2eab10dcfce765eaee82\Microsoft.Office.Tools.Excel.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 199680 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\597b47dbdf9549606c8b8c7ba4e5f8f3\Microsoft.Office.Tools.Outlook.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 408064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\4df7d2af363c49ab6b08314bcc9f03f9\Microsoft.Office.Tools.Outlook.Implementation.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\4b8193e798a848470e64c71f71a230a4\CustomMarshalers.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\e1a1ca8e083319c2aecdf2cea7d5489d\WindowsFormsIntegration.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\4561769ac12ff5a3eef12e03a95207be\UIAutomationTypes.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\83e11b45798a2c1bf78cb7504a1b8943\UIAutomationClient.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\45606586b386ad899defae108f79f48c\System.Xml.Linq.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\97feafa7af5c3964731c0f4e06d0de81\System.Windows.Input.Manipulations.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\171f57730eadc9ac70d359ab70329a16\System.Transactions.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\3315cff0da494162b30990d1cbd9f145\System.ServiceProcess.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\79980f4c7acee7162024585533155c90\System.ServiceModel.Routing.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\174e6e590cfa6c69048fb6ef3e3aa55f\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 762880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\2891fbac0ac9ea4b8913d8ce8f5c5b03\System.Runtime.Remoting.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\b1b73e12266b2c96ca3d3792c752bb63\System.Net.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\44e32c4e91e0ac6f08031476dd49d385\System.Messaging.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\96ea071001fc589a8c3f886445b6fd72\System.Management.Instrumentation.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\37faa9c9b586663715b69d15e8efedb7\System.IO.Log.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\e6956069857d9b47bbd31b3bc918663e\System.IdentityModel.Selectors.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\a5d048b7980407a6101b93c279cf01a6\System.EnterpriseServices.Wrapper.dll + 2011-08-24 07:32 . 2011-08-24 07:32 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\a5d048b7980407a6101b93c279cf01a6\System.EnterpriseServices.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\8eefd2f82a8b639fe0574d1ce1224a25\System.DirectoryServices.AccountManagement.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\00852705d7ed3c9ec62653d5e3a26ed3\System.DirectoryServices.Protocols.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\53877d1b7a8de883074e389c9508c021\System.Device.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\47a330a8310304919b713a0beb040b2b\System.Data.DataSetExtensions.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\546b1900e6b71ca617c54c7588ad2862\System.Configuration.Install.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\28a1ad4ad64ceffbeb050fb94c6df196\System.ComponentModel.DataAnnotations.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\ce2f90be69c41e1388cbcaff66faad0c\System.AddIn.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\49a6f51454795768aec4f53a54c974b5\System.Activities.DurableInstancing.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\0d6c1b09d7f0c9444e115dd2b0818b7d\SMSvcHost.ni.exe + 2011-08-24 07:32 . 2011-08-24 07:32 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\f8ff5d1ec407e8f63905912daf855d55\SMDiagnostics.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 738304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e62972a3d6d29d6387a085e303d5cb88\Microsoft.VisualStudio.Tools.Applications.ServerDocument.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 708096 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\c4cbdb9518e418d82b783dede6925754\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 364544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\97208a02b0308a204632a0d9e77eb05f\Microsoft.VisualStudio.Tools.Applications.Hosting.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\3d4cc7525488b2fdee9f078362ec5c6e\Microsoft.VisualStudio.Tools.Applications.Runtime.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 210432 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\313c84965ffec9f122ea730a6cf2f05c\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 177152 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\033f8791a71a3246fa465fc923ef6e44\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e99454ace463ea09e9eb114d5723c880\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\382b33fb3ba8376f4e7b89c63222aa75\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 336384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\e782d557a715c1b02311525a1cf05eac\Microsoft.Office.Tools.Common.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 676864 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\cea394029a4070f1f85d54fa308dfcad\Microsoft.Office.Tools.Word.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 730624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\6f282a67e2a9ef35ce0ecefd36ba593c\Microsoft.Office.Tools.Excel.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 152064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\1b6d6f16c1dd9039c3f9f9f477a75efa\Microsoft.Office.Tools.Outlook.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 864768 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\13d90fe461ffd748da6a15f451121054\Microsoft.Office.Tools.Common.Implementation.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 312320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\01738bddb368608daacde6f7784327d9\Microsoft.Office.Tools.Outlook.Implementation.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\edc8d8d8eba69cdf5dd90207a5c68c68\CustomMarshalers.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\bfb29034e69046d05e1ff758c0fcda27\WsatConfig.ni.exe + 2011-08-24 07:45 . 2011-08-24 07:45 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\1c573262c14ba755ac6ccab0945711cb\WindowsFormsIntegration.ni.dll + 2011-08-24 07:41 . 2011-08-24 07:41 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\d4f8fb1bc01621e0b7a19ee0954917d5\UIAutomationTypes.ni.dll + 2011-08-24 07:41 . 2011-08-24 07:41 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\427b7ac4bbe49410e494979928d9b560\UIAutomationProvider.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\ad5c1e837ea97e2e6401fd4fac9d99d4\UIAutomationClient.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\50621c88a5345fd8fcb959a9fc25f084\TaskScheduler.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\ebd55d35d25cf10e6e24453238d3c5eb\System.Xml.Linq.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\0bf594db7ec4fd4754f7535f24b254aa\System.Web.Routing.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\f46bab10a21dd08219f69cf58c6e5766\System.Web.RegularExpressions.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\09199f147cafe8a357cbcf68f6098a77\System.Web.Entity.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\b21a0f26bff3d30480050c41f4f786f6\System.Web.Entity.Design.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\adfea0205de0aeb42c9bd80be40d7c47\System.Web.DynamicData.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\b6cc0ab04339d7cf16e83487e921fb71\System.Web.Abstractions.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\5fbe4fcbb4259d38e57006802c957e23\System.Transactions.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\d69463a51d3536074bff664c0a097b1f\System.ServiceProcess.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\f330ec3533f2f0cb4c6dacd3a3e48044\System.Security.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\ddd7749c4f3e68ca556795b7cd2a7a00\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\0646a91d680e840b201eb7a96876f053\System.Net.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\f53e6c7d027431c87b5839036a2f977d\System.Messaging.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\b9e961f0a21c8afe6213218fdbc8f8a2\System.Management.Instrumentation.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 569856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\49a6af02ac362d95ccf98068492053e5\System.IO.Log.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\4b21a062e82d08cf0ce61e7f1c8d1f2a\System.IdentityModel.Selectors.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\1f84610e9a8c80e23e82f82cc4a894a3\System.EnterpriseServices.Wrapper.dll + 2011-08-24 07:37 . 2011-08-24 07:37 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\2327e346f00d0f89825a86e691d84dcc\System.Drawing.Design.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\28d1d4c0f794a46ecdf34df502c3e20a\System.DirectoryServices.Protocols.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 629760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\5e0b2a3713da55d99450c9cad93c4d2f\System.Data.Services.Design.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\486d44582be2000df84c46e187a88e70\System.Data.DataSetExtensions.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\89adf5c48e4551ba19f324ee12780b89\System.Configuration.Install.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\1bcd63abfac2072c18ab799a37dd89cf\System.ComponentModel.DataAnnotations.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 889344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\268f6f10ba5e94d24677a1a68f97ac15\System.AddIn.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\fc738e6c257a4851a220b9660688c25f\System.AddIn.Contract.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\7706a4ac4bf3f09a2d0b655e363fa401\sysglobl.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\8103d9a6fe544e521f89b92d24ac298a\SMSvcHost.ni.exe + 2011-08-24 07:38 . 2011-08-24 07:38 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\c268879bbddc814fadfe497300c03752\SMDiagnostics.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\f89aa0bd7259a8fbe122539c26ccdd24\PresentationFramework.Royale.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\ed1fe56e5b41607f2b31091a11662f12\PresentationFramework.Luna.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\e197484e00ac02ef81220d0c8b6491e1\PresentationFramework.Aero.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 282624 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\0c098556b5184fe66c987547b512f00a\PresentationFramework.Classic.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\a04a8437f757b8da7a707e31702169d6\napsnap.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\711d1c8357619b22e5caffd9cab59736\napinit.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\644fd981e996dd2ba072cc6265a0b74b\naphlpr.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\fe39885123be43ee8b6f4c1ca669d49b\napcrypt.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\b75df85509061d9729506b8af64513f7\MSBuild.ni.exe + 2011-08-24 07:39 . 2011-08-24 07:39 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\c42d34f67692030a55a9bc64004e9041\MMCFxCommon.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 681984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\5db5412b8b9fdbe83b43a79b76cb39c6\Microsoft.WSMan.Management.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\de2193a90cfc32eed4ad1c78a99b8363\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\0836bcb90046e51c8bd055c0755bd57d\Microsoft.Vsa.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 124928 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d4d5d41cf6eef912eb0230988842c5fb\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 390656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d056d0cb42bbccc1021e51868972bbcc\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 232448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\cd54af9e5015a62fbad0b60460b182ee\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 499200 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\c65916749cde39fbe973df6d7d276932\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 209920 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\c14218583ce38161507507b8cf727c7e\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 495616 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\b82c906ea08d267ad3ab309e555bbd61\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 225280 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\aea04ed0f605316f6be788339f14ec7d\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 215040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\aa34f5c778d5af0f4a4efcacac940945\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 202752 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\9139f5736be52a098a86121a23bdf60a\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 956416 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\68178ccc877a0151449b6d59c044975c\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\679336a10a3630cc6ac56b5c01f1fe9c\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\54d9b7d8b83d9b3dc4bf97d632b9d5c5\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 305664 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\48862d9e40531be0552f7dc7f90e2c7d\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 270336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\2b54d704f1a3d7d66c38215ea4664f4d\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 773120 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\277d6cc7752ea18f1b8613b8e35a4138\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 226304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\0691af24db88fa786a6cc3f6286af94f\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\b3361f5be5cde787e5e6c67b1bf55684\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\d99d7734ec2e39696ac5ce7e7b2d76bd\Microsoft.PowerShell.Security.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\77160cddd8417526c586e13b529f68bf\Microsoft.PowerShell.GraphicalHost.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6a1869785554446d202d6f718d036a3e\Microsoft.PowerShell.Commands.Diagnostics.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\5c7ffe4abea4b5a400f768cad060835d\Microsoft.PowerShell.ConsoleHost.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\c4b939d55984f85d37fc5e8cc5790621\Microsoft.Office.Tools.v9.0.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\76dccd02a60615b86aa61254e1af6939\Microsoft.Office.Tools.Outlook.v9.0.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\f0cb734b7acfb102c57ed39f8918ce3d\Microsoft.MediaCenter.Mheg.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e4313e989939114d32f9254a74eee676\Microsoft.MediaCenter.Interop.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\87d3f8fed35fa164d0e5dabbcee46df8\Microsoft.MediaCenter.Playback.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\5ec49bda571c34526ad7db5ec7a201c4\Microsoft.MediaCenter.iTv.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\3ea7a7a15d59a1185b74f340f05c0b33\Microsoft.MediaCenter.Sports.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\1cbb6b9711bed2da17ae866cf2f58c31\Microsoft.MediaCenter.ITVVM.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 219648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\04b81e74cc96402e59800be2c13358f9\Microsoft.MediaCenter.iTv.Media.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 798720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\503235feed6b59fff53b29c9def81a5d\Microsoft.ManagementConsole.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\6c999c27e6724dd1d0a10202f3e52e57\Microsoft.Build.Utilities.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 244736 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\137428fc7e8ae3a1b733ffc45a3f3076\Microsoft.Build.Utilities.v3.5.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\748b8b1f294666450436cc174c0b0684\Microsoft.Build.Framework.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 121344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\4196ba1264bd52f324e01016716cbbe9\Microsoft.Build.Framework.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\8be3ef8d90c0f3e97437887dac5a8d78\Microsoft.Build.Conversion.v3.5.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft-Windows-H#\736323a581cc019ae2027f71dc496668\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\39e1e694a468028f2ca73994f76322d4\Mcx2Dvcs.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\d820c1a490dfb31933fd53f96514bbce\mcupdate.ni.exe + 2011-08-24 07:38 . 2011-08-24 07:38 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\428aa9c2151b0f385227c513c9497673\mcstoredb.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\614f7b9e9c362ac6d4175638ea2237d9\mcplayerinterop.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\7f8a262f2b6807a47517c1ea6e6b2a7b\mcGlidHostObj.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\0801a977b58776ed017238d4aaa7995e\MCESidebarCtrl.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\136009b4f22e65e77a916747429e599b\EventViewer.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\d313ec20c40b0fd3125b8e710f74556d\ehRecObj.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 661504 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\fb85aad5c54840d8c5a17ac30a2fdfd7\ehiWUapi.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 933888 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\af6c550e9382dba858ca65bb220799ea\ehiwmp.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 145408 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\244edb2f64f825975b8c70f34162e6a6\ehiUserXp.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 196096 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiiTv\b37be197d70d359e864bfffcca28fdb9\ehiiTv.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\b538d9ee6bfc71d120550427ccbe9e9e\ehiExtens.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 110080 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiBmlDataCarousel\ce8305e1973d5a65569d9757f5b59c29\ehiBmlDataCarousel.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 126976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiActivScp\440bebddd70e03b2548635373ad2b666\ehiActivScp.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\a267870c9fce983dca1c454fbde4cc7e\ehExtHost.ni.exe + 2011-08-24 07:38 . 2011-08-24 07:38 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\3a7ccf1084f8a546e8f7e7eecf33045c\ehCIR.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\436b0b38f271b905950f054c548a5722\CustomMarshalers.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\1af89517b158d3a94c051dfbc4ae9769\ComSvcConfig.ni.exe + 2011-08-24 07:35 . 2011-08-24 07:35 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\61dd29a580f09716118ef51868ad9edd\BDATunePIA.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\41ccc24e8cc5f2474ce1105f0b8ebb78\WsatConfig.ni.exe + 2011-08-24 07:25 . 2011-08-24 07:25 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\a8045967b5aeda93cad09897479f3dee\WindowsLiveLocal.WriterPlugin.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e63d47ee82fa97964d00039893c8cf86\WindowsLive.Writer.BrowserControl.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 374272 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d796d184a98ba34d27c293bf4fb3fb69\WindowsLive.Writer.Interop.Mshtml.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 156672 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b8bd14197d9b1e4e70050a4e7e6564f5\WindowsLive.Writer.HtmlParser.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 665600 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a0493277ae6c1d62c037511566002602\WindowsLive.Writer.Interop.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\99b0e05dddfd77231f552ecde3ffec4f\WindowsLive.Writer.FileDestinations.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9461d16c415bef24d73aa628181765ea\WindowsLive.Writer.Interop.SHDocVw.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 780800 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8d0f1aba900e1122517ee1dccf351b15\WindowsLive.Writer.Controls.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8ce2a9eb783f1d04d3e3ac236b186bf5\WindowsLive.Writer.Instrumentation.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 101376 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\85ce2e7e4a111a8336082095a8f104c1\WindowsLive.Writer.Api.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 122368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\598b03cb1a0b8fda89970077f749cb33\WindowsLive.Writer.Extensibility.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 891392 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4eca83e886cb4c57869d416de17c2487\WindowsLive.Writer.HtmlEditor.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 326144 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3b8c0cec3bac70dffc3441c8305a3621\WindowsLive.Writer.SpellChecker.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\36564c86fd316a77c20162c76cd48327\WindowsLive.Writer.Mshtml.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 871424 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\04c4d9b258b16a98d5a47fce34940de1\WindowsLive.Writer.BlogClient.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 223232 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\95340a43291565121fe6b6951e905835\WindowsLive.Client.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\bb04320c07e3c71ac2d18cb382d97f41\WindowsFormsIntegration.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\8b3b6ed74cb3d94695b0eaf94a362d42\UIAutomationTypes.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\d63e6fb41aa502bf6724043e6ac1367f\UIAutomationClient.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\1c1f731e8684204f56f37cc66b5bc60d\TaskScheduler.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\b096bd83a66a8d1dcd761747730cc64c\System.Xml.Linq.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\efca1fd7e9df8e24c007cd003346e0e5\System.Web.Routing.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\66126f1309396535f2ba93f752016902\System.Web.RegularExpressions.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6c551bf6f7716b0f527f4274fb04cc2e\System.Web.Extensions.Design.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\03eda303152940cb2e78a0030cf572b5\System.Web.Entity.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\7b93fe55a51f2a6010365a17546170bc\System.Web.Entity.Design.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\979bf2cab91b5d50aef1525ca96ff690\System.Web.DynamicData.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\067516a8300bb5fdbddb38cb9f6c934e\System.Web.Abstractions.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4e03de263f1fec29c4a7fa18986d0868\System.Transactions.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\86a2ec5efbcfcd1105475364d7975b15\System.ServiceProcess.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 680448 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\c0d90fae726bca4f272ac9a2906b3741\System.Security.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e47bab16c150f9697594d8fd65532578\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e3e3b399b69c569ab1ed3b0ace2c8c20\System.Runtime.Remoting.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\e16f381a978103ac92bf64b99716c857\System.Net.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\ac9fe083b4cf11aab834d6654cdeb429\System.Messaging.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\b95b509ac74958a1d8568293c3dc43ba\System.Management.Instrumentation.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e083fdbcc88f5850290f2cf65ae1efae\System.IO.Log.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\736226563a7f564e4629e34d52b3d6c6\System.IdentityModel.Selectors.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\3a17291e4caa1a23f652129fc88e3dda\System.EnterpriseServices.Wrapper.dll + 2011-08-24 07:24 . 2011-08-24 07:24 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\3a17291e4caa1a23f652129fc88e3dda\System.EnterpriseServices.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\41d65038625368f089fc66b8a544f934\System.Drawing.Design.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\3c443dc0b8879bfe286a07f15060787f\System.DirectoryServices.Protocols.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\1f6d55f401cfe7041f9fd3b4aebffa9b\System.DirectoryServices.AccountManagement.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 462336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\0896f955eb175a4e0bfff73b94f57619\System.Data.Services.Design.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 763392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\8f130b77f8f47e23cd748679173bdf33\System.Data.Entity.Design.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\ad3f6eae36ce486187311de6836b4904\System.Data.DataSetExtensions.ni.dll + 2011-08-24 07:22 . 2011-08-24 07:22 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\36d0ed3f2a65b9d67933ed46dfcd2ccb\System.Configuration.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\81423a8207177ffcfac843f9d7b662d2\System.Configuration.Install.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\fc5edc97ac59d0d0d45bb9b623b9927b\System.AddIn.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\88f0efe11487b846342fdee227f3da52\sysglobl.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4a33aa8911167af5fcba60f1b02ad45b\SMSvcHost.ni.exe + 2011-08-24 07:25 . 2011-08-24 07:25 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\b907dd027bbe99c5035b1d6355f83998\SMDiagnostics.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9997cb70ba2c05761f6196f65dae7588\PresentationFramework.Royale.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7f94f6b13f92f1e093716d3e15bf86d1\PresentationFramework.Aero.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\4c9a05d7eea9a270d51ffe6f9466d8f8\PresentationFramework.Luna.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 226816 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\16c2dcb95bda37843824b6b0d82d8ef6\PresentationFramework.Classic.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\96f4e4b87e625a1c36e4de2efb6f7dcc\napsnap.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\a4e2648f8b4962f4c9660b2085290b06\napinit.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\8fcb3f856afb930c5add8498cadb4d13\naphlpr.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\46d3794a4a440f22cff17197648f6887\MSBuild.ni.exe + 2011-08-24 07:26 . 2011-08-24 07:26 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\71b549afed40761f8be9075ca9ad8dd7\MMCFxCommon.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 531968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\fd457e872296300765fa1a6d96a6683c\Microsoft.WSMan.Management.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\dbc964098b85c62754162beb53bc6040\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 337408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d3507fe27d8923dd419bfd835581752d\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\cb55adb7d7698949fff47e5645fc231d\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c35af2e781284aaa8950788a83537d49\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9695b47898d63ded758b233fca5ab614\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9415b026c58ef2fc5927a383162e9e54\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 363008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\920670ad5bab1aa4e45bb7a8a8049b58\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\76ee89a9fc6963c5243918faf33baca8\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6b120f8db932a314de97c4cd216f8784\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 179200 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5e69c177313d606c5893719a939bc3a6\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\56ab67c8ad8db581380f509ee6e967d6\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 650752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\54d7a44cb461c49ef840d8d3773ec9bd\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4a8e5945ad34fa301703ba1a919726ff\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\26782c75c2833772fc4ba7a0836c3ce4\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 161792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\04044d74e0b5f8cd581d47f3e94757e0\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\b96b80f166196dc0e148c73dc8452d25\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 786432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\f5b347719df9fa791416713aa0fd342f\Microsoft.PowerShell.Commands.Management.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\bebf12cadd8b4fbd9c8135405c64794b\Microsoft.PowerShell.GraphicalHost.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b3b22c86860de1de178e294bc4bd534d\Microsoft.PowerShell.Commands.Diagnostics.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\512a72ebad1bd44687d8134cd46e1a5c\Microsoft.PowerShell.Security.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\1e510aa4de5a90cd44ee2443ae45e097\Microsoft.PowerShell.ConsoleHost.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\f3deb153b5be9e7c1474aa4a497d6783\Microsoft.Office.Tools.Word.v9.0.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\edd549d98da0959e7a29932088e83b6f\Microsoft.Office.Tools.Outlook.v9.0.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\58a8452f9bf9f47e742eeed9d951d4cd\Microsoft.Office.Tools.v9.0.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 816128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\3b1442ae3959af1bc1695305ef78a777\Microsoft.Office.Tools.Common.v9.0.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 114688 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\ccbf66ec12101cf41d402935d718c8c2\Microsoft.Office.InfoPath.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 206848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\8080fc65d803683de4960874b9bbec70\Microsoft.Office.InfoPath.Client.Internal.Host.Interop.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 375808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\2f73526cf49866599e79835c8ac3142f\Microsoft.Office.Interop.InfoPath.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 268800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\6df7ba56d808e4bbe9d45ece56d18e6c\Microsoft.Office.BusinessApplications.Diagnostics.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\9658825555dc2c9af1a8ce12e6da2cd7\Microsoft.ManagementConsole.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 343552 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessD#\b341501db3e266d7b9825929e80995c4\Microsoft.BusinessData.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\c52f2b0958be337e88f37a141e18be78\Microsoft.Build.Utilities.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\3f194ebe9a0c1e0903b32f663cb53556\Microsoft.Build.Utilities.v3.5.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e62aa0d898b65d0d831c11b4f56c0785\Microsoft.Build.Engine.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\78fb000aaaba73f34dfa9028b7caef8c\Microsoft.Build.Conversion.v3.5.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\fe969316614223634cba1c5544f4e3dd\mcstoredb.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 170496 c:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\52517d2f16f11abff498a2de9d02d892\IsdiInterop.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 452608 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\dae47f02aad4d53001c2343625e13f6d\IAStorUtil.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 176640 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\7ab16d9a4b9fef4ee565e56b7ca60c2e\IAStorDataMgr.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\31231127c783eddf25c3d21761e1a15c\EventViewer.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\aceba77dc2230519296726c4a1ce9518\ehRecObj.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\85464949c28a523e3b6cf24679a9776c\ehiVidCtl.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\2ddabd185f08f72237aaa70edaffa6cc\ehiProxy.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\536082f3ff1f0f6fcd7bd58878098071\ehiExtens.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\42621a148e3691a5a992816cb49bee0a\ehExtHost32.ni.exe + 2011-08-24 07:25 . 2011-08-24 07:25 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\d17a5e7b3e9c6ea0f5c66093771b35eb\CustomMarshalers.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a28cd0923e6ff03f952950eb713f03b3\ComSvcConfig.ni.exe + 2011-08-24 07:22 . 2011-08-24 07:22 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\482f9bd79c20ab87b6fa0fa2737d6aa3\BDATunePIA.ni.dll - 2009-07-14 04:45 . 2011-08-13 08:28 7113258 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2009-07-14 04:45 . 2011-08-26 10:58 7113258 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2011-04-17 12:57 . 2011-08-27 20:05 7139604 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2584799026-3689701089-3967051187-1001-8192.dat + 2011-06-02 19:07 . 2011-08-27 17:57 1971548 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2584799026-3689701089-3967051187-1000-8192.dat + 2011-08-27 17:57 . 2011-08-27 17:57 1172124 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2584799026-3689701089-3967051187-1000-12288.dat + 2011-02-14 08:14 . 2011-08-27 15:40 1172240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe - 2011-02-14 08:14 . 2011-08-13 08:06 1172240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe - 2011-02-14 08:14 . 2011-08-13 08:06 1165584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe + 2011-02-14 08:14 . 2011-08-27 15:40 1165584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe + 2011-08-24 07:46 . 2011-08-24 07:46 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\2b21f937d40320cabc3c85c031db88d8\WindowsBase.ni.dll + 2011-08-24 07:51 . 2011-08-24 07:51 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\d14a6bf514550fdc219f580348599c58\UIAutomationClientsideProviders.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\8e4323f5bfb90be4621456033d8b404b\System.Xml.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\2a3c95561c3de429c3c0e7a53a920c45\System.Xaml.ni.dll + 2011-08-24 07:51 . 2011-08-24 07:51 5627904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\b346685f479e27aadce1793789333bfb\System.Windows.Forms.DataVisualization.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 2236416 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\4ee71342f3eadce770c5b227e0e72015\System.Web.Services.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\7211feffc35222c34e5d6b9e97f1c009\System.Speech.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\e449cb587c51f7bec5fcff8964844151\System.ServiceModel.Activities.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\5af78d8b92c4a0b7f90dd99a8742c565\System.ServiceModel.Discovery.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\2c3f2f005761a596bf9e7262b76735a3\System.Runtime.Serialization.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\d850328fdb0d5b403f2b4a7752ec43da\System.Runtime.DurableInstancing.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\35bb0262c48890be46a1861b63bed32d\System.Printing.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\73c6deea16d8ee87e65156bb9ef90e0b\System.Management.ni.dll + 2011-08-24 07:49 . 2011-08-24 07:49 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\6d8ec822ecf54529d04b1342aef58dd3\System.IdentityModel.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\a8ac353249c61750e03ace04cce91d12\System.EnterpriseServices.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 2290688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\0237eaa2a9c71060227e6d310a887c07\System.Drawing.ni.dll + 2011-08-24 07:49 . 2011-08-24 07:49 1217536 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\8440779374dcb4d650179a61139684b0\System.DirectoryServices.AccountManagement.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\1b6321bae09adccce41aedcd91fcea9b\System.DirectoryServices.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 2402816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\f0cadc34a72bbfb06158ee14e3f3b97d\System.Deployment.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\20d5aeb1486af05bd5885e431e8cf531\System.Data.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\84e0e94c07d03148371aad1c9212daba\System.Data.SqlXml.ni.dll + 2011-08-24 07:49 . 2011-08-24 07:49 1798656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\c66f4672f3f96cac1796475fc53084f7\System.Data.Services.Client.ni.dll + 2011-08-24 07:49 . 2011-08-24 07:49 3386368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\f985d985539603a521e6051cbef283d7\System.Data.Linq.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\d17a133036827281e02df99161f83199\System.Configuration.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\87cacc996ae318f4bd1e126f8271b8c1\System.ComponentModel.Composition.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\6f46271408743437680ef855e26ba561\System.Activities.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\b5dc8079f2701e3cf6a139deca5c0982\System.Activities.Presentation.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\bb930355f9bcc3bc388397471ae88492\System.Activities.Core.Presentation.ni.dll + 2011-08-24 07:48 . 2011-08-24 07:48 4232704 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\8df1ec785fb8923566f2ce612f108cee\ReachFramework.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 2056192 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\944136b49e38259ce517a6fe3e71fa4d\PresentationUI.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\f35f1a86bb6cdfc3547ff815dddfa629\Microsoft.VisualBasic.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\b915c536f129912ec5b50a187d663103\Microsoft.VisualBasic.Activities.Compiler.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 1843200 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\7caaf5543210b5383267ef450c2173f7\Microsoft.VisualBasic.Compatibility.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\41248e69f60429253a19267620bd5dcd\Microsoft.Transactions.Bridge.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 1070080 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\edf7fd7f761ee3e1d666b6743d0340db\Microsoft.Office.Tools.Word.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 2034688 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\63eb74db1e4f27b7a476960e1ca2bc11\Microsoft.Office.Tools.Excel.Implementation.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\397ac9eb696bb0c2dedc3c49019be45a\Microsoft.Office.Tools.Word.Implementation.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 1117184 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\2b65f3d980348c95794d801187ff4f54\Microsoft.Office.Tools.Common.Implementation.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\a266703ae4763423c8e41fd9e375bf76\Microsoft.JScript.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\db2aa89dbd68dddefe47c70b35c045cf\Microsoft.CSharp.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\669115f8fe730f98f292c8abed23c838\UIAutomationClientsideProviders.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\a5b14a2322f4277e0e7c1d62c27a7ffd\System.Xaml.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\a9d43636c91e84bb9a0825158789921b\System.Windows.Forms.DataVisualization.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 1885696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\f8b86322ad4046025e6883556827c5b6\System.Web.Services.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\51de02725f2c44331425ba6030d29fc6\System.Speech.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\eb9c7a63a1cd05de9e92c67fa02caf53\System.ServiceModel.Discovery.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 1392640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\b3052a55279bcdc92f44efb788b57708\System.ServiceModel.Activities.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\05dbc6b70dd59d178de0a00ab955e764\System.Runtime.Serialization.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\89eb5f37818a0a82434c6e040111272b\System.Runtime.DurableInstancing.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\68dcedaf4fbb2bd6fc6a61b36c93f475\System.Printing.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\ebc5de59bf2fb4b3bf9d858de8ea27f4\System.Management.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\191dfee6a11a5fbdcb8ff14f4239705a\System.IdentityModel.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\90672651880a389e77b402e20941ac24\System.DirectoryServices.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\8a7fc9e6edb5e07eae6cbd6568ee0da4\System.Deployment.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 1343488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\6b39a8dc9f9c5aaff611388ec2f60d41\System.Data.Services.Client.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 4129792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\886d14640252ed51bc42c94b41d771d1\System.Activities.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\35a91e95e3640641bd5b2febdc55e1dc\System.Activities.Presentation.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 1547264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\031a48aad47992e6fb52d99e70980f41\System.Activities.Core.Presentation.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 2907136 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\fcbc56f32c1eb5cf47000ee7d0b98296\ReachFramework.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 1640448 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\933e9bacab865bcc539b3102c061544a\PresentationUI.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\dc3352d862576e43a856622821914444\Microsoft.VisualBasic.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\9cb2b42b6001866f16191ab68e318972\Microsoft.VisualBasic.Activities.Compiler.ni.dll + 2011-08-24 07:32 . 2011-08-24 07:32 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\7232a9a62160aaee97e2bf455c1f3cc3\Microsoft.VisualBasic.Compatibility.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\4e8069eb9d8fbf67d99180bdbdd252c3\Microsoft.Transactions.Bridge.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1551872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\fde1d84d911c73d8cb0b12a415c95511\Microsoft.Office.Tools.Excel.Implementation.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1117696 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\2ed85fa55b32defda4e924a8d10fe645\Microsoft.Office.Tools.Word.Implementation.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\437212946d004929e99ab879c2ae8834\Microsoft.JScript.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 4962816 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\64fc9675d94bda9f45731097f140c4f6\WindowsBase.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 1459712 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\b8bf364f0522a662055f670bf4e86c8f\UIAutomationClientsideProviders.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\318b11a6b944c9ef2998d374c9d5bda8\System.Xml.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\394711b95ef17f6a7314eca2aba756e7\System.WorkflowServices.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\eafeb90e353fd552565511cdeb26bebf\System.Workflow.Runtime.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\ec790f92424cdcec713fff09d475bf2b\System.Workflow.ComponentModel.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\906d5186dd5dbb570648cd1e3dfed22e\System.Workflow.Activities.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\29bf4a2b9e4edd846f35872642dd0f36\System.Web.Services.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\fe69339f03e5b94b558c688512246a5e\System.Web.Mobile.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\b513632337cadf6b2a8f8b6975c7d96f\System.Web.Extensions.Design.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 3042304 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\9c1f2e29f7b5f1d398405640ef4b1c7c\System.Web.Extensions.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\31bbf607c61e3b9aeced14cb984ea9f6\System.Speech.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\667a561422e2ccf10daef0a5dc6c8043\System.ServiceModel.Web.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\50faf7f472bfc6d562696341df45b3c9\System.Runtime.Serialization.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\caddda432d02308c325519a8e2f09dc4\System.Runtime.Remoting.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\3bc065deeefef52f1ff59628ec665ea7\System.Printing.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 1472000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\36723de72c78b2791de226253580f107\System.Management.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 1444352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\df0cb96e6d087500c9210b33be2c91c9\System.IdentityModel.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\1f84610e9a8c80e23e82f82cc4a894a3\System.EnterpriseServices.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 2311168 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\ad884485b63f08acfaf791d2dfaadd32\System.Drawing.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\8255d3cb1b25eaa6e645322daa1f680c\System.DirectoryServices.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 1230848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\11a932eb07432edfc6f9de22753337ba\System.DirectoryServices.AccountManagement.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\e2a96543efb1769b60dc0ff9e292c4bb\System.Deployment.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 8681472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\d71dfde5e15e6b4271c9ce4c514775b2\System.Data.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 3463680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\ab0d4419e1826292c56e565405151290\System.Data.SqlXml.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 2805760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\f7483e84119e0be9074377e731ffbe0c\System.Data.Services.ni.dll + 2011-08-24 07:44 . 2011-08-24 07:44 1868288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\16932309d9a552f362c85ac0adfe1607\System.Data.Services.Client.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\33f6d511288b5a1aaa011e52ba3821fd\System.Data.OracleClient.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\82b491f0b4a55a29d4de0e7648a43707\System.Data.Linq.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\22600cdf0f670e44b03b243af68cd76d\System.Data.Entity.Design.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 3315200 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\5f7c48b31971fee1af48dd20c7dd7033\System.Core.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\df2bfb30ffdbfbb49d2c5ef6fc763578\System.Configuration.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\b2c3d06da323643af4ab68768cfe8880\ReachFramework.ni.dll + 2011-08-24 07:41 . 2011-08-24 07:41 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\0f3e15bd55e4f4171604e889eac1c819\PresentationUI.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 1884160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\ff71ee8681938634786fac49359c8b15\PresentationBuildTasks.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\2f9ac667c184e068523d6047153f2d91\Narrator.ni.exe + 2011-08-24 07:42 . 2011-08-24 07:42 2327552 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\92414dfe464e98f09057245b6dd04d05\MMCEx.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\c66470a9076fc188a35ec7643aa1ee2e\MIGUIControls.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 1877504 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\5f7d20769d7707bf07110afe96a3289a\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\4b85c3384fdda12490074283615d4723\Microsoft.VisualBasic.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\deae3fdab784ca275290c02a3288a33d\Microsoft.Transactions.Bridge.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f1cc6b5a2520e6b946198cd51498dff9\Microsoft.PowerShell.Commands.Utility.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\b1d791e971f5c23b5ab0bf61bcfe60a0\Microsoft.PowerShell.Editor.ni.dll + 2011-08-24 07:42 . 2011-08-24 07:42 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\42c4e6bd35af9d592663de61cb8c8108\Microsoft.PowerShell.GPowerShell.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\332067cce1149bb2008d5af79ef8024d\Microsoft.PowerShell.Commands.Management.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 1093632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\c3c2acebdcbc2d03003d5724db74ea22\Microsoft.Office.Tools.Common.v9.0.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 1186304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\ad52422c41d84e02ebeb46de9256567e\Microsoft.Office.Tools.Word.v9.0.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 1875456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\9187a3737d4e2bd1993b3ffa4ee4655f\Microsoft.Office.Tools.Excel.v9.0.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\fc417f7e196b7d7d5e717cb892f16144\Microsoft.MediaCenter.UI.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\ce834b9729a66c3ef9ec5c4350e6ab59\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\cc0f76a8214ddc88b56c6c14146c2555\Microsoft.MediaCenter.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\8f1d674c4309a0c29fb708ba7a5e54c4\Microsoft.MediaCenter.Shell.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\52e7f067d8a3358baeb77ac8cd988c0e\Microsoft.MediaCenter.Bml.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 3213312 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\95184c861c38e940aeadc4276a8596e6\Microsoft.JScript.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\0e8c24abc2dbbafc9519f64571a39433\Microsoft.Ink.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\638f3afd3c310ed7d048e60cc1daf57e\Microsoft.Build.Tasks.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 2682880 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\58e96fd5359c0f3d6ed8f350ff721f87\Microsoft.Build.Tasks.v3.5.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\f2ae54183322e3710c0344c44fd512d8\Microsoft.Build.Engine.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\37c906e0ea6325e55c1f222aa4a5462b\Microsoft.Build.Engine.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\c0018e4aaaa7eebb4fadaf5220854fe8\mcstore.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 4088320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\0d18e8a503ef9e5bc676d89c7d508d7f\mcepg.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 2184192 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\864ef3de707640f5a889efc4425e5c40\ehiVidCtl.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 1201664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\60b7bccb6de4c8d42f2eaf1d0e7a9216\ehiProxy.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 2193408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ea9a1c2394a99526c4022be3bcf3dd91\WindowsLive.Writer.CoreServices.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 1285632 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d559619451978927e2cfb063be33a866\WindowsLive.Writer.ApplicationFramework.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 1346560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cd894de864d0e5d306e81bb53b449338\WindowsLive.Writer.Localization.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 7026176 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\945ef5fdf1b7522f18037e3777584423\WindowsLive.Writer.PostEditor.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 3347968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6124dbbfd45927c4a6226d6e6bca6253\WindowsBase.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\92104881c09380b6b86ec656e8c502f6\UIAutomationClientsideProviders.ni.dll + 2011-08-24 07:22 . 2011-08-24 07:22 7963648 c:\windows\assembly\NativeImages_v2.0.50727_32\System\3da7c6c1a0f26ae91883fd8b03ec192d\System.ni.dll + 2011-08-24 07:22 . 2011-08-24 07:22 5453312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\16d2854bf69d59d94e64a918365705f1\System.Xml.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\a6409b4be5018e5cbad7ef197d4237e1\System.WorkflowServices.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9af55d8d4cb44eabe53e940244864daa\System.Workflow.Runtime.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 4515840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\f40e6a02c815ee66b49d4f48802d9d9c\System.Workflow.ComponentModel.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\82e83c3d87d72cafffc60c55585daaaa\System.Workflow.Activities.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\873449038f590bc102daf0effd94c952\System.Web.Services.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4de6ad3bad2dc4fbbbd33b16b1a7b219\System.Web.Mobile.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\871d3f0cc83d73a106151257ee74a4aa\System.Web.Extensions.ni.dll + 2011-08-24 07:31 . 2011-08-24 07:31 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\2c7c32228442440e4c23f772fd64b24b\System.Speech.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 1707008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\0139ae05cabaf2ac25cc85279e187e0a\System.ServiceModel.Web.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e285e2af5e0e8ac7d91936b2cb18542f\System.Runtime.Serialization.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\b2834d89c14922370db32e5e4564e03a\System.Printing.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 1051136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\6e9a08576157b4aeb91a3aaa452fcb00\System.Management.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 8872960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\f2b1857a7db371f0417a84e8ca25f450\System.Management.Automation.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 1083392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\5ab23d203c8bfade7160ea915719c730\System.IdentityModel.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9e87dd8fe5d0f925d80a6a6eaf74fdb9\System.Drawing.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ac4d095d0371999fa879f8167e9a82fa\System.DirectoryServices.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\364993b444187c2dd988cab2fb0f98c6\System.Deployment.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 6611456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\b7d1c271ec6b4df64c95563fc81ffc2f\System.Data.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\6c9eef4471f39022ab9418637c7ee9e1\System.Data.SqlXml.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\702efea190a39de2bacb81cbaf32de99\System.Data.Services.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 1378816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3da17a7980d13fae329f2c3a77797b08\System.Data.Services.Client.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\12dc224b1ddff3b0c5b3fce1ac958a3f\System.Data.OracleClient.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\1992ecfb8eb3318820e3d28df55bee6a\System.Data.Linq.ni.dll + 2011-08-24 07:30 . 2011-08-24 07:30 9921536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\301160f0d81368efb2f79e9b714ec505\System.Data.Entity.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 2297856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\ebdaeeb5ef1a6209d67a2f70fcaf5cd5\System.Core.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\a09206d231b222c74183c7255bcacb35\ReachFramework.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7f0d64056a690c2fe26071b7368b4c56\PresentationUI.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 1451520 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\c16377318357fb4fcda87c1015815a76\PresentationBuildTasks.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\ca760a3cb6cabbdf11c1aa42e5b79ee9\Narrator.ni.exe + 2011-08-24 07:29 . 2011-08-24 07:29 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\97051ca60f5e2ea7927adebcb2af9097\MMCEx.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\40f947b2a4ecb8ba656104c3f77bb79b\MIGUIControls.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 1300992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0e8e6ead7f4a6b149f12335a81660a83\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll + 2011-08-24 07:29 . 2011-08-24 07:29 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\47a4b624c147aae197214d4ee5f0661b\Microsoft.VisualBasic.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\0d7a48003dd32151b3518b3ee7f13350\Microsoft.Transactions.Bridge.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\79af41ccc6bdc25ede7b249ae32f0101\Microsoft.PowerShell.Editor.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\348ff55789cc23b72b19036f01903b63\Microsoft.PowerShell.GPowerShell.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\21f675cbc3d058e68f7f6371644da25f\Microsoft.PowerShell.Commands.Utility.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 1354752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\72330d1836050b7535fea60871b4bdc9\Microsoft.Office.Tools.Excel.v9.0.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 1183744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\8a85f93b08c1aae133cdbc8d732a5f64\Microsoft.Office.Interop.InfoPath.SemiTrust.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 1787904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\84908c9110960e9d0f809eee7b8dde57\Microsoft.Office.InfoPath.Client.Internal.Host.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 2002944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\f070c900d871043b6b5b1b26951a8c0e\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:27 4752384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\9d1c81def1b2571e7f0a06f2b6de6e0c\Microsoft.Office.BusinessApplications.SyncServices.ni.dll + 2011-08-24 07:27 . 2011-08-24 07:27 3238400 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\209c4306118dd09449ad3c999e0b4457\Microsoft.Office.BusinessData.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 1564672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\1abad6c42c534a95f9c2001e387c8e62\Microsoft.Office.BusinessApplications.Runtime.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\ffec5408d56ba9fb311518d6ec521691\Microsoft.MediaCenter.UI.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\81359c52225ae557ddf7dbdf3c0bf048\Microsoft.MediaCenter.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 2335744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\35138a36b7d07f4d37adf96745ef80cb\Microsoft.JScript.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\9c17eb4bfbca7719a4f10bbd3473d07d\Microsoft.Ink.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\4b45a3a1f24d0d773f9f8fb2d8ce8164\Microsoft.Build.Tasks.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\01de5c2808a0c30578614dae24c5d591\Microsoft.Build.Tasks.v3.5.ni.dll + 2011-08-24 07:26 . 2011-08-24 07:26 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\db9750e8aae34d7bd25b76564f2cebd5\Microsoft.Build.Engine.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\9004890e93911c7612aa5f218c474618\mcstore.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 3025920 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\e0683c0b9e68c44011a1f4b70b85239f\mcepg.ni.dll + 2009-07-14 02:34 . 2011-08-25 11:51 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat - 2009-07-14 02:34 . 2011-08-13 08:22 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat + 2011-04-17 12:57 . 2011-08-26 10:51 33411584 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2584799026-3689701089-3967051187-1001-4096.dat + 2011-08-24 07:48 . 2011-08-24 07:48 17290752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\65c3e4d26ac857162658b81b1efffb19\System.Windows.Forms.ni.dll + 2011-08-24 07:50 . 2011-08-24 07:50 24551936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\48ed28e415c976c7adfb2c5ceeaeedb2\System.ServiceModel.ni.dll + 2011-08-24 07:49 . 2011-08-24 07:49 18480128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\529f1a1a0f3e9e994eb3356b55924f3c\System.Data.Entity.ni.dll + 2011-08-24 07:45 . 2011-08-24 07:45 10439168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\3c24931e3b4e97b6b49c4d459ba8c552\System.Core.ni.dll + 2011-08-24 07:47 . 2011-08-24 07:47 24406528 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\d0abeeb299ca73f7afc5312a00e0bf22\PresentationFramework.ni.dll + 2011-08-24 07:46 . 2011-08-24 07:46 15907328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\de5aaef4bd369972fea5ba6ff7d3e264\PresentationCore.ni.dll + 2011-08-24 07:34 . 2011-08-24 07:34 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\7c889dd8c65d78ac522452073bc7033f\System.ServiceModel.ni.dll + 2011-08-24 07:33 . 2011-08-24 07:33 13346816 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\e9c933d8ef2a0a89cbab8d9fdf7f3369\System.Data.Entity.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 10618880 c:\windows\assembly\NativeImages_v2.0.50727_64\System\3e6eefab37b44e147db80a3c34f0ac05\System.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 17379840 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\0737590c91350bf9ce7416cbbf789bc7\System.Windows.Forms.ni.dll + 2011-08-24 07:36 . 2011-08-24 07:36 15249408 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\01e1dddd3684f57d19699eeb1fad3892\System.Web.ni.dll + 2011-08-24 07:38 . 2011-08-24 07:38 23913984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\962330ba0685ac1176b611bc052d0ca7\System.ServiceModel.ni.dll + 2011-08-24 07:40 . 2011-08-24 07:40 11900928 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\34d1eab899a35bb7a0075c0b0b3d5938\System.Management.Automation.ni.dll + 2011-08-24 07:37 . 2011-08-24 07:37 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\9f162ee8ce0ec6b2a539b68041421911\System.Design.ni.dll + 2011-08-24 07:43 . 2011-08-24 07:43 13760000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\7bf5c7476d8c8255a30a4cda0c9f43be\System.Data.Entity.ni.dll + 2011-08-24 07:41 . 2011-08-24 07:41 19195392 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\90e096ee99f6b0760c47016f862cf5a8\PresentationFramework.ni.dll + 2011-08-24 07:41 . 2011-08-24 07:41 16540160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\72ea2b7db0ac2d9407d8ab2ed257c62a\PresentationCore.ni.dll + 2011-08-24 07:35 . 2011-08-24 07:35 15568384 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\8f7abb6f7384aad8fc43659820726eab\mscorlib.ni.dll + 2011-08-24 07:39 . 2011-08-24 07:39 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\857d393b4e25062d5ba400f3422b74e6\ehshell.ni.dll + 2011-08-24 07:23 . 2011-08-24 07:23 12433408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\0d43c5e77ee7b8466700b16d7e7d4bb7\System.Windows.Forms.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 11819520 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\33b601c8e2cf4993e68d763389246197\System.Web.ni.dll + 2011-08-24 07:25 . 2011-08-24 07:25 17478656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\052fc9c848a7f4630980ae0fd7a282e0\System.ServiceModel.ni.dll + 2011-08-24 07:24 . 2011-08-24 07:24 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\cbd362859e818467b75aaf0287af0fe2\System.Design.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 14339072 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c60906a715473ceccf93f0559527e84d\PresentationFramework.ni.dll + 2011-08-24 07:28 . 2011-08-24 07:28 12234752 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\5566b57732d9edea236f54d06149835a\PresentationCore.ni.dll + 2011-08-24 07:22 . 2011-08-24 07:22 11490304 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\16b68fcaff063835ae0ee348a1201f2a\mscorlib.ni.dll . -- Snapshot teruggezet naar huidige datum -- . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{87775fdb-6972-41f9-ae51-8326e38cb206}"= "c:\program files (x86)\uTorrentBar_NL\prxtbuTor.dll" [2011-03-28 176936] . [HKEY_CLASSES_ROOT\clsid\{87775fdb-6972-41f9-ae51-8326e38cb206}] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-04-17 05:55 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760] "IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696] "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-10 135664] R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-10 135664] R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-12-27 31124344] R3 netr7364;Stuurprogramma voor RT73 USB draadloze LAN-kaart voor Vista;c:\windows\system32\DRIVERS\netr7364.sys [x] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] R4 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-04-08 312400] R4 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584] R4 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336] R4 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-04-17 305520] R4 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-03-18 2320920] R4 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x] S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-04-23 867360] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-03-08 250368] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] . . Inhoud van de 'Gedeelde Taken' map . 2011-08-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-10 16:52] . 2011-08-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-10 16:52] . 2011-08-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2584799026-3689701089-3967051187-1001Core.job - c:\users\Thomas.leeters\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-11 10:52] . 2011-08-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2584799026-3689701089-3967051187-1001UA.job - c:\users\Thomas.leeters\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-11 10:52] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-05-10 12:10 134384 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-04-17 05:58 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-29 9913376] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.be/ mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0813&m=aspire_5741g&r=27360910f455l04h4z175t56m2j860 mLocal Page = c:\windows\SysWOW64\blank.htm IE: &Verzenden naar OneNote - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105 IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000 IE: Free YouTube Download - c:\users\Thomas.leeters\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html IE: {{878AC5FC-BE78-4bae-896C-7F75B790A71E} - c:\program files (x86)\PokerStars.BE\PokerStarsUpdate.exe TCP: DhcpNameServer = 192.168.0.1 . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-Locked - (no file) Toolbar-Locked - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files\Alwil Software\Avast5\AvastSvc.exe c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE . ************************************************************************** . Voltooingstijd: 2011-08-27 22:12:34 - machine werd herstart ComboFix-quarantined-files.txt 2011-08-27 20:12 . Pre-Run: 558.952.017.920 bytes beschikbaar Post-Run: 558.650.970.112 bytes beschikbaar . - - End Of File - - 0B223EFEDDCD4D12723F587033C98B30 kan ik combofix nu best verwijderen of nog even laten staan?

heb het gevonden. hier nieuw logbestandje: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:29:18, on 27/08/2011 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\SysWOW64\rundll32.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe C:\Windows\SysWOW64\NOTEPAD.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRA~1\ALWILS~1\Avast5\aswWebRepIE.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRA~1\ALWILS~1\Avast5\aswWebRepIE.dll O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Users\Thomas.leeters\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: PokerStars.be - {878AC5FC-BE78-4bae-896C-7F75B790A71E} - C:\Program Files (x86)\PokerStars.BE\PokerStarsUpdate.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9811 bytes

de run as administrator staat er bij mij niet, heb windows 7, geen vista, miss daardoor?

die combofix krijg ik maar niet geïnstalleerd! Na enkele omwegen staat het embleempje nu wel op mijn bureaublad maar als ik erop klik krijg ik een 'NSIS Error' (geen idee wat dit is maar het zorgt er wel voor dat het niet opent :s) deze melding is het (heb het even overgetypt) installer integrity check has failed. common causes include incomplete download and damaged media. Contact the installer's author to obtain a new copy. more information at: Why do I get NSIS Error - NSIS

nieuw logje hijackthis: is alles er nu af? Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 14:05:58, on 25/08/2011 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Thomas.leeters\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe C:\Windows\SysWOW64\DllHost.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: (no name) - AutorunsDisabled - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRA~1\ALWILS~1\Avast5\aswWebRepIE.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - (no file) O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRA~1\ALWILS~1\Avast5\aswWebRepIE.dll O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Users\Thomas.leeters\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: PokerStars.be - {878AC5FC-BE78-4bae-896C-7F75B790A71E} - C:\Program Files (x86)\PokerStars.BE\PokerStarsUpdate.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file) O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file) O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 10281 bytes En die combofix krijg ik maar niet geïnstalleerd! Na enkele omwegen staat het embleempje nu wel op mijn bureaublad maar als ik erop klik krijg ik een 'NSIS Error' (geen idee wat dit is maar het zorgt er wel voor dat het niet opent :s) ---------- Post toegevoegd om 14:10 ---------- Vorige post was om 14:04 ---------- deze melding is het (heb het even overgetypt) installer integrity check has failed. common causes include incomplete download and damaged media. Contact the installer's author to obtain a new copy. more information at: Why do I get NSIS Error - NSIS

correctie: hijackthis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 14:58:52, on 23/08/2011 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10v_ActiveX.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe C:\Windows\SysWOW64\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN | Hotmail | Messenger | Nieuws, sport, entertainment, video, lifestyle, auto en nog veel meer, dat is MSN ! R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer wordt aangeboden door MSN and Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - (no file) R3 - URLSearchHook: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\prxtbuTor.dll F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: (no name) - AutorunsDisabled - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRA~1\ALWILS~1\Avast5\aswWebRepIE.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - (no file) O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\PROGRA~1\ALWILS~1\Avast5\aswWebRepIE.dll O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [Google Update] "C:\Users\Thomas.leeters\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Users\Thomas.leeters\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: PokerStars.be - {878AC5FC-BE78-4bae-896C-7F75B790A71E} - C:\Program Files (x86)\PokerStars.BE\PokerStarsUpdate.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file) O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file) O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12180 bytes

Hey ik heb sinds kort een zeer trage laptop, vooral bij het afspelen van videos, hapert hij de hele tijd (vreselijk irritant). Heb al eens wat rondgelezen op het forum en hierbij mijn logs: mbam: Malwarebytes' Anti-Malware 1.51.1.1800 www.malwarebytes.org Databaseversie : 7544 Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 23/08/2011 14:45:14 mbam-log-2011-08-23 (14-45-14).txt Scantype: Snelle scan Objecten gescand: 187281 Verstreken tijd: 5 minuut/minuten, 53 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 2 Registerdata geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerwaarden geïnfecteerd: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load (Trojan.Agent) -> Value: Load -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell.Gen) -> Value: Shell -> Quarantined and deleted successfully. Registerdata geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) en van hijackthis: Malwarebytes' Anti-Malware 1.51.1.1800 www.malwarebytes.org Databaseversie : 7544 Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 23/08/2011 14:45:14 mbam-log-2011-08-23 (14-45-14).txt Scantype: Snelle scan Objecten gescand: 187281 Verstreken tijd: 5 minuut/minuten, 53 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 2 Registerdata geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerwaarden geïnfecteerd: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load (Trojan.Agent) -> Value: Load -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell.Gen) -> Value: Shell -> Quarantined and deleted successfully. Registerdata geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Kan iemand mij verder helpen hoe ik m sneller kan maken? De geïnfecteerde dings zijn verwijderd bij MBAM btw.