Ga naar inhoud

Fm94

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    10

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Berichten die geplaatst zijn door Fm94

    BlueScreen / onverwacht opnieuw opstarten

    in Archief Windows 7

    Geplaatst:

    Beste leden,

    Op mijn Windows 7 computer (HP) heb ik al een aantal dagen een probleem.

    De PC valt om de kwartier ineens uit en komt er een blauw scherm, waarna de PC weer automatisch opstart. Dan komt er een melding in het scherm de onderstaande melding dat er een fout is opgetreden. En ik kan dan op een knop klikken om een oplossing te zoeken voor het probleem, maar als ik dat doe gebeurd er niets.

    Ik hoop dat iemand mij kan helpen. Alvast erg bedankt.

    Van de laatste twee keren dat het gebeurd is, heb ik de probleemhandtekeningen vermeld:

    Probleemhandtekening:

    Gebeurtenisnaam van probleem: BlueScreen

    Versie van besturingssysteem: 6.1.7601.2.1.0.256.48

    Landinstelling-id: 1043

    Aanvullende informatie over dit probleem:

    BCCode: 116

    BCP1: FFFFFA8002102010

    BCP2: FFFFF88003E2ACB0

    BCP3: 0000000000000000

    BCP4: 000000000000000C

    OS Version: 6_1_7601

    Service Pack: 1_0

    Product: 256_1

    Bestanden die helpen bij het beschrijven van het probleem:

    C:\Windows\Minidump\041814-22448-01.dmp

    C:\Users\Gebruiker\AppData\Local\Temp\WER-41605-0.sysdata.xml

    Lees de onlineprivacyverklaring:

    Windows 7 Privacyverklaring - Microsoft Windows

    Als de onlineprivacyverklaring niet beschikbaar is, lees dan onze offlineprivacyverklaring:

    C:\Windows\system32\nl-NL\erofflps.txt

    Probleemhandtekening:

    Gebeurtenisnaam van probleem: BlueScreen

    Versie van besturingssysteem: 6.1.7601.2.1.0.256.48

    Landinstelling-id: 1043

    Aanvullende informatie over dit probleem:

    BCCode: 116

    BCP1: FFFFFA8002475160

    BCP2: FFFFF88004044CB0

    BCP3: 0000000000000000

    BCP4: 000000000000000C

    OS Version: 6_1_7601

    Service Pack: 1_0

    Product: 256_1

    Bestanden die helpen bij het beschrijven van het probleem:

    C:\Windows\Minidump\041814-25880-01.dmp

    C:\Users\Gebruiker\AppData\Local\Temp\WER-42229-0.sysdata.xml

    Lees de onlineprivacyverklaring:

    Windows 7 Privacyverklaring - Microsoft Windows

    Als de onlineprivacyverklaring niet beschikbaar is, lees dan onze offlineprivacyverklaring:

    C:\Windows\system32\nl-NL\erofflps.txt

    Windows 7 wel of niet updaten?

    in Archief Windows Algemeen

    Geplaatst:

    Ik heb al sinds een paar weken een nieuwe PC gekocht met Windows 7 erop.

    Sinds dat ik hem heb gekocht geeft Windows Update aan dat er 156 belangrijke updates zijn. Automatisch updaten heb ik uitgezet.

    Maar mijn vraag is of het verstandig is om te updaten. Word bijvoorbeeld de pc er niet langzamer van? Of zijn er bepaalde updates die je beter niet kan downloaden?

    Alvast bedankt!

    Slaapstand wordt uitgezet door beweging muis

    in Archief Windows Algemeen

    Geplaatst:

    Hallo,

    Sinds kort heb ik een HP computer met Windows 7 Professional. Mijn oude Dell PC met Windows XP kon door middel van een muisklik en/of tik op de toetsenbord uit de slaapstand gehaald worden. Bij de computer die ik nu heb gaat die al uit de slaapstand bij een beweging van de muis. De optie bij de instelling van de muis (HP Optical, geen USB muis) heb ik het vinkje weggehaald die aangeeft dat de muis de PC uit de slaapstand kan halen. Ook heb ik al in de BIOS gekeken, maar daar kon ik volgens mij hierover niets vinden. Ik hoop dat iemand mij kan helpen.

    Mvg

    Rootkits op PC

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Hallo,

    Sorry dat ik een beetje laat reageer, maar alles is opgelost ja.

    Eén ding alleen nog: ik heb alleen nog problemen met het verwijderen van Combofix. Als ik bij uitvoeren intik: Combofix /Uninstall , dan gaat Combofix gewoon opnieuw scannen. Het mapje Qoobox heb ik wel verwijderd, maar dat komt ook terug dan.

    Rootkits op PC

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Log van Combofix:

    ComboFix 12-07-19.02 - Administrator 19-07-2012 17:23:21.2.1 - x86

    Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.510.291 [GMT 2:00]

    Gestart vanuit: c:\documents and settings\Administrator\Mijn documenten\Downloads\ComboFix.exe

    gebruikte Opdracht switches :: c:\documents and settings\Administrator\Bureaublad\CFScript.txt

    AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}

    .

    FILE ::

    "c:\windows\system32\drivers\neak.sys"

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\windows\TEMP\logishrd\LVPrcInj01.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    -------\Legacy_NEAK.SYS

    -------\Service_neak.sys

    -------\Service_xpsec

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-06-19 to 2012-07-19 ))))))))))))))))))))))))))))))

    .

    .

    2012-07-18 22:11 . 2012-07-18 22:11 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache

    2012-07-18 20:59 . 2012-05-11 14:44 521728 ------w- c:\windows\system32\dllcache\jsdbgui.dll

    2012-07-18 20:57 . 2011-08-16 10:45 6144 ------w- c:\windows\system32\dllcache\iecompat.dll

    2012-07-18 20:55 . 2012-05-11 14:44 2000384 ------w- c:\windows\system32\dllcache\iertutil.dll

    2012-07-18 20:55 . 2012-05-11 14:44 247808 ------w- c:\windows\system32\dllcache\ieproxy.dll

    2012-07-18 20:55 . 2012-05-11 18:14 11111424 ------w- c:\windows\system32\dllcache\ieframe.dll

    2012-07-18 20:55 . 2012-05-11 14:44 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll

    2012-07-18 20:50 . 2012-07-18 20:54 -------- dc-h--w- c:\windows\ie8

    2012-07-18 20:02 . 2012-07-18 20:02 -------- d-----w- c:\program files\MSXML 4.0

    2012-07-18 19:10 . 2012-07-18 19:10 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2

    2012-07-18 19:08 . 2012-01-11 19:07 3072 ------w- c:\windows\system32\iacenc.dll

    2012-07-18 19:08 . 2012-01-11 19:07 3072 ------w- c:\windows\system32\dllcache\iacenc.dll

    2012-07-18 19:06 . 2011-10-28 05:32 33280 ------w- c:\windows\system32\dllcache\csrsrv.dll

    2012-07-18 19:06 . 2009-04-20 17:09 45568 ------w- c:\windows\system32\dllcache\dnsrslvr.dll

    2012-07-18 19:06 . 2011-08-17 13:41 138496 ------w- c:\windows\system32\dllcache\afd.sys

    2012-07-18 19:06 . 2011-03-03 06:53 149504 ------w- c:\windows\system32\dllcache\dnsapi.dll

    2012-07-18 19:05 . 2011-01-27 11:57 677888 ------w- c:\windows\system32\dllcache\lhmstsc.exe

    2012-07-18 19:04 . 2011-10-10 14:21 692736 ------w- c:\windows\system32\dllcache\inetcomm.dll

    2012-07-18 19:03 . 2010-02-12 04:32 100864 ------w- c:\windows\system32\dllcache\6to4svc.dll

    2012-07-18 19:03 . 2009-11-27 16:10 48128 ------w- c:\windows\system32\dllcache\iyuv_32.dll

    2012-07-18 19:03 . 2009-11-27 16:10 85504 ------w- c:\windows\system32\dllcache\avifil32.dll

    2012-07-18 18:46 . 2009-03-21 14:09 1030656 ------w- c:\windows\system32\dllcache\kernel32.dll

    2012-07-18 18:45 . 2010-11-18 18:15 86016 ------w- c:\windows\system32\dllcache\isign32.dll

    2012-07-18 18:44 . 2009-03-08 02:33 726528 ----a-w- c:\windows\system32\dllcache\jscript.dll

    2012-07-18 18:42 . 2012-05-31 13:19 603136 ------w- c:\windows\system32\dllcache\crypt32.dll

    2012-07-18 18:42 . 2009-07-17 19:04 58880 ------w- c:\windows\system32\dllcache\atl.dll

    2012-07-18 18:42 . 2011-02-15 12:56 290432 ------w- c:\windows\system32\dllcache\atmfd.dll

    2012-07-18 18:42 . 2012-02-29 14:10 148480 ------w- c:\windows\system32\dllcache\imagehlp.dll

    2012-07-18 18:41 . 2010-03-05 14:42 65536 ------w- c:\windows\system32\dllcache\asycfilt.dll

    2012-07-18 18:41 . 2012-04-23 14:38 78336 ------w- c:\windows\system32\ieencode.dll

    2012-07-18 18:41 . 2012-04-23 14:38 78336 ------w- c:\windows\system32\dllcache\ieencode.dll

    2012-07-18 18:41 . 2010-07-05 20:32 2452872 ------w- c:\windows\system32\dllcache\ieapfltr.dat

    2012-07-18 18:41 . 2012-04-25 14:00 13824 ------w- c:\windows\system32\dllcache\ieudinit.exe

    2012-07-18 18:41 . 2012-04-23 14:38 380928 ------w- c:\windows\system32\dllcache\ieapfltr.dll

    2012-07-18 18:41 . 2012-04-23 14:38 63488 ------w- c:\windows\system32\dllcache\icardie.dll

    2012-07-18 18:41 . 2012-04-23 14:38 132608 ------w- c:\windows\system32\dllcache\extmgr.dll

    2012-07-18 18:40 . 2008-10-23 12:43 286720 ------w- c:\windows\system32\dllcache\gdi32.dll

    2012-07-18 18:38 . 2010-08-23 16:13 617472 ------w- c:\windows\system32\dllcache\comctl32.dll

    2012-07-18 18:35 . 2010-06-14 14:31 744448 ------w- c:\windows\system32\dllcache\helpsvc.exe

    2012-07-18 18:24 . 2009-10-15 16:38 81920 ------w- c:\windows\system32\dllcache\fontsub.dll

    2012-07-18 18:22 . 2009-02-09 11:00 473600 ------w- c:\windows\system32\dllcache\fastprox.dll

    2012-07-18 18:13 . 2010-12-22 12:32 301568 ------w- c:\windows\system32\dllcache\kerberos.dll

    2012-07-18 18:13 . 2009-06-24 10:28 92928 ------w- c:\windows\system32\dllcache\ksecdd.sys

    2012-07-18 18:12 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe

    2012-07-18 17:59 . 2010-01-13 14:06 87040 ------w- c:\windows\system32\dllcache\cabview.dll

    2012-07-18 17:52 . 2012-07-18 22:01 -------- d--h--w- c:\windows\$hf_mig$

    2012-07-18 16:35 . 2012-07-18 16:35 -------- d-----w- c:\windows\system32\wbem\snmp

    2012-07-18 16:35 . 2012-07-18 16:35 -------- d-----w- c:\windows\system32\xircom

    2012-07-18 16:35 . 2012-07-18 16:35 -------- d-----w- c:\program files\microsoft frontpage

    2012-07-12 20:04 . 2012-07-12 20:04 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes

    2012-07-12 20:03 . 2012-07-12 20:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

    2012-06-27 18:25 . 2012-06-28 09:53 -------- d-----w- c:\documents and settings\Administrator\Application Data\TeamViewer

    2012-06-27 18:24 . 2012-06-27 18:24 -------- d-----w- c:\program files\TeamViewer

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-07-18 22:14 . 2012-04-14 20:28 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

    2012-07-18 22:14 . 2011-05-25 12:04 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2012-06-13 13:55 . 2008-09-23 12:00 1875200 ----a-w- c:\windows\system32\win32k.sys

    2012-06-05 15:48 . 2008-09-23 12:00 1447936 ----a-w- c:\windows\system32\msxml6.dll

    2012-06-05 15:48 . 2008-09-23 12:00 1172480 ----a-w- c:\windows\system32\msxml3.dll

    2012-06-04 15:35 . 2008-09-23 12:00 222448 ----a-w- c:\windows\system32\muweb.dll

    2012-06-04 04:31 . 2008-09-23 12:00 153088 ----a-w- c:\windows\system32\schannel.dll

    2012-06-02 13:19 . 2008-09-23 12:00 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui

    2012-06-02 13:19 . 2008-12-30 14:38 329240 ----a-w- c:\windows\system32\wucltui.dll

    2012-06-02 13:19 . 2008-12-30 14:38 210968 ----a-w- c:\windows\system32\wuweb.dll

    2012-06-02 13:19 . 2008-12-30 14:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl

    2012-06-02 13:19 . 2008-12-30 14:38 35864 ----a-w- c:\windows\system32\wups.dll

    2012-06-02 13:19 . 2008-12-30 14:38 53784 ----a-w- c:\windows\system32\wuauclt.exe

    2012-06-02 13:19 . 2008-09-23 12:00 97304 ----a-w- c:\windows\system32\cdm.dll

    2012-06-02 13:19 . 2008-09-23 12:00 45080 ----a-w- c:\windows\system32\wups2.dll

    2012-06-02 13:19 . 2008-09-23 12:00 15896 ----a-w- c:\windows\system32\wuapi.dll.mui

    2012-06-02 13:19 . 2008-12-30 14:38 577048 ----a-w- c:\windows\system32\wuapi.dll

    2012-06-02 13:19 . 2008-09-23 12:00 15896 ----a-w- c:\windows\system32\wuaucpl.cpl.mui

    2012-06-02 13:19 . 2008-12-30 14:38 1933848 ----a-w- c:\windows\system32\wuaueng.dll

    2012-06-02 13:19 . 2008-09-23 12:00 24088 ----a-w- c:\windows\system32\wucltui.dll.mui

    2012-06-02 13:19 . 2008-09-23 12:00 18160 ----a-w- c:\windows\system32\mucltui.dll.mui

    2012-06-02 13:18 . 2008-09-23 12:00 275696 ----a-w- c:\windows\system32\mucltui.dll

    2012-05-31 13:19 . 2008-09-23 12:00 603136 ----a-w- c:\windows\system32\crypt32.dll

    2012-05-16 15:09 . 2008-09-23 12:00 916992 ----a-w- c:\windows\system32\wininet.dll

    2012-05-11 14:44 . 2008-09-23 12:00 43520 ------w- c:\windows\system32\licmgr10.dll

    2012-05-11 14:44 . 2008-09-23 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl

    2012-05-11 11:39 . 2008-09-23 12:00 385024 ------w- c:\windows\system32\html.iec

    2012-05-05 03:14 . 2008-09-23 12:00 2196992 ----a-w- c:\windows\system32\ntoskrnl.exe

    2012-05-05 03:14 . 2008-10-19 10:46 2073472 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2012-05-02 13:45 . 2008-12-30 14:32 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys

    2012-07-19 13:22 . 2011-09-03 13:50 136672 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ------- Sigcheck -------

    Note: Unsigned files aren't necessarily malware.

    .

    [-] 2008-09-23 12:00 . 753C7C72C1F462A009C877B41730F3EC . 1475072 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll

    .

    [-] 2008-09-23 . F7A21A4461BEF6414D9AF587C7D69E7D . 591872 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe

    .

    [-] 2008-09-23 . 15414691C4C039FF03377DC2A27AF592 . 518144 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll

    .

    [-] 2008-09-23 . C55B10AB1C2C8ED9F913BAFB3E296B4A . 1701888 . . [6.00.2900.5634] . . c:\windows\explorer.exe

    .

    [-] 2008-09-23 . A09F1B50133C856DA9AED1782FD9A64D . 218112 . . [5.1.2600.5512] . . c:\windows\regedit.exe

    .

    [-] 2008-09-23 . 6C4E087200E46977DFE54147A5B1FDD8 . 37376 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe

    .

    ((((((((((((((((((((((((((((( SnapShot@2012-07-18_16.35.38 )))))))))))))))))))))))))))))))))))))))))

    .

    + 2011-04-18 20:51 . 2011-04-18 20:51 51024 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f\vcomp90.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90rus.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90kor.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90jpn.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90ita.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90fra.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esp.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esn.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 53584 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 63312 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90deu.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90cht.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 35664 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90chs.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90u.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90.dll

    + 2011-05-13 18:17 . 2011-05-13 18:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll

    + 2011-05-13 17:45 . 2011-05-13 17:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll

    + 2011-05-13 23:06 . 2011-05-13 23:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll

    + 2011-05-13 23:23 . 2011-05-13 23:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll

    + 2011-05-13 16:37 . 2011-05-13 16:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll

    + 2009-06-28 21:42 . 2009-06-28 21:42 91656 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll

    + 2012-07-19 12:52 . 2012-07-19 12:52 16384 c:\windows\Temp\Perflib_Perfdata_434.dat

    + 2012-07-19 15:37 . 2012-07-19 15:37 16384 c:\windows\Temp\Perflib_Perfdata_404.dat

    + 2008-09-23 12:00 . 2009-06-25 08:42 54272 c:\windows\system32\wdigest.dll

    + 2008-09-23 12:00 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe

    + 2008-09-23 12:00 . 2009-06-15 11:10 82432 c:\windows\system32\tlntsess.exe

    + 2008-09-23 12:00 . 2009-06-15 10:45 79872 c:\windows\system32\telnet.exe

    + 2008-12-30 14:43 . 2009-01-07 16:21 26144 c:\windows\system32\spupdsvc.exe

    + 2008-09-23 12:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe

    + 2010-10-07 15:33 . 2009-02-27 01:42 66440 c:\windows\system32\spool\drivers\w32x86\msonpui.dll

    + 2010-10-07 15:33 . 2009-02-27 01:42 66440 c:\windows\system32\spool\drivers\w32x86\3\msonpui.dll

    + 2011-03-29 19:40 . 2009-01-07 16:21 18464 c:\windows\system32\spmsg.dll

    + 2012-07-18 17:28 . 2012-06-02 13:19 45080 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.6.7600.256\wups2.dll

    + 2012-07-18 17:28 . 2012-06-02 13:19 35864 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.6.7600.256\wups.dll

    + 2008-09-23 12:00 . 2009-06-25 08:42 56832 c:\windows\system32\secur32.dll

    + 2008-09-23 12:00 . 2009-02-06 10:36 35328 c:\windows\system32\sc.exe

    + 2008-09-23 12:00 . 2009-10-12 13:40 79872 c:\windows\system32\raschap.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 79872 c:\windows\system32\raschap.dll

    + 2010-03-30 22:16 . 2010-03-30 22:16 99176 c:\windows\system32\PresentationHostProxy.dll

    + 2008-09-23 12:00 . 2009-03-08 02:31 46592 c:\windows\system32\pngfilt.dll

    + 2008-09-23 12:00 . 2012-07-18 22:12 91688 c:\windows\system32\perfc013.dat

    - 2008-09-23 12:00 . 2012-06-26 00:31 91688 c:\windows\system32\perfc013.dat

    - 2008-09-23 12:00 . 2012-06-26 00:31 71846 c:\windows\system32\perfc009.dat

    + 2008-09-23 12:00 . 2012-07-18 22:12 71846 c:\windows\system32\perfc009.dat

    + 2008-09-23 12:00 . 2011-11-20 06:12 60928 c:\windows\system32\packager.exe

    + 2008-09-23 12:00 . 2011-09-26 09:41 23040 c:\windows\system32\oleaccrc.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 23552 c:\windows\system32\normaliz.dll

    + 2008-09-23 12:00 . 2009-01-07 16:20 23552 c:\windows\system32\normaliz.dll

    + 2008-09-23 12:00 . 2009-01-07 16:20 24576 c:\windows\system32\nlsdl.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 24576 c:\windows\system32\nlsdl.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 49488 c:\windows\system32\netfxperf.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 11600 c:\windows\system32\mui\0409\mscorees.dll

    - 2008-12-30 14:32 . 2008-09-23 12:00 91648 c:\windows\system32\mtxoci.dll

    + 2008-12-30 14:32 . 2008-06-12 14:24 91648 c:\windows\system32\mtxoci.dll

    + 2008-09-23 12:00 . 2008-06-12 14:24 66560 c:\windows\system32\mtxclu.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 66560 c:\windows\system32\mtxclu.dll

    + 2008-04-14 21:32 . 2009-11-27 17:14 17920 c:\windows\system32\msyuv.dll

    + 2008-09-23 12:00 . 2009-11-27 16:10 28672 c:\windows\system32\msvidc32.dll

    + 2008-09-23 12:00 . 2009-11-27 16:10 11264 c:\windows\system32\msrle32.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 11264 c:\windows\system32\msrle32.dll

    + 2010-10-07 15:33 . 2009-02-27 01:42 31640 c:\windows\system32\msonpmon.dll

    + 2008-09-23 12:00 . 2009-03-08 02:31 48128 c:\windows\system32\mshtmler.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 48128 c:\windows\system32\mshtmler.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 67072 c:\windows\system32\mshtmled.dll

    + 2008-09-23 12:00 . 2009-03-08 02:31 45568 c:\windows\system32\mshta.exe

    + 2008-12-30 14:35 . 2009-03-08 02:31 13312 c:\windows\system32\msfeedssync.exe

    + 2008-12-30 14:35 . 2012-05-11 14:44 55296 c:\windows\system32\msfeedsbs.dll

    - 2008-12-30 14:32 . 2008-09-23 12:00 58880 c:\windows\system32\msdtclog.dll

    + 2008-12-30 14:32 . 2008-06-12 14:24 58880 c:\windows\system32\msdtclog.dll

    + 2008-09-23 12:00 . 2009-09-04 21:05 58880 c:\windows\system32\msasn1.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 23040 c:\windows\system32\mciseq.dll

    + 2008-09-23 12:00 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 25600 c:\windows\system32\jsproxy.dll

    + 2008-04-14 21:32 . 2009-11-27 16:10 48128 c:\windows\system32\iyuv_32.dll

    + 2008-12-30 14:37 . 2010-11-18 18:15 86016 c:\windows\system32\isign32.dll

    + 2008-09-23 12:00 . 2009-03-08 02:32 94720 c:\windows\system32\inseng.dll

    + 2008-09-23 12:00 . 2009-03-08 02:31 34816 c:\windows\system32\imgutil.dll

    + 2008-09-23 12:00 . 2009-03-08 02:32 36864 c:\windows\system32\ieudinit.exe

    + 2008-09-23 12:00 . 2009-03-08 02:32 71680 c:\windows\system32\iesetup.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 71680 c:\windows\system32\iesetup.dll

    + 2008-09-23 12:00 . 2009-03-08 02:32 55808 c:\windows\system32\iernonce.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 26112 c:\windows\system32\idndl.dll

    + 2008-09-23 12:00 . 2009-01-07 16:20 26112 c:\windows\system32\idndl.dll

    + 2008-09-23 12:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 80384 c:\windows\system32\iccvid.dll

    + 2008-09-23 12:00 . 2009-03-08 02:31 59904 c:\windows\system32\icardie.dll

    + 2008-09-23 12:00 . 2009-10-15 16:38 81920 c:\windows\system32\fontsub.dll

    + 2008-09-23 12:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys

    + 2008-09-23 12:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys

    + 2008-09-23 12:00 . 2009-06-24 10:28 92928 c:\windows\system32\drivers\ksecdd.sys

    - 2008-09-23 12:00 . 2008-09-23 12:00 45568 c:\windows\system32\dnsrslvr.dll

    + 2008-09-23 12:00 . 2009-04-20 17:09 45568 c:\windows\system32\dnsrslvr.dll

    + 2012-07-18 20:55 . 2012-05-11 14:44 12800 c:\windows\system32\dllcache\xpshims.dll

    + 2008-12-30 14:38 . 2012-06-02 13:19 35864 c:\windows\system32\dllcache\wups.dll

    + 2008-12-30 14:38 . 2012-06-02 13:19 53784 c:\windows\system32\dllcache\wuauclt.exe

    + 2012-07-18 18:13 . 2009-06-25 08:42 54272 c:\windows\system32\dllcache\wdigest.dll

    + 2012-07-18 17:47 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe

    + 2012-07-18 19:02 . 2009-06-15 11:10 82432 c:\windows\system32\dllcache\tlntsess.exe

    + 2012-07-18 19:02 . 2009-06-15 10:45 79872 c:\windows\system32\dllcache\telnet.exe

    + 2012-07-18 18:44 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe

    + 2012-07-18 18:46 . 2009-06-25 08:42 56832 c:\windows\system32\dllcache\secur32.dll

    + 2012-07-18 18:22 . 2009-02-06 10:36 35328 c:\windows\system32\dllcache\sc.exe

    + 2012-07-18 18:45 . 2009-10-12 13:40 79872 c:\windows\system32\dllcache\raschap.dll

    + 2009-03-08 02:31 . 2009-03-08 02:31 46592 c:\windows\system32\dllcache\pngfilt.dll

    + 2012-07-18 18:13 . 2011-11-20 06:12 60928 c:\windows\system32\dllcache\packager.exe

    + 2011-09-26 09:41 . 2011-09-26 09:41 23040 c:\windows\system32\dllcache\oleaccrc.dll

    + 2012-07-18 18:34 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys

    + 2012-07-18 17:51 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys

    + 2012-07-18 18:44 . 2008-06-12 14:24 91648 c:\windows\system32\dllcache\mtxoci.dll

    + 2012-07-18 18:44 . 2008-06-12 14:24 66560 c:\windows\system32\dllcache\mtxclu.dll

    + 2012-07-18 18:42 . 2009-11-27 17:14 17920 c:\windows\system32\dllcache\msyuv.dll

    + 2012-07-18 19:03 . 2009-11-27 16:10 28672 c:\windows\system32\dllcache\msvidc32.dll

    + 2012-07-18 19:03 . 2009-11-27 16:10 11264 c:\windows\system32\dllcache\msrle32.dll

    + 2009-03-08 02:31 . 2009-03-08 02:31 48128 c:\windows\system32\dllcache\mshtmler.dll

    + 2009-03-08 02:31 . 2012-05-11 14:44 67072 c:\windows\system32\dllcache\mshtmled.dll

    + 2009-03-08 02:31 . 2009-03-08 02:31 45568 c:\windows\system32\dllcache\mshta.exe

    + 2012-07-18 20:55 . 2012-05-11 14:44 55296 c:\windows\system32\dllcache\msfeedsbs.dll

    + 2012-07-18 18:44 . 2008-06-12 14:24 58880 c:\windows\system32\dllcache\msdtclog.dll

    + 2012-07-18 18:44 . 2009-09-04 21:05 58880 c:\windows\system32\dllcache\msasn1.dll

    + 2012-07-18 19:08 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll

    + 2009-03-08 02:34 . 2012-05-11 14:44 43520 c:\windows\system32\dllcache\licmgr10.dll

    + 2009-03-08 02:33 . 2012-05-11 14:44 25600 c:\windows\system32\dllcache\jsproxy.dll

    + 2009-03-08 02:32 . 2009-03-08 02:32 94720 c:\windows\system32\dllcache\inseng.dll

    + 2009-03-08 02:31 . 2009-03-08 02:31 34816 c:\windows\system32\dllcache\imgutil.dll

    + 2009-03-08 02:32 . 2009-03-08 02:32 71680 c:\windows\system32\dllcache\iesetup.dll

    + 2009-03-08 02:32 . 2009-03-08 02:32 55808 c:\windows\system32\dllcache\iernonce.dll

    + 2009-03-08 02:24 . 2009-03-08 02:24 68608 c:\windows\system32\dllcache\hmmapi.dll

    + 2009-03-08 02:33 . 2009-03-08 02:33 18944 c:\windows\system32\dllcache\corpol.dll

    + 2008-09-23 12:00 . 2012-06-02 13:19 97304 c:\windows\system32\dllcache\cdm.dll

    + 2009-03-08 02:32 . 2009-03-08 02:32 72704 c:\windows\system32\dllcache\admparse.dll

    + 2008-09-23 12:00 . 2011-10-28 05:32 33280 c:\windows\system32\csrsrv.dll

    + 2008-09-23 12:00 . 2009-03-08 02:33 18944 c:\windows\system32\corpol.dll

    + 2008-09-23 12:00 . 2010-01-13 14:06 87040 c:\windows\system32\cabview.dll

    + 2008-09-23 12:00 . 2009-11-27 16:10 85504 c:\windows\system32\avifil32.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 85504 c:\windows\system32\avifil32.dll

    + 2008-09-23 12:00 . 2009-07-17 19:04 58880 c:\windows\system32\atl.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 58880 c:\windows\system32\atl.dll

    + 2008-09-23 12:00 . 2010-03-05 14:42 65536 c:\windows\system32\asycfilt.dll

    + 2008-09-23 12:00 . 2009-03-08 02:32 72704 c:\windows\system32\admparse.dll

    - 2008-07-29 17:16 . 2008-07-29 17:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll

    + 2010-04-07 21:48 . 2010-04-07 21:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll

    + 2011-12-25 01:49 . 2011-12-25 01:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe

    + 2009-06-24 17:56 . 2009-06-24 17:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe

    + 2011-12-25 09:07 . 2011-12-25 09:07 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll

    - 2007-04-13 19:58 . 2007-04-13 19:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll

    + 2011-12-24 20:55 . 2011-12-24 20:55 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll

    + 2011-12-24 20:55 . 2011-12-24 20:55 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll

    - 2007-04-13 19:57 . 2007-04-13 19:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll

    - 2007-04-13 19:57 . 2007-04-13 19:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll

    + 2011-12-24 20:55 . 2011-12-24 20:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll

    + 2011-12-24 21:49 . 2011-12-24 21:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe

    - 2007-04-13 20:30 . 2007-04-13 20:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe

    - 2003-02-20 18:19 . 2003-02-20 18:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

    + 2011-12-24 21:49 . 2011-12-24 21:49 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe

    + 2012-07-18 20:02 . 2012-07-18 20:02 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe

    + 2010-10-07 15:33 . 2012-07-18 20:24 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe

    - 2010-10-07 15:33 . 2010-10-07 15:56 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe

    + 2010-10-07 15:33 . 2012-07-18 20:24 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe

    - 2010-10-07 15:33 . 2010-10-07 15:56 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe

    + 2010-10-07 15:33 . 2012-07-18 20:24 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe

    - 2010-10-07 15:33 . 2010-10-07 15:56 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe

    + 2010-08-04 16:11 . 2012-07-18 21:28 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll

    - 2010-08-04 16:11 . 2012-03-23 17:22 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll

    + 2008-07-29 17:59 . 2008-07-29 17:59 43544 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationHostProxy_X86.dll

    + 1999-11-24 17:40 . 1999-11-24 17:40 40960 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\VBAME.DLL

    + 1998-08-09 18:07 . 1998-08-09 18:07 86016 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\MSADDNDR.DLL

    + 2006-10-26 19:17 . 2006-10-26 19:17 11072 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XLCALL32.DLL

    + 2006-10-26 19:13 . 2006-10-26 19:13 72472 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XL12CNVP.DLL

    + 2006-10-27 13:11 . 2006-10-27 13:11 21264 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WRD12EXE.EXE

    + 2010-10-07 15:31 . 2010-10-07 15:31 12096 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WORDPOL.DLL

    + 2006-10-26 20:58 . 2006-10-26 20:58 33080 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\VPREVIEW.EXE

    + 2010-10-07 15:31 . 2010-10-07 15:31 64288 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\VBIDEPIA.DLL

    + 2006-10-26 12:04 . 2006-10-26 12:04 76624 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\TWSTRUCT.DLL

    + 2006-10-26 12:04 . 2006-10-26 12:04 19784 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\TWRECS.DLL

    + 2006-10-26 12:04 . 2006-10-26 12:04 51008 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\TWRECE.DLL

    + 2006-10-26 12:04 . 2006-10-26 12:04 27456 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\TWORIENT.DLL

    + 2006-10-26 12:04 . 2006-10-26 12:04 58168 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\TWLAY32.DLL

    + 2006-10-26 12:05 . 2006-10-26 12:05 86840 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\TWCUTLIN.DLL

    + 2006-10-26 12:04 . 2006-10-26 12:04 29976 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\THOCRAPI.DLL

    + 2006-10-26 17:49 . 2006-10-26 17:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\SETLANG.EXE

    + 2006-10-26 12:04 . 2006-10-26 12:04 19784 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\REVERSE.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\REFIEBAR.DLL

    + 2006-10-26 19:13 . 2006-10-26 19:13 38168 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\REFEDIT.DLL

    + 2006-10-26 12:05 . 2006-10-26 12:05 77144 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PSOM.DLL

    + 2006-10-26 17:59 . 2006-10-26 17:59 46936 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OSETUPPS.DLL

    + 2006-10-26 18:24 . 2006-10-26 18:24 72504 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ONFILTER.DLL

    + 2006-10-26 18:24 . 2006-10-26 18:24 98632 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ONENOTEM.EXE

    + 2006-10-26 18:00 . 2006-10-26 18:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OISCTRL.DLL

    + 2006-10-27 13:11 . 2006-10-27 13:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OFFRHD.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 16192 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\NPOFF12.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 65824 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\NAME.DLL

    + 2006-10-26 17:56 . 2006-10-26 17:56 67408 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSONPUI.DLL

    + 2006-10-26 17:56 . 2006-10-26 17:56 33104 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSONPPPR.DLL

    + 2006-10-26 17:56 . 2006-10-26 17:56 32592 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSONPMON.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSOHTMED.EXE

    + 2006-10-27 13:01 . 2006-10-27 13:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSOHEV.DLL

    + 2006-10-26 19:13 . 2006-10-26 19:13 26936 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSOEURO.DLL

    + 2006-10-26 17:48 . 2006-10-26 17:48 14664 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSOCFU.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\METCONV.DLL

    + 2006-10-26 12:04 . 2006-10-26 12:04 75576 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\FORM.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\AUTHZAX.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 56120 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACERCLR.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 15160 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEODTXT.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 15160 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEODPDX.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 15160 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEODEXL.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 15160 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEODDBS.DLL

    + 2006-10-27 13:00 . 2006-10-27 13:00 47976 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEERR.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 56192 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACECNFLT.EXE

    + 2006-10-26 16:59 . 2006-10-26 16:59 57136 c:\windows\Installer\$PatchCache$\Managed\000021092B0031400000000000F01FEC\12.0.4518\EXP_XPS.DLL

    + 2006-10-27 12:26 . 2006-10-27 12:26 97072 c:\windows\Installer\$PatchCache$\Managed\000021092B0031400000000000F01FEC\12.0.4518\EXP_PDF.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 12096 c:\windows\Installer\$PatchCache$\Managed\00002105501100000000000000F01FEC\12.0.4518\WORDPOL.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 64288 c:\windows\Installer\$PatchCache$\Managed\00002105501100000000000000F01FEC\12.0.4518\VBIDEPIA.DLL

    + 2012-07-18 20:56 . 2009-03-08 02:33 12288 c:\windows\ie8updates\KB982381-IE8\xpshims.dll

    + 2012-07-18 20:56 . 2009-03-08 02:31 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll

    + 2012-07-18 20:56 . 2009-03-08 02:33 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 12800 c:\windows\ie8updates\KB2699988-IE8\xpshims.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 66560 c:\windows\ie8updates\KB2699988-IE8\mshtmled.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 55296 c:\windows\ie8updates\KB2699988-IE8\msfeedsbs.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 43520 c:\windows\ie8updates\KB2699988-IE8\licmgr10.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 25600 c:\windows\ie8updates\KB2699988-IE8\jsproxy.dll

    + 2012-07-18 20:58 . 2010-05-06 10:37 12800 c:\windows\ie8updates\KB2618444-IE8\xpshims.dll

    + 2012-07-18 20:58 . 2009-03-08 02:31 66560 c:\windows\ie8updates\KB2618444-IE8\mshtmled.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 55296 c:\windows\ie8updates\KB2618444-IE8\msfeedsbs.dll

    + 2012-07-18 20:58 . 2009-03-08 02:34 43008 c:\windows\ie8updates\KB2618444-IE8\licmgr10.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 25600 c:\windows\ie8updates\KB2618444-IE8\jsproxy.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 67584 c:\windows\ie8\url.dll

    + 2012-07-18 20:52 . 2009-03-08 14:32 58448 c:\windows\ie8\spuninst\iecustom.dll

    + 2012-07-18 20:50 . 2008-08-26 10:12 44544 c:\windows\ie8\pngfilt.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 48128 c:\windows\ie8\mshtmler.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 89088 c:\windows\ie8\mshta.exe

    + 2012-07-18 20:50 . 2007-08-13 17:36 12288 c:\windows\ie8\msfeedssync.exe

    + 2012-07-18 20:50 . 2008-08-26 10:12 52224 c:\windows\ie8\msfeedsbs.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 40960 c:\windows\ie8\licmgr10.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 27648 c:\windows\ie8\jsproxy.dll

    + 2012-07-18 20:50 . 2007-08-13 17:39 92672 c:\windows\ie8\inseng.dll

    + 2012-07-18 20:50 . 2007-05-11 04:54 36352 c:\windows\ie8\imgutil.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 71680 c:\windows\ie8\iesetup.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 66560 c:\windows\ie8\iernonce.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 78336 c:\windows\ie8\ieencode.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 70656 c:\windows\ie8\ie4uinit.exe

    + 2012-07-18 20:50 . 2008-09-23 12:00 63488 c:\windows\ie8\icardie.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 60416 c:\windows\ie8\hmmapi.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 17408 c:\windows\ie8\corpol.dll

    + 2012-07-18 18:42 . 2009-11-27 17:14 17920 c:\windows\Driver Cache\i386\msyuv.dll

    + 2012-07-18 19:03 . 2009-11-27 16:10 48128 c:\windows\Driver Cache\i386\iyuv_32.dll

    + 2012-07-18 21:10 . 2012-07-18 21:10 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_c4a97fa2\System.Drawing.Design.dll

    + 2012-07-18 20:27 . 2012-07-18 20:27 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_89c4616b\System.Drawing.Design.dll

    + 2012-07-18 20:27 . 2012-07-18 20:27 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_66e18987\CustomMarshalers.dll

    + 2012-07-18 21:49 . 2012-07-18 21:49 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\f121ccced1aa14badb316d8d9be5154d\UIAutomationProvider.ni.dll

    + 2012-07-18 21:54 . 2012-07-18 21:54 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEF6.tmp\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll

    + 2012-07-19 13:17 . 2012-07-19 13:17 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\316e223f2ab8c69cd6a5a06de21650ec\System.Windows.Presentation.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\e5693fef606df59f99dc3d4149bcb5e4\System.Web.DynamicData.Design.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\eb93ba40aa5a76342bf2bc15a4e17fe8\System.ComponentModel.DataAnnotations.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\7bb7e51275fa19f8b4894c772bdb1e10\System.AddIn.Contract.ni.dll

    + 2012-07-18 21:28 . 2012-07-18 21:28 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\ca2dfb77cb808c801711346bb96ba6be\PresentationFontCache.ni.exe

    + 2012-07-18 21:19 . 2012-07-18 21:19 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\d25eabdbed1639d6f99ab14748388b5b\PresentationCFFRasterizer.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\bac8a72025ccfb4b55f0b3f0780da25f\Microsoft.Vsa.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f91cc209040bc746a13b67f49dd6b13f\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll

    + 2012-07-18 21:56 . 2012-07-18 21:56 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f5fc5c17d856532b85720c7343c16ee6\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\dd4768a87a9fb3373eca71782972f070\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\dd3e0783ca5d6dc64a145b58e523596d\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d5f5443e74ab68199c2999f383f00f37\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d1c9393c8423d4cf616e8480ba57c475\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll

    + 2012-07-18 22:02 . 2012-07-18 22:02 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b9c2680c8cf1493897fcd55f2dd07b03\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8e5f601fded41ff5928a2f7b9a617d1a\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5602e7306cde3bfad57b5a90ad1d652f\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1c8ea208d5974948251b09a4c8bad37a\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll

    + 2012-07-19 13:11 . 2012-07-19 13:11 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\8fab9cd28bbc860a34feec119512664d\Microsoft.Build.Framework.ni.dll

    + 2012-07-19 13:09 . 2012-07-19 13:09 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\0eac132c7c36f1c100ae23c956b379e7\Microsoft.Build.Framework.ni.dll

    + 2012-07-19 13:08 . 2012-07-19 13:08 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\d66bc03eb7eae89b4dde2d09eda1414f\dfsvc.ni.exe

    + 2012-07-18 21:51 . 2012-07-18 21:51 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\016444dfc5f7e3d11c776f2fbc7a4594\Accessibility.ni.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

    + 2012-07-18 19:27 . 2012-07-18 19:27 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll

    - 2008-12-30 14:52 . 2008-12-30 14:52 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

    + 2012-07-18 20:26 . 2012-07-18 20:26 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll

    - 2008-12-30 14:58 . 2008-12-30 14:58 77824 c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 77824 c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll

    + 2012-07-18 20:14 . 2012-07-18 20:14 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll

    + 2012-07-18 20:13 . 2012-07-18 20:13 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 45056 c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 45056 c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 53248 c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 53248 c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 18944 c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 18944 c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 73728 c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 73728 c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll

    + 2008-05-05 05:25 . 2011-02-17 16:24 5632 c:\windows\system32\xpsp4res.dll

    + 2001-09-06 20:27 . 2009-11-27 16:10 8704 c:\windows\system32\tsbyuv.dll

    + 2012-07-18 19:03 . 2009-11-27 16:10 8704 c:\windows\system32\dllcache\tsbyuv.dll

    + 2012-07-18 20:57 . 2009-03-08 02:35 2048 c:\windows\ie8updates\KB2598845-IE8\iecompat.dll

    + 2012-07-18 19:03 . 2009-11-27 16:10 8704 c:\windows\Driver Cache\i386\tsbyuv.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 8192 c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 8192 c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 653136 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 569680 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcm90.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 159048 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll

    + 2011-05-13 23:17 . 2011-05-13 23:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll

    + 2011-05-13 23:12 . 2011-05-13 23:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll

    + 2011-05-13 23:11 . 2011-05-13 23:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 121856 c:\windows\system32\xmllite.dll

    + 2008-09-23 12:00 . 2009-01-07 16:21 121856 c:\windows\system32\xmllite.dll

    + 2008-09-23 12:00 . 2009-04-01 21:02 604160 c:\windows\system32\wmspdmod.dll

    - 2008-09-23 12:00 . 2009-01-30 18:34 604160 c:\windows\system32\WMSPDMOD.dll

    + 2008-09-23 12:00 . 2009-07-13 21:43 286208 c:\windows\system32\wmpdxm.dll

    + 2008-09-23 12:00 . 2009-06-10 06:20 134144 c:\windows\system32\wkssvc.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 134144 c:\windows\system32\wkssvc.dll

    + 2008-09-23 12:00 . 2012-02-29 14:10 177664 c:\windows\system32\wintrust.dll

    + 2008-09-23 12:00 . 2011-11-25 21:57 293888 c:\windows\system32\winsrv.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 179200 c:\windows\system32\winmm.dll

    + 2008-09-23 12:00 . 2011-10-14 14:47 179200 c:\windows\system32\winmm.dll

    + 2008-09-23 12:00 . 2011-11-16 14:20 354816 c:\windows\system32\winhttp.dll

    + 2008-12-30 14:35 . 2009-03-08 02:34 208384 c:\windows\system32\WinFXDocObj.exe

    + 2008-09-23 12:00 . 2009-03-08 02:34 236544 c:\windows\system32\webcheck.dll

    + 2008-12-30 14:32 . 2009-02-06 10:15 227840 c:\windows\system32\wbem\wmiprvse.exe

    + 2008-12-30 14:32 . 2009-02-09 11:00 453120 c:\windows\system32\wbem\wmiprvsd.dll

    + 2008-12-30 14:32 . 2009-02-09 11:00 473600 c:\windows\system32\wbem\fastprox.dll

    + 2008-09-23 12:00 . 2009-03-08 02:33 420352 c:\windows\system32\vbscript.dll

    + 2008-09-23 12:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 406016 c:\windows\system32\usp10.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 105984 c:\windows\system32\url.dll

    + 2008-07-29 17:59 . 2011-09-26 09:41 614912 c:\windows\system32\uiautomationcore.dll

    + 2008-09-23 12:00 . 2010-08-27 08:03 119808 c:\windows\system32\t2embed.dll

    + 2008-09-23 12:00 . 2009-08-26 08:02 247326 c:\windows\system32\strmdll.dll

    + 2010-10-07 15:33 . 2009-02-27 01:42 863128 c:\windows\system32\spool\drivers\w32x86\msonpdrv.dll

    + 2010-10-07 15:33 . 2009-02-27 01:42 863128 c:\windows\system32\spool\drivers\w32x86\3\msonpdrv.dll

    + 2008-09-23 12:00 . 2009-07-27 23:19 135680 c:\windows\system32\shsvcs.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 135680 c:\windows\system32\shsvcs.dll

    + 2008-09-23 12:00 . 2009-12-08 09:25 474624 c:\windows\system32\shlwapi.dll

    + 2008-09-23 12:00 . 2011-01-21 14:44 441344 c:\windows\system32\shimgvw.dll

    + 2008-09-23 12:00 . 2009-02-09 11:19 111104 c:\windows\system32\services.exe

    + 2008-09-23 12:00 . 2009-02-09 11:00 401408 c:\windows\system32\rpcss.dll

    + 2008-09-23 12:00 . 2010-08-16 08:45 590848 c:\windows\system32\rpcrt4.dll

    + 2008-09-23 12:00 . 2009-10-12 13:40 150016 c:\windows\system32\rastls.dll

    + 2008-09-23 12:00 . 2011-11-03 15:29 386560 c:\windows\system32\qdvd.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 386560 c:\windows\system32\qdvd.dll

    + 2010-03-30 22:10 . 2010-03-30 22:10 295264 c:\windows\system32\PresentationHost.exe

    - 2008-09-23 12:00 . 2012-06-26 00:31 511526 c:\windows\system32\perfh013.dat

    + 2008-09-23 12:00 . 2012-07-18 22:12 511526 c:\windows\system32\perfh013.dat

    - 2008-09-23 12:00 . 2012-06-26 00:31 443588 c:\windows\system32\perfh009.dat

    + 2008-09-23 12:00 . 2012-07-18 22:12 443588 c:\windows\system32\perfh009.dat

    - 2008-09-23 12:00 . 2008-09-23 12:00 285696 c:\windows\system32\pdh.dll

    + 2008-09-23 12:00 . 2009-03-06 13:59 285696 c:\windows\system32\pdh.dll

    + 2008-09-23 12:00 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 551936 c:\windows\system32\oleaut32.dll

    + 2008-09-23 12:00 . 2011-09-26 09:41 220160 c:\windows\system32\oleacc.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 249856 c:\windows\system32\odbc32.dll

    + 2008-09-23 12:00 . 2010-11-09 14:52 249856 c:\windows\system32\odbc32.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 206848 c:\windows\system32\occache.dll

    + 2008-09-23 12:00 . 2009-10-13 10:38 270848 c:\windows\system32\oakley.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 270848 c:\windows\system32\oakley.dll

    + 2008-09-23 12:00 . 2010-12-09 15:15 739328 c:\windows\system32\ntdll.dll

    + 2008-09-23 12:00 . 2009-08-05 09:01 205312 c:\windows\system32\mswebdvd.dll

    + 2008-09-23 12:00 . 2009-09-11 14:16 136704 c:\windows\system32\msv1_0.dll

    - 2008-12-30 14:32 . 2008-09-23 12:00 677888 c:\windows\system32\mstsc.exe

    + 2008-12-30 14:32 . 2011-01-27 11:57 677888 c:\windows\system32\mstsc.exe

    + 2008-09-23 12:00 . 2012-05-11 14:44 611840 c:\windows\system32\mstime.dll

    + 2008-09-23 12:00 . 2009-03-08 02:34 193536 c:\windows\system32\msrating.dll

    + 2008-12-30 14:32 . 2009-12-17 07:42 345600 c:\windows\system32\mspaint.exe

    + 2008-09-23 12:00 . 2009-03-08 02:22 156160 c:\windows\system32\msls31.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 156160 c:\windows\system32\msls31.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 629760 c:\windows\system32\msfeeds.dll

    + 2008-12-30 14:32 . 2008-06-12 14:24 161792 c:\windows\system32\msdtcuiu.dll

    - 2008-12-30 14:32 . 2008-09-23 12:00 161792 c:\windows\system32\msdtcuiu.dll

    + 2008-12-30 14:32 . 2008-06-12 14:24 956928 c:\windows\system32\msdtctm.dll

    - 2008-12-30 14:32 . 2008-09-23 12:00 956928 c:\windows\system32\msdtctm.dll

    + 2008-12-30 14:32 . 2008-06-12 17:54 428032 c:\windows\system32\msdtcprx.dll

    + 2009-01-07 16:20 . 2009-01-07 16:20 265720 c:\windows\system32\msdbg2.dll

    + 2009-11-06 23:07 . 2009-11-06 23:07 297808 c:\windows\system32\mscoree.dll

    + 2008-09-23 12:00 . 2010-03-30 10:24 317440 c:\windows\system32\mp4sdecd.dll

    - 2008-09-23 12:00 . 2009-01-30 18:33 317440 c:\windows\system32\MP4SDECD.dll

    + 2008-09-23 12:00 . 2011-02-08 13:33 974848 c:\windows\system32\mfc42u.dll

    + 2008-09-23 12:00 . 2011-02-08 13:33 978944 c:\windows\system32\mfc42.dll

    + 2008-09-23 12:00 . 2010-09-18 06:53 953856 c:\windows\system32\mfc40u.dll

    + 2008-09-23 12:00 . 2010-09-18 06:53 954368 c:\windows\system32\mfc40.dll

    + 2012-07-18 22:14 . 2012-07-18 22:14 686280 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_265_Plugin.exe

    + 2012-04-14 20:28 . 2012-07-18 22:14 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    - 2012-04-14 20:28 . 2012-07-04 15:03 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    + 2008-09-23 12:00 . 2010-12-20 17:24 735232 c:\windows\system32\lsasrv.dll

    + 2008-09-23 12:00 . 2009-05-07 15:16 347648 c:\windows\system32\localspl.dll

    + 2008-09-23 12:00 . 2010-12-22 12:32 301568 c:\windows\system32\kerberos.dll

    + 2008-09-23 12:00 . 2009-03-08 02:33 726528 c:\windows\system32\jscript.dll

    + 2008-12-30 14:38 . 2011-10-10 14:21 692736 c:\windows\system32\inetcomm.dll

    + 2008-09-23 12:00 . 2012-02-29 14:10 148480 c:\windows\system32\imagehlp.dll

    + 2008-09-23 12:00 . 2009-03-08 02:22 164352 c:\windows\system32\ieui.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 184320 c:\windows\system32\iepeers.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 387584 c:\windows\system32\iedkcs32.dll

    + 2008-09-23 12:00 . 2009-03-08 02:11 445952 c:\windows\system32\ieapfltr.dll

    + 2008-09-23 12:00 . 2009-03-08 02:32 163840 c:\windows\system32\ieakui.dll

    + 2008-09-23 12:00 . 2009-03-08 02:33 229376 c:\windows\system32\ieaksie.dll

    + 2008-09-23 12:00 . 2009-03-08 02:33 125952 c:\windows\system32\ieakeng.dll

    + 2008-09-23 12:00 . 2012-05-11 11:38 174080 c:\windows\system32\ie4uinit.exe

    + 2008-09-23 12:00 . 2008-10-23 12:43 286720 c:\windows\system32\gdi32.dll

    + 2008-12-30 15:11 . 2012-07-18 22:06 353768 c:\windows\system32\FNTCACHE.DAT

    - 2008-12-30 15:11 . 2012-06-18 19:12 353768 c:\windows\system32\FNTCACHE.DAT

    + 2008-09-23 12:00 . 2012-04-23 14:38 132608 c:\windows\system32\extmgr.dll

    + 2008-09-23 12:00 . 2009-03-08 02:31 216064 c:\windows\system32\dxtrans.dll

    + 2008-09-23 12:00 . 2009-03-08 02:31 348160 c:\windows\system32\dxtmsft.dll

    + 2008-09-23 12:00 . 2010-02-11 11:36 226880 c:\windows\system32\drivers\tcpip6.sys

    + 2008-09-23 12:00 . 2011-02-17 13:19 357888 c:\windows\system32\drivers\srv.sys

    + 2008-09-23 12:00 . 2011-04-21 13:52 105472 c:\windows\system32\drivers\mup.sys

    + 2008-09-23 12:00 . 2011-07-15 13:29 457856 c:\windows\system32\drivers\mrxsmb.sys

    - 2008-09-23 12:00 . 2008-09-23 12:00 138496 c:\windows\system32\drivers\afd.sys

    + 2008-09-23 12:00 . 2011-08-17 13:41 138496 c:\windows\system32\drivers\afd.sys

    + 2008-09-23 12:00 . 2011-03-03 06:53 149504 c:\windows\system32\dnsapi.dll

    + 2008-12-30 14:38 . 2012-06-02 13:19 210968 c:\windows\system32\dllcache\wuweb.dll

    + 2008-12-30 14:38 . 2012-06-02 13:19 329240 c:\windows\system32\dllcache\wucltui.dll

    + 2008-12-30 14:38 . 2012-06-02 13:19 577048 c:\windows\system32\dllcache\wuapi.dll

    + 2012-07-18 17:54 . 2010-07-16 11:57 221184 c:\windows\system32\dllcache\wordpad.exe

    + 2009-04-01 21:02 . 2009-04-01 21:02 604160 c:\windows\system32\dllcache\wmspdmod.dll

    + 2009-07-13 21:43 . 2009-07-13 21:43 286208 c:\windows\system32\dllcache\wmpdxm.dll

    + 2012-07-18 18:22 . 2009-02-06 10:15 227840 c:\windows\system32\dllcache\wmiprvse.exe

    + 2012-07-18 18:22 . 2009-02-09 11:00 453120 c:\windows\system32\dllcache\wmiprvsd.dll

    + 2012-07-18 18:44 . 2009-06-10 06:20 134144 c:\windows\system32\dllcache\wkssvc.dll

    + 2012-07-18 18:42 . 2012-02-29 14:10 177664 c:\windows\system32\dllcache\wintrust.dll

    + 2012-07-18 19:06 . 2011-11-25 21:57 293888 c:\windows\system32\dllcache\winsrv.dll

    + 2012-07-18 19:08 . 2011-10-14 14:47 179200 c:\windows\system32\dllcache\winmm.dll

    + 2009-03-08 02:34 . 2012-05-16 15:09 916992 c:\windows\system32\dllcache\wininet.dll

    + 2012-07-18 19:00 . 2011-11-16 14:20 354816 c:\windows\system32\dllcache\winhttp.dll

    + 2009-03-08 02:34 . 2009-03-08 02:34 236544 c:\windows\system32\dllcache\webcheck.dll

    + 2012-07-18 18:38 . 2009-03-08 02:33 759296 c:\windows\system32\dllcache\VGX.dll

    + 2012-07-18 18:44 . 2009-03-08 02:33 420352 c:\windows\system32\dllcache\vbscript.dll

    + 2012-07-18 18:42 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll

    + 2009-03-08 02:34 . 2012-05-11 14:44 105984 c:\windows\system32\dllcache\url.dll

    + 2012-07-18 18:19 . 2009-06-21 21:49 153088 c:\windows\system32\dllcache\triedit.dll

    + 2012-07-18 19:03 . 2010-02-11 11:36 226880 c:\windows\system32\dllcache\tcpip6.sys

    + 2012-07-18 19:06 . 2008-06-20 11:59 361600 c:\windows\system32\dllcache\tcpip.sys

    + 2012-07-18 18:24 . 2010-08-27 08:03 119808 c:\windows\system32\dllcache\t2embed.dll

    + 2012-07-18 19:02 . 2009-08-26 08:02 247326 c:\windows\system32\dllcache\strmdll.dll

    + 2012-07-18 18:42 . 2011-02-17 13:19 357888 c:\windows\system32\dllcache\srv.sys

    + 2009-01-07 16:20 . 2009-01-07 16:20 134144 c:\windows\system32\dllcache\sqmapi.dll

    + 2012-07-18 19:05 . 2009-07-27 23:19 135680 c:\windows\system32\dllcache\shsvcs.dll

    + 2012-07-18 18:45 . 2009-12-08 09:25 474624 c:\windows\system32\dllcache\shlwapi.dll

    + 2012-07-18 19:05 . 2011-01-21 14:44 441344 c:\windows\system32\dllcache\shimgvw.dll

    + 2012-07-18 18:22 . 2009-02-09 11:19 111104 c:\windows\system32\dllcache\services.exe

    + 2012-07-18 18:13 . 2012-06-04 04:31 153088 c:\windows\system32\dllcache\schannel.dll

    + 2012-07-18 18:22 . 2009-02-09 11:00 401408 c:\windows\system32\dllcache\rpcss.dll

    + 2012-07-18 17:45 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll

    + 2012-07-18 18:13 . 2012-05-02 13:45 139656 c:\windows\system32\dllcache\rdpwd.sys

    + 2012-07-18 18:45 . 2009-10-12 13:40 150016 c:\windows\system32\dllcache\rastls.dll

    + 2012-07-18 19:08 . 2011-11-03 15:29 386560 c:\windows\system32\dllcache\qdvd.dll

    + 2012-07-18 18:22 . 2009-03-06 13:59 285696 c:\windows\system32\dllcache\pdh.dll

    + 2012-07-18 19:06 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll

    + 2011-09-26 09:41 . 2011-09-26 09:41 220160 c:\windows\system32\dllcache\oleacc.dll

    + 2012-07-18 18:40 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll

    + 2009-03-08 02:34 . 2012-05-11 14:44 206848 c:\windows\system32\dllcache\occache.dll

    + 2012-07-18 19:03 . 2009-10-13 10:38 270848 c:\windows\system32\dllcache\oakley.dll

    + 2012-07-18 18:21 . 2010-12-09 15:15 739328 c:\windows\system32\dllcache\ntdll.dll

    + 2012-07-18 18:09 . 2011-04-21 13:52 105472 c:\windows\system32\dllcache\mup.sys

    + 2012-07-18 19:06 . 2008-06-20 17:45 247296 c:\windows\system32\dllcache\mswsock.dll

    + 2012-07-18 19:02 . 2009-08-05 09:01 205312 c:\windows\system32\dllcache\mswebdvd.dll

    + 2012-07-18 18:13 . 2009-09-11 14:16 136704 c:\windows\system32\dllcache\msv1_0.dll

    + 2009-03-08 02:32 . 2012-05-11 14:44 611840 c:\windows\system32\dllcache\mstime.dll

    + 2009-03-08 02:34 . 2009-03-08 02:34 193536 c:\windows\system32\dllcache\msrating.dll

    + 2012-07-18 18:41 . 2009-12-17 07:42 345600 c:\windows\system32\dllcache\mspaint.exe

    + 2009-03-08 02:22 . 2009-03-08 02:22 156160 c:\windows\system32\dllcache\msls31.dll

    + 2012-07-18 18:40 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll

    + 2012-07-18 20:55 . 2012-05-11 14:44 629760 c:\windows\system32\dllcache\msfeeds.dll

    + 2012-07-18 18:44 . 2008-06-12 14:24 161792 c:\windows\system32\dllcache\msdtcuiu.dll

    + 2012-07-18 18:44 . 2008-06-12 14:24 956928 c:\windows\system32\dllcache\msdtctm.dll

    + 2008-06-12 17:54 . 2008-06-12 17:54 428032 c:\windows\system32\dllcache\msdtcprx.dll

    + 2012-07-18 18:40 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll

    + 2012-07-18 18:40 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll

    + 2012-07-18 18:40 . 2012-05-28 18:17 536576 c:\windows\system32\dllcache\msado15.dll

    + 2012-07-18 18:40 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll

    + 2012-07-18 18:38 . 2011-07-15 13:29 457856 c:\windows\system32\dllcache\mrxsmb.sys

    + 2010-03-30 10:24 . 2010-03-30 10:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll

    + 2010-09-18 10:23 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll

    + 2012-07-18 19:04 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll

    + 2012-07-18 19:04 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll

    + 2012-07-18 19:04 . 2010-09-18 06:53 954368 c:\windows\system32\dllcache\mfc40.dll

    + 2012-07-18 18:22 . 2010-12-20 17:24 735232 c:\windows\system32\dllcache\lsasrv.dll

    + 2012-07-18 19:01 . 2009-05-07 15:16 347648 c:\windows\system32\dllcache\localspl.dll

    + 2009-03-08 12:09 . 2009-03-08 12:09 638816 c:\windows\system32\dllcache\iexplore.exe

    + 2009-03-08 02:31 . 2012-05-11 14:44 184320 c:\windows\system32\dllcache\iepeers.dll

    + 2009-03-08 12:09 . 2012-05-11 14:44 387584 c:\windows\system32\dllcache\iedkcs32.dll

    + 2009-03-08 02:32 . 2009-03-08 02:32 163840 c:\windows\system32\dllcache\ieakui.dll

    + 2009-03-08 02:33 . 2009-03-08 02:33 229376 c:\windows\system32\dllcache\ieaksie.dll

    + 2009-03-08 02:33 . 2009-03-08 02:33 125952 c:\windows\system32\dllcache\ieakeng.dll

    + 2009-03-08 02:32 . 2012-05-11 11:38 174080 c:\windows\system32\dllcache\ie4uinit.exe

    + 2009-03-08 02:31 . 2009-03-08 02:31 216064 c:\windows\system32\dllcache\dxtrans.dll

    + 2009-03-08 02:31 . 2009-03-08 02:31 348160 c:\windows\system32\dllcache\dxtmsft.dll

    + 2008-09-23 12:00 . 2008-09-23 12:00 640000 c:\windows\system32\dllcache\dbghelp.dll

    + 2009-03-08 02:32 . 2009-03-08 02:32 128512 c:\windows\system32\dllcache\advpack.dll

    + 2009-02-10 17:30 . 2009-02-10 17:30 684544 c:\windows\system32\dllcache\advapi32.dll

    + 2008-09-23 12:00 . 2010-08-23 16:13 617472 c:\windows\system32\comctl32.dll

    + 2008-09-23 12:00 . 2011-02-15 12:56 290432 c:\windows\system32\atmfd.dll

    + 2008-09-23 12:00 . 2009-03-08 02:32 128512 c:\windows\system32\advpack.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 684544 c:\windows\system32\advapi32.dll

    + 2008-09-23 12:00 . 2009-02-10 17:30 684544 c:\windows\system32\advapi32.dll

    + 2008-09-23 12:00 . 2010-02-12 04:32 100864 c:\windows\system32\6to4svc.dll

    - 2008-12-30 14:38 . 2008-09-23 12:00 744448 c:\windows\pchealth\helpctr\binaries\HelpSvc.exe

    + 2008-12-30 14:38 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe

    + 2012-04-05 21:52 . 2012-04-05 21:52 131168 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll

    + 2010-04-07 21:48 . 2010-04-07 21:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll

    + 2010-04-07 21:48 . 2010-04-07 21:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll

    - 2008-07-29 17:16 . 2008-07-29 17:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll

    + 2011-12-25 01:49 . 2011-12-25 01:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll

    - 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll

    + 2010-02-09 10:22 . 2010-02-09 10:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll

    + 2012-04-21 05:15 . 2012-04-21 05:15 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll

    + 2011-12-25 01:50 . 2011-12-25 01:50 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll

    + 2011-12-25 01:50 . 2011-12-25 01:50 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

    + 2011-12-25 01:50 . 2011-12-25 01:50 989968 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

    + 2012-04-25 15:45 . 2012-04-25 15:45 471040 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll

    - 2007-04-13 19:58 . 2007-04-13 19:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll

    + 2011-12-24 20:55 . 2011-12-24 20:55 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll

    - 2007-04-13 19:56 . 2007-04-13 19:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll

    + 2011-12-24 20:53 . 2011-12-24 20:53 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll

    + 2011-12-24 21:49 . 2011-12-24 21:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

    - 2007-04-13 20:30 . 2007-04-13 20:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

    + 2011-12-22 14:50 . 2011-12-22 14:50 256000 c:\windows\Installer\f66f01.msp

    + 2011-12-25 03:40 . 2011-12-25 03:40 819200 c:\windows\Installer\f66efa.msp

    + 2012-04-21 19:55 . 2012-04-21 19:55 980480 c:\windows\Installer\f66eb0.msp

    + 2012-07-18 20:33 . 2012-07-18 20:33 223744 c:\windows\Installer\be3856.msi

    + 2012-07-18 20:32 . 2012-07-18 20:32 467456 c:\windows\Installer\be3850.msi

    + 2012-07-18 20:02 . 2012-07-18 20:02 429568 c:\windows\Installer\be36e7.msi

    + 2010-02-24 22:14 . 2010-02-24 22:14 543232 c:\windows\Installer\8edbe5.msp

    + 2009-03-20 09:48 . 2009-03-20 09:48 183808 c:\windows\Installer\8edbc4.msp

    + 2012-07-18 19:10 . 2012-07-18 19:10 470528 c:\windows\Installer\8edbab.msi

    + 2010-10-07 15:33 . 2012-07-18 20:24 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe

    - 2010-10-07 15:33 . 2010-10-07 15:56 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe

    + 2010-10-07 15:33 . 2012-07-18 20:24 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe

    - 2010-10-07 15:33 . 2010-10-07 15:56 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe

    + 2010-10-07 15:33 . 2012-07-18 20:24 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe

    - 2010-10-07 15:33 . 2010-10-07 15:56 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe

    - 2010-10-07 15:33 . 2010-10-07 15:56 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe

    + 2010-10-07 15:33 . 2012-07-18 20:24 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe

    + 2012-07-18 20:05 . 2012-07-18 20:05 217864 c:\windows\Installer\{90120000-006E-0413-0000-0000000FF1CE}\misc.exe

    - 2010-11-10 20:05 . 2010-11-10 20:05 217864 c:\windows\Installer\{90120000-006E-0413-0000-0000000FF1CE}\misc.exe

    - 2011-12-24 19:28 . 2011-12-24 19:28 217864 c:\windows\Installer\{50120000-1105-0000-0000-0000000FF1CE}\misc.exe

    + 2012-07-18 20:23 . 2012-07-18 20:23 217864 c:\windows\Installer\{50120000-1105-0000-0000-0000000FF1CE}\misc.exe

    + 2008-07-29 17:59 . 2008-07-29 17:59 368640 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\System.Printing_x86.dll

    + 2008-12-30 14:52 . 2008-12-30 14:52 368640 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\System.Printing_GAC_x86.dll

    + 2008-07-29 17:59 . 2008-07-29 17:59 528384 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\ReachFramework_x86.dll

    + 2008-12-30 14:52 . 2008-12-30 14:52 528384 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\ReachFramework_GAC_x86.dll

    + 2008-07-29 17:59 . 2008-07-29 17:59 132120 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationHostDLL_X86.dll

    + 2008-07-29 18:35 . 2008-07-29 18:35 326160 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationHost_X86.exe

    + 2007-02-26 00:01 . 2007-02-26 00:01 437160 c:\windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC\12.0.6012\DWTRIG20.EXE

    + 2006-10-26 17:48 . 2006-10-26 17:48 439568 c:\windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC\12.0.6012\DWDCW20.DLL

    + 2011-05-31 13:58 . 2011-05-31 13:58 521080 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\POWERPNT.EXE

    + 2000-05-23 21:45 . 2000-05-23 21:45 118784 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\MSSTDFMT.DLL

    + 2006-10-26 12:05 . 2006-10-26 12:05 530760 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XPAGE3C.DLL

    + 2006-10-26 18:49 . 2006-10-26 18:49 509200 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WRD12CVR.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 781104 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WORDPIA.DLL

    + 2006-10-27 13:23 . 2006-10-27 13:23 347432 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WINWORD.EXE

    + 2006-10-26 12:05 . 2006-10-26 12:05 126784 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\TWCUTCHR.DLL

    + 2006-10-26 18:06 . 2006-10-26 18:06 439600 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\SETUP.EXE

    + 2006-10-26 18:13 . 2006-10-26 18:13 503624 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\SELFCERT.EXE

    + 2010-10-07 15:31 . 2010-10-07 15:31 248632 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPTPIA.DLL

    + 2006-10-26 19:07 . 2006-10-26 19:07 368968 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPSLAX.DLL

    + 2006-10-27 13:04 . 2006-10-27 13:04 465200 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\POWERPNT.EXE

    + 2006-10-26 19:30 . 2006-10-26 19:30 482088 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PORTCONN.DLL

    + 2006-07-26 16:53 . 2006-07-26 16:53 459080 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OUTLFLTR.DLL

    + 2006-10-26 18:23 . 2006-10-26 18:23 782720 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ONSYNCPC.DLL

    + 2006-10-27 13:39 . 2006-10-27 13:39 687432 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ONBTTNOL.DLL

    + 2006-10-26 18:32 . 2006-10-26 18:32 604000 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ONBTTNIE.DLL

    + 2006-10-26 18:00 . 2006-10-26 18:00 285008 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OISGRAPH.DLL

    + 2006-10-26 18:00 . 2006-10-26 18:00 998208 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OISAPP.DLL

    + 2006-10-26 18:00 . 2006-10-26 18:00 274744 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OIS.EXE

    + 2006-10-20 06:37 . 2006-10-20 06:37 637744 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OGALEGIT.DLL

    + 2006-10-26 18:06 . 2006-10-26 18:06 232816 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ODEPLOY.EXE

    + 2006-10-26 17:55 . 2006-10-26 17:55 538904 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSTORES.DLL

    + 2006-10-26 17:55 . 2006-10-26 17:55 145688 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSTORE.EXE

    + 2006-10-26 17:55 . 2006-10-26 17:55 832800 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSTORDB.EXE

    + 2006-10-26 11:56 . 2006-10-26 11:56 505136 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSSOAP30.DLL

    + 2006-10-26 17:50 . 2006-10-26 17:50 672024 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSQRY32.EXE

    + 2006-10-26 12:47 . 2006-10-26 12:47 727840 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSPROOF6.DLL

    + 2006-10-26 11:56 . 2006-10-26 11:56 436520 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSORUN.DLL

    + 2006-10-26 17:56 . 2006-10-26 17:56 864080 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSONPDRV.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 428816 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSODCW.DLL

    + 2006-10-27 12:59 . 2006-10-27 12:59 161080 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSOCF.DLL

    + 2006-10-26 11:58 . 2006-10-26 11:58 117552 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSCONV97.DLL

    + 2006-10-26 17:55 . 2006-10-26 17:55 828704 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MEDCAT.DLL

    + 2006-10-26 18:00 . 2006-10-26 18:00 178488 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\IETAG.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 173328 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\IEAWSDC.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 150320 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\GRAPHPIA.DLL

    + 2006-10-27 13:09 . 2006-10-27 13:09 983376 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\FPWEC.DLL

    + 2006-10-26 17:48 . 2006-10-26 17:48 439568 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\DWDCW20.DLL

    + 2006-10-26 18:12 . 2006-10-26 18:12 106824 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\DSSM.EXE

    + 2006-10-26 18:12 . 2006-10-26 18:12 189760 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\CONTACTPICKER.DLL

    + 2006-10-26 17:59 . 2006-10-26 17:59 205616 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\CLVIEW.EXE

    + 2006-10-27 13:41 . 2006-10-27 13:41 399640 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\CDLMSO.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 371568 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEXBE.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 826232 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEWDAT.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 224104 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACETXT.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 551800 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEREP.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 289648 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACER3X.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 260976 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACER2X.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 392048 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEPDE.DLL

    + 2006-10-27 13:00 . 2006-10-27 13:00 387960 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEOLEDB.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 279352 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEODBC.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 207736 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACELTS.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 629616 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEEXCL.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 338800 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEEXCH.DLL

    + 2006-10-27 13:00 . 2006-10-27 13:00 191360 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEES.DLL

    + 2006-10-27 13:00 . 2006-10-27 13:00 576376 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACEDAO.DLL

    + 2006-10-26 18:13 . 2006-10-26 18:13 764800 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACECNF.DLL

    + 2006-10-26 16:49 . 2006-10-26 16:49 970528 c:\windows\Installer\$PatchCache$\Managed\00002109010031400000000000F01FEC\12.0.4518\MSONSEXT.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 781104 c:\windows\Installer\$PatchCache$\Managed\00002105501100000000000000F01FEC\12.0.4518\WORDPIA.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 248632 c:\windows\Installer\$PatchCache$\Managed\00002105501100000000000000F01FEC\12.0.4518\PPTPIA.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 150320 c:\windows\Installer\$PatchCache$\Managed\00002105501100000000000000F01FEC\12.0.4518\GRAPHPIA.DLL

    + 2012-07-18 20:56 . 2009-03-08 02:34 914944 c:\windows\ie8updates\KB982381-IE8\wininet.dll

    + 2012-07-18 20:56 . 2010-02-22 14:29 401272 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll

    + 2012-07-18 20:56 . 2008-07-08 13:07 234872 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe

    + 2012-07-18 20:56 . 2009-03-08 02:34 109568 c:\windows\ie8updates\KB982381-IE8\occache.dll

    + 2012-07-18 20:56 . 2009-03-08 02:32 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll

    + 2012-07-18 20:56 . 2009-03-08 02:32 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll

    + 2012-07-18 20:56 . 2009-03-08 02:33 246784 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll

    + 2012-07-18 20:56 . 2009-03-08 02:31 183808 c:\windows\ie8updates\KB982381-IE8\iepeers.dll

    + 2012-07-18 20:56 . 2009-03-08 02:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll

    + 2012-07-18 20:56 . 2009-03-08 12:09 391536 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll

    + 2012-07-18 20:56 . 2009-03-08 02:32 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe

    + 2012-07-18 21:00 . 2011-11-04 19:13 916992 c:\windows\ie8updates\KB2699988-IE8\wininet.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 105984 c:\windows\ie8updates\KB2699988-IE8\url.dll

    + 2012-07-18 21:00 . 2010-07-05 13:21 401272 c:\windows\ie8updates\KB2699988-IE8\spuninst\updspapi.dll

    + 2012-07-18 21:00 . 2010-07-05 13:21 234872 c:\windows\ie8updates\KB2699988-IE8\spuninst\spuninst.exe

    + 2012-07-18 21:00 . 2011-11-04 19:13 206848 c:\windows\ie8updates\KB2699988-IE8\occache.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 611840 c:\windows\ie8updates\KB2699988-IE8\mstime.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 602112 c:\windows\ie8updates\KB2699988-IE8\msfeeds.dll

    + 2012-07-18 21:00 . 2009-03-08 02:35 521216 c:\windows\ie8updates\KB2699988-IE8\jsdbgui.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 247808 c:\windows\ie8updates\KB2699988-IE8\ieproxy.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 184320 c:\windows\ie8updates\KB2699988-IE8\iepeers.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 743424 c:\windows\ie8updates\KB2699988-IE8\iedvtool.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 387584 c:\windows\ie8updates\KB2699988-IE8\iedkcs32.dll

    + 2012-07-18 21:00 . 2011-11-04 11:25 174080 c:\windows\ie8updates\KB2699988-IE8\ie4uinit.exe

    + 2012-07-18 20:58 . 2010-05-06 10:37 916480 c:\windows\ie8updates\KB2618444-IE8\wininet.dll

    + 2012-07-18 20:58 . 2009-03-08 02:34 105984 c:\windows\ie8updates\KB2618444-IE8\url.dll

    + 2012-07-18 20:58 . 2010-07-05 13:21 401272 c:\windows\ie8updates\KB2618444-IE8\spuninst\updspapi.dll

    + 2012-07-18 20:58 . 2010-07-05 13:21 234872 c:\windows\ie8updates\KB2618444-IE8\spuninst\spuninst.exe

    + 2012-07-18 20:58 . 2010-05-06 10:37 206848 c:\windows\ie8updates\KB2618444-IE8\occache.dll

    + 2012-07-18 20:58 . 2010-05-06 10:37 611840 c:\windows\ie8updates\KB2618444-IE8\mstime.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 599040 c:\windows\ie8updates\KB2618444-IE8\msfeeds.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 247808 c:\windows\ie8updates\KB2618444-IE8\ieproxy.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 184320 c:\windows\ie8updates\KB2618444-IE8\iepeers.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 743424 c:\windows\ie8updates\KB2618444-IE8\iedvtool.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 387584 c:\windows\ie8updates\KB2618444-IE8\iedkcs32.dll

    + 2012-07-18 20:58 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2618444-IE8\ie4uinit.exe

    + 2012-07-18 20:57 . 2010-02-22 14:29 401272 c:\windows\ie8updates\KB2598845-IE8\spuninst\updspapi.dll

    + 2012-07-18 20:57 . 2010-02-22 14:29 234872 c:\windows\ie8updates\KB2598845-IE8\spuninst\spuninst.exe

    + 2012-07-18 20:50 . 2008-09-23 12:00 884224 c:\windows\ie8\wininet.dll

    + 2012-07-18 20:50 . 2007-08-13 17:45 206336 c:\windows\ie8\winfxdocobj.exe

    + 2012-07-18 20:50 . 2008-08-26 10:12 233472 c:\windows\ie8\webcheck.dll

    + 2012-07-18 20:50 . 2011-04-30 08:50 766464 c:\windows\ie8\vgx.dll

    + 2012-07-18 20:50 . 2011-03-04 06:42 434176 c:\windows\ie8\vbscript.dll

    + 2012-07-18 20:52 . 2009-01-07 16:21 400928 c:\windows\ie8\spuninst\updspapi.dll

    + 2012-07-18 20:52 . 2009-01-07 16:21 235040 c:\windows\ie8\spuninst\spuninst.exe

    + 2012-07-18 20:50 . 2008-09-23 12:00 139264 c:\windows\ie8\occache.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 671232 c:\windows\ie8\mstime.dll

    + 2012-07-18 20:50 . 2008-08-26 10:12 193024 c:\windows\ie8\msrating.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 156160 c:\windows\ie8\msls31.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 477696 c:\windows\ie8\mshtmled.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 459264 c:\windows\ie8\msfeeds.dll

    + 2012-07-18 20:50 . 2011-03-04 06:42 512000 c:\windows\ie8\jscript.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 558536 c:\windows\ie8\iexplore.exe

    + 2012-07-18 20:50 . 2008-09-23 12:00 180736 c:\windows\ie8\ieui.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 267776 c:\windows\ie8\iertutil.dll

    + 2012-07-18 20:50 . 2007-08-13 17:54 287744 c:\windows\ie8\ieproxy.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 256000 c:\windows\ie8\iepeers.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 388608 c:\windows\ie8\iedkcs32.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 380928 c:\windows\ie8\ieapfltr.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 406016 c:\windows\ie8\ieaksie.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 153088 c:\windows\ie8\ieakeng.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 214528 c:\windows\ie8\dxtrans.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 347136 c:\windows\ie8\dxtmsft.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 124928 c:\windows\ie8\advpack.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 110592 c:\windows\ie8\admparse.dll

    + 2012-07-18 21:33 . 2010-07-05 13:21 401272 c:\windows\ie7updates\KB2699988-IE7\spuninst\updspapi.dll

    + 2012-07-18 21:33 . 2012-03-08 15:40 234872 c:\windows\ie7updates\KB2699988-IE7\spuninst\spuninst.exe

    + 2012-07-18 21:33 . 2008-09-23 12:00 133632 c:\windows\ie7updates\KB2699988-IE7\extmgr.dll

    + 2012-07-18 20:01 . 2008-09-23 12:00 765952 c:\windows\ie7updates\KB2544521-IE7\vgx.dll

    + 2012-07-18 20:01 . 2010-07-05 13:21 401272 c:\windows\ie7updates\KB2544521-IE7\spuninst\updspapi.dll

    + 2012-07-18 20:01 . 2010-07-05 13:21 234872 c:\windows\ie7updates\KB2544521-IE7\spuninst\spuninst.exe

    + 2008-12-30 14:33 . 2009-08-18 08:55 179712 c:\windows\ehome\ehkeyctl.dll

    + 2012-07-18 18:38 . 2011-07-15 13:29 457856 c:\windows\Driver Cache\i386\mrxsmb.sys

    + 2012-07-18 20:28 . 2012-07-18 20:28 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_663e29d2\System.Drawing.dll

    + 2012-07-18 21:10 . 2012-07-18 21:10 843776 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_05a8e33a\System.Drawing.dll

    + 2012-07-18 21:11 . 2012-07-18 21:11 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_53ca02e8\System.Drawing.Design.dll

    + 2012-07-18 20:29 . 2012-07-18 20:29 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_22e1ba31\System.Drawing.Design.dll

    + 2012-07-18 20:29 . 2012-07-18 20:29 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_ae897983\CustomMarshalers.dll

    + 2012-07-19 13:09 . 2012-07-19 13:09 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\73c11d3efc586635aef4ea51edaebf9b\WsatConfig.ni.exe

    + 2012-07-18 21:49 . 2012-07-18 21:49 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\39750ff9ae4af002587324607f7f7963\WindowsFormsIntegration.ni.dll

    + 2012-07-18 21:49 . 2012-07-18 21:49 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\be27ab5913cec2b292a019c2a13ec701\UIAutomationTypes.ni.dll

    + 2012-07-18 21:49 . 2012-07-18 21:49 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ffe01862579d9df1e1faeae0c3f14402\UIAutomationClient.ni.dll

    + 2012-07-18 20:12 . 2012-07-18 20:12 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP732.tmp\ServiceModelReg.exe

    + 2012-07-19 13:17 . 2012-07-19 13:17 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\7928ba6440b0a7e59125bff6f7701957\System.Xml.Linq.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\c1e899f790c6e33299b53bc81e570bb0\System.Web.Routing.ni.dll

    + 2012-07-19 13:17 . 2012-07-19 13:17 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\9469da751c73fdfff5646e108de9bd19\System.Web.RegularExpressions.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\63f1b9e01618255b52d8eeb2daad77f6\System.Web.Extensions.Design.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\14138b29a7f7a5c6d8467ff0a61ca1ce\System.Web.Entity.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\31f08946214efe376d9e4a015f97b6b8\System.Web.Entity.Design.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 543232 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\646f2da9f15e630010771685f6b3880c\System.Web.DynamicData.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\61d4107126a6aad6551bfe60a3bdd82d\System.Web.Abstractions.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4e27325846cc95cb9914b5d1a0d168c9\System.Transactions.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\d98adaf56367179c2a6f5679f507184d\System.ServiceProcess.ni.dll

    + 2012-07-19 13:10 . 2012-07-19 13:10 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\2cbb0684b92a983b30e47ce4c85ac276\System.Security.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\ba40dc25a0a02ae38ac92424b7061232\System.Runtime.Serialization.Formatters.Soap.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\ab2f9bc287809264be8a8755cd0502d4\System.Net.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\566c9755ae48ead91f2bf52c8c9e7e7d\System.Management.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1f4bab88676de178b68d18e38b57e04e\System.Management.Instrumentation.ni.dll

    + 2012-07-18 22:02 . 2012-07-18 22:02 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\13bbf782b1ec26c87f2caa8f1619f1ef\System.IO.Log.ni.dll

    + 2012-07-18 22:02 . 2012-07-18 22:02 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\93b95d05d8a8679bb7baab570da1c4c9\System.IdentityModel.Selectors.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\2232ff8f81a8bac3631944793445e49b\System.EnterpriseServices.Wrapper.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\2232ff8f81a8bac3631944793445e49b\System.EnterpriseServices.ni.dll

    + 2012-07-18 21:46 . 2012-07-18 21:46 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\57ad776aa4a8c0e79d78bb50fede9757\System.Drawing.Design.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\9f13b6951a86ff0071554aa9a8283e2f\System.DirectoryServices.AccountManagement.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\58bada2f12e3c1e8854254dc4a923a10\System.DirectoryServices.Protocols.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 940032 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3240cd1e338e739121291c4966095c12\System.Data.Services.Client.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\16a43e646b7c5ff6646336a0da4dc0ec\System.Data.Services.Design.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\dec9187cbc36e2d0c29cd215b0bb59cb\System.Data.Entity.Design.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\12a2e110731ce5654de6124f2ebdc582\System.Data.DataSetExtensions.ni.dll

    + 2012-07-19 13:10 . 2012-07-19 13:10 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\27485496b1259eaeae0a54f62875cdbd\System.Configuration.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c91be8a2ec9d7e0ff099203133ba966d\System.Configuration.Install.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\eb614cc832e3c3b4c69127bb188d7d09\System.AddIn.ni.dll

    + 2012-07-19 13:09 . 2012-07-19 13:09 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\498b53d7db00f3fb3f7255273284f13a\SMSvcHost.ni.exe

    + 2012-07-19 13:09 . 2012-07-19 13:09 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\735f2a008aa059d9f0cdeef5e67791ed\SMDiagnostics.ni.dll

    + 2012-07-19 13:09 . 2012-07-19 13:09 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\c9352e4cd229f09479c54d6051aea6b9\ServiceModelReg.ni.exe

    + 2012-07-18 21:31 . 2012-07-18 21:31 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a4706b850df9a3483f2fc439b6abe616\PresentationFramework.Royale.ni.dll

    + 2012-07-18 21:31 . 2012-07-18 21:31 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8b873631a0855fb6aa0ad25f1d9de7fe\PresentationFramework.Luna.ni.dll

    + 2012-07-18 21:31 . 2012-07-18 21:31 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7416fe825e6e49a87fa8ff60c8971813\PresentationFramework.Classic.ni.dll

    + 2012-07-18 21:31 . 2012-07-18 21:31 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\186c27fbd7b38b5551889274f6fa2ccd\PresentationFramework.Aero.ni.dll

    + 2012-07-19 13:09 . 2012-07-19 13:09 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\ef9fece63b93636352f771e43a853cda\MSBuild.ni.exe

    + 2012-07-19 13:14 . 2012-07-19 13:14 161792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ed59eea8cae71c620f4e8841982b8814\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d1c6f4db277a081756dc809715ba426f\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c12a3dc57e95148adfbc4cc3262ef5ef\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9f6c4c1b4caff940f941505f18570637\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\985b6298766462d27c5278706b51ed0f\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\72335b65d66f4a03ff12fccb0d93ccce\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll

    + 2012-07-18 22:02 . 2012-07-18 22:02 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\71a92dac8c7023602ac0a54ffcae8be1\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\61ec81de6d695064ac7939ee93be9f7c\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\617595ba0a1c6f144978285abf7abe72\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll

    + 2012-07-18 22:02 . 2012-07-18 22:02 179200 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4a1486b187621b67960586035a9ec008\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 363008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4864a2f47d3794cb86cb63b56a425374\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 650240 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\427ce2bd742470bc7bea97ae9cfbe834\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll

    + 2012-07-18 22:02 . 2012-07-18 22:02 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\41dec6cdc9d8976f0b7394f1bfafafd5\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\31fc273a7c73e989a438717073ee0a73\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll

    + 2012-07-19 13:14 . 2012-07-19 13:14 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0bbf1d86f93bf5610b7f6b590862e153\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll

    + 2012-07-19 13:09 . 2012-07-19 13:09 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4dabf07c54f391f4b9e392fe441396fc\Microsoft.Transactions.Bridge.Dtc.ni.dll

    + 2012-07-18 21:55 . 2012-07-18 21:55 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\cc6afc80492939656055fafaa87f13d9\Microsoft.Office.Tools.v9.0.ni.dll

    + 2012-07-19 13:12 . 2012-07-19 13:12 854016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\abafec29acc92cd7c69f764cbc0dd337\Microsoft.Office.Tools.Word.v9.0.ni.dll

    + 2012-07-19 13:12 . 2012-07-19 13:12 155648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\690607c9873d3344c7308aba91c329e6\Microsoft.Office.Tools.Outlook.v9.0.ni.dll

    + 2012-07-19 13:11 . 2012-07-19 13:11 815616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\124c79bbf62a2bd0f45e8bee8a2d99e5\Microsoft.Office.Tools.Common.v9.0.ni.dll

    + 2012-07-19 13:11 . 2012-07-19 13:11 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\44f09d0fea23077b33a1cb31e7cfda6c\Microsoft.Build.Utilities.v3.5.ni.dll

    + 2012-07-19 13:11 . 2012-07-19 13:11 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2126f24a5eadb32e089504dbc633b22a\Microsoft.Build.Utilities.ni.dll

    + 2012-07-19 13:11 . 2012-07-19 13:11 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\834ee1657ba26ea2aa0be1af3d70d6a5\Microsoft.Build.Engine.ni.dll

    + 2012-07-19 13:10 . 2012-07-19 13:10 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\7a86732e99ce23e58bae851957d2f448\Microsoft.Build.Conversion.v3.5.ni.dll

    + 2012-07-19 13:10 . 2012-07-19 13:10 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bb26dd100d656605c576881a1a823667\CustomMarshalers.ni.dll

    + 2012-07-19 13:08 . 2012-07-19 13:08 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\2e965d93b2e26e2e6048b1babf0ec608\ComSvcConfig.ni.exe

    + 2012-07-18 21:54 . 2012-07-18 21:54 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\7e7799769906faf89308201e13f0b0e5\AspNetMMCExt.ni.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

    + 2012-07-18 19:27 . 2012-07-18 19:27 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

    + 2012-07-18 19:27 . 2012-07-18 19:27 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

    - 2008-12-30 14:53 . 2008-12-30 14:53 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll

    + 2012-07-18 21:45 . 2012-07-18 21:45 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

    - 2008-12-30 14:52 . 2008-12-30 14:52 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll

    + 2012-07-18 19:27 . 2012-07-18 19:27 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll

    + 2012-07-18 21:26 . 2012-07-18 21:26 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

    + 2012-07-18 21:26 . 2012-07-18 21:26 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll

    - 2008-12-30 14:52 . 2008-12-30 14:52 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll

    + 2012-07-18 21:09 . 2012-07-18 21:09 471040 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll

    + 2012-07-18 20:15 . 2012-07-18 20:15 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll

    + 2012-07-18 20:16 . 2012-07-18 20:16 350080 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll

    + 2012-07-18 20:13 . 2012-07-18 20:13 149368 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 389120 c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 389120 c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 122880 c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 122880 c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 278528 c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 278528 c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 389120 c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 389120 c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 204800 c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiPlay.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 204800 c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiPlay.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 167936 c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 167936 c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 110592 c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 110592 c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 126976 c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 126976 c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 868352 c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 868352 c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 192512 c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 192512 c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 102400 c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 102400 c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 117248 c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 117248 c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll

    + 2012-07-18 18:39 . 2012-02-09 15:43 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll

    + 2012-07-18 18:38 . 2010-08-23 16:13 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 3781960 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll

    + 2011-04-18 20:51 . 2011-04-18 20:51 3766600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll

    + 2008-10-24 19:15 . 2008-10-24 19:15 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll

    + 2011-05-13 18:04 . 2011-05-13 18:04 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80u.dll

    + 2011-05-13 18:04 . 2011-05-13 18:04 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80.dll

    + 2009-07-20 22:03 . 2009-07-20 22:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll

    + 2008-09-23 12:00 . 2010-04-06 02:52 2462720 c:\windows\system32\WMVCore.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 1212416 c:\windows\system32\urlmon.dll

    + 2008-09-23 12:00 . 2012-06-08 14:25 8509952 c:\windows\system32\shell32.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 1440768 c:\windows\system32\query.dll

    + 2008-09-23 12:00 . 2009-07-17 16:22 1440768 c:\windows\system32\query.dll

    + 2008-09-23 12:00 . 2011-11-03 15:29 1296384 c:\windows\system32\quartz.dll

    + 2008-09-23 12:00 . 2011-11-01 16:05 1288704 c:\windows\system32\ole32.dll

    + 2009-07-20 22:05 . 2009-07-20 22:05 1348432 c:\windows\system32\msxml4.dll

    + 2008-12-30 14:32 . 2011-02-02 07:58 2067456 c:\windows\system32\mstscax.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 6007808 c:\windows\system32\mshtml.dll

    + 2012-07-18 22:14 . 2012-07-18 22:14 9465032 c:\windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll

    - 2008-09-23 12:00 . 2008-09-23 12:00 1030656 c:\windows\system32\kernel32.dll

    + 2008-09-23 12:00 . 2009-03-21 14:09 1030656 c:\windows\system32\kernel32.dll

    + 2008-09-23 12:00 . 2012-05-11 14:44 2000384 c:\windows\system32\iertutil.dll

    + 2008-09-23 12:00 . 2009-02-06 19:07 3698584 c:\windows\system32\ieapfltr.dat

    + 2011-07-07 00:28 . 2011-07-07 00:28 1193320 c:\windows\system32\FM20.DLL

    + 2008-12-30 14:38 . 2012-06-02 13:19 1933848 c:\windows\system32\dllcache\wuaueng.dll

    + 2010-04-06 02:52 . 2010-04-06 02:52 2462720 c:\windows\system32\dllcache\WMVCore.dll

    + 2012-07-18 18:40 . 2012-06-13 13:55 1875200 c:\windows\system32\dllcache\win32k.sys

    + 2009-03-08 02:34 . 2012-05-11 14:44 1212416 c:\windows\system32\dllcache\urlmon.dll

    + 2012-07-18 19:05 . 2012-06-08 14:25 8509952 c:\windows\system32\dllcache\shell32.dll

    + 2009-01-07 16:21 . 2009-01-07 16:21 1497088 c:\windows\system32\dllcache\shdocvw.dll

    + 2012-07-18 19:03 . 2009-07-17 16:22 1440768 c:\windows\system32\dllcache\query.dll

    + 2012-07-18 18:42 . 2011-11-03 15:29 1296384 c:\windows\system32\dllcache\quartz.dll

    + 2012-07-18 19:04 . 2011-11-01 16:05 1288704 c:\windows\system32\dllcache\ole32.dll

    + 2009-02-10 17:19 . 2012-05-05 03:14 2196992 c:\windows\system32\dllcache\ntoskrnl.exe

    + 2012-07-18 18:21 . 2012-05-05 03:14 2031104 c:\windows\system32\dllcache\ntkrpamp.exe

    + 2012-07-18 18:21 . 2012-05-05 03:14 2073472 c:\windows\system32\dllcache\ntkrnlpa.exe

    + 2012-07-18 18:21 . 2012-05-05 03:14 2152960 c:\windows\system32\dllcache\ntkrnlmp.exe

    + 2012-07-18 19:09 . 2012-06-05 15:48 1447936 c:\windows\system32\dllcache\msxml6.dll

    + 2012-07-18 19:09 . 2012-06-05 15:48 1172480 c:\windows\system32\dllcache\msxml3.dll

    + 2009-06-10 07:22 . 2009-06-10 07:22 2066432 c:\windows\system32\dllcache\mstscax.dll

    + 2012-07-18 19:04 . 2010-01-29 14:54 1315328 c:\windows\system32\dllcache\msoe.dll

    + 2009-03-08 02:41 . 2012-05-11 14:44 6007808 c:\windows\system32\dllcache\mshtml.dll

    + 2012-07-18 18:11 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe

    + 2012-07-18 19:05 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll

    + 2009-01-07 16:21 . 2009-01-07 16:21 1022976 c:\windows\system32\dllcache\browseui.dll

    + 2009-11-06 23:06 . 2009-11-06 23:06 1130824 c:\windows\system32\dfshim.dll

    + 2010-04-07 21:48 . 2010-04-07 21:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll

    - 2008-07-25 09:17 . 2008-07-25 09:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll

    + 2012-03-20 03:23 . 2012-03-20 03:23 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll

    + 2011-12-25 01:50 . 2011-12-25 01:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll

    + 2011-12-25 01:50 . 2011-12-25 01:50 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll

    + 2012-03-20 03:23 . 2012-03-20 03:23 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll

    - 2008-07-25 09:17 . 2008-07-25 09:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll

    + 2011-12-25 01:50 . 2011-12-25 01:50 5913360 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

    + 2011-12-25 01:50 . 2011-12-25 01:50 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

    + 2012-04-26 00:32 . 2012-04-26 00:32 6385664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656370\M2656370Uninstall.msp

    + 2011-12-25 09:07 . 2011-12-25 09:07 2064384 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll

    + 2011-12-25 09:06 . 2011-12-25 09:06 1269760 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll

    + 2011-12-25 09:06 . 2011-12-25 09:06 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll

    - 2007-04-13 20:35 . 2007-04-13 20:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll

    + 2011-12-24 20:54 . 2011-12-24 20:54 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll

    - 2007-04-13 19:57 . 2007-04-13 19:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll

    + 2011-12-24 20:53 . 2011-12-24 20:53 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll

    - 2007-04-13 19:50 . 2007-04-13 19:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll

    + 2011-12-25 09:06 . 2011-12-25 09:06 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll

    + 2012-03-20 21:57 . 2012-03-20 21:57 6188544 c:\windows\Installer\f66ef3.msp

    + 2011-12-26 07:59 . 2011-12-26 07:59 4368896 c:\windows\Installer\f66ed8.msp

    + 2012-07-18 21:09 . 2012-07-18 21:09 7069184 c:\windows\Installer\f66eb8.msp

    + 2012-07-19 13:09 . 2012-07-19 13:09 5164032 c:\windows\Installer\c5c24.msi

    + 2011-11-01 11:34 . 2011-11-01 11:34 4250112 c:\windows\Installer\be381d.msp

    + 2011-09-15 16:40 . 2011-09-15 16:40 4760064 c:\windows\Installer\be3816.msp

    + 2011-09-15 16:40 . 2011-09-15 16:40 7959552 c:\windows\Installer\be380d.msp

    + 2009-11-08 22:25 . 2009-11-08 22:25 1935360 c:\windows\Installer\8edbff.msp

    + 2010-04-11 20:17 . 2010-04-11 20:17 4210688 c:\windows\Installer\8edbd0.msp

    + 2010-04-11 20:17 . 2010-04-11 20:17 2607104 c:\windows\Installer\8edbcf.msp

    + 2009-02-25 17:08 . 2009-02-25 17:08 8311808 c:\windows\Installer\8edbba.msp

    + 2010-10-07 15:33 . 2012-07-18 20:24 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe

    - 2010-10-07 15:33 . 2010-10-07 15:56 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe

    + 2008-07-29 17:59 . 2008-07-29 17:59 1245184 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\WindowsBase_x86.dll

    + 2008-12-30 14:52 . 2008-12-30 14:52 1245184 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\WindowsBase_GAC_x86.dll

    + 2008-07-29 18:35 . 2008-07-29 18:35 5283840 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationFramework_x86.dll

    + 2008-12-30 14:52 . 2008-12-30 14:52 5283840 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationFramework_GAC_x86.dll

    + 2008-07-29 17:59 . 2008-07-29 17:59 4210688 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationCore_x86.dll

    + 2008-12-30 14:52 . 2008-12-30 14:52 4210688 c:\windows\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\PresentationCore_GAC_x86.dll

    + 2011-07-27 02:44 . 2011-07-27 02:44 8494968 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\PPCORE.DLL

    + 2006-10-26 12:05 . 2006-10-26 12:05 1181520 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XIMAGE3B.DLL

    + 2006-10-27 13:11 . 2006-10-27 13:11 4235560 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WRD12CNV.DLL

    + 2006-10-26 20:58 . 2006-10-26 20:58 3732792 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\VVIEWER.DLL

    + 2006-10-26 21:00 . 2006-10-26 21:00 1841984 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\VVIEWDWG.DLL

    + 2006-09-29 22:42 . 2006-09-29 22:42 2583344 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\VBE6.DLL

    + 2006-10-27 12:57 . 2006-10-27 12:57 2330968 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\STSLIST.DLL

    + 2006-10-26 18:25 . 2006-10-26 18:25 2172688 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PSRCHFEA.DLL

    + 2006-10-26 17:52 . 2006-10-26 17:52 2012480 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPTVIEW.EXE

    + 2006-10-27 13:04 . 2006-10-27 13:04 7980848 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPCORE.DLL

    + 2006-09-15 14:25 . 2006-09-15 14:25 3611416 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OUTLFLTR.DAT

    + 2006-10-26 18:07 . 2006-10-26 18:07 6536992 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OSETUP.DLL

    + 2006-10-27 13:03 . 2006-10-27 13:03 6579512 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ONMAIN.DLL

    + 2006-10-26 18:24 . 2006-10-26 18:24 1165112 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ONLIBS.DLL

    + 2006-10-27 13:03 . 2006-10-27 13:03 1018664 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ONENOTE.EXE

    + 2006-10-27 13:18 . 2006-10-27 13:18 1658152 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OGL.DLL

    + 2006-10-26 18:14 . 2006-10-26 18:14 7033152 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OFFOWC.DLL

    + 2006-10-26 18:42 . 2006-10-26 18:42 8423224 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OARTCONV.DLL

    + 2006-10-26 12:47 . 2006-10-26 12:47 1512304 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\NLSD0000.DLL

    + 2006-10-26 18:00 . 2006-10-26 18:00 6635320 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSORES.DLL

    + 2006-10-27 13:10 . 2006-10-27 13:10 5281592 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\IPEDITOR.DLL

    + 2006-10-26 18:02 . 2006-10-26 18:02 2526520 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\GRAPH.EXE

    + 2006-10-26 17:21 . 2006-10-26 17:21 1682232 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\FPSRVUTL.DLL

    + 2006-10-26 12:10 . 2006-10-26 12:10 1190688 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\FM20.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 1276720 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\EXCELPIA.DLL

    + 2006-10-27 13:00 . 2006-10-27 13:00 1751904 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\ACECORE.DLL

    + 2006-10-26 16:49 . 2006-10-26 16:49 1011488 c:\windows\Installer\$PatchCache$\Managed\00002109010031400000000000F01FEC\12.0.4518\MSDAIPP.DLL

    + 2010-10-07 15:31 . 2010-10-07 15:31 1276720 c:\windows\Installer\$PatchCache$\Managed\00002105501100000000000000F01FEC\12.0.4518\EXCELPIA.DLL

    + 2012-07-18 20:56 . 2009-03-08 02:34 1206784 c:\windows\ie8updates\KB982381-IE8\urlmon.dll

    + 2012-07-18 20:56 . 2009-03-08 02:41 5937152 c:\windows\ie8updates\KB982381-IE8\mshtml.dll

    + 2012-07-18 20:56 . 2009-03-08 02:32 1985024 c:\windows\ie8updates\KB982381-IE8\iertutil.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 1212416 c:\windows\ie8updates\KB2699988-IE8\urlmon.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 5978112 c:\windows\ie8updates\KB2699988-IE8\mshtml.dll

    + 2012-07-18 21:00 . 2011-11-04 19:13 2000384 c:\windows\ie8updates\KB2699988-IE8\iertutil.dll

    + 2012-07-18 20:58 . 2010-05-06 10:37 1209344 c:\windows\ie8updates\KB2618444-IE8\urlmon.dll

    + 2012-07-18 20:58 . 2010-05-06 10:37 5950976 c:\windows\ie8updates\KB2618444-IE8\mshtml.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 1985536 c:\windows\ie8updates\KB2618444-IE8\iertutil.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 1119232 c:\windows\ie8\urlmon.dll

    + 2012-07-18 20:50 . 2008-08-26 10:12 3594752 c:\windows\ie8\mshtml.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 7634432 c:\windows\ie8\ieframe.dll

    + 2012-07-18 20:50 . 2008-09-23 12:00 2455488 c:\windows\ie8\ieapfltr.dat

    + 2012-07-18 20:50 . 2008-09-23 12:00 1227264 c:\windows\ie8\ieakui.dll

    + 2009-02-10 17:19 . 2012-05-05 03:14 2196992 c:\windows\Driver Cache\i386\ntoskrnl.exe

    + 2012-07-18 18:21 . 2012-05-05 03:14 2031104 c:\windows\Driver Cache\i386\ntkrpamp.exe

    + 2012-07-18 18:21 . 2012-05-05 03:14 2073472 c:\windows\Driver Cache\i386\ntkrnlpa.exe

    + 2012-07-18 18:21 . 2012-05-05 03:14 2152960 c:\windows\Driver Cache\i386\ntkrnlmp.exe

    + 2012-07-18 20:29 . 2012-07-18 20:29 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_4f495f38\System.dll

    + 2012-07-18 20:27 . 2012-07-18 20:27 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_338e2b0c\System.dll

    + 2012-07-18 20:29 . 2012-07-18 20:29 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_f5da3eb7\System.Xml.dll

    + 2012-07-18 20:28 . 2012-07-18 20:28 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_2b339919\System.Xml.dll

    + 2012-07-18 20:29 . 2012-07-18 20:29 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_f10c5f2c\System.Windows.Forms.dll

    + 2012-07-18 21:10 . 2012-07-18 21:10 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_81ea0080\System.Windows.Forms.dll

    + 2012-07-18 20:28 . 2012-07-18 20:28 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_3f90988d\System.Windows.Forms.dll

    + 2012-07-18 21:11 . 2012-07-18 21:11 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_0afebe53\System.Windows.Forms.dll

    + 2012-07-18 20:29 . 2012-07-18 20:29 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_7163bf59\System.Drawing.dll

    + 2012-07-18 21:11 . 2012-07-18 21:11 2248704 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_434b4dc4\System.Drawing.dll

    + 2012-07-18 20:29 . 2012-07-18 20:29 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_e97bf6be\System.Design.dll

    + 2012-07-18 20:28 . 2012-07-18 20:28 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_a7e58c86\System.Design.dll

    + 2012-07-18 21:11 . 2012-07-18 21:11 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_8af9d664\System.Design.dll

    + 2012-07-18 21:10 . 2012-07-18 21:10 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_81b94fa6\System.Design.dll

    + 2012-07-18 20:28 . 2012-07-18 20:28 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_8a3afbfb\mscorlib.dll

    + 2012-07-18 20:29 . 2012-07-18 20:29 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_1344c28d\mscorlib.dll

    + 2012-07-18 21:19 . 2012-07-18 21:19 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\db84366009f4b763a5b3b11dd04f8f58\WindowsBase.ni.dll

    + 2012-07-18 21:49 . 2012-07-18 21:49 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\d23d12a189be222844ee9646968cc86d\UIAutomationClientsideProviders.ni.dll

    + 2012-07-18 19:28 . 2012-07-18 19:28 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A7.tmp\PresentationBuildTasks.dll

    + 2012-07-18 21:19 . 2012-07-18 21:19 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\2448ec34d1e318a77a0d32704961c646\System.ni.dll

    + 2012-07-18 21:48 . 2012-07-18 21:48 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\494e536022ee1a0d2fe124c3d2500f74\System.Xml.ni.dll

    + 2012-07-19 13:17 . 2012-07-19 13:17 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\f2258fdffa913836f897d0e21f78134f\System.WorkflowServices.ni.dll

    + 2012-07-19 13:17 . 2012-07-19 13:17 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\ed4dd1dfb0b0b9aa2d681056ff0ec027\System.Workflow.Runtime.ni.dll

    + 2012-07-19 13:17 . 2012-07-19 13:17 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\9b51eb6e44c13801b6129303c6346811\System.Workflow.ComponentModel.ni.dll

    + 2012-07-19 13:17 . 2012-07-19 13:17 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\ca4a0d1122753aa037a300f90dd59cc3\System.Workflow.Activities.ni.dll

    + 2012-07-19 13:17 . 2012-07-19 13:17 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\69bd0b697a0b5fd16069c76513d62fdf\System.Web.Services.ni.dll

    + 2012-07-19 13:17 . 2012-07-19 13:17 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\e2f852dece61b33185ca162eb4def2ae\System.Web.Mobile.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\df4fb0c94a33f6c5004beb46d4c156ff\System.Web.Extensions.ni.dll

    + 2012-07-18 21:35 . 2012-07-18 21:35 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\924b0114561b35049dd25280d757856b\System.Speech.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8a5b23c730a787083e744fa21daea324\System.ServiceModel.Web.ni.dll

    + 2012-07-18 22:02 . 2012-07-18 22:02 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\77f2a8ab6e83367d4fafdc39ce95c44f\System.Runtime.Serialization.ni.dll

    + 2012-07-18 21:35 . 2012-07-18 21:35 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\93b58cd2f69b60b9dc5200c6d0407003\System.Printing.ni.dll

    + 2012-07-18 22:02 . 2012-07-18 22:02 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\ee250515e9c14724b8b3f80233d20953\System.IdentityModel.ni.dll

    + 2012-07-18 21:34 . 2012-07-18 21:34 1592320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e6873ee677a69bc87c0f9002c899e703\System.Drawing.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c4ee66e8222a51dcc28f106d3f62d7f0\System.DirectoryServices.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\afd2be6c61a9c3857277f1d85b342d65\System.Deployment.ni.dll

    + 2012-07-18 21:32 . 2012-07-18 21:32 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\2fa417d910dda5e6e39cc648e69376a3\System.Data.ni.dll

    + 2012-07-19 13:10 . 2012-07-19 13:10 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\2321a4d8ccd8575c92d0bd58e1f90a11\System.Data.SqlXml.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\21511e7ace00ef232b4b6c6eaa7371e4\System.Data.Services.ni.dll

    + 2012-07-18 21:33 . 2012-07-18 21:33 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\43d777a0cd8e5f21c42d369934db419c\System.Data.Linq.ni.dll

    + 2012-07-19 13:15 . 2012-07-19 13:15 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\e0694085ffcaf2f1812a38eca8dd8fa2\System.Data.Entity.ni.dll

    + 2012-07-18 21:32 . 2012-07-18 21:32 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\ce610f4f67331a626121ba61186bc8c3\System.Core.ni.dll

    + 2012-07-18 21:32 . 2012-07-18 21:32 2146304 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\9206a299e3b4048af222cc9565db5723\ReachFramework.ni.dll

    + 2012-07-18 21:44 . 2012-07-18 21:44 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\06b22122eaf962e3c4da4202fa14d1c3\PresentationUI.ni.dll

    + 2012-07-18 21:19 . 2012-07-18 21:19 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b6f601ed3ffc50caf04fc128bcd15e6b\PresentationBuildTasks.ni.dll

    + 2012-07-19 13:13 . 2012-07-19 13:13 1301504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\fcbf461c0a16d8da2891e7d6569002e5\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll

    + 2012-07-19 13:13 . 2012-07-19 13:13 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\c10e7b8fb9b86d321b14947b0b7ef45a\Microsoft.VisualBasic.ni.dll

    + 2012-07-19 13:09 . 2012-07-19 13:09 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\23e3e3d63681297415d9373df829c89d\Microsoft.Transactions.Bridge.ni.dll

    + 2012-07-19 13:12 . 2012-07-19 13:12 1353728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\7ed1671e0e1b23286854f503f4dd6353\Microsoft.Office.Tools.Excel.v9.0.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\fb35a0e9aa1d56677f1124dc63189074\Microsoft.JScript.ni.dll

    + 2012-07-19 13:11 . 2012-07-19 13:11 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\faca8698bae4ef183094b2455eb6a574\Microsoft.Build.Tasks.v3.5.ni.dll

    + 2012-07-19 13:11 . 2012-07-19 13:11 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\9a8bde4765fbf4362a69ad94719181ae\Microsoft.Build.Tasks.ni.dll

    + 2012-07-19 13:09 . 2012-07-19 13:09 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\7c826cc4925b5d71eca007812679fe27\Microsoft.Build.Engine.ni.dll

    + 2012-07-18 21:19 . 2012-07-18 21:19 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

    - 2008-12-30 14:53 . 2008-12-30 14:53 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll

    + 2012-07-18 21:44 . 2012-07-18 21:44 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll

    + 2012-07-18 19:27 . 2012-07-18 19:27 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

    + 2012-07-18 21:19 . 2012-07-18 21:19 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll

    - 2008-12-30 14:52 . 2008-12-30 14:52 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll

    + 2012-07-18 21:39 . 2012-07-18 21:39 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

    - 2008-12-30 14:51 . 2008-12-30 14:51 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

    + 2012-07-18 21:19 . 2012-07-18 21:19 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll

    + 2012-07-18 21:40 . 2012-07-18 21:40 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

    + 2012-07-18 20:26 . 2012-07-18 20:26 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll

    - 2008-12-30 14:54 . 2008-12-30 14:54 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll

    + 2012-07-18 20:26 . 2012-07-18 20:26 2064384 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll

    + 2012-07-18 20:26 . 2012-07-18 20:26 1269760 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll

    + 2012-07-18 20:14 . 2012-07-18 20:14 1279864 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll

    + 2012-07-18 22:10 . 2012-07-18 22:10 1863680 c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll

    - 2008-12-30 14:57 . 2008-12-30 14:57 1863680 c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll

    + 2008-09-23 12:00 . 2010-08-25 21:36 10841088 c:\windows\system32\wmp.dll

    + 2012-07-18 20:37 . 2012-07-03 01:13 57442464 c:\windows\system32\MRT.exe

    + 2008-09-23 12:00 . 2012-05-11 18:14 11111424 c:\windows\system32\ieframe.dll

    + 2009-07-13 21:43 . 2010-08-25 21:36 10841088 c:\windows\system32\dllcache\wmp.dll

    + 2011-12-26 15:02 . 2011-12-26 15:02 12482048 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656353\M2656353Uninstall.msp

    + 2012-07-18 21:26 . 2012-07-18 21:26 23771136 c:\windows\Installer\f66eec.msp

    + 2012-04-06 01:13 . 2012-04-06 01:13 16527872 c:\windows\Installer\f66ee0.msp

    + 2012-04-06 00:12 . 2012-04-06 00:12 15709696 c:\windows\Installer\f66ece.msp

    + 2012-01-04 00:25 . 2012-01-04 00:25 17751552 c:\windows\Installer\f66ec4.msp

    + 2012-07-18 20:25 . 2012-07-18 20:25 19677184 c:\windows\Installer\be3847.msp

    + 2011-09-15 16:38 . 2011-09-15 16:38 10838528 c:\windows\Installer\be3804.msp

    + 2011-09-15 16:37 . 2011-09-15 16:37 14140416 c:\windows\Installer\be37fa.msp

    + 2011-09-15 16:42 . 2011-09-15 16:42 38326272 c:\windows\Installer\be3711.msp

    + 2011-09-15 16:42 . 2011-09-15 16:42 14895104 c:\windows\Installer\be3702.msp

    + 2010-03-30 23:23 . 2010-03-30 23:23 15638528 c:\windows\Installer\8edc0b.msp

    + 2010-04-11 20:17 . 2010-04-11 20:17 14599680 c:\windows\Installer\8edbde.msp

    + 2006-10-26 19:13 . 2006-10-26 19:13 14674216 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\XL12CNV.EXE

    + 2006-10-27 13:23 . 2006-10-27 13:23 17483560 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WWLIB.DLL

    + 2006-10-27 13:14 . 2006-10-27 13:14 14151456 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\OART.DLL

    + 2006-10-27 13:26 . 2006-10-27 13:26 16870712 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\MSO.DLL

    + 2006-10-27 13:07 . 2006-10-27 13:07 17891112 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\EXCEL.EXE

    + 2012-07-18 20:56 . 2009-03-08 02:39 11063808 c:\windows\ie8updates\KB982381-IE8\ieframe.dll

    + 2012-07-18 21:00 . 2011-11-05 12:13 11081728 c:\windows\ie8updates\KB2699988-IE8\ieframe.dll

    + 2012-07-18 20:58 . 2010-05-06 10:36 11076096 c:\windows\ie8updates\KB2618444-IE8\ieframe.dll

    + 2012-07-18 21:27 . 2012-07-18 21:27 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD6E.tmp\PresentationCore.dll

    + 2012-07-18 19:41 . 2012-07-18 19:41 12213248 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4B1.tmp\PresentationCore.dll

    + 2012-07-18 21:47 . 2012-07-18 21:47 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\418af3fac6683cbeafedb0aa6386d7fc\System.Windows.Forms.ni.dll

    + 2012-07-19 13:16 . 2012-07-19 13:16 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\dd327b9c1705e6e839ca5ce1f07538a9\System.Web.ni.dll

    + 2012-07-19 13:08 . 2012-07-19 13:08 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\cead027f92b7f9e0a02b7766453192d7\System.ServiceModel.ni.dll

    + 2012-07-18 21:45 . 2012-07-18 21:45 10682368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c1cfacd329289d91182c12757ee6c38f\System.Design.ni.dll

    + 2012-07-18 21:31 . 2012-07-18 21:31 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f1a473922090d99a859a00bbaa3c8125\PresentationFramework.ni.dll

    + 2012-07-18 21:29 . 2012-07-18 21:29 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\8ec3c81f619b9d61ebbf29adf30e714e\PresentationCore.ni.dll

    + 2012-07-18 21:18 . 2012-07-18 21:18 11492352 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll

    + 2011-09-15 16:34 . 2011-09-15 16:34 428804608 c:\windows\Installer\be37ef.msp

    .

    -- Snapshot teruggezet naar huidige datum --

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

    2012-07-09 17:09 2074208 ----a-w- c:\program files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

    "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll" [2012-07-09 2074208]

    .

    [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]

    [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]

    [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "SkinClock"="c:\program files\Desktop Tray Clock\DTClock.exe" [2007-10-22 563519]

    "RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-03-18 630784]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]

    "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]

    "igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]

    "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-08-15 1404928]

    "ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-17 64512]

    "SkinClock"="c:\program files\Desktop Tray Clock\DTClock.exe" [2007-10-22 563519]

    "RemoteControl8"="c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-05-21 83240]

    "PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]

    "LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2008-08-14 565008]

    "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]

    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-04-30 198160]

    "AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]

    "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

    "vProt"="c:\program files\AVG Secure Search\vprot.exe" [2012-07-09 1107552]

    "HF_G_Jul"="c:\program files\AVG Secure Search\HF_G_Jul.exe" [2012-07-18 36960]

    .

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-09-23 37376]

    "SkinClock"="c:\program files\Desktop Tray Clock\DTClock.exe" [2007-10-22 563519]

    .

    c:\documents and settings\Administrator\Menu Start\Programma's\Opstarten\

    OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

    RocketDock.lnk - c:\program files\RocketDock\RocketDock.exe [2008-12-30 630784]

    .

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]

    "ForceClassicControlPanel"= 1 (0x1)

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

    BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *\0pgdfgsvc C 1\0OODBS\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]

    2008-08-14 16:15 2407184 ----a-w- c:\program files\Logitech\QuickCam\Quickcam.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

    2010-04-16 21:12 3872080 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SanDiskSecureAccess_Manager.exe]

    2010-11-10 17:16 31095432 ----a-w- c:\documents and settings\Administrator\Application Data\SanDisk\SanDiskSecureAccess_Manager.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

    2008-06-16 20:16 1281536 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

    .

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\Program Files\\IEPro\\MiniDM.exe"=

    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=

    "c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=

    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "c:\\WINDOWS\\system32\\WUAUCLT.EXE"=

    "c:\\Program Files\\AVG\\AVG2012\\avgmfapx.exe"=

    "c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=

    "c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=

    "c:\\Program Files\\AVG\\AVG2012\\avgnsx.exe"=

    "c:\\Program Files\\AVG\\AVG2012\\avgdiagex.exe"=

    "c:\\Program Files\\AVG\\AVG2012\\avgemcx.exe"=

    .

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "3389:TCP"= 3389:TCP:Remote Desktop

    "65533:TCP"= 65533:TCP:Services

    "52344:TCP"= 52344:TCP:Services

    .

    R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [19-4-2012 4:50 24896]

    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [7-9-2010 4:48 31952]

    R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30-12-2008 16:44 717296]

    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [7-9-2010 4:48 235216]

    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [7-9-2010 4:49 301248]

    R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};c:\program files\CyberLink\PowerDVD8\000.fcl [21-5-2008 14:00 61424]

    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\avgidsagent.exe [4-7-2012 17:25 5160568]

    R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [14-2-2012 4:53 193288]

    R2 PD91Agent;PD91Agent;c:\program files\Raxco\PerfectDisk2008\PD91Agent.exe [31-12-2008 13:12 693512]

    R2 Start BT in service;Start BT in service;c:\program files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [30-9-2007 9:16 51816]

    R2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [9-7-2012 19:11 935008]

    R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [23-12-2011 13:32 139856]

    R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\avgidsfilterx.sys [23-12-2011 13:32 24144]

    R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [23-12-2011 13:32 17232]

    R3 PCX500;Cisco Wireless LAN Adapters Driver;c:\windows\system32\drivers\pcx500.sys [30-12-2008 17:19 115200]

    S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [13-6-2009 14:47 1527900]

    S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [28-12-2009 0:54 36608]

    S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [25-4-2012 21:55 113120]

    S3 PD91Engine;PD91Engine;c:\program files\Raxco\PerfectDisk2008\PD91Engine.exe [31-12-2008 13:12 910600]

    .

    --- Andere Services/Drivers In Geheugen ---

    .

    *Deregistered* - uphcleanhlp

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]

    2009-03-08 02:32 128512 ----a-w- c:\windows\system32\advpack.dll

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.google.nl/

    uDefault_Search_URL = hxxp://www.google.nl

    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 192.168.2.1

    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll

    FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\s591yall.default\

    FF - prefs.js: browser.search.defaulturl - hxxp://mn.iamwired.net/websearch.php?src=tops&search=

    FF - prefs.js: browser.search.selectedEngine - Google

    FF - prefs.js: browser.startup.homepage - hxxp://www.google.nl/

    FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Bdf821574-7f0b-4b59-b99c-df525cb3dd90%7D&mid=a21df57a2489a3d739d49c2f3d8aa5e9-3218f2e6f6719dac5bc9822218849c68146a3e23&ds=AVG&v=11.0.0.9〈=nl&pr=fr&d=2012-06-10%2012%3A00%3A51&sap=ku&q=

    FF - user.js: yahoo.ytff.general.dontshowhpoffer - true

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)

    .

    .

    .

    **************************************************************************

    .

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2012-07-19 17:40

    Windows 5.1.2600 Service Pack 3 NTFS

    .

    scannen van verborgen processen ...

    .

    scannen van verborgen autostart items ...

    .

    scannen van verborgen bestanden ...

    .

    Scan succesvol afgerond

    verborgen bestanden: 0

    .

    **************************************************************************

    .

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]

    "ImagePath"="\??\c:\program files\CyberLink\PowerDVD8\000.fcl"

    .

    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    .

    - - - - - - - > 'winlogon.exe'(636)

    c:\windows\system32\SETUPAPI.dll

    c:\windows\system32\cswGina.dll

    c:\windows\system32\ACrd10SM.dll

    c:\windows\system32\COMRes.dll

    c:\windows\system32\cscui.dll

    .

    - - - - - - - > 'lsass.exe'(692)

    c:\windows\system32\SETUPAPI.dll

    .

    - - - - - - - > 'explorer.exe'(6308)

    c:\windows\system32\SHDOCVW.dll

    c:\program files\RocketDock\RocketDock.dll

    c:\windows\system32\COMRes.dll

    c:\windows\System32\cscui.dll

    c:\windows\system32\LINKINFO.dll

    c:\windows\system32\ntshrui.dll

    c:\windows\system32\msi.dll

    c:\windows\system32\SETUPAPI.dll

    c:\windows\system32\WPDShServiceObj.dll

    c:\program files\Desktop Tray Clock\Clock.dll

    c:\windows\system32\webcheck.dll

    c:\windows\system32\PortableDeviceTypes.dll

    c:\windows\system32\PortableDeviceApi.dll

    c:\windows\system32\NETSHELL.dll

    c:\windows\system32\credui.dll

    c:\windows\system32\MSVCP60.dll

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe

    c:\windows\eHome\ehRecvr.exe

    c:\windows\eHome\ehSched.exe

    c:\program files\Java\jre6\bin\jqs.exe

    c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

    c:\windows\system32\oodag.exe

    c:\program files\UPHClean\uphclean.exe

    c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    c:\windows\eHome\ehmsas.exe

    c:\program files\AVG\AVG2012\avgnsx.exe

    c:\program files\AVG\AVG2012\avgrsx.exe

    c:\program files\AVG\AVG2012\avgemcx.exe

    c:\windows\ehome\mcrdsvc.exe

    c:\program files\AVG\AVG2012\avgcsrvx.exe

    c:\windows\system32\dllhost.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2012-07-19 17:50:42 - machine werd herstart

    ComboFix-quarantined-files.txt 2012-07-19 15:50

    ComboFix2.txt 2012-07-18 16:45

    .

    Pre-Run: 25.216.880.640 bytes beschikbaar

    Post-Run: 25.274.019.840 bytes beschikbaar

    .

    - - End Of File - - B40EB9B7C866F1DDFE7ACE10B17F595C

    De AVG Scan geeft geen rootkits:

    [TABLE=width: 448]

    [TR]

    [TD=colspan: 4]Scan "Anti-Rootkitscan" is voltooid.[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 5]Er is geen infectie gevonden tijdens deze scan[/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 5]Scan is gestart:;"donderdag 19 juli 2012, 17:52:34"[/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 7]Scan voltooid:;"donderdag 19 juli 2012, 17:54:09 (1 min. 35 seconde (n))"[/TD]

    [/TR]

    [TR]

    [TD=colspan: 4]Totaal gescande objecten:;"62754"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 3]Gebruiker:;"SYSTEM"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [/TABLE]

    Rootkits op PC

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Dit is het logbestand van Combofix:

    ComboFix 12-07-18.04 - Administrator 18-07-2012 17:55:04.1.1 - x86

    Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.510.182 [GMT 2:00]

    Gestart vanuit: c:\documents and settings\Administrator\Bureaublad\ComboFix.exe

    * Nieuw herstelpunt werd aangemaakt

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\documents and settings\Administrator\Application Data\24U

    c:\documents and settings\Administrator\Application Data\Desktopicon

    c:\documents and settings\Administrator\Local Settings\Application Data\assembly\tmp

    c:\documents and settings\All Users\Application Data\24U

    c:\documents and settings\All Users\Application Data\24U\24uSimpleDialog4Reg.dat

    c:\documents and settings\All Users\Application Data\TEMP

    c:\documents and settings\All Users\Menu Start\Programma's\Internet Explorer.lnk

    c:\documents and settings\Default User\Application Data\Desktopicon

    c:\windows\IsUn0413.exe

    c:\windows\system32\Cache

    c:\windows\system32\Cache\272512937d9e61a4.fb

    c:\windows\system32\Cache\287204568329e189.fb

    c:\windows\system32\Cache\28bc8f716fd76a47.fb

    c:\windows\system32\Cache\2c53092c95605355.fb

    c:\windows\system32\Cache\31a0997e9a5b5eb3.fb

    c:\windows\system32\Cache\32c84fe32bb74d60.fb

    c:\windows\system32\Cache\3917078cb68ec657.fb

    c:\windows\system32\Cache\590ba23ce359fd0c.fb

    c:\windows\system32\Cache\610289e025a3ee9a.fb

    c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb

    c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb

    c:\windows\system32\Cache\6d03dad1035885d3.fb

    c:\windows\system32\Cache\a8556537add6dfc5.fb

    c:\windows\system32\Cache\a8a8e0cd1cac6b12.fb

    c:\windows\system32\Cache\ad10a52aff5e038d.fb

    c:\windows\system32\Cache\c1fa887b03019701.fb

    c:\windows\system32\Cache\c4d28dca2e7648be.fb

    c:\windows\system32\Cache\d201ef9910cd39de.fb

    c:\windows\system32\Cache\d2e94710a5708128.fb

    c:\windows\system32\Cache\d79b9dfe81484ec4.fb

    c:\windows\system32\Cache\f3e1f5a6c94d791d.fb

    c:\windows\system32\Cache\f998975c9cc711ee.fb

    c:\windows\system32\config\systemprofile\Application Data\Desktopicon

    c:\windows\system32\SET37.tmp

    c:\windows\system32\SET39.tmp

    c:\windows\system32\SET47.tmp

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    -------\Service_xcpip

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-06-18 to 2012-07-18 ))))))))))))))))))))))))))))))

    .

    .

    2012-07-18 16:35 . 2012-07-18 16:35 -------- d-----w- c:\windows\system32\wbem\snmp

    2012-07-18 16:35 . 2012-07-18 16:35 -------- d-----w- c:\windows\system32\xircom

    2012-07-12 20:04 . 2012-07-12 20:04 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes

    2012-07-12 20:03 . 2012-07-12 20:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

    2012-07-12 20:03 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys

    2012-07-12 20:03 . 2012-07-12 20:04 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

    2012-06-27 18:25 . 2012-06-28 09:53 -------- d-----w- c:\documents and settings\Administrator\Application Data\TeamViewer

    2012-06-27 18:24 . 2012-06-27 18:24 -------- d-----w- c:\program files\TeamViewer

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-07-04 15:03 . 2012-04-14 20:28 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

    2012-07-04 15:03 . 2011-05-25 12:04 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2012-06-17 11:06 . 2011-09-03 13:50 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ------- Sigcheck -------

    Note: Unsigned files aren't necessarily malware.

    .

    .

    [-] 2008-09-23 12:00 . 753C7C72C1F462A009C877B41730F3EC . 1475072 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll

    .

    [-] 2008-09-23 . F7A21A4461BEF6414D9AF587C7D69E7D . 591872 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe

    .

    [-] 2008-09-23 . 5970C11ADAFF997DD51CD801240D657A . 693248 . . [5.82] . . c:\windows\system32\comctl32.dll

    [7] 2008-09-23 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll

    [7] 2008-09-23 . 1EAA8CD46BFB33307ACAF10EFF80E8BD . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll

    .

    [-] 2008-09-23 . 15414691C4C039FF03377DC2A27AF592 . 518144 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll

    .

    [-] 2008-09-23 . 82D43871D84EB13195D9102F27C684F0 . 884224 . . [7.00.6000.20900] . . c:\windows\system32\wininet.dll

    .

    [-] 2008-09-23 . C55B10AB1C2C8ED9F913BAFB3E296B4A . 1701888 . . [6.00.2900.5634] . . c:\windows\explorer.exe

    .

    [-] 2008-09-23 . A09F1B50133C856DA9AED1782FD9A64D . 218112 . . [5.1.2600.5512] . . c:\windows\regedit.exe

    .

    [-] 2008-09-23 . 6C4E087200E46977DFE54147A5B1FDD8 . 37376 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe

    .

    [-] 2008-09-23 . D1AD2E56704E8522B1A06A26856EE083 . 2230144 . . [5.1.2600.5657] . . c:\windows\system32\ntkrnlpa.exe

    .

    .

    [-] 2008-09-23 . 48B6C5DD7F5670D9302F0CCFD9AC82D6 . 2353280 . . [5.1.2600.5657] . . c:\windows\system32\ntoskrnl.exe

    .

    c:\windows\System32\drivers\beep.sys ... is niet aanwezig !!

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

    2012-07-09 17:09 2074208 ----a-w- c:\program files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

    "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll" [2012-07-09 2074208]

    .

    [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]

    [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]

    [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "SkinClock"="c:\program files\Desktop Tray Clock\DTClock.exe" [2007-10-22 563519]

    "RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-03-18 630784]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]

    "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]

    "igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]

    "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-08-15 1404928]

    "ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-17 64512]

    "SkinClock"="c:\program files\Desktop Tray Clock\DTClock.exe" [2007-10-22 563519]

    "RemoteControl8"="c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-05-21 83240]

    "PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]

    "LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2008-08-14 565008]

    "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]

    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-04-30 198160]

    "AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]

    "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

    "vProt"="c:\program files\AVG Secure Search\vprot.exe" [2012-07-09 1107552]

    "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]

    .

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-09-23 37376]

    "SkinClock"="c:\program files\Desktop Tray Clock\DTClock.exe" [2007-10-22 563519]

    .

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]

    "ForceClassicControlPanel"= 1 (0x1)

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

    BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *\0pgdfgsvc C 1\0OODBS\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]

    2008-08-14 16:15 2407184 ----a-w- c:\program files\Logitech\QuickCam\Quickcam.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

    2010-04-16 21:12 3872080 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SanDiskSecureAccess_Manager.exe]

    2010-11-10 17:16 31095432 ----a-w- c:\documents and settings\Administrator\Application Data\SanDisk\SanDiskSecureAccess_Manager.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

    2008-06-16 20:16 1281536 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

    .

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\Program Files\\IEPro\\MiniDM.exe"=

    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=

    "c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=

    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "c:\\WINDOWS\\system32\\WUAUCLT.EXE"=

    "c:\\Program Files\\AVG\\AVG2012\\avgmfapx.exe"=

    "c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=

    "c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=

    "c:\\Program Files\\AVG\\AVG2012\\avgnsx.exe"=

    "c:\\Program Files\\AVG\\AVG2012\\avgdiagex.exe"=

    "c:\\Program Files\\AVG\\AVG2012\\avgemcx.exe"=

    .

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "3389:TCP"= 3389:TCP:Remote Desktop

    "65533:TCP"= 65533:TCP:Services

    "52344:TCP"= 52344:TCP:Services

    .

    R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [19-4-2012 4:50 24896]

    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [7-9-2010 4:48 31952]

    R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30-12-2008 16:44 717296]

    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [7-9-2010 4:48 235216]

    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [7-9-2010 4:49 301248]

    R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};c:\program files\CyberLink\PowerDVD8\000.fcl [21-5-2008 14:00 61424]

    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\avgidsagent.exe [4-7-2012 17:25 5160568]

    R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [14-2-2012 4:53 193288]

    R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [12-7-2012 22:03 655944]

    R2 PD91Agent;PD91Agent;c:\program files\Raxco\PerfectDisk2008\PD91Agent.exe [31-12-2008 13:12 693512]

    R2 Start BT in service;Start BT in service;c:\program files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [30-9-2007 9:16 51816]

    R2 vToolbarUpdater11.2.0;vToolbarUpdater11.2.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe [9-7-2012 19:11 935008]

    R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [23-12-2011 13:32 139856]

    R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\avgidsfilterx.sys [23-12-2011 13:32 24144]

    R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [23-12-2011 13:32 17232]

    R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [12-7-2012 22:03 22344]

    R3 PCX500;Cisco Wireless LAN Adapters Driver;c:\windows\system32\drivers\pcx500.sys [30-12-2008 17:19 115200]

    S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [13-6-2009 14:47 1527900]

    S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [28-12-2009 0:54 36608]

    S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [25-4-2012 21:55 113120]

    S3 neak.sys;neak.sys;\??\c:\windows\system32\drivers\neak.sys --> c:\windows\system32\drivers\neak.sys [?]

    S3 PD91Engine;PD91Engine;c:\program files\Raxco\PerfectDisk2008\PD91Engine.exe [31-12-2008 13:12 910600]

    S3 xpsec;IPSEC-stuurprogramma;c:\windows\system32\drivers\xpsec.sys --> c:\windows\system32\drivers\xpsec.sys [?]

    .

    --- Andere Services/Drivers In Geheugen ---

    .

    *NewlyCreated* - WS2IFSL

    *Deregistered* - uphcleanhlp

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]

    2008-09-23 12:00 124928 ----a-w- c:\windows\system32\advpack.dll

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.google.nl/

    uDefault_Search_URL = hxxp://www.google.nl

    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 192.168.2.1

    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll

    FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\s591yall.default\

    FF - prefs.js: browser.search.defaulturl - hxxp://mn.iamwired.net/websearch.php?src=tops&search=

    FF - prefs.js: browser.search.selectedEngine - Google

    FF - prefs.js: browser.startup.homepage - hxxp://www.google.nl/

    FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Bdf821574-7f0b-4b59-b99c-df525cb3dd90%7D&mid=a21df57a2489a3d739d49c2f3d8aa5e9-3218f2e6f6719dac5bc9822218849c68146a3e23&ds=AVG&v=11.0.0.9〈=nl&pr=fr&d=2012-06-10%2012%3A00%3A51&sap=ku&q=

    FF - user.js: yahoo.ytff.general.dontshowhpoffer - true

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)

    AddRemove-Adobe Acrobat 5.0 - c:\windows\ISUN0413.EXE

    .

    .

    .

    **************************************************************************

    .

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2012-07-18 18:37

    Windows 5.1.2600 Service Pack 3 NTFS

    .

    scannen van verborgen processen ...

    .

    scannen van verborgen autostart items ...

    .

    scannen van verborgen bestanden ...

    .

    Scan succesvol afgerond

    verborgen bestanden: 0

    .

    **************************************************************************

    .

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]

    "ImagePath"="\??\c:\program files\CyberLink\PowerDVD8\000.fcl"

    .

    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    .

    - - - - - - - > 'winlogon.exe'(636)

    c:\windows\system32\SETUPAPI.dll

    c:\windows\system32\cswGina.dll

    c:\windows\system32\ACrd10SM.dll

    c:\windows\system32\COMRes.dll

    c:\windows\system32\cscui.dll

    .

    - - - - - - - > 'lsass.exe'(692)

    c:\windows\system32\SETUPAPI.dll

    .

    - - - - - - - > 'explorer.exe'(7036)

    c:\windows\system32\SHDOCVW.dll

    c:\windows\TEMP\logishrd\LVPrcInj01.dll

    c:\program files\RocketDock\RocketDock.dll

    c:\windows\system32\COMRes.dll

    c:\windows\System32\cscui.dll

    c:\windows\system32\LINKINFO.dll

    c:\windows\system32\ntshrui.dll

    c:\windows\system32\msi.dll

    c:\windows\system32\SETUPAPI.dll

    c:\windows\system32\WPDShServiceObj.dll

    c:\program files\Desktop Tray Clock\Clock.dll

    c:\windows\system32\PortableDeviceTypes.dll

    c:\windows\system32\PortableDeviceApi.dll

    c:\windows\system32\NETSHELL.dll

    c:\windows\system32\credui.dll

    c:\windows\system32\MSVCP60.dll

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe

    c:\windows\eHome\ehRecvr.exe

    c:\windows\eHome\ehSched.exe

    c:\program files\Java\jre6\bin\jqs.exe

    c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

    c:\windows\system32\oodag.exe

    c:\program files\UPHClean\uphclean.exe

    c:\program files\AVG\AVG2012\avgnsx.exe

    c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    c:\program files\AVG\AVG2012\avgrsx.exe

    c:\program files\AVG\AVG2012\avgemcx.exe

    c:\windows\ehome\mcrdsvc.exe

    c:\program files\AVG\AVG2012\avgcsrvx.exe

    c:\windows\system32\wscntfy.exe

    c:\windows\eHome\ehmsas.exe

    c:\windows\system32\dllhost.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2012-07-18 18:45:40 - machine werd herstart

    ComboFix-quarantined-files.txt 2012-07-18 16:45

    .

    Pre-Run: 28.481.998.848 bytes beschikbaar

    Post-Run: 29.255.421.952 bytes beschikbaar

    .

    WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe

    [boot loader]

    timeout=2

    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

    [operating systems]

    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

    UnsupportedDebug="do not select this" /debug

    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    .

    - - End Of File - - 3BF8BE946E8B35AB025FC432C5BF6A33

    Rootkits op PC

    in Archief Bestrijding malware & virussen

    Geplaatst:

    De Emsisoft scan geeft volgens mij geen rootkits. Maar waarom geeft de AVG Scan nog wel aan dat ik rootkits op mijn PC heb? Ik neem aan dat dit niet zomaar gebeurt.

    Hier is het resultaat van de Emsisoft scan:

    Emsisoft Emergency Kit - Versie 2.0

    Laatste Update: 15-7-2012 14:12:10

    Scaninstellingen:

    Scantype: Diepe scan

    Objecten: Rootkits, Geheugen, Sporen, C:\

    Scan archieven: Aan

    ADS Scan: Aan

    Scan gestart: 15-7-2012 14:15:49

    Value: hkey_local_machine\software\microsoft\windows\currentversion\run --> monitor Ontdekt: Trace.Registry.cmjspy!E1

    C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\55\20016eb7-14af5a13 -> s.class Ontdekt: Exploit.Java.CVE-2011-3544!E2

    C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\55\20016eb7-14af5a13 -> h.class Ontdekt: Exploit.Java.CVE-2011-3544!E2

    C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\55\20016eb7-14af5a13 -> verifie.class Ontdekt: Exploit.Java.CVE-2011-3544!E2

    Gescand 525865

    Gevonden 4

    Scan geëindigd: 15-7-2012 16:15:21

    Scantijd: 1:59:32

    C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\55\20016eb7-14af5a13 -> s.class Verwijderd Exploit.Java.CVE-2011-3544!E2

    Value: hkey_local_machine\software\microsoft\windows\currentversion\run --> monitor Verwijderd Trace.Registry.cmjspy!E1

    Verwijderd 2

    Rootkits op PC

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Ik krijg nu dit:

    AVG Scan:

    [TABLE=width: 1024]

    [TR]

    [TD=colspan: 4]Scan "Anti-Rootkitscan" is voltooid.[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 2]Rootkits;"8";"0";"8"

    [/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 5]Scan is gestart:;"vrijdag 13 juli 2012, 15:24:08"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 7]Scan voltooid:;"vrijdag 13 juli 2012, 15:26:11 (2 min. 2 seconde (n))"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 4]Totaal gescande objecten:;"59214"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 3]Gebruiker:;"SYSTEM"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD]Rootkits[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 4];"Bestand";"Infectie";"Resultaat"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 14];"C:\WINDOWS\system32\drivers\spjz.sys";"atapi.sys, koppelpunt import HAL.dll READ_PORT_UCHAR -> spjz.sys +0x2040";"Object is verborgen"[/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spjz.sys";"atapi.sys, koppelpunt import HAL.dll READ_PORT_BUFFER_USHORT -> spjz.sys +0x213C";"Object is verborgen"[/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spjz.sys";"atapi.sys, koppelpunt import HAL.dll READ_PORT_USHORT -> spjz.sys +0x20BE";"Object is verborgen"[/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spjz.sys";"atapi.sys, koppelpunt import HAL.dll WRITE_PORT_BUFFER_USHORT -> spjz.sys +0x27FC";"Object is verborgen"[/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spjz.sys";"atapi.sys, koppelpunt import HAL.dll WRITE_PORT_UCHAR -> spjz.sys +0x26D2";"Object is verborgen"[/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 14];"C:\WINDOWS\system32\drivers\spjz.sys";"pci.sys, koppelpunt import ntoskrnl.exe IoDetachDevice -> spjz.sys +0x32C4C";"Object is verborgen"[/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 16];"C:\WINDOWS\system32\drivers\spjz.sys";"pci.sys, koppelpunt import ntoskrnl.exe IoAttachDeviceToDeviceStack -> spjz.sys +0x32CA0";"Object is verborgen"[/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spjz.sys";"i8042prt.sys, koppelpunt import HAL.dll READ_PORT_UCHAR -> spjz.sys +0x12048";"Object is verborgen"[/TD]

    [TD][/TD]

    [/TR]

    [/TABLE]

    Hijackthis log:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 15:28:55, on 13-7-2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.20900)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\WINDOWS\ehome\ehtray.exe

    C:\Program Files\Desktop Tray Clock\DTClock.exe

    C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

    C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\AVG\AVG2012\avgtray.exe

    C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

    C:\Program Files\AVG Secure Search\vprot.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    C:\Program Files\RocketDock\RocketDock.exe

    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    C:\WINDOWS\eHome\ehRecvr.exe

    C:\WINDOWS\eHome\ehSched.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\WINDOWS\system32\oodag.exe

    C:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe

    C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\UPHClean\uphclean.exe

    C:\Program Files\AVG\AVG2012\avgnsx.exe

    C:\Program Files\AVG\AVG2012\avgemcx.exe

    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    C:\Program Files\AVG\AVG2012\avgrsx.exe

    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    C:\WINDOWS\eHome\ehmsas.exe

    C:\Program Files\AVG\AVG2012\avgcsrvx.exe

    C:\WINDOWS\system32\dllhost.exe

    C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    C:\Documents and Settings\Administrator\Mijn documenten\Downloads\HijackThis(1).exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Google

    O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

    O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll

    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe

    O4 - HKLM\..\Run: [skinClock] C:\Program Files\Desktop Tray Clock\DTClock.exe

    O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe"

    O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe

    O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe

    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"

    O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [skinClock] C:\Program Files\Desktop Tray Clock\DTClock.exe

    O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-19\..\Run: [skinClock] C:\Program Files\Desktop Tray Clock\DTClock.exe (User 'Lokale service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - S-1-5-18 Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM')

    O4 - S-1-5-18 Startup: RocketDock.lnk = C:\Program Files\RocketDock\RocketDock.exe (User 'SYSTEM')

    O4 - .DEFAULT Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user')

    O4 - .DEFAULT Startup: RocketDock.lnk = C:\Program Files\RocketDock\RocketDock.exe (User 'Default user')

    O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

    O4 - Startup: RocketDock.lnk = C:\Program Files\RocketDock\RocketDock.exe

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

    O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

    O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

    O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\Skype4COM.dll

    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

    O23 - Service: PD91Agent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe

    O23 - Service: PD91Engine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk2008\PD91Engine.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

    O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    --

    End of file - 11616 bytes

    Rootkits op PC

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Hier is het logje van MBAM:

    alwarebytes Anti-Malware (-evaluatieversie-) 1.62.0.1300

    Malwarebytes : Free anti-malware, anti-virus and spyware removal download

    Databaseversie: v2012.07.12.10

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 7.0.5730.13

    Administrator :: UNATTEND-9D4712 [administrator]

    Realtime bescherming: Ingeschakeld

    12-7-2012 22:10:28

    mbam-log-2012-07-12 (22-10-28).txt

    Scantype: Snelle scan

    Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

    Uitgeschakelde scanopties: P2P

    Objecten gescand: 199619

    Verstreken tijd: 20 minuut/minuten, 13 seconde(n)

    Geheugenprocessen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden gedetecteerd: 1

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|ForceClassicControlPanel (Hijack.ControlPanelStyle) -> Data: 1 -> Succesvol in quarantaine geplaatst en verwijderd.

    Registerdata gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden gedetecteerd: 5

    C:\Documents and Settings\Administrator\Application Data\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Succesvol in quarantaine geplaatst en verwijderd.

    C:\Documents and Settings\Default User\Application Data\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Succesvol in quarantaine geplaatst en verwijderd.

    C:\WINDOWS\system32\config\systemprofile\Application Data\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Succesvol in quarantaine geplaatst en verwijderd.

    C:\Documents and Settings\Administrator\Local Settings\Temp\26601609.Uninstall\Uninstall.exe (Adware.Agent) -> Succesvol in quarantaine geplaatst en verwijderd.

    C:\Program Files\Unlocker\eBay_shortcuts_1016.exe (Adware.Clicker) -> Succesvol in quarantaine geplaatst en verwijderd.

    (einde)

    En deze is van Hijackthis:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 23:04:23, on 12-7-2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.20900)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    C:\Program Files\IVT

    Corporation\BlueSoleil\BTNtService.exe

    C:\WINDOWS\eHome\ehRecvr.exe

    C:\WINDOWS\eHome\ehSched.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\Program Files\Common

    Files\LogiShrd\LVCOMSER\LVComSer.exe

    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

    C:\Program Files\Malwarebytes'

    Anti-Malware\mbamservice.exe

    C:\WINDOWS\system32\oodag.exe

    C:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe

    C:\Program Files\IVT

    Corporation\BlueSoleil\StartSkysolSvc.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\UPHClean\uphclean.exe

    C:\Program Files\Common Files\AVG Secure

    Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    C:\Program Files\Common

    Files\LogiShrd\LVCOMSER\LVComSer.exe

    C:\Program Files\AVG\AVG2012\avgnsx.exe

    C:\Program Files\AVG\AVG2012\avgemcx.exe

    C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    C:\Program Files\AVG\AVG2012\avgrsx.exe

    C:\Program Files\AVG\AVG2012\avgcsrvx.exe

    C:\WINDOWS\system32\dllhost.exe

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\WINDOWS\ehome\ehtray.exe

    C:\Program Files\Desktop Tray Clock\DTClock.exe

    C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

    C:\WINDOWS\eHome\ehmsas.exe

    C:\Program Files\Common

    Files\LogiShrd\LComMgr\Communications_Helper.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\AVG\AVG2012\avgtray.exe

    C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

    C:\Program Files\AVG Secure Search\vprot.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\RocketDock\RocketDock.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Documents and Settings\Administrator\Mijn

    documenten\Downloads\HijackThis(1).exe

    R1 - HKCU\Software\Microsoft\Internet

    Explorer\Main,Default_Search_URL = Google

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start

    Page = Google

    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Default_Page_URL =

    Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Default_Search_URL =

    Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start

    Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKLM\Software\Microsoft\Internet

    Explorer\Search,SearchAssistant = Google

    O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF}

    - C:\Program Files\IEPro\iepro.dll

    O2 - BHO: AcroIEHelperStub -

    {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program

    Files\Common

    Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: RealPlayer Download and Record Plugin for

    Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA}

    - C:\Program

    Files\Real\RealPlayer\rpbrowserrecordplugin.dll

    O2 - BHO: AVG Do Not Track -

    {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program

    Files\AVG\AVG2012\avgdtiex.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -

    {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program

    Files\AVG\AVG2012\avgssie.dll

    O2 - BHO: SSVHelper Class -

    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

    Files\Java\jre6\bin\ssv.dll

    O2 - BHO: Windows Live Aanmelden - Help -

    {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program

    Files\Common Files\Microsoft Shared\Windows

    Live\WindowsLiveLogin.dll

    O2 - BHO: AVG Security Toolbar -

    {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program

    Files\AVG Secure Search\11.1.0.12\AVG Secure

    Search_toolbar.dll

    O2 - BHO: Java Plug-In 2 SSV Helper -

    {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program

    Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl -

    {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program

    Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: AVG Security Toolbar -

    {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program

    Files\AVG Secure Search\11.1.0.12\AVG Secure

    Search_toolbar.dll

    O4 - HKLM\..\Run: [igfxtray]

    C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [igfxhkcmd]

    C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [igfxpers]

    C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog

    Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe

    O4 - HKLM\..\Run: [skinClock] C:\Program Files\Desktop

    Tray Clock\DTClock.exe

    O4 - HKLM\..\Run: [RemoteControl8] "C:\Program

    Files\CyberLink\PowerDVD8\PDVD8Serv.exe"

    O4 - HKLM\..\Run: [Monitor]

    C:\WINDOWS\PixArt\PAC207\Monitor.exe

    O4 - HKLM\..\Run: [PAC207_Monitor]

    C:\WINDOWS\PixArt\PAC207\Monitor.exe

    O4 - HKLM\..\Run: [LogitechCommunicationsManager]

    "C:\Program Files\Common

    Files\LogiShrd\LComMgr\Communications_Helper.exe"

    O4 - HKLM\..\Run: [bluetoothAuthenticationAgent]

    rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common

    Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program

    Files\AVG\AVG2012\avgtray.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program

    Files\Hp\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher]

    "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common

    Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure

    Search\vprot.exe"

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program

    Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

    O4 - HKCU\..\Run: [CTFMON.EXE]

    C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [skinClock] C:\Program Files\Desktop

    Tray Clock\DTClock.exe

    O4 - HKCU\..\Run: [RocketDock] "C:\Program

    Files\RocketDock\RocketDock.exe"

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows

    Live\Messenger\msnmsgr.exe" /background

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE]

    C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-19\..\Run: [skinClock] C:\Program

    Files\Desktop Tray Clock\DTClock.exe (User 'Lokale

    service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE]

    C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE]

    C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE]

    C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - S-1-5-18 Startup: OneNote 2007 Schermopname en Snel

    starten.lnk = C:\Program Files\Microsoft

    Office\Office12\ONENOTEM.EXE (User 'SYSTEM')

    O4 - S-1-5-18 Startup: RocketDock.lnk = C:\Program

    Files\RocketDock\RocketDock.exe (User 'SYSTEM')

    O4 - .DEFAULT Startup: OneNote 2007 Schermopname en Snel

    starten.lnk = C:\Program Files\Microsoft

    Office\Office12\ONENOTEM.EXE (User 'Default user')

    O4 - .DEFAULT Startup: RocketDock.lnk = C:\Program

    Files\RocketDock\RocketDock.exe (User 'Default user')

    O4 - Startup: OneNote 2007 Schermopname en Snel

    starten.lnk = C:\Program Files\Microsoft

    Office\Office12\ONENOTEM.EXE

    O4 - Startup: RocketDock.lnk = C:\Program

    Files\RocketDock\RocketDock.exe

    O8 - Extra context menu item: E&xporteren naar Microsoft

    Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: IE7Pro Grab and Drag -

    {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program

    Files\IEPro\iepro.dll

    O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag -

    {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program

    Files\IEPro\iepro.dll

    O9 - Extra button: IE7Pro Preferences -

    {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program

    Files\IEPro\iepro.dll

    O9 - Extra 'Tools' menuitem: IE7Pro Preferences -

    {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program

    Files\IEPro\iepro.dll

    O9 - Extra button: (no name) -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre6\bin\jp2iexp.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre6\bin\jp2iexp.dll

    O9 - Extra button: Verzenden naar OneNote -

    {2670000A-7350-4f3c-8081-5663EE0C6C49} -

    C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote -

    {2670000A-7350-4f3c-8081-5663EE0C6C49} -

    C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: AVG Do Not Track -

    {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program

    Files\AVG\AVG2012\avgdtiex.dll

    O9 - Extra button: (no name) -

    {e2e2dd38-d088-4134-82b7-f2ba38496583} -

    C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

    {e2e2dd38-d088-4134-82b7-f2ba38496583} -

    C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}

    (Shockwave Flash Object) -

    http://fpdownload2.macromedia.com/get/flashplayer/current/

    swflash.cab

    O18 - Protocol: linkscanner -

    {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program

    Files\AVG\AVG2012\avgpp.dll

    O18 - Protocol: skype4com -

    {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -

    C:\WINDOWS\system32\Skype4COM.dll

    O18 - Protocol: viprotocol -

    {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program

    Files\Common Files\AVG Secure

    Search\ViProtocolInstaller\11.2.0\ViProtocol.dll

    O22 - SharedTaskScheduler: Preloader van browseui -

    {438755C2-A8BA-11D1-B96B-00A0C90312E1} -

    C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor

    onderdeelcategorieën -

    {8C7461EF-2B13-11d2-BE35-3078302C2030} -

    C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe LM Service - Adobe Systems -

    C:\Program Files\Common Files\Adobe Systems

    Shared\Service\Adobelmsvc.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. -

    C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ,

    s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    O23 - Service: BlueSoleil Hid Service - Unknown owner -

    C:\Program Files\IVT

    Corporation\BlueSoleil\BTNtService.exe

    O23 - Service: Firebird Server - MAGIX Instance

    (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program

    Files\MAGIX\Common\Database\bin\fbserver.exe

    O23 - Service: Java Quick Starter

    (JavaQuickStarterService) - Sun Microsystems, Inc. -

    C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program

    Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc.

    - C:\Program Files\Common

    Files\LogiShrd\LVMVFM\LVPrcSrv.exe

    O23 - Service: MBAMService - Malwarebytes Corporation -

    C:\Program Files\Malwarebytes'

    Anti-Malware\mbamservice.exe

    O23 - Service: Mozilla Maintenance Service

    (MozillaMaintenance) - Mozilla Foundation - C:\Program

    Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: O&O Defrag - O&O Software GmbH -

    C:\WINDOWS\system32\oodag.exe

    O23 - Service: PD91Agent - Raxco Software, Inc. -

    C:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe

    O23 - Service: PD91Engine - Raxco Software, Inc. -

    C:\Program Files\Raxco\PerfectDisk2008\PD91Engine.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC

    Connectivity Solution\ServiceLayer.exe

    O23 - Service: Start BT in service - Unknown owner -

    C:\Program Files\IVT

    Corporation\BlueSoleil\StartSkysolSvc.exe

    O23 - Service: vToolbarUpdater11.2.0 - Unknown owner -

    C:\Program Files\Common Files\AVG Secure

    Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    --

    End of file - 11715 bytes

    Rootkits op PC

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Hallo,

    Mijn AVG Anti-Virus heeft tijdens een scan rootkits gevonden, maar heeft deze niet verwijderd, alleen verborgen. Ik heb toen een paar proberen te verwijderen via AVG, maar toen kwam bij die paar rootkits "object is niet toegankelijk" te staan in plaats van "object is verborgen". Hier zijn de scanresultaten:

    [TABLE=class: outer_border, width: 500]

    [TR]

    [TD][TABLE=width: 850]

    [TR]

    [TD=colspan: 4]Scan "Anti-Rootkitscan" is voltooid.[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 2]Rootkits;"8";"3";"5"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 5]Scan is gestart:;"donderdag 12 juli 2012, 14:02:04"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 7]Scan voltooid:;"donderdag 12 juli 2012, 14:04:14 (2 min. 9 seconde (n))"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 4]Totaal gescande objecten:;"65254"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 3]Gebruiker:;"SYSTEM"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD]Rootkits[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 4];"Bestand";"Infectie";"Resultaat"[/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spob.sys";"atapi.sys, koppelpunt import HAL.dll READ_PORT_UCHAR -> spob.sys +0x2040";"Object is niet toegankelijk."[/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 16];"C:\WINDOWS\system32\drivers\spob.sys";"atapi.sys, koppelpunt import HAL.dll READ_PORT_BUFFER_USHORT -> spob.sys +0x213C";"Object is verborgen"[/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spob.sys";"atapi.sys, koppelpunt import HAL.dll READ_PORT_USHORT -> spob.sys +0x20BE";"Object is verborgen"[/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 16];"C:\WINDOWS\system32\drivers\spob.sys";"atapi.sys, koppelpunt import HAL.dll WRITE_PORT_BUFFER_USHORT -> spob.sys +0x27FC";"Object is verborgen"[/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spob.sys";"atapi.sys, koppelpunt import HAL.dll WRITE_PORT_UCHAR -> spob.sys +0x26D2";"Object is verborgen"[/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 15];"C:\WINDOWS\system32\drivers\spob.sys";"pci.sys, koppelpunt import ntoskrnl.exe IoDetachDevice -> spob.sys +0x32C4C";"Object is niet toegankelijk."

    [/TD]

    [TD][/TD]

    [/TR]

    [TR]

    [TD=colspan: 16];"C:\WINDOWS\system32\drivers\spob.sys";"pci.sys, koppelpunt import ntoskrnl.exe IoAttachDeviceToDeviceStack -> spob.sys +0x32CA0";"Object is verborgen"[/TD]

    [/TR]

    [TR]

    [TD=colspan: 16];"C:\WINDOWS\system32\drivers\spob.sys";"i8042prt.sys, koppelpunt import HAL.dll READ_PORT_UCHAR -> spob.sys +0x12048";"Object is niet toegankelijk."[/TD]

    [/TR]

    [/TABLE]

    [/TD]

    [/TR]

    [/TABLE]

    Hoe kan ik ze wel verwijderen, en is dat schadelijk voor de PC om het te verwijderen? En hebben de rootkits nu ook schade gebracht aan m'n computer?

    Dit is mijn logfile:

    [TABLE=class: outer_border, width: 850]

    [TR]

    [TD]Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 14:55:39, on 12-7-2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.20900)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\WINDOWS\ehome\ehtray.exe

    C:\Program Files\Desktop Tray Clock\DTClock.exe

    C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

    C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\AVG\AVG2012\avgtray.exe

    C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

    C:\Program Files\AVG Secure Search\vprot.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\RocketDock\RocketDock.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    C:\WINDOWS\eHome\ehRecvr.exe

    C:\WINDOWS\eHome\ehSched.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

    C:\WINDOWS\system32\oodag.exe

    C:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe

    C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\UPHClean\uphclean.exe

    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    C:\Program Files\AVG\AVG2012\avgnsx.exe

    C:\Program Files\AVG\AVG2012\avgemcx.exe

    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    C:\Program Files\AVG\AVG2012\avgrsx.exe

    C:\WINDOWS\eHome\ehmsas.exe

    C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    C:\Program Files\AVG\AVG2012\avgcsrvx.exe

    C:\WINDOWS\system32\dllhost.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\AVG\AVG2012\avgui.exe

    C:\Program Files\Microsoft Office\Office12\EXCEL.EXE

    C:\Documents and Settings\Administrator\Mijn documenten\Downloads\HijackThis(1).exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Google

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

    O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll

    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe

    O4 - HKLM\..\Run: [skinClock] C:\Program Files\Desktop Tray Clock\DTClock.exe

    O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe"

    O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe

    O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe

    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"

    O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"

    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [skinClock] C:\Program Files\Desktop Tray Clock\DTClock.exe

    O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-19\..\Run: [skinClock] C:\Program Files\Desktop Tray Clock\DTClock.exe (User 'Lokale service')

    O4 - HKUS\S-1-5-19\..\RunOnce: [showDeskFix] regsvr32 /s /n /i:u shell32 (User 'Lokale service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-20\..\RunOnce: [showDeskFix] regsvr32 /s /n /i:u shell32 (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\S-1-5-18\..\RunOnce: [showDeskFix] regsvr32 /s /n /i:u shell32 (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - HKUS\.DEFAULT\..\RunOnce: [showDeskFix] regsvr32 /s /n /i:u shell32 (User 'Default user')

    O4 - S-1-5-18 Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM')

    O4 - S-1-5-18 Startup: RocketDock.lnk = C:\Program Files\RocketDock\RocketDock.exe (User 'SYSTEM')

    O4 - .DEFAULT Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user')

    O4 - .DEFAULT Startup: RocketDock.lnk = C:\Program Files\RocketDock\RocketDock.exe (User 'Default user')

    O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

    O4 - Startup: RocketDock.lnk = C:\Program Files\RocketDock\RocketDock.exe

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

    O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

    O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

    O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O9 - Extra button: MS-KB - {8b2d996f-b7d1-4961-a929-414d9cf5ba7b} - Advanced Search (file missing)

    O9 - Extra 'Tools' menuitem: MS-KB - {8b2d996f-b7d1-4961-a929-414d9cf5ba7b} - Advanced Search (file missing)

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\Skype4COM.dll

    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

    O23 - Service: PD91Agent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe

    O23 - Service: PD91Engine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk2008\PD91Engine.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

    O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    --

    End of file - 12469 bytes

    [/TD]

    [/TR]

    [/TABLE]

    Alvast bedankt.

Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.