Operating System Error Downloading Adobe Reader

I could not open pdf files. Deleted adobe reader and could not reload Adobe Reader, rec'd "Operating system Error" when trying to download Adobe Reader while Adobe Download Manager was being downloaded. Thanks for your help, here is 1 0f 2 posts for the OTL.txt files :

OTL logfile created on: 11/1/2010 3:55:33 PM - Run 2
OTL by OldTimer - Version 3.2.17.2 Folder = C:\Documents and Settings\dien\My Documents\Downloads2\OTL
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 72.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 84.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.85 Gb Total Space | 193.84 Gb Free Space | 83.25% Space Free | Partition Type: NTFS

Computer Name: D4TH0QK1 | User Name: dien | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010/11/01 11:29:57 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\dien\My Documents\Downloads2\OTL\OTL.com
PRC - [2010/08/20 09:45:26 | 001,164,584 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/05/14 11:00:26 | 000,249,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2010/04/05 14:50:00 | 007,994,184 | R--- | M] (WinZip Computing, S.L.) -- C:\Program Files\WinZip\WINZIP32.EXE
PRC - [2010/04/05 14:50:00 | 000,494,920 | R--- | M] (WinZip Computing, S.L.) -- C:\Program Files\WinZip\WZQKPICK.EXE
PRC - [2010/03/31 05:11:10 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2010/01/15 02:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2010/01/08 00:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Application Updater\ApplicationUpdater.exe
PRC - [2009/08/31 20:07:00 | 000,146,448 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
PRC - [2009/08/31 20:07:00 | 000,124,240 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
PRC - [2009/08/31 20:07:00 | 000,070,728 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\mfevtps.exe
PRC - [2009/08/31 20:07:00 | 000,066,896 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
PRC - [2009/08/31 20:07:00 | 000,027,960 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe
PRC - [2009/08/31 20:07:00 | 000,021,256 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe
PRC - [2009/05/21 11:13:58 | 000,206,064 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtcmd.exe
PRC - [2009/03/31 12:26:12 | 000,049,250 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\hidfind.exe
PRC - [2009/03/31 12:25:54 | 000,217,088 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\Apoint.exe
PRC - [2009/03/31 12:25:52 | 000,049,152 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApntEx.exe
PRC - [2009/03/31 12:25:50 | 000,054,568 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe
PRC - [2009/02/22 13:49:42 | 000,483,420 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
PRC - [2009/02/22 13:49:34 | 000,249,938 | ---- | M] (IDT, Inc.) -- c:\drivers\audio\R211990\stacsv.exe
PRC - [2009/02/22 13:49:28 | 000,729,088 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\system32\AESTFltr.exe
PRC - [2009/01/21 09:10:44 | 000,072,224 | ---- | M] (O2Micro International) -- C:\WINDOWS\system32\drivers\o2flash.exe
PRC - [2009/01/19 13:38:42 | 000,959,784 | ---- | M] (Juniper Networks, Inc.) -- C:\Program Files\Juniper Networks\Odyssey Access Client\odTray.exe
PRC - [2009/01/19 13:38:36 | 000,365,864 | ---- | M] (Juniper Networks, Inc.) -- C:\Program Files\Juniper Networks\Odyssey Access Client\odClientService.exe
PRC - [2009/01/19 12:48:24 | 000,116,008 | ---- | M] (Juniper Networks) -- C:\Program Files\Common Files\Juniper Networks\TNC Client\jTnccService.exe
PRC - [2009/01/16 16:00:00 | 000,226,624 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\Common Framework\naPrdMgr.exe
PRC - [2009/01/16 16:00:00 | 000,136,512 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\Common Framework\UdaterUI.exe
PRC - [2009/01/16 16:00:00 | 000,103,744 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\Common Framework\FrameworkService.exe
PRC - [2009/01/16 16:00:00 | 000,091,456 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\Common Framework\McTray.exe
PRC - [2008/11/04 18:10:10 | 000,087,416 | ---- | M] (Juniper Networks) -- C:\Program Files\Common Files\Juniper Networks\JUNS\dsAccessService.exe
PRC - [2008/08/14 00:04:44 | 000,201,968 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe
PRC - [2008/04/14 02:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/10/26 14:28:06 | 001,524,512 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
PRC - [2006/09/11 04:40:32 | 000,218,032 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
PRC - [2004/07/20 09:34:28 | 000,851,968 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\ControlCenter2\brctrcen.exe
PRC - [2004/04/14 14:46:50 | 000,057,393 | ---- | M] (ScanSoft, Inc.) -- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
PRC - [2003/05/08 12:00:58 | 000,049,152 | ---- | M] (ScanSoft, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe
PRC - [2003/05/05 19:30:22 | 000,065,536 | ---- | M] (Brother Industries, Ltd.) -- C:\WINDOWS\system32\Brmfrmps.exe
PRC - [2001/12/13 00:01:00 | 000,045,056 | ---- | M] (brother Industries Ltd) -- C:\WINDOWS\system32\brss01a.exe


========== Modules (SafeList) ==========

MOD - [2010/11/01 11:29:57 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\dien\My Documents\Downloads2\OTL\OTL.com
MOD - [2010/08/23 06:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2009/05/24 17:41:34 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll
MOD - [2008/04/14 02:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\cabinet.dll
MOD - [2003/05/08 12:00:46 | 000,159,744 | ---- | M] (ScanSoft, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE2.0\OpHookSE2.dll


========== Win32 Services (SafeList) ==========

SRV - [2010/09/01 15:51:28 | 000,066,112 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper_3004.dll -- (nosGetPlusHelper) getPlus(R)
SRV - [2010/05/14 11:00:26 | 000,249,136 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2010/01/15 02:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2010/01/08 00:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2009/08/31 20:07:00 | 000,146,448 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe -- (McShield)
SRV - [2009/08/31 20:07:00 | 000,070,728 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\WINDOWS\system32\mfevtps.exe -- (mfevtp)
SRV - [2009/08/31 20:07:00 | 000,066,896 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe -- (McTaskManager)
SRV - [2009/08/31 20:07:00 | 000,021,256 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe -- (McAfeeEngineService)
SRV - [2009/02/22 13:49:34 | 000,249,938 | ---- | M] (IDT, Inc.) [Auto | Running] -- c:\drivers\audio\R211990\stacsv.exe -- (STacSV)
SRV - [2009/01/21 09:10:44 | 000,072,224 | ---- | M] (O2Micro International) [Auto | Running] -- C:\WINDOWS\system32\drivers\o2flash.exe -- (O2FLASH)
SRV - [2009/01/19 13:38:36 | 000,365,864 | ---- | M] (Juniper Networks, Inc.) [Auto | Running] -- C:\Program Files\Juniper Networks\Odyssey Access Client\odClientService.exe -- (odClientService)
SRV - [2009/01/19 12:48:24 | 000,116,008 | ---- | M] (Juniper Networks) [On_Demand | Running] -- C:\Program Files\Common Files\Juniper Networks\TNC Client\jTnccService.exe -- (EacService)
SRV - [2009/01/16 16:00:00 | 000,103,744 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Program Files\McAfee\Common Framework\FrameworkService.exe -- (McAfeeFramework)
SRV - [2008/11/04 18:10:10 | 000,087,416 | ---- | M] (Juniper Networks) [Auto | Running] -- C:\Program Files\Common Files\Juniper Networks\JUNS\dsAccessService.exe -- (JuniperAccessService)
SRV - [2008/08/14 00:04:44 | 000,201,968 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter)
SRV - [2007/10/26 14:28:06 | 001,524,512 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2003/05/05 19:30:22 | 000,065,536 | ---- | M] (Brother Industries, Ltd.) [Auto | Running] -- C:\WINDOWS\System32\Brmfrmps.exe -- (brmfrmps)
SRV - [2002/04/12 00:00:00 | 000,057,344 | ---- | M] (brother Industries Ltd) [Auto | Stopped] -- C:\WINDOWS\system32\brsvc01a.exe -- (Brother XP spl Service)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\System32\MpEngineStore\MpKslb893e8ee.sys -- (MpKslb893e8ee)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\commy12149c\catchme.sys -- (catchme)
DRV - [2010/02/11 02:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2009/08/31 20:07:00 | 000,343,664 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\mfehidk.sys -- (mfehidk)
DRV - [2009/08/31 20:07:00 | 000,091,672 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfeavfk.sys -- (mfeavfk)
DRV - [2009/08/31 20:07:00 | 000,075,704 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfeapfk.sys -- (mfeapfk)
DRV - [2009/08/31 20:07:00 | 000,065,448 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mferkdet.sys -- (mferkdet)
DRV - [2009/08/31 20:07:00 | 000,063,728 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mfetdik.sys -- (mfetdik)
DRV - [2009/08/31 20:07:00 | 000,043,288 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfebopk.sys -- (mfebopk)
DRV - [2009/04/05 02:21:30 | 001,952,512 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2009/03/31 12:25:48 | 000,196,144 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2009/02/22 13:49:38 | 001,548,339 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2009/02/22 13:49:26 | 000,112,512 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AESTAud.sys -- (AESTAud)
DRV - [2009/02/02 13:41:22 | 000,120,064 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2009/01/21 17:27:22 | 006,048,768 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2009/01/21 09:10:48 | 000,041,760 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\o2sdg.sys -- (O2SDGRDR)
DRV - [2009/01/21 09:10:46 | 000,051,616 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\o2mdg.sys -- (O2MDGRDR)
DRV - [2009/01/19 12:18:30 | 000,282,496 | ---- | M] (Juniper Networks, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\odFips2.sys -- (odFips2)
DRV - [2009/01/19 12:18:30 | 000,009,856 | ---- | M] (Juniper Networks, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\odFips.sys -- (odFips)
DRV - [2009/01/19 09:41:16 | 000,328,728 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\IASTOR.SYS -- (iaStor)
DRV - [2009/01/10 17:26:52 | 000,390,144 | ---- | M] (Juniper Networks, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\jnprna.sys -- (jnprna)
DRV - [2009/01/10 17:26:52 | 000,029,312 | ---- | M] (Juniper Networks, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\jnprvamgr.sys -- (JnprVaMgr)
DRV - [2009/01/10 17:26:52 | 000,011,008 | ---- | M] (Juniper Networks, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\jnprva.sys -- (jnprva)
DRV - [2008/06/18 05:49:16 | 000,049,904 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS -- (BVRPMPR5)
DRV - [2008/04/14 02:06:40 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008/04/14 02:06:40 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008/04/14 02:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008/04/14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2007/10/26 14:27:00 | 000,306,300 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\CVPNDRVA.sys -- (CVPNDRVA)
DRV - [2007/07/23 15:05:20 | 000,009,104 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLADResM.SYS -- (DLADResM)
DRV - [2007/07/23 15:04:58 | 000,037,360 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLABMFSM.SYS -- (DLABMFSM)
DRV - [2007/07/23 15:04:56 | 000,098,448 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2007/07/23 15:04:56 | 000,093,552 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2007/07/23 15:04:54 | 000,027,216 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2007/07/23 15:04:52 | 000,032,848 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2007/07/23 15:04:52 | 000,016,304 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2007/07/23 15:04:50 | 000,108,752 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2007/07/23 14:55:44 | 000,099,808 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS -- (DRVMCDB)
DRV - [2007/07/23 14:49:44 | 000,030,064 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_M.SYS -- (DLARTL_M)
DRV - [2007/07/23 14:49:44 | 000,014,576 | ---- | M] (Roxio) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2007/07/23 14:43:42 | 000,052,000 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS -- (DRVNDDM)
DRV - [2007/01/31 13:45:06 | 000,127,376 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\dne2000.sys -- (DNE)
DRV - [2007/01/18 16:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2005/10/12 18:37:08 | 000,169,088 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emDevice.sys -- (DCamUSBEMPIA)
DRV - [2005/10/12 18:36:58 | 000,005,248 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emFilter.sys -- (FiltUSBEMPIA)
DRV - [2005/10/12 18:36:56 | 000,005,120 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emScan.sys -- (ScanUSBEMPIA)
DRV - [2005/01/26 10:22:20 | 000,280,344 | ---- | M] (Zone Labs LLC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant)
DRV - [2004/09/22 18:41:04 | 000,020,608 | ---- | M] (Empia Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emAudio.sys -- (emAudio)
DRV - [2004/06/12 05:27:18 | 000,051,712 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrSerIf.sys -- (BrSerIf)
DRV - [2004/01/10 04:28:18 | 000,011,648 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrUsbSer.sys -- (BrUsbSer)
DRV - [2003/12/19 21:15:50 | 000,015,263 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BrScnUsb.sys -- (BrScnUsb)
DRV - [2001/08/17 16:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001/08/17 16:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001/08/17 16:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001/08/17 16:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001/08/17 16:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001/08/17 15:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001/08/17 15:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001/08/17 15:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001/08/17 15:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001/08/17 15:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001/08/17 15:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001/08/17 15:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001/08/17 15:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001/08/17 15:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001/08/17 15:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = http://g.msn.com/USSMB/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://g.msn.com/USSMB/1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://moneycentral.msn.com/home.asp
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:50370

========== FireFox ==========

FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 50370
FF - prefs.js..network.proxy.type: 1

FF - HKLM\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/03/31 05:12:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/06/09 13:36:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/04/07 03:33:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/11/01 09:32:54 | 000,000,000 | ---D | M]

[2009/10/22 13:33:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dien\Application Data\Mozilla\Extensions
[2010/09/08 02:53:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dien\Application Data\Mozilla\Firefox\Profiles\65dxkuyl.default\extensions
[2009/10/31 15:06:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\dien\Application Data\Mozilla\Firefox\Profiles\65dxkuyl.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/03/02 20:34:46 | 000,002,426 | ---- | M] () -- C:\Documents and Settings\dien\Application Data\Mozilla\Firefox\Profiles\65dxkuyl.default\searchplugins\askcom.xml
[2010/03/02 20:34:45 | 000,001,840 | ---- | M] () -- C:\Documents and Settings\dien\Application Data\Mozilla\Firefox\Profiles\65dxkuyl.default\searchplugins\bing.xml
[2010/11/01 09:59:58 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/11/01 07:26:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010/11/01 07:25:45 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2010/06/18 11:50:01 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (MSN Toolbar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4 - HKLM..\Run: [AESTFltr] C:\WINDOWS\System32\AESTFltr.exe (Andrea Electronics Corporation)
O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (ScanSoft, Inc.)
O4 - HKLM..\Run: [McAfeeUpdaterUI] C:\Program Files\McAfee\Common Framework\udaterui.exe (McAfee, Inc.)
O4 - HKLM..\Run: [Microsoft Default Manager] C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe (Microsoft Corporation)
O4 - HKLM..\Run: [OdTray.exe] C:\Program Files\Juniper Networks\Odyssey Access Client\odTray.exe (Juniper Networks, Inc.)
O4 - HKLM..\Run: [OpwareSE2] C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe (ScanSoft, Inc.)
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (ScanSoft, Inc.)
O4 - HKLM..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04b\BrStDvPt.exe (Brother Industories, Ltd.)
O4 - HKLM..\Run: [ShStatEXE] C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE (McAfee, Inc.)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Scansoft, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe File not found
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKCU..\Run: [ISUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk = C:\WINDOWS\Installer\{871DF2BE-41D2-4334-AC33-839AF16FC8FE}\Icon3E5562ED7.ico ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Reg Error: Key error.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {5852F5ED-8BF4-11D4-A245-0080C6F74284} http://cgproducts.johnsoncontrols.com/jre/jre-6u13-windows-i586-p.exe (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1256169643234 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1256173673531 (MUWebControl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} https://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {A1662FB6-39BE-41BB-ACDC-0448FB1B5817} http://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_5/PhotoCenter_ActiveX_Control.cab (Photo Upload Plugin Class)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} https://juniper.net/dana-cached/setup/JuniperSetupSP1.cab (JuniperSetupControlXP Class)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\OdysseyClient: DllName - odyEvent.dll - C:\WINDOWS\System32\odyEvent.dll (Juniper Networks, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\dien\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\dien\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/25 11:29:32 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{27665c98-dbb2-11de-ab31-701a04427680}\Shell - "" = AutoRun
O33 - MountPoints2\{27665c98-dbb2-11de-ab31-701a04427680}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{27665c98-dbb2-11de-ab31-701a04427680}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O33 - MountPoints2\{27665c99-dbb2-11de-ab31-701a04427680}\Shell\AutoRun\command - "" = G:\setupSNK.exe -- File not found
O33 - MountPoints2\{9588b8eb-3f41-11df-9fdf-701a04427680}\Shell - "" = AutoRun
O33 - MountPoints2\{9588b8eb-3f41-11df-9fdf-701a04427680}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{9588b8eb-3f41-11df-9fdf-701a04427680}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/11/01 11:42:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dien\My Documents\download3
[2010/11/01 09:59:57 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/11/01 09:59:57 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/11/01 09:59:57 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/11/01 09:32:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NOS
[2010/11/01 09:32:52 | 000,000,000 | ---D | C] -- C:\Program Files\NOS
[2010/10/28 14:40:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dien\Local Settings\Application Data\WinZip
[2010/10/28 14:39:08 | 000,000,000 | ---D | C] -- C:\Program Files\WinZip
[2010/10/22 10:22:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dien\Local Settings\Application Data\Citrix
[2010/10/13 23:17:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dien\Desktop\101NIKON
[2010/10/13 23:08:53 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll
[2010/10/13 23:08:53 | 000,954,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40.dll
[2010/10/13 23:08:53 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll
[2010/10/13 23:08:18 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll
[2008/08/20 05:39:32 | 000,069,632 | ---- | C] (Juniper Networks) -- C:\Documents and Settings\All Users\Application Data\NeoterisSetup.ocx

Here's part 2:

========== Files - Modified Within 30 Days ==========

[2010/11/01 15:40:47 | 000,000,420 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{1BC48521-9876-4300-861C-A7B73E22DE9F}.job
[2010/11/01 15:09:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/01 14:10:36 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\null
[2010/11/01 10:20:56 | 000,000,227 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\Metasys.url
[2010/11/01 10:20:31 | 000,000,230 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\Metasys RAP.url
[2010/11/01 10:10:07 | 001,366,190 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\JHXA02M1More (2).pdf
[2010/11/01 07:25:43 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/11/01 07:25:43 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/11/01 07:25:43 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/11/01 07:25:43 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010/11/01 07:25:42 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010/11/01 06:23:21 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk
[2010/11/01 06:22:46 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/11/01 06:22:45 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1757713459-3713847079-1170734499-1006.job
[2010/11/01 06:22:44 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/01 06:19:27 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/10/31 23:42:38 | 000,235,008 | ---- | M] () -- C:\Documents and Settings\dien\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/31 14:07:20 | 000,021,504 | ---- | M] () -- C:\Documents and Settings\dien\My Documents\Congregational Meeting October 31.doc
[2010/10/30 14:22:04 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\dien\My Documents\Friday Meeting W.doc
[2010/10/29 16:31:58 | 000,087,040 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\ParadisePropCOP.doc
[2010/10/28 16:47:48 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\FIRE ALARM TESTING NOTICE.doc
[2010/10/28 14:39:22 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\WinZip.lnk
[2010/10/28 14:39:22 | 000,001,662 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
[2010/10/27 10:43:52 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\Mileage.doc
[2010/10/27 09:21:13 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\Eleanor Low list.doc
[2010/10/27 09:12:19 | 000,872,808 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\PPIattachment.pdf
[2010/10/26 17:03:24 | 000,084,992 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\ParadiseProperty COP.doc
[2010/10/26 15:36:09 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\dien\My Documents\Eleanor Low.doc
[2010/10/26 15:36:09 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\dien\My Documents\~$eanor Low.doc
[2010/10/24 11:40:51 | 000,098,521 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\KC budget 2011-2012.PDF
[2010/10/22 10:22:01 | 000,103,720 | ---- | M] () -- C:\Documents and Settings\dien\GoToAssistDownloadHelper.exe
[2010/10/22 00:46:46 | 000,566,485 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\GoodFaithEstimate.PDF
[2010/10/20 12:27:08 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\dien\My Documents\CPI Background.doc
[2010/10/19 15:06:06 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\Accident on Monday October 18.doc
[2010/10/19 09:51:55 | 000,021,504 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\My client returned to work on Monday October 18.doc
[2010/10/19 00:32:42 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1757713459-3713847079-1170734499-1006.job
[2010/10/14 03:31:58 | 000,219,248 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/13 23:14:10 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/10/11 05:50:05 | 000,001,556 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\thinkorswim from TD AMERITRADE.lnk
[2010/10/08 08:45:01 | 000,021,837 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\10-8-10 letter to Nancy Foster.docx
[2010/10/07 14:20:55 | 000,013,824 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\Nonbid contracts.xls
[2010/10/06 23:58:57 | 000,498,955 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\NancyFosterAttachments.PDF
[2010/10/04 20:40:47 | 000,011,584 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\KC MPC Analysis Oct 2010(2).xlsx
[2010/10/04 11:08:29 | 000,005,996 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\KC Roberta H Imai Cap Cam Card.PDF
[2010/10/04 11:07:31 | 000,045,081 | ---- | M] () -- C:\Documents and Settings\dien\Desktop\KC Nomination 10 10 04.PDF
[2010/10/03 09:00:24 | 000,464,078 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/10/03 09:00:24 | 000,079,188 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

========== Files Created - No Company Name ==========

[2010/11/01 10:20:31 | 000,000,230 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\Metasys RAP.url
[2010/11/01 10:12:50 | 001,366,190 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\JHXA02M1More (2).pdf
[2010/10/30 14:22:04 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\dien\My Documents\Friday Meeting W.doc
[2010/10/30 14:12:54 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\dien\My Documents\Congregational Meeting October 31.doc
[2010/10/28 16:47:47 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\FIRE ALARM TESTING NOTICE.doc
[2010/10/28 14:39:22 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\WinZip.lnk
[2010/10/28 14:39:22 | 000,001,662 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
[2010/10/27 10:43:52 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\Mileage.doc
[2010/10/27 09:21:13 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\Eleanor Low list.doc
[2010/10/27 09:12:19 | 000,872,808 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\PPIattachment.pdf
[2010/10/26 17:14:51 | 000,087,040 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\ParadisePropCOP.doc
[2010/10/26 17:03:24 | 000,084,992 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\ParadiseProperty COP.doc
[2010/10/26 15:36:09 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\dien\My Documents\Eleanor Low.doc
[2010/10/26 15:36:09 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\dien\My Documents\~$eanor Low.doc
[2010/10/24 11:40:51 | 000,098,521 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\KC budget 2011-2012.PDF
[2010/10/22 10:21:59 | 000,103,720 | ---- | C] () -- C:\Documents and Settings\dien\GoToAssistDownloadHelper.exe
[2010/10/22 00:46:45 | 000,566,485 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\GoodFaithEstimate.PDF
[2010/10/20 12:03:37 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\dien\My Documents\CPI Background.doc
[2010/10/19 10:13:27 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\Accident on Monday October 18.doc
[2010/10/19 09:51:54 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\My client returned to work on Monday October 18.doc
[2010/10/09 07:49:47 | 000,021,837 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\10-8-10 letter to Nancy Foster.docx
[2010/10/07 14:20:55 | 000,013,824 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\Nonbid contracts.xls
[2010/10/06 23:58:56 | 000,498,955 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\NancyFosterAttachments.PDF
[2010/10/04 20:40:47 | 000,011,584 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\KC MPC Analysis Oct 2010(2).xlsx
[2010/10/04 11:08:29 | 000,005,996 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\KC Roberta H Imai Cap Cam Card.PDF
[2010/10/04 11:07:31 | 000,045,081 | ---- | C] () -- C:\Documents and Settings\dien\Desktop\KC Nomination 10 10 04.PDF
[2010/05/13 23:14:06 | 000,870,128 | ---- | C] () -- C:\Documents and Settings\dien\Application Data\mcs.rma
[2010/05/13 23:14:06 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\dien\Application Data\86EEED
[2010/04/17 10:25:43 | 000,000,040 | ---- | C] () -- C:\WINDOWS\opt_2460.ini
[2010/04/17 10:25:42 | 000,000,051 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2010/04/16 21:04:04 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/04/16 21:04:04 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/04/14 03:28:57 | 000,000,285 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2010/04/09 12:06:04 | 000,021,504 | ---- | C] () -- C:\WINDOWS\System32\WBCustomizer.dll
[2010/03/31 05:14:39 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2010/03/29 14:37:17 | 000,000,234 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2009/12/06 20:42:40 | 000,235,008 | ---- | C] () -- C:\Documents and Settings\dien\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/02 15:00:53 | 000,036,363 | ---- | C] () -- C:\WINDOWS\CSTBox.INI
[2009/11/07 18:40:18 | 000,000,028 | ---- | C] () -- C:\WINDOWS\nanoPEG.ini
[2009/11/07 18:37:17 | 000,026,814 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2009/11/07 18:37:09 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\dmcrypto.dll
[2009/11/07 18:31:14 | 000,002,057 | ---- | C] () -- C:\WINDOWS\HCWPNP.INI
[2009/11/07 18:18:09 | 000,131,072 | ---- | C] () -- C:\WINDOWS\System32\emLibEx.dll
[2009/10/24 22:30:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Brownie.ini
[2009/10/24 21:50:53 | 000,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini
[2009/10/24 21:49:51 | 000,000,463 | ---- | C] () -- C:\WINDOWS\brwmark.ini
[2009/10/24 21:49:51 | 000,000,309 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2009/10/24 21:49:51 | 000,000,152 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2009/10/24 21:49:51 | 000,000,079 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2009/10/24 21:47:56 | 000,027,524 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2009/10/23 14:42:29 | 000,011,482 | ---- | C] () -- C:\WINDOWS\hpdj6122.ini
[2009/10/21 15:03:30 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/10/14 14:07:31 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v5016.dll
[2009/10/14 14:04:54 | 000,001,153 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2009/10/14 11:25:08 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009/10/14 11:20:02 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2009/10/14 11:20:01 | 000,753,664 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll
[2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2009/01/19 12:18:30 | 000,000,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\odFIPS2.sys.icv
[2008/04/25 11:26:32 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2008/04/25 06:16:35 | 000,755,200 | ---- | C] () -- C:\WINDOWS\System32\ir50_32.dll
[2008/04/25 06:16:35 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\ir41_qcx.dll
[2008/04/25 06:16:35 | 000,200,192 | ---- | C] () -- C:\WINDOWS\System32\ir50_qc.dll
[2008/04/25 06:16:35 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\ir50_qcx.dll
[2008/04/25 06:16:35 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\ir41_qc.dll
[2008/04/24 23:22:39 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2007/10/26 14:28:18 | 000,197,408 | ---- | C] () -- C:\WINDOWS\System32\vpnapi.dll
[2007/10/26 14:28:04 | 000,193,312 | ---- | C] () -- C:\WINDOWS\System32\CSGina.dll
[2007/09/27 05:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 05:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 05:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2003/01/07 15:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/03/04 10:16:34 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Jpeg32.dll

========== Custom Scans ==========


< %systemroot%*. /mp /s >

< %systemroot%system32*.dll /lockedfiles >

< %systemroot%system32*.exe /lockedfiles >

< %systemroot%Tasks*.job /lockedfiles >

< %systemroot%system32drivers*.sys /lockedfiles >

< %systemroot%System32config*.sav >

< %systemroot%system32*.sys >

< %systemroot%system32drivers*.dll >

< %systemroot%system32drivers*.ini >

< %systemroot%system32drivers*.exe >

< %SYSTEMDRIVE%*.* >
[2008/04/25 11:29:32 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2009/10/21 13:33:49 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2010/06/16 06:41:09 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2008/01/18 04:45:46 | 000,333,203 | RHS- | M] () -- C:\bootmgr
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2010/06/18 11:53:46 | 000,028,442 | ---- | M] () -- C:\ComboFix.txt
[2008/04/25 11:29:32 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009/10/14 14:07:57 | 000,003,620 | RH-- | M] () -- C:\dell.sdr
[2008/04/25 11:29:32 | 000,000,000 | -H-- | M] () -- C:\IO.SYS
[2010/11/01 11:22:01 | 000,000,919 | ---- | M] () -- C:\JavaRa.log
[2008/04/25 11:29:32 | 000,000,000 | -H-- | M] () -- C:\MSDOS.SYS
[2008/04/14 02:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/04/14 02:00:00 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/11/01 06:19:24 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys
[2010/06/16 23:11:17 | 000,004,568 | ---- | M] () -- C:\RootRepeal report 06-16-10 (23-11-17).txt
[2010/06/16 14:44:37 | 000,052,462 | ---- | M] () -- C:\TDSSKiller.2.3.2.0_16.06.2010_14.44.24_log.txt
[2010/06/16 14:47:06 | 000,001,686 | ---- | M] () -- C:\TDSSKiller.2.3.2.0_16.06.2010_14.47.06_log.txt
[2010/06/16 14:51:33 | 000,018,958 | ---- | M] () -- C:\TDSSKiller.2.3.2.0_16.06.2010_14.51.29_log.txt
[2010/06/16 15:09:40 | 000,051,728 | ---- | M] () -- C:\TDSSKiller.txt

< %PROGRAMFILES%*. >
[2010/03/05 23:26:18 | 000,000,000 | ---D | M] -- C:\Program Files\7-Zip
[2010/11/01 06:30:20 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2010/03/20 21:43:38 | 000,000,000 | ---D | M] -- C:\Program Files\Application Updater
[2009/10/26 07:51:48 | 000,000,000 | ---D | M] -- C:\Program Files\ArcSoft
[2009/10/24 21:49:40 | 000,000,000 | ---D | M] -- C:\Program Files\Brother
[2009/10/26 07:54:53 | 000,000,000 | ---D | M] -- C:\Program Files\Canon
[2010/06/17 21:49:16 | 000,000,000 | ---D | M] -- C:\Program Files\Carbonite
[2009/10/22 13:36:18 | 000,000,000 | ---D | M] -- C:\Program Files\Cisco Systems
[2010/11/01 00:31:54 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2008/04/25 11:27:07 | 000,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
[2010/04/05 13:31:16 | 000,000,000 | ---D | M] -- C:\Program Files\Dell
[2009/10/14 11:20:24 | 000,000,000 | ---D | M] -- C:\Program Files\Dell Support Center
[2009/10/14 18:10:14 | 000,000,000 | ---D | M] -- C:\Program Files\DellTPad
[2010/08/30 23:05:59 | 000,000,000 | ---D | M] -- C:\Program Files\DivX
[2010/09/01 11:23:43 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2009/10/23 14:45:05 | 000,000,000 | ---D | M] -- C:\Program Files\Hewlett-Packard
[2009/10/14 18:10:27 | 000,000,000 | ---D | M] -- C:\Program Files\IDT
[2009/10/23 09:43:58 | 000,000,000 | ---D | M] -- C:\Program Files\IGC
[2009/10/26 07:54:53 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2010/10/14 03:31:57 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2010/11/01 11:21:02 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2009/10/21 15:33:23 | 000,000,000 | ---D | M] -- C:\Program Files\Juniper Networks
[2010/06/15 20:05:33 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/10/21 13:41:43 | 000,000,000 | ---D | M] -- C:\Program Files\McAfee
[2010/06/17 14:31:10 | 000,000,000 | ---D | M] -- C:\Program Files\McAfee Security Scan
[2009/10/14 11:18:02 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger
[2009/10/14 11:22:01 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2009/10/21 15:02:59 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft ActiveSync
[2008/04/25 11:29:52 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2009/10/21 15:23:30 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2010/10/03 11:11:30 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2009/10/21 15:02:17 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2010/08/11 06:32:11 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2009/12/06 00:29:16 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla ActiveX Control v1.7.12
[2010/10/27 20:21:20 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2008/04/25 11:42:43 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2009/10/21 15:23:16 | 000,000,000 | ---D | M] -- C:\Program Files\MSECache
[2010/01/01 13:50:38 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
[2008/04/25 11:26:37 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2010/01/01 13:49:59 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Toolbar
[2010/01/01 13:50:18 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Toolbar Installer
[2009/10/14 11:15:30 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2008/04/25 11:27:56 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2010/11/01 09:32:52 | 000,000,000 | ---D | M] -- C:\Program Files\NOS
[2008/04/25 11:26:49 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
[2010/05/12 05:17:44 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2010/03/31 05:11:45 | 000,000,000 | ---D | M] -- C:\Program Files\Real
[2008/04/25 11:39:00 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2010/09/01 13:57:21 | 000,000,000 | ---D | M] -- C:\Program Files\Roxio
[2009/10/26 07:52:54 | 000,000,000 | ---D | M] -- C:\Program Files\ScanSoft
[2010/10/22 10:22:45 | 000,000,000 | ---D | M] -- C:\Program Files\thinkTDA
[2010/06/10 22:37:53 | 000,000,000 | ---D | M] -- C:\Program Files\Trend Micro
[2008/04/25 11:32:50 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2010/09/28 23:11:43 | 000,000,000 | ---D | M] -- C:\Program Files\uTorrent
[2009/12/06 00:28:55 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2009/10/14 11:19:07 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Desktop Search
[2009/10/22 13:24:13 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2009/10/14 11:21:47 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive
[2010/03/23 18:51:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
[2010/03/23 18:51:30 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2008/04/25 11:26:35 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2008/04/25 11:28:13 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
[2010/02/16 00:13:41 | 000,000,000 | ---D | M] -- C:\Program Files\WinTV
[2010/10/28 14:39:09 | 000,000,000 | ---D | M] -- C:\Program Files\WinZip
[2008/04/25 11:29:52 | 000,000,000 | ---D | M] -- C:\Program Files\xerox
[2010/04/16 21:04:04 | 000,000,000 | ---D | M] -- C:\Program Files\Xvid

< %appdata%*.* >
[2010/05/14 05:44:49 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\dien\Application Data\86EEED
[2008/04/24 23:22:23 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\dien\Application Data\desktop.ini
[2010/05/14 05:44:49 | 000,870,128 | ---- | M] () -- C:\Documents and Settings\dien\Application Data\mcs.rma


< MD5 for: AGP440.SYS >
[2008/04/14 02:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\I386\sp3.cab:AGP440.sys
[2008/04/13 07:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\Program Files\Dell\DBRM\osmedia\I386\sp3.cab:AGP440.sys
[2008/04/14 02:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008/04/14 02:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\AGP440.SYS
[2008/04/14 02:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\AGP440.SYS

< MD5 for: ATAPI.SYS >
[2008/04/14 02:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\I386\sp3.cab:atapi.sys
[2008/04/13 07:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\Program Files\Dell\DBRM\osmedia\I386\sp3.cab:atapi.sys
[2008/04/14 02:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008/04/14 02:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008/04/14 02:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: DISK.SYS >
[2008/04/14 02:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\I386\sp3.cab:disk.sys
[2008/04/13 07:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\Program Files\Dell\DBRM\osmedia\I386\sp3.cab:disk.sys
[2008/04/14 02:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
[2008/04/14 02:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys

< MD5 for: EVENTLOG.DLL >
[2008/04/14 02:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008/04/14 02:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll

< MD5 for: IASTOR.SYS >
[2008/07/20 00:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\Program Files\Dell\DBRM\osmedia\I386\IASTOR.SYS
[2009/01/19 09:41:16 | 000,328,728 | ---- | M] (Intel Corporation) MD5=BAABB0301949774A66B955C65319635A -- C:\drivers\storage\R208747\IaStor.sys
[2009/01/19 09:41:16 | 000,328,728 | ---- | M] (Intel Corporation) MD5=BAABB0301949774A66B955C65319635A -- C:\WINDOWS\system32\drivers\IASTOR.SYS

< MD5 for: NETLOGON.DLL >
[2008/04/14 02:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008/04/14 02:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: NVGTS.SYS >
[2008/01/20 13:15:22 | 000,102,400 | ---- | M] (NVIDIA Corporation) MD5=A0B3F3A5049931657164F0FFCF0B208E -- C:\Program Files\Dell\DBRM\osmedia\I386\NVGTS.SYS

< MD5 for: NVRD32.SYS >
[2008/01/20 13:15:22 | 000,128,000 | ---- | M] (NVIDIA Corporation) MD5=C9128FE14E5C1E55710781B5C276F2ED -- C:\Program Files\Dell\DBRM\osmedia\I386\NVRD32.SYS

< MD5 for: SCECLI.DLL >
[2008/04/14 02:00:00 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008/04/14 02:00:00 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SYMMPI.SYS >
[2007/02/09 01:06:00 | 000,100,096 | ---- | M] (LSI Logic) MD5=A42F863305943869BA00A613C8EE8C7E -- C:\Program Files\Dell\DBRM\osmedia\I386\SYMMPI.SYS

< MD5 for: USBSTOR.SYS >
[2008/04/14 02:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\I386\sp3.cab:usbstor.sys
[2008/04/13 07:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\Program Files\Dell\DBRM\osmedia\I386\sp3.cab:usbstor.sys
[2008/04/14 02:00:00 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbstor.sys
[2008/04/14 00:15:40 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\system32\dllcache\usbstor.sys
[2008/04/14 00:15:40 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\system32\drivers\USBSTOR.SYS

< HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstall|LastSuccessTime /rs >

< >

< >

< >

< >

< End of report >

OTL.txt was the only file generated, did not find Extras.txt file, ran OTL scan 3 times. thanks

Topic merged.

Please use the Post Reply button instead of the New Topic Button. Thank you!

Hi,

Welcome to GeekPolice.net!

Please run OTL.exe.

• Copy the commands with file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  
  :OTL
  IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:50370
  FF - prefs.js..network.proxy.http: "127.0.0.1"
  FF - prefs.js..network.proxy.http_port: 50370
  FF - prefs.js..network.proxy.type: 1
  O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  
  
  
  :commands
  [emptytemp]
  [resethosts]
  
  
  
• Return to OTL.exe, right click in the "Custom Scans/Fixes" window (under the light green bar) and choose Paste.
  
  
• Click the red Run Fix button.
  
• A fix log in Notepad will appear. Copy the contents of the fix log to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  
• Close OTL.exe
  

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

=================

Please download ComboFix from BleepingComputer.com

Alternate link: GeeksToGo.com

Alternate link: Forospyware.com

Rename ComboFix.exe to commy.exe before you save it to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
  
• Click Start>Run then copy paste the following command into the Run box & click OK "%userprofile%\desktop\commy.exe" /stepdel
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console

Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

• Click on Yes, to continue scanning for malware.
  
• When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.
  

hi Sneakyone,

Thanks for helping me again, you guys are great !

Here is the first log (too big to send both):

All processes killed
========== OTL ==========
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Prefs.js: "127.0.0.1" removed from network.proxy.http
Prefs.js: 50370 removed from network.proxy.http_port
Prefs.js: 1 removed from network.proxy.type
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes

User: dien
->Temp folder emptied: 57548584 bytes
->Temporary Internet Files folder emptied: 60343692 bytes
->Java cache emptied: 36354961 bytes
->FireFox cache emptied: 24694711 bytes
->Google Chrome cache emptied: 7276739 bytes
->Flash cache emptied: 28447 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 5695 bytes

User: oit
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 98939981 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 41769880 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 4106989749 bytes

Total Files Cleaned = 4,229.00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.6.0 log created on 11022010_070315

Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\dien\Local Settings\Temp\~DFB2B6.tmp not found!
File\Folder C:\Documents and Settings\dien\Local Settings\Temp\~DFB2C4.tmp not found!
File\Folder C:\Documents and Settings\dien\Local Settings\Temp\~DFEC1E.tmp not found!
File\Folder C:\Documents and Settings\dien\Local Settings\Temp\~DFEC5B.tmp not found!
File\Folder C:\Documents and Settings\dien\Local Settings\Temp\~DFEF40.tmp not found!
File\Folder C:\Documents and Settings\dien\Local Settings\Temp\~DFEF5E.tmp not found!
File move failed. C:\Documents and Settings\dien\Local Settings\Temporary Internet Files\Content.IE5\TC46QI4R\read-this-before-posting-t3821[1].htm scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\dien\Local Settings\Temporary Internet Files\Content.IE5\TC46QI4R\search[2].htm scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\dien\Local Settings\Temporary Internet Files\Content.IE5\RIA7KSPV\mail[4].htm scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\dien\Local Settings\Temporary Internet Files\Content.IE5\KZ4AQ7LM\operating-system-error-downloading-adobe-reader-t24533[1].htm scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\dien\Local Settings\Temporary Internet Files\Content.IE5\8BUGOCGJ\mail[7].htm scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\dien\Local Settings\Temporary Internet Files\Content.IE5\6H02RWCM\mail[6].htm scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\dien\Local Settings\Temporary Internet Files\Content.IE5\3PCD8GXT\openhand[1].cur scheduled to be moved on reboot.
C:\Documents and Settings\dien\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.

Registry entries deleted on Reboot...

and the commyfix log (1 of 2) :

ComboFix 10-11-01.06 - dien 11/02/2010 7:25.5.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3033.2536 [GMT -10:00]
Running from: c:\documents and settings\dien\desktop\commy.exe
Command switches used :: /stepdel
AV: VirusScan Enterprise + AntiSpyware Enterprise *On-access scanning disabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\dien\Application Data\Microsoft\stor.cfg
c:\documents and settings\dien\DataRefreshUI_5.0.0.8300.dll
c:\documents and settings\dien\GoToAssistDownloadHelper.exe
c:\windows\system32\arp.exe

.
((((((((((((((((((((((((( Files Created from 2010-10-02 to 2010-11-02 )))))))))))))))))))))))))))))))
.

2010-11-01 19:32 . 2010-09-02 01:51 35136 ----a-w- c:\program files\Mozilla Firefox\plugins\np_gp.dll
2010-11-01 19:32 . 2010-11-01 19:32 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2010-11-01 19:32 . 2010-11-01 19:32 -------- d-----w- c:\program files\NOS
2010-10-29 00:40 . 2010-10-29 00:40 -------- d-----w- c:\documents and settings\dien\Local Settings\Application Data\WinZip
2010-10-22 20:22 . 2010-10-22 20:22 -------- d-----w- c:\documents and settings\dien\Local Settings\Application Data\Citrix
2010-10-14 09:08 . 2010-09-18 06:53 974848 -c----w- c:\windows\system32\dllcache\mfc42.dll
2010-10-14 09:08 . 2010-09-18 06:53 954368 -c----w- c:\windows\system32\dllcache\mfc40.dll
2010-10-14 09:08 . 2010-09-18 06:53 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
2010-10-14 09:08 . 2010-08-23 16:12 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-01 17:25 . 2010-06-14 21:44 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-11-01 17:25 . 2010-06-14 21:19 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-09-18 22:23 . 2008-04-25 16:16 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2008-04-25 16:16 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2008-04-25 16:16 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2008-04-25 16:16 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:58 . 2008-04-25 16:16 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:58 . 2008-04-25 16:16 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:58 . 2008-04-25 16:16 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:51 . 2008-04-25 16:16 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-08-31 13:38 . 2008-04-25 16:16 1861888 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:02 . 2008-04-25 16:16 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:57 . 2008-04-25 16:16 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-26 13:39 . 2008-04-25 16:16 357248 ----a-w- c:\windows\system32\drivers\srv.sys
2010-08-26 12:52 . 2009-10-14 21:16 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2010-08-23 16:12 . 2008-04-25 16:16 617472 ----a-w- c:\windows\system32\comctl32.dll
2010-08-17 13:17 . 2008-04-25 16:16 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-08-16 08:45 . 2008-04-25 16:16 590848 ----a-w- c:\windows\system32\rpcrt4.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-06-16_18.43.14 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-11-02 17:07 . 2010-11-02 17:07 16384 c:\windows\Temp\Perflib_Perfdata_460.dat
- 2008-04-25 16:16 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe
+ 2008-04-25 16:16 . 2010-06-21 14:46 46080 c:\windows\system32\tzchange.exe
+ 2010-03-31 10:16 . 2010-03-31 10:16 99176 c:\windows\system32\PresentationHostProxy.dll
+ 2008-04-25 16:16 . 2010-10-03 19:00 79188 c:\windows\system32\perfc009.dat
- 2008-04-25 16:16 . 2010-06-09 23:32 79188 c:\windows\system32\perfc009.dat
+ 2009-11-07 11:07 . 2009-11-07 11:07 49488 c:\windows\system32\netfxperf.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 98304 c:\windows\system32\msir3jp.dll
- 2008-04-25 16:16 . 2009-03-08 14:31 66560 c:\windows\system32\mshtmled.dll
+ 2008-04-25 16:16 . 2010-09-10 05:58 66560 c:\windows\system32\mshtmled.dll
+ 2007-08-14 04:54 . 2010-09-10 05:58 55296 c:\windows\system32\msfeedsbs.dll
- 2007-08-14 04:54 . 2010-05-06 10:41 55296 c:\windows\system32\msfeedsbs.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 70656 c:\windows\system32\korwbrkr.dll
+ 2008-04-25 16:16 . 2010-09-10 05:58 25600 c:\windows\system32\jsproxy.dll
- 2008-04-25 16:16 . 2010-05-06 10:41 25600 c:\windows\system32\jsproxy.dll
- 2008-04-25 16:16 . 2008-04-14 12:00 80384 c:\windows\system32\iccvid.dll
+ 2008-04-25 16:16 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 36937 c:\windows\system32\dllcache\zclientm.exe
- 2010-03-29 21:34 . 2010-05-06 10:41 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2010-03-29 21:34 . 2010-09-10 05:58 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2008-04-25 21:27 . 2006-10-19 07:47 96256 c:\windows\system32\dllcache\wmpband.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 52224 c:\windows\system32\dllcache\wmitimep.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 41472 c:\windows\system32\dllcache\wmipsess.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 62464 c:\windows\system32\dllcache\wmipjobj.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 61952 c:\windows\system32\dllcache\wmipiprt.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 75264 c:\windows\system32\dllcache\wmipicmp.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 61440 c:\windows\system32\dllcache\wmimsg.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 60928 c:\windows\system32\dllcache\wmicookr.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 88576 c:\windows\system32\dllcache\wmiaprpl.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 16384 c:\windows\system32\dllcache\winmgmtr.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 13312 c:\windows\system32\dllcache\winmgmt.exe
+ 2008-04-25 09:22 . 2008-04-14 12:00 13600 c:\windows\system32\dllcache\wfwnet.drv
+ 2008-04-25 16:16 . 2008-04-14 12:00 43008 c:\windows\system32\dllcache\wbemperf.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 12288 c:\windows\system32\dllcache\wbemads.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 12288 c:\windows\system32\dllcache\wb32.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 16896 c:\windows\system32\dllcache\unsecapp.exe
+ 2010-01-06 08:09 . 2008-04-14 12:00 76288 c:\windows\system32\dllcache\uniime.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 59904 c:\windows\system32\dllcache\trnsprov.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 61952 c:\windows\system32\dllcache\tmplprov.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 19200 c:\windows\system32\dllcache\tapi.dll
+ 2008-04-25 16:16 . 2008-04-14 12:00 33280 c:\windows\system32\dllcache\sstub.dll
+ 2010-08-27 05:57 . 2010-08-27 05:57 99840 c:\windows\system32\dllcache\srvsvc.dll
+ 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 40960 c:\windows\system32\dllcache\smtpcons.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 42573 c:\windows\system32\dllcache\shvlzm.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 36352 c:\windows\system32\dllcache\scrcons.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 42574 c:\windows\system32\dllcache\rvsezm.exe
+ 2008-04-25 21:27 . 2008-04-14 12:00 61440 c:\windows\system32\dllcache\rrcm.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 92672 c:\windows\system32\dllcache\policman.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 14336 c:\windows\system32\dllcache\padrs412.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 51200 c:\windows\system32\dllcache\oobebaln.exe
+ 2008-04-25 09:22 . 2008-04-14 12:00 24064 c:\windows\system32\dllcache\olesvr.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 82944 c:\windows\system32\dllcache\olecli.dll
+ 2008-04-25 16:16 . 2008-04-14 12:00 15360 c:\windows\system32\dllcache\nppagent.exe
+ 2008-04-25 09:22 . 2008-04-14 12:00 69120 c:\windows\system32\dllcache\notepad.exe
+ 2008-04-25 21:27 . 2008-04-14 12:00 77824 c:\windows\system32\dllcache\nmcom.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 81920 c:\windows\system32\dllcache\nmchat.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 28672 c:\windows\system32\dllcache\nmasnt.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 57344 c:\windows\system32\dllcache\mst123.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 29184 c:\windows\system32\dllcache\msoobe.exe
+ 2008-04-25 21:27 . 2008-04-14 12:00 19456 c:\windows\system32\dllcache\msobweb.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 30720 c:\windows\system32\dllcache\msobshel.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 16384 c:\windows\system32\dllcache\msobdl.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 98304 c:\windows\system32\dllcache\msir3jp.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 39936 c:\windows\system32\dllcache\msinfo32.exe
+ 2007-08-14 04:54 . 2010-09-10 05:58 66560 c:\windows\system32\dllcache\mshtmled.dll
- 2007-08-14 04:54 . 2009-03-08 14:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2009-10-22 00:54 . 2010-09-10 05:58 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2009-10-22 00:54 . 2010-05-06 10:41 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 68768 c:\windows\system32\dllcache\mmsystem.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 28160 c:\windows\system32\dllcache\mciwave.drv
+ 2008-04-25 09:22 . 2008-04-14 12:00 25264 c:\windows\system32\dllcache\mciseq.drv
+ 2008-04-25 09:22 . 2008-04-14 12:00 73376 c:\windows\system32\dllcache\mciavi.drv
+ 2007-08-14 04:44 . 2010-09-10 05:58 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 24576 c:\windows\system32\dllcache\krnlprov.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 70656 c:\windows\system32\dllcache\korwbrkr.dll
- 2007-08-14 04:54 . 2010-05-06 10:41 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-08-14 04:54 . 2010-09-10 05:58 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 59904 c:\windows\system32\dllcache\imkrinst.exe
+ 2010-09-05 21:47 . 2008-04-14 12:00 44032 c:\windows\system32\dllcache\imekrmig.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 13312 c:\windows\system32\dllcache\htrn_jis.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 42573 c:\windows\system32\dllcache\hrtzzm.exe
+ 2010-09-05 21:47 . 2008-04-14 12:00 36864 c:\windows\system32\dllcache\hanjadic.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 57344 c:\windows\system32\dllcache\h323cc.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 53248 c:\windows\system32\dllcache\fwdprov.dll
+ 2008-04-25 16:16 . 2008-04-14 12:00 45056 c:\windows\system32\dllcache\evtgprov.dll
+ 2008-04-25 16:16 . 2008-04-14 12:00 21504 c:\windows\system32\dllcache\evntrprv.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 40960 c:\windows\system32\dllcache\dcap32.dll
- 2007-08-14 04:54 . 2007-08-14 04:54 33792 c:\windows\system32\dllcache\custsat.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 33792 c:\windows\system32\dllcache\custsat.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 45056 c:\windows\system32\dllcache\confmrsl.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 32816 c:\windows\system32\dllcache\commdlg.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 42575 c:\windows\system32\dllcache\chkrzm.exe
+ 2008-04-25 21:27 . 2008-04-14 12:00 12288 c:\windows\system32\dllcache\cb32.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 42577 c:\windows\system32\dllcache\bckgzm.exe
+ 2008-04-25 09:22 . 2008-04-14 12:00 69584 c:\windows\system32\dllcache\avicap.dll
+ 2008-04-25 16:16 . 2008-04-14 12:00 19456 c:\windows\system32\dllcache\arp.exe
+ 2009-11-07 11:07 . 2009-11-07 11:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2010-09-22 19:43 . 2010-09-22 19:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2010-03-23 15:31 . 2010-03-23 15:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2010-04-01 21:42 . 2010-04-01 21:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2010-09-24 01:55 . 2010-09-24 01:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2010-04-01 00:51 . 2010-04-01 00:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-09-23 12:26 . 2010-09-23 12:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-09-23 12:26 . 2010-09-23 12:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2010-04-01 00:51 . 2010-04-01 00:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-09-23 12:26 . 2010-09-23 12:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2010-04-01 00:51 . 2010-04-01 00:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2010-04-01 01:32 . 2010-04-01 01:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-09-23 13:17 . 2010-09-23 13:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2010-04-01 01:32 . 2010-04-01 01:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2010-09-23 13:17 . 2010-09-23 13:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2010-10-19 08:04 . 2010-10-19 08:04 21504 c:\windows\Installer\2a9fce2.msi
+ 2010-10-29 00:39 . 2010-10-29 00:39 29184 c:\windows\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}\IconCD95F6617.exe
+ 2010-10-14 09:13 . 2010-10-14 09:13 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
- 2010-06-09 23:36 . 2010-06-09 23:36 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 23040 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 23040 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 61440 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 61440 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 27136 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 27136 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 11264 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 11264 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 86016 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 86016 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 12288 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 12288 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2010-06-05 15:37 . 2010-06-05 15:37 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-06-05 15:37 . 2010-10-01 18:42 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-09-24 17:06 . 2010-09-24 17:06 25214 c:\windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
+ 2010-09-24 17:06 . 2010-09-24 17:06 25214 c:\windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2010-09-24 17:06 . 2010-09-24 17:06 25214 c:\windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2010-09-24 17:06 . 2010-09-24 17:06 25214 c:\windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2010-09-24 17:06 . 2010-09-24 17:06 25214 c:\windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\googleearth.exe1_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2010-09-24 17:06 . 2010-09-24 17:06 25214 c:\windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\googleearth.exe_F6A848FB884248E6A4CDCBDCF41F6A74.exe
+ 2010-09-24 17:06 . 2010-09-24 17:06 25214 c:\windows\Installer\{4286E640-B5FB-11DF-AC4B-005056C00008}\ARPPRODUCTICON.exe
+ 2010-09-05 21:47 . 2008-04-14 12:00 14336 c:\windows\ime\shared\res\padrs412.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 59904 c:\windows\ime\imkr6_1\imkrinst.exe
+ 2010-09-05 21:47 . 2008-04-14 12:00 44032 c:\windows\ime\imkr6_1\imekrmig.exe
+ 2010-09-05 21:47 . 2008-04-14 12:00 36864 c:\windows\ime\imkr6_1\dicts\hanjadic.dll
+ 2010-10-14 09:13 . 2010-06-24 12:22 12800 c:\windows\ie8updates\KB2360131-IE8\xpshims.dll
+ 2010-10-14 09:13 . 2009-03-08 14:31 66560 c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll
+ 2010-10-14 09:13 . 2010-06-24 12:21 55296 c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll
+ 2010-10-14 09:13 . 2009-03-08 14:34 43008 c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll
+ 2010-10-14 09:13 . 2010-06-24 12:21 25600 c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 12800 c:\windows\ie8updates\KB2183461-IE8\xpshims.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 55296 c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 25600 c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_27825c46\System.Drawing.Design.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_bfbc72a4\CustomMarshalers.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\70ee6267f7bad40e8707d402277770c3\System.Web.DynamicData.Design.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll
+ 2010-08-11 16:38 . 2010-08-11 16:38 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe
+ 2010-08-11 16:37 . 2010-08-11 16:37 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\272d51526813ea113970b8e890c92ee2\Microsoft.VisualC.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe
+ 2010-08-11 16:38 . 2010-08-11 16:38 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-06-09 23:37 . 2010-06-09 23:37 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-08-11 16:31 . 2008-04-14 12:00 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll
+ 2010-09-29 09:17 . 2008-04-14 12:00 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe
+ 2010-10-01 18:41 . 2010-04-21 13:28 46080 c:\windows\$NtUninstallKB2158563$\tzchange.exe
+ 2010-10-01 18:41 . 2010-06-23 00:54 16896 c:\windows\$NtUninstallKB2158563$\spuninst\tzchange.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB982802\spmsg.dll
+ 2010-08-11 16:31 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll
+ 2010-08-11 16:31 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB982665\spmsg.dll
+ 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll
+ 2010-08-11 16:38 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll
+ 2010-08-11 16:38 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB982214\spmsg.dll
+ 2010-08-11 16:32 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll
+ 2010-08-11 16:32 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981997\spmsg.dll
+ 2010-08-11 16:36 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll
+ 2010-08-11 03:45 . 2010-06-18 06:28 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll
+ 2010-08-11 16:36 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB981852\spmsg.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981322\spmsg.dll
+ 2010-08-11 16:33 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll
+ 2010-08-11 16:33 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980436\spmsg.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2347290\spmsg.dll
+ 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
+ 2010-08-04 08:11 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll
+ 2010-08-04 08:11 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2286198\spmsg.dll
+ 2010-09-29 09:17 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll
+ 2010-09-29 09:17 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2259922\spmsg.dll
+ 2010-07-14 15:59 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll
+ 2010-07-14 15:59 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2229593\spmsg.dll
+ 2010-08-11 16:34 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2183461-IE8\update\spcustom.dll
+ 2010-08-11 16:34 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2183461-IE8\spmsg.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 12800 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\xpshims.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 55296 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeedsbs.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 25600 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\jsproxy.dll
+ 2010-09-29 09:14 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
+ 2010-09-29 09:14 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2141007\spmsg.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2121546\spmsg.dll
+ 2010-08-11 16:38 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll
+ 2010-08-11 16:38 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2115168\spmsg.dll
+ 2010-08-11 16:36 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2079403\update\spcustom.dll
+ 2010-08-11 16:36 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2079403\spmsg.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 6144 c:\windows\system32\kbd101a.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 6656 c:\windows\system32\dllcache\wmiapres.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 2176 c:\windows\system32\dllcache\vga.drv
+ 2008-04-25 09:22 . 2008-04-14 12:00 9008 c:\windows\system32\dllcache\ver.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 4048 c:\windows\system32\dllcache\timer.drv
+ 2008-04-25 09:22 . 2008-04-14 12:00 3360 c:\windows\system32\dllcache\system.drv
+ 2008-04-25 09:22 . 2008-04-14 12:00 1744 c:\windows\system32\dllcache\sound.drv
+ 2008-04-25 09:22 . 2008-04-14 12:00 5120 c:\windows\system32\dllcache\shell.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 2032 c:\windows\system32\dllcache\mouse.drv
+ 2008-04-25 09:22 . 2008-04-14 12:00 9936 c:\windows\system32\dllcache\lzexpand.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 2000 c:\windows\system32\dllcache\keyboard.drv
+ 2010-01-06 08:09 . 2008-04-14 12:00 7680 c:\windows\system32\dllcache\kbdnecnt.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 9216 c:\windows\system32\dllcache\kbdnecat.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 7168 c:\windows\system32\dllcache\kbdnec95.dll
+ 2008-04-25 16:16 . 2008-04-14 12:00 7168 c:\windows\system32\dllcache\kbdnec.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 6144 c:\windows\system32\dllcache\kbdlk41j.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 6656 c:\windows\system32\dllcache\kbdlk41a.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 7168 c:\windows\system32\dllcache\kbdibm02.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 6144 c:\windows\system32\dllcache\kbdax2.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 6144 c:\windows\system32\dllcache\kbd106n.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 6144 c:\windows\system32\dllcache\kbd101a.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 6144 c:\windows\system32\dllcache\kbd101.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 7168 c:\windows\system32\dllcache\f3ahvoas.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 6144 c:\windows\system32\dllcache\comrereg.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 9728 c:\windows\system32\dllcache\comrepl.exe
+ 2010-01-06 08:09 . 2008-04-14 12:00 6656 c:\windows\system32\dllcache\c_is2022.dll
+ 2009-10-22 01:03 . 2010-10-14 09:13 4096 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 4096 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2010-06-09 23:31 . 2010-06-09 23:31 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-09 23:31 . 2010-06-09 23:31 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-09 23:31 . 2010-06-09 23:31 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-09-29 09:17 . 2008-05-03 11:55 2560 c:\windows\$NtUninstallKB982802$\xpsp4res.dll
+ 2010-07-22 05:57 . 2010-07-22 05:57 5120 c:\windows\$hf_mig$\KB982802\SP3QFE\xpsp4res.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-04-25 16:16 . 2010-06-18 17:45 293376 c:\windows\system32\winsrv.dll
- 2008-04-25 16:16 . 2008-04-14 12:00 293376 c:\windows\system32\winsrv.dll
+ 2008-04-25 16:16 . 2010-04-16 15:36 406016 c:\windows\system32\usp10.dll
- 2008-04-25 16:16 . 2008-04-14 12:00 406016 c:\windows\system32\usp10.dll
+ 2008-04-25 16:16 . 2010-06-30 12:31 149504 c:\windows\system32\schannel.dll
+ 2010-03-31 10:10 . 2010-03-31 10:10 295264 c:\windows\system32\PresentationHost.exe
+ 2008-04-25 16:16 . 2010-10-03 19:00 464078 c:\windows\system32\perfh009.dat
- 2008-04-25 16:16 . 2010-06-09 23:32 464078 c:\windows\system32\perfh009.dat
+ 2008-04-25 16:16 . 2010-09-10 05:58 206848 c:\windows\system32\occache.dll
- 2008-04-25 16:16 . 2010-05-06 10:41 206848 c:\windows\system32\occache.dll
- 2008-04-25 16:16 . 2010-05-06 10:41 611840 c:\windows\system32\mstime.dll
+ 2008-04-25 16:16 . 2010-09-10 05:58 611840 c:\windows\system32\mstime.dll
+ 2007-08-14 04:54 . 2010-09-10 05:58 602112 c:\windows\system32\msfeeds.dll
+ 2009-11-07 11:07 . 2009-11-07 11:07 297808 c:\windows\system32\mscoree.dll
+ 2006-10-19 07:47 . 2010-03-30 22:24 317440 c:\windows\system32\mp4sdecd.dll
- 2006-10-19 07:47 . 2006-10-19 07:47 317440 c:\windows\system32\MP4SDECD.dll
+ 2010-11-01 10:43 . 2010-11-02 01:34 232912 c:\windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe
+ 2010-11-01 10:43 . 2010-11-02 01:34 311760 c:\windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.dll
+ 2010-11-01 19:59 . 2010-11-01 17:25 153376 c:\windows\system32\javaws.exe
+ 2010-11-01 19:59 . 2010-11-01 17:25 145184 c:\windows\system32\javaw.exe
- 2010-06-15 00:44 . 2010-06-14 21:44 145184 c:\windows\system32\javaw.exe
+ 2010-11-01 19:59 . 2010-11-01 17:25 145184 c:\windows\system32\java.exe
- 2010-06-15 00:44 . 2010-06-14 21:44 145184 c:\windows\system32\java.exe
+ 2008-04-25 21:27 . 2010-06-09 07:43 692736 c:\windows\system32\inetcomm.dll
- 2008-04-25 16:16 . 2010-05-06 10:41 184320 c:\windows\system32\iepeers.dll
+ 2008-04-25 16:16 . 2010-09-10 05:58 184320 c:\windows\system32\iepeers.dll
+ 2008-04-25 16:16 . 2010-09-10 05:58 387584 c:\windows\system32\iedkcs32.dll
- 2008-04-25 16:16 . 2010-05-06 10:41 387584 c:\windows\system32\iedkcs32.dll
- 2008-04-25 16:16 . 2010-05-05 13:30 173056 c:\windows\system32\ie4uinit.exe
+ 2008-04-25 16:16 . 2010-08-26 12:22 173056 c:\windows\system32\ie4uinit.exe
+ 2008-04-25 09:21 . 2010-10-14 13:31 219248 c:\windows\system32\FNTCACHE.DAT
- 2010-04-15 08:14 . 2010-04-15 08:14 328728 c:\windows\system32\drivers\IASTOR.SYS
+ 2010-04-15 08:14 . 2009-01-19 19:41 328728 c:\windows\system32\drivers\IASTOR.SYS
+ 2001-08-17 13:52 . 2010-06-17 01:58 125056 c:\windows\system32\drivers\ftdisk.sys
- 2001-08-17 13:52 . 2001-08-18 01:52 125056 c:\windows\system32\drivers\ftdisk.sys
+ 2009-10-14 21:16 . 2010-07-12 12:55 218112 c:\windows\system32\dllcache\wordpad.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 132096 c:\windows\system32\dllcache\wmipdskq.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 140800 c:\windows\system32\dllcache\wmidcprv.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 358912 c:\windows\system32\dllcache\wmic.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 196608 c:\windows\system32\dllcache\wmiadap.exe
+ 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\system32\dllcache\winsrv.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 146432 c:\windows\system32\dllcache\winspool.drv
+ 2009-10-14 21:15 . 2010-09-10 05:58 916480 c:\windows\system32\dllcache\wininet.dll
- 2009-10-14 21:15 . 2010-05-06 10:41 916480 c:\windows\system32\dllcache\wininet.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 197120 c:\windows\system32\dllcache\wbemupgd.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 116224 c:\windows\system32\dllcache\wbemtest.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 196608 c:\windows\system32\dllcache\wbemcntl.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 131584 c:\windows\system32\dllcache\viewprov.dll
+ 2010-04-16 15:36 . 2010-04-16 15:36 406016 c:\windows\system32\dllcache\usp10.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 116224 c:\windows\system32\dllcache\updprov.dll
- 2009-10-22 00:22 . 2009-06-21 21:44 153088 c:\windows\system32\dllcache\triedit.dll
+ 2008-04-25 21:27 . 2009-06-21 21:44 153088 c:\windows\system32\dllcache\triedit.dll
+ 2009-10-14 21:16 . 2010-08-27 08:02 119808 c:\windows\system32\dllcache\t2embed.dll
- 2009-10-14 21:16 . 2009-10-15 16:28 119808 c:\windows\system32\dllcache\t2embed.dll
+ 2009-10-14 21:16 . 2010-08-26 13:39 357248 c:\windows\system32\dllcache\srv.sys
+ 2009-10-14 21:15 . 2010-06-30 12:31 149504 c:\windows\system32\dllcache\schannel.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 741376 c:\windows\system32\dllcache\sapi.dll
+ 2009-10-14 21:16 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 237056 c:\windows\system32\dllcache\provthrd.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 281088 c:\windows\system32\dllcache\pinball.exe
+ 2007-08-14 04:44 . 2010-09-10 05:58 206848 c:\windows\system32\dllcache\occache.dll
- 2007-08-14 04:44 . 2010-05-06 10:41 206848 c:\windows\system32\dllcache\occache.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 212992 c:\windows\system32\dllcache\ntevt.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 172032 c:\windows\system32\dllcache\nmoldwb.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 151552 c:\windows\system32\dllcache\nmft.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 229376 c:\windows\system32\dllcache\nmas.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 221184 c:\windows\system32\dllcache\nac.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 126912 c:\windows\system32\dllcache\msvideo.dll
- 2007-08-14 04:54 . 2010-05-06 10:41 611840 c:\windows\system32\dllcache\mstime.dll
+ 2007-08-14 04:54 . 2010-09-10 05:58 611840 c:\windows\system32\dllcache\mstime.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 274432 c:\windows\system32\dllcache\mst120.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 565248 c:\windows\system32\dllcache\msobmain.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 122368 c:\windows\system32\dllcache\msobcomm.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 273920 c:\windows\system32\dllcache\msiprov.dll
+ 2009-10-22 00:54 . 2010-09-10 05:58 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 169984 c:\windows\system32\dllcache\msconfig.exe
- 2009-10-14 21:17 . 2008-05-01 14:33 331776 c:\windows\system32\dllcache\msadce.dll
+ 2008-04-25 21:27 . 2008-05-01 14:33 331776 c:\windows\system32\dllcache\msadce.dll
+ 2010-03-30 22:24 . 2010-03-30 22:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 786432 c:\windows\system32\dllcache\migrate.exe
+ 2010-09-18 22:23 . 2010-09-18 22:23 974848 c:\windows\system32\dllcache\mfc42u.dll
+ 2009-10-14 21:17 . 2010-06-09 07:43 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 811064 c:\windows\system32\dllcache\imjp81k.dll
+ 2010-03-29 21:34 . 2010-09-10 05:58 247808 c:\windows\system32\dllcache\ieproxy.dll
- 2010-03-29 21:34 . 2010-05-06 10:41 247808 c:\windows\system32\dllcache\ieproxy.dll
- 2007-08-14 04:54 . 2010-05-06 10:41 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2007-08-14 04:54 . 2010-09-10 05:58 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2010-06-09 18:10 . 2010-09-10 05:58 743424 c:\windows\system32\dllcache\iedvtool.dll
- 2010-06-09 18:10 . 2010-05-06 10:41 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2007-08-14 04:39 . 2010-09-10 05:58 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-14 04:39 . 2010-05-06 10:41 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-14 04:39 . 2010-05-05 13:30 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2007-08-14 04:39 . 2010-08-26 12:22 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2010-07-13 23:42 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 120320 c:\windows\system32\dllcache\dsprov.dll
+ 2008-04-25 21:26 . 2008-04-14 12:00 539136 c:\windows\system32\dllcache\dialer.exe
+ 2008-04-25 21:26 . 2008-04-14 12:00 195072 c:\windows\system32\dllcache\comadmin.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 838144 c:\windows\system32\dllcache\chtbrkr.dll
+ 2008-04-25 21:27 . 2008-04-14 12:00 385024 c:\windows\system32\dllcache\callcont.dll
+ 2010-01-06 08:09 . 2008-04-14 12:00 218112 c:\windows\system32\dllcache\c_g18030.dll
+ 2008-04-25 09:22 . 2008-04-14 12:00 109456 c:\windows\system32\dllcache\avifile.dll
+ 2010-04-20 05:30 . 2010-09-01 11:51 285824 c:\windows\system32\dllcache\atmfd.dll
+ 2008-04-25 16:16 . 2008-04-14 12:00 256512 c:\windows\system32\dllcache\agentsvr.exe
+ 2010-09-05 21:47 . 2008-04-14 12:00 838144 c:\windows\system32\chtbrkr.dll
+ 2008-04-25 21:27 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
- 2008-04-25 21:27 . 2008-04-14 12:00 744448 c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
+ 2010-03-31 10:16 . 2010-03-31 10:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2010-09-22 19:43 . 2010-09-22 19:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2010-03-23 15:31 . 2010-03-23 15:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-05-11 16:40 . 2010-05-11 16:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2010-05-11 16:40 . 2010-05-11 16:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2009-08-08 09:51 . 2009-08-08 09:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2010-04-01 00:51 . 2010-04-01 00:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-09-23 12:26 . 2010-09-23 12:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-09-23 12:25 . 2010-09-23 12:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-04-01 00:49 . 2010-04-01 00:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-04-01 01:32 . 2010-04-01 01:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-23 13:17 . 2010-09-23 13:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-01 23:57 . 2010-09-01 23:57 874496 c:\windows\Installer\badb14.msi
+ 2010-09-24 07:02 . 2010-09-24 07:02 798208 c:\windows\Installer\a444492.msp
+ 2010-08-23 20:15 . 2010-08-23 20:15 661504 c:\windows\Installer\3e6adf6.msi
+ 2010-08-23 20:14 . 2010-08-23 20:14 660992 c:\windows\Installer\3e6adf1.msi
+ 2010-11-01 17:31 . 2010-11-01 17:31 180224 c:\windows\Installer\3c5699.msi
+ 2010-11-01 17:25 . 2010-11-01 17:25 677376 c:\windows\Installer\3c568b.msi
+ 2010-10-29 00:39 . 2010-10-29 00:39 632320 c:\windows\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}\IconCD95F66110.exe
+ 2010-08-23 20:15 . 2010-08-23 20:15 295606 c:\windows\Installer\{AC76BA86-7AD7-5760-0000-900000000003}\ARPPRODUCTICON.exe
+ 2010-08-23 20:14 . 2010-08-23 20:14 295606 c:\windows\Installer\{AC76BA86-7AD7-2447-0000-900000000003}\ARPPRODUCTICON.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 409600 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 409600 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 286720 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 286720 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 249856 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 249856 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 794624 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 794624 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 135168 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 135168 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-10-22 01:03 . 2010-10-14 09:13 593920 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2009-10-22 01:03 . 2010-06-09 23:38 593920 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2007-04-20 00:01 . 2007-04-20 00:01 238424 c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\MSCDM.DLL
+ 2007-01-17 06:32 . 2007-01-17 06:32 136032 c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\MSAEXP30.DLL
+ 2007-04-19 23:54 . 2007-04-19 23:54 169312 c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\ACCWIZ.DLL
+ 2010-10-14 09:13 . 2010-06-24 12:22 916480 c:\windows\ie8updates\KB2360131-IE8\wininet.dll
+ 2010-10-14 09:13 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2360131-IE8\spuninst\updspapi.dll
+ 2010-10-14 09:13 . 2009-05-26 09:01 231288 c:\windows\ie8updates\KB2360131-IE8\spuninst\spuninst.exe
+ 2010-10-14 09:13 . 2010-06-24 12:22 206848 c:\windows\ie8updates\KB2360131-IE8\occache.dll
+ 2010-10-14 09:13 . 2010-06-24 12:22 611840 c:\windows\ie8updates\KB2360131-IE8\mstime.dll
+ 2010-10-14 09:13 . 2010-06-24 12:21 599040 c:\windows\ie8updates\KB2360131-IE8\msfeeds.dll
+ 2010-10-14 09:13 . 2010-06-24 12:21 247808 c:\windows\ie8updates\KB2360131-IE8\ieproxy.dll
+ 2010-10-14 09:13 . 2010-06-24 12:21 184320 c:\windows\ie8updates\KB2360131-IE8\iepeers.dll
+ 2010-10-14 09:13 . 2010-06-24 12:21 743424 c:\windows\ie8updates\KB2360131-IE8\iedvtool.dll
+ 2010-10-14 09:13 . 2010-06-24 12:21 387584 c:\windows\ie8updates\KB2360131-IE8\iedkcs32.dll
+ 2010-10-14 09:13 . 2010-06-23 12:08 173056 c:\windows\ie8updates\KB2360131-IE8\ie4uinit.exe
+ 2010-08-11 16:34 . 2010-05-06 10:41 916480 c:\windows\ie8updates\KB2183461-IE8\wininet.dll
+ 2010-08-11 16:34 . 2010-02-22 14:23 382840 c:\windows\ie8updates\KB2183461-IE8\spuninst\updspapi.dll
+ 2010-08-11 16:34 . 2009-05-26 09:01 231288 c:\windows\ie8updates\KB2183461-IE8\spuninst\spuninst.exe
+ 2010-08-11 16:34 . 2010-05-06 10:41 206848 c:\windows\ie8updates\KB2183461-IE8\occache.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 611840 c:\windows\ie8updates\KB2183461-IE8\mstime.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 599040 c:\windows\ie8updates\KB2183461-IE8\msfeeds.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 247808 c:\windows\ie8updates\KB2183461-IE8\ieproxy.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 184320 c:\windows\ie8updates\KB2183461-IE8\iepeers.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 743424 c:\windows\ie8updates\KB2183461-IE8\iedvtool.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 387584 c:\windows\ie8updates\KB2183461-IE8\iedkcs32.dll
+ 2010-08-11 16:34 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2183461-IE8\ie4uinit.exe
+ 2006-09-11 14:40 . 2008-10-24 19:14 488736 c:\windows\Downloaded Program Files\isusweb.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_7c167298\System.Drawing.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_c0ecaf05\System.Drawing.Design.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_f1443507\CustomMarshalers.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe
+ 2010-08-11 16:39 . 2010-08-11 16:39 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\b1646e54b708b9824f4193f87eb00c0e\System.Web.Extensions.Design.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\504a93e73da77c502ecf98bfdfc1485e\System.Web.Entity.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f22334fbd9497d79448fffef515ae0cc\System.Web.Entity.Design.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af5452305588da228a74e30324681d20\System.Web.DynamicData.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll
+ 2010-08-11 16:38 . 2010-08-11 16:38 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-10-03 21:13 . 2010-10-03 21:13 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a140e8da81b3af34c864ad851fe150fd\System.Runtime.Remoting.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\97bd2a5d946aa3a824e4cfe5b6ef95aa\System.Messaging.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\a055d54c458b7557d957c714551873c3\sysglobl.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe
+ 2010-08-11 16:41 . 2010-08-11 16:41 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\72d3aacfca2e1ce835c210f5a1decb36\ServiceModelReg.ni.exe
+ 2010-08-11 16:39 . 2010-08-11 16:39 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll
+ 2010-

commyfix (2 of 2)

08-11 16:39 . 2010-08-11 16:39 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe
+ 2010-08-11 16:41 . 2010-08-11 16:41 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe
+ 2010-10-03 21:31 . 2010-10-03 21:32 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe
+ 2010-09-29 09:17 . 2009-04-15 14:51 585216 c:\windows\$NtUninstallKB982802$\rpcrt4.dll
+ 2010-08-11 16:31 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB982665$\spuninst\updspapi.dll
+ 2010-08-11 16:31 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB982665$\spuninst\spuninst.exe
+ 2010-08-11 16:38 . 2009-12-31 16:50 353792 c:\windows\$NtUninstallKB982214$\srv.sys
+ 2010-08-11 16:38 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB982214$\spuninst\updspapi.dll
+ 2010-08-11 16:38 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB982214$\spuninst\spuninst.exe
+ 2010-08-11 16:32 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB981997$\spuninst\updspapi.dll
+ 2010-08-11 16:32 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB981997$\spuninst\spuninst.exe
+ 2010-08-11 16:36 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB981852$\spuninst\updspapi.dll
+ 2010-08-11 16:36 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB981852$\spuninst\spuninst.exe
+ 2010-09-29 09:17 . 2008-04-14 12:00 406016 c:\windows\$NtUninstallKB981322$\usp10.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe
+ 2010-08-11 16:33 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB980436$\spuninst\updspapi.dll
+ 2010-08-11 16:33 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB980436$\spuninst\spuninst.exe
+ 2010-08-11 16:33 . 2009-06-25 08:25 147456 c:\windows\$NtUninstallKB980436$\schannel.dll
+ 2010-09-29 09:17 . 2007-07-28 09:11 382840 c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll
+ 2010-09-29 09:17 . 2007-07-28 09:11 231288 c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe
+ 2010-09-29 09:17 . 2006-10-19 07:47 317440 c:\windows\$NtUninstallKB975558_WM8$\mp4sdecd.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe
+ 2010-08-04 08:11 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2286198$\spuninst\updspapi.dll
+ 2010-08-04 08:11 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2286198$\spuninst\spuninst.exe
+ 2010-09-29 09:17 . 2009-05-26 09:01 382840 c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll
+ 2010-09-29 09:17 . 2009-05-26 09:01 231288 c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe
+ 2010-07-14 15:58 . 2010-02-23 05:53 382840 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll
+ 2010-07-14 15:58 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe
+ 2010-07-14 15:58 . 2008-04-14 12:00 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe
+ 2010-08-11 16:34 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2160329$\spuninst\updspapi.dll
+ 2010-08-11 16:34 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2160329$\spuninst\spuninst.exe
+ 2010-10-01 18:41 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2158563$\spuninst\updspapi.dll
+ 2010-10-01 18:41 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2158563$\spuninst\spuninst.exe
+ 2010-09-29 09:14 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll
+ 2010-09-29 09:14 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe
+ 2010-09-29 09:14 . 2010-01-29 15:01 691712 c:\windows\$NtUninstallKB2141007$\inetcomm.dll
+ 2010-09-29 09:17 . 2008-04-14 12:00 293376 c:\windows\$NtUninstallKB2121546$\winsrv.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe
+ 2010-08-11 16:38 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2115168$\spuninst\updspapi.dll
+ 2010-08-11 16:38 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2115168$\spuninst\spuninst.exe
+ 2010-08-11 16:36 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2079403$\spuninst\updspapi.dll
+ 2010-08-11 16:36 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2079403$\spuninst\spuninst.exe
+ 2010-09-29 09:17 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB982802\update\updspapi.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB982802\update\update.exe
+ 2010-09-29 09:17 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB982802\spuninst.exe
+ 2010-07-23 06:13 . 2010-07-23 06:13 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll
+ 2010-08-11 16:31 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB982665\update\updspapi.dll
+ 2010-08-11 16:31 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB982665\update\update.exe
+ 2010-08-11 16:31 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB982665\spuninst.exe
+ 2010-08-11 16:38 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB982214\update\updspapi.dll
+ 2010-08-11 16:38 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB982214\update\update.exe
+ 2010-08-11 16:38 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB982214\spuninst.exe
+ 2010-08-11 03:51 . 2010-06-21 14:18 354304 c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys
+ 2010-08-11 16:32 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981997\update\updspapi.dll
+ 2010-08-11 16:32 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981997\update\update.exe
+ 2010-08-11 16:32 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981997\spuninst.exe
+ 2010-08-11 16:36 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB981852\update\updspapi.dll
+ 2010-08-11 16:36 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB981852\update\update.exe
+ 2010-08-11 16:36 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB981852\spuninst.exe
+ 2010-09-29 09:17 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981322\update\updspapi.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981322\update\update.exe
+ 2010-09-29 09:17 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981322\spuninst.exe
+ 2010-04-16 15:29 . 2010-04-16 15:29 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
+ 2010-08-11 16:33 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB980436\update\updspapi.dll
+ 2010-08-11 16:33 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB980436\update\update.exe
+ 2010-08-11 16:33 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB980436\spuninst.exe
+ 2010-06-30 12:23 . 2010-06-30 12:23 149504 c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
+ 2010-09-29 09:17 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2347290\update\update.exe
+ 2010-09-29 09:17 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2347290\spuninst.exe
+ 2010-08-04 08:11 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll
+ 2010-08-04 08:11 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2286198\update\update.exe
+ 2010-08-04 08:11 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2286198\spuninst.exe
+ 2010-09-29 09:17 . 2009-05-26 09:01 382840 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll
+ 2010-09-29 09:17 . 2009-05-26 09:01 755576 c:\windows\$hf_mig$\KB2259922\update\update.exe
+ 2010-09-29 09:17 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB2259922\spuninst.exe
+ 2010-07-14 15:59 . 2010-02-23 05:53 382840 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll
+ 2010-07-14 15:59 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2229593\update\update.exe
+ 2010-07-14 15:59 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2229593\spuninst.exe
+ 2010-07-13 23:42 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe
+ 2010-08-11 16:34 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2183461-IE8\update\updspapi.dll
+ 2010-08-11 16:34 . 2009-05-26 09:01 755576 c:\windows\$hf_mig$\KB2183461-IE8\update\update.exe
+ 2010-08-11 16:34 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB2183461-IE8\spuninst.exe
+ 2010-08-11 04:07 . 2010-06-24 12:24 919040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 206848 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\occache.dll
+ 2010-08-11 04:06 . 2010-06-24 12:24 611840 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mstime.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 599040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeeds.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 247808 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieproxy.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 184320 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iepeers.dll
+ 2010-08-11 04:06 . 2010-06-24 12:24 743424 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedvtool.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 387584 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedkcs32.dll
+ 2010-08-11 04:07 . 2010-06-23 11:30 173056 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ie4uinit.exe
+ 2010-09-29 09:14 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
+ 2010-09-29 09:14 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2141007\update\update.exe
+ 2010-09-29 09:14 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2141007\spuninst.exe
+ 2010-06-09 07:41 . 2010-06-09 07:41 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
+ 2010-09-29 09:17 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2121546\update\update.exe
+ 2010-09-29 09:17 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2121546\spuninst.exe
+ 2010-06-18 17:43 . 2010-06-18 17:43 293376 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
+ 2010-08-11 16:38 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll
+ 2010-08-11 16:38 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2115168\update\update.exe
+ 2010-08-11 16:38 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2115168\spuninst.exe
+ 2010-08-11 16:36 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2079403\update\updspapi.dll
+ 2010-08-11 16:36 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2079403\update\update.exe
+ 2010-08-11 16:36 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2079403\spuninst.exe
+ 2010-10-14 09:08 . 2010-08-23 16:12 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
+ 2008-04-25 16:16 . 2010-09-10 05:58 1210880 c:\windows\system32\urlmon.dll
+ 2008-04-25 16:16 . 2010-07-27 06:30 8462336 c:\windows\system32\shell32.dll
+ 2008-04-25 16:16 . 2010-07-16 12:05 1288192 c:\windows\system32\ole32.dll
+ 2008-04-25 16:16 . 2010-04-27 13:59 2146304 c:\windows\system32\ntoskrnl.exe
- 2008-04-25 16:16 . 2010-02-16 14:08 2146304 c:\windows\system32\ntoskrnl.exe
+ 2008-04-14 00:01 . 2010-04-27 13:05 2024448 c:\windows\system32\ntkrnlpa.exe
- 2008-04-14 00:01 . 2010-02-16 13:25 2024448 c:\windows\system32\ntkrnlpa.exe
- 2008-04-25 16:16 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll
+ 2008-04-25 16:16 . 2010-06-14 07:41 1172480 c:\windows\system32\msxml3.dll
+ 2008-04-25 16:16 . 2010-09-10 05:58 5957120 c:\windows\system32\mshtml.dll
+ 2007-08-14 04:34 . 2010-09-10 05:58 1986560 c:\windows\system32\iertutil.dll
+ 2009-10-14 21:15 . 2010-08-31 13:38 1861888 c:\windows\system32\dllcache\win32k.sys
+ 2009-10-14 21:15 . 2010-09-10 05:58 1210880 c:\windows\system32\dllcache\urlmon.dll
+ 2009-10-14 21:16 . 2010-07-27 06:30 8462336 c:\windows\system32\dllcache\shell32.dll
+ 2010-07-16 12:05 . 2010-07-16 12:05 1288192 c:\windows\system32\dllcache\ole32.dll
- 2009-10-14 21:16 . 2010-02-17 19:10 2189952 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-10-14 21:16 . 2010-04-28 02:25 2189952 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-10-14 21:16 . 2010-04-27 13:05 2024448 c:\windows\system32\dllcache\ntkrpamp.exe
- 2009-10-14 21:16 . 2010-02-16 13:25 2024448 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-02-08 00:02 . 2010-04-27 13:05 2066816 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2009-02-08 00:02 . 2010-02-16 13:25 2066816 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2009-10-14 21:16 . 2010-02-16 14:08 2146304 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-10-14 21:16 . 2010-04-27 13:59 2146304 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-10-14 21:19 . 2010-06-14 07:41 1172480 c:\windows\system32\dllcache\msxml3.dll
- 2009-10-14 21:19 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2009-10-14 21:15 . 2010-09-10 05:58 5957120 c:\windows\system32\dllcache\mshtml.dll
+ 2008-04-25 21:27 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
- 2010-03-10 16:30 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2009-10-22 00:54 . 2010-09-10 05:58 1986560 c:\windows\system32\dllcache\iertutil.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 1677824 c:\windows\system32\dllcache\chsbrkr.dll
+ 2009-11-07 11:06 . 2009-11-07 11:06 1130824 c:\windows\system32\dfshim.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 1677824 c:\windows\system32\chsbrkr.dll
- 2010-03-23 15:32 . 2010-03-23 15:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-09-22 19:44 . 2010-09-22 19:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2009-08-08 09:51 . 2009-08-08 09:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2010-05-11 16:40 . 2010-05-11 16:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2010-05-11 16:40 . 2010-05-11 16:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2010-04-01 21:42 . 2010-04-01 21:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-09-24 01:55 . 2010-09-24 01:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-09-24 01:55 . 2010-09-24 01:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2010-04-01 21:42 . 2010-04-01 21:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2010-09-23 12:26 . 2010-09-23 12:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2010-04-01 00:50 . 2010-04-01 00:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-09-23 12:25 . 2010-09-23 12:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
- 2010-04-01 21:42 . 2010-04-01 21:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-09-24 01:55 . 2010-09-24 01:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-11-01 19:59 . 2010-11-01 19:59 1757696 c:\windows\Installer\ba58ed.msi
+ 2010-11-01 19:56 . 2010-11-01 19:56 1633792 c:\windows\Installer\ba58e6.msi
+ 2010-09-23 17:39 . 2010-09-23 17:39 4265472 c:\windows\Installer\a44448b.msp
+ 2010-05-25 21:45 . 2010-05-25 21:45 8445440 c:\windows\Installer\495052b.msp
+ 2010-06-12 03:55 . 2010-06-12 03:55 1827328 c:\windows\Installer\4950514.msp
+ 2010-07-01 08:52 . 2010-07-01 08:52 5522944 c:\windows\Installer\49504fb.msp
+ 2010-08-14 03:59 . 2010-08-14 03:59 8182272 c:\windows\Installer\3c64bc2.msp
+ 2010-08-14 04:02 . 2010-08-14 04:02 2545664 c:\windows\Installer\3c64bba.msp
+ 2010-08-24 03:09 . 2010-08-24 03:09 7673344 c:\windows\Installer\3c64bb2.msp
+ 2010-10-05 02:32 . 2010-10-05 02:32 5517824 c:\windows\Installer\3c64b9d.msp
+ 2010-08-24 19:49 . 2010-08-24 19:49 6825472 c:\windows\Installer\3c64b88.msp
+ 2010-08-05 20:57 . 2010-08-05 20:57 4066304 c:\windows\Installer\32122.msp
+ 2010-08-20 23:50 . 2010-08-20 23:50 5518848 c:\windows\Installer\320ff.msp
+ 2010-08-26 03:06 . 2010-08-26 03:06 6479360 c:\windows\Installer\320ea.msp
+ 2010-09-24 17:06 . 2010-09-24 17:06 1223680 c:\windows\Installer\223ca234.msi
+ 2009-11-09 10:25 . 2009-11-09 10:25 1935360 c:\windows\Installer\1d093258.msp
+ 2010-06-29 02:01 . 2010-06-29 02:01 7677952 c:\windows\Installer\199ff89.msp
+ 2010-06-29 08:53 . 2010-06-29 08:53 6819840 c:\windows\Installer\199ff74.msp
+ 2010-07-27 03:02 . 2010-07-27 03:02 5519360 c:\windows\Installer\199ff55.msp
+ 2010-07-11 06:14 . 2010-07-11 06:14 2850816 c:\windows\Installer\199ff40.msp
+ 2010-10-29 00:39 . 2010-10-29 00:39 1544192 c:\windows\Installer\1441e41.msi
+ 2007-05-10 23:43 . 2007-05-10 23:43 6688096 c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\MSACCESS.EXE
+ 2010-10-14 09:13 . 2010-06-24 12:22 1210368 c:\windows\ie8updates\KB2360131-IE8\urlmon.dll
+ 2010-10-14 09:13 . 2010-06-24 12:22 5951488 c:\windows\ie8updates\KB2360131-IE8\mshtml.dll
+ 2010-10-14 09:13 . 2010-06-24 12:21 1986560 c:\windows\ie8updates\KB2360131-IE8\iertutil.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 1209344 c:\windows\ie8updates\KB2183461-IE8\urlmon.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 5950976 c:\windows\ie8updates\KB2183461-IE8\mshtml.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 1985536 c:\windows\ie8updates\KB2183461-IE8\iertutil.dll
- 2009-10-14 21:16 . 2010-02-17 19:10 2189952 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-10-14 21:16 . 2010-04-28 02:25 2189952 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-10-14 21:16 . 2010-04-27 13:05 2024448 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2009-10-14 21:16 . 2010-02-16 13:25 2024448 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-02-08 00:02 . 2010-04-27 13:05 2066816 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2009-02-08 00:02 . 2010-02-16 13:25 2066816 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-10-14 21:16 . 2010-04-27 13:59 2146304 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2009-10-14 21:16 . 2010-02-16 14:08 2146304 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2010-09-15 03:11 . 2010-09-15 03:11 2826192 c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
+ 2010-09-15 03:11 . 2010-09-15 03:11 2826192 c:\windows\Downloaded Program Files\CONFLICT.9\FP_AX_CAB_INSTALLER.exe
+ 2010-09-15 03:11 . 2010-09-15 03:11 2826192 c:\windows\Downloaded Program Files\CONFLICT.8\FP_AX_CAB_INSTALLER.exe
+ 2010-09-15 03:11 . 2010-09-15 03:11 2826192 c:\windows\Downloaded Program Files\CONFLICT.7\FP_AX_CAB_INSTALLER.exe
+ 2010-09-15 03:11 . 2010-09-15 03:11 2826192 c:\windows\Downloaded Program Files\CONFLICT.6\FP_AX_CAB_INSTALLER.exe
+ 2010-09-15 03:11 . 2010-09-15 03:11 2826192 c:\windows\Downloaded Program Files\CONFLICT.5\FP_AX_CAB_INSTALLER.exe
+ 2010-09-15 03:11 . 2010-09-15 03:11 2826192 c:\windows\Downloaded Program Files\CONFLICT.13\FP_AX_CAB_INSTALLER.exe
+ 2010-10-03 18:58 . 2010-10-03 18:58 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_ee0c4eea\System.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_e7a34bc9\System.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_ddef2fe4\System.Xml.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_2b498e50\System.Xml.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_7f1c6baf\System.Windows.Forms.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_13086137\System.Windows.Forms.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_369a35a5\System.Drawing.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_49de1b4f\System.Design.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_30173a01\System.Design.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_cfe47496\mscorlib.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_5cc4f537\mscorlib.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll
+ 2010-10-03 21:33 . 2010-10-03 21:33 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bec60fe2e934a6284224ab45b0e981e2\System.WorkflowServices.ni.dll
+ 2010-10-03 21:33 . 2010-10-03 21:33 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\09da139c48e2f5e76994a5c0f2e5b19e\System.Workflow.Runtime.ni.dll
+ 2010-10-03 21:33 . 2010-10-03 21:33 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6809417da74ff937e18b3034f1eac2f2\System.Workflow.ComponentModel.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
+ 2010-10-03 21:14 . 2010-10-03 21:14 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\da367bc2ecf2c9c5b4f858b6dba9e2ea\System.Web.Extensions.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8e34e273d036b7468fc4e951a1fde437\System.ServiceModel.Web.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll
+ 2010-08-11 16:38 . 2010-08-11 16:38 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\095bb4f033374647b6d66c51f16bb886\System.IdentityModel.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll
+ 2010-08-11 16:38 . 2010-08-11 16:38 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll
+ 2010-08-11 16:38 . 2010-08-11 16:38 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\b8c9267d87b7358e1a5f00bf1572c313\System.Data.Services.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\58202ed61096113d08815c0a78313b66\System.Data.OracleClient.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll
+ 2010-08-11 16:39 . 2010-08-11 16:39 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll
+ 2010-08-11 16:38 . 2010-08-11 16:38 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll
+ 2010-08-11 16:38 . 2010-08-11 16:38 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a27783547338dbebf84101a685ba641b\Microsoft.VisualBasic.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll
+ 2010-08-11 16:42 . 2010-08-11 16:42 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-08-11 16:41 . 2010-08-11 16:41 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll
+ 2010-06-24 15:53 . 2010-06-24 15:53 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2010-06-09 23:32 . 2010-06-09 23:32 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-06-09 23:32 . 2010-06-09 23:32 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2009-10-22 00:11 . 2009-10-22 00:11 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-06-24 15:53 . 2010-06-24 15:53 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-10-03 18:59 . 2010-10-03 18:59 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2010-06-09 23:31 . 2010-06-09 23:31 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2009-10-22 00:09 . 2009-10-22 00:09 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2010-06-24 15:53 . 2010-06-24 15:53 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2010-10-03 19:00 . 2010-10-03 19:00 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2010-06-09 23:37 . 2010-06-09 23:37 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-10-03 18:58 . 2010-10-03 18:58 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-06-09 23:37 . 2010-06-09 23:37 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-08-11 16:32 . 2009-10-23 15:28 3558912 c:\windows\$NtUninstallKB981997$\moviemk.exe
+ 2010-08-11 16:36 . 2010-02-16 14:08 2146304 c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
+ 2010-08-11 16:36 . 2010-02-16 13:25 2024448 c:\windows\$NtUninstallKB981852$\ntkrpamp.exe
+ 2010-08-11 16:36 . 2010-02-16 13:25 2024448 c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
+ 2010-08-11 16:36 . 2010-02-16 14:08 2146304 c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe
+ 2010-08-04 08:11 . 2008-06-17 19:02 8461312 c:\windows\$NtUninstallKB2286198$\shell32.dll
+ 2010-08-11 16:34 . 2010-05-02 06:34 1860352 c:\windows\$NtUninstallKB2160329$\win32k.sys
+ 2010-08-11 16:36 . 2009-07-31 04:35 1172480 c:\windows\$NtUninstallKB2079403$\msxml3.dll
+ 2010-08-11 03:38 . 2010-06-18 13:43 3558912 c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe
+ 2010-08-11 03:45 . 2010-04-27 13:50 2190080 c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
+ 2010-08-11 03:45 . 2010-04-27 13:14 2024448 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe
+ 2010-04-28 17:14 . 2010-04-28 17:14 2066944 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
+ 2010-08-11 03:45 . 2010-04-27 13:54 2146304 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe
+ 2010-07-27 06:28 . 2010-07-27 06:28 8463360 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll
+ 2010-08-11 04:06 . 2010-06-24 12:24 1211904 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\urlmon.dll
+ 2010-08-11 04:06 . 2010-06-24 12:24 5954560 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll
+ 2010-08-11 04:07 . 2010-06-24 12:24 1987072 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iertutil.dll
+ 2010-06-14 07:39 . 2010-06-14 07:39 1172480 c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll
+ 2008-04-25 16:16 . 2010-08-26 09:36 10841088 c:\windows\system32\wmp.dll
- 2008-04-25 16:16 . 2009-07-14 09:43 10841088 c:\windows\system32\wmp.dll
+ 2009-10-22 00:28 . 2010-10-14 09:11 35385288 c:\windows\system32\MRT.exe
+ 2007-08-14 04:54 . 2010-09-10 05:58 11080192 c:\windows\system32\ieframe.dll
+ 2009-07-12 22:21 . 2010-08-26 09:36 10841088 c:\windows\system32\dllcache\wmp.dll
- 2009-07-12 22:21 . 2009-07-14 09:43 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2009-10-22 00:54 . 2010-09-10 05:58 11080192 c:\windows\system32\dllcache\ieframe.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 10129408 c:\windows\system32\dllcache\hwxkor.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 10096640 c:\windows\system32\dllcache\hwxcht.dll
+ 2010-09-25 00:08 . 2010-09-25 00:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
+ 2010-09-04 08:01 . 2010-09-04 08:01 20303872 c:\windows\Installer\cb5fa1a.msp
+ 2010-09-24 17:08 . 2010-09-24 17:08 17518080 c:\windows\Installer\a444482.msp
+ 2010-06-12 03:52 . 2010-06-12 03:52 45542912 c:\windows\Installer\4950515.msp
+ 2010-10-01 18:41 . 2010-10-01 18:41 20303872 c:\windows\Installer\1ef27.msp
+ 2010-03-31 11:23 . 2010-03-31 11:23 15638528 c:\windows\Installer\1d093264.msp
+ 2010-05-19 23:08 . 2010-05-19 23:08 11408896 c:\windows\Installer\199ff5f.msp
+ 2010-09-05 21:47 . 2008-04-14 12:00 10129408 c:\windows\ime\imkr6_1\applets\hwxkor.dll
+ 2010-09-05 21:47 . 2008-04-14 12:00 10096640 c:\windows\ime\CHTIME\Applets\HWXCHT.DLL
+ 2010-10-14 09:13 . 2010-06-25 03:51 11077120 c:\windows\ie8updates\KB2360131-IE8\ieframe.dll
+ 2010-08-11 16:34 . 2010-05-06 10:41 11076096 c:\windows\ie8updates\KB2183461-IE8\ieframe.dll
+ 2010-06-16 21:38 . 2010-06-16 21:39 16664352 c:\windows\Downloaded Program Files\jre-6u16-windows-i586-p.exe
+ 2010-11-01 19:54 . 2010-11-01 19:55 16283032 c:\windows\Downloaded Program Files\CONFLICT.12\jre-6u13-windows-i586-p.exe
+ 2010-11-01 19:41 . 2010-11-01 19:42 16283032 c:\windows\Downloaded Program Files\CONFLICT.10\jre-6u13-windows-i586-p.exe
+ 2010-08-11 16:38 . 2010-08-11 16:38 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll
+ 2010-10-03 21:14 . 2010-10-03 21:14 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
+ 2010-10-03 21:32 . 2010-10-03 21:32 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\75aeb590008d6e166f7be18f935c52d2\System.ServiceModel.ni.dll
+ 2010-10-03 21:14 . 2010-10-03 21:14 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\fdc42078fd10e4dc8b05087900c63977\System.Design.ni.dll
+ 2010-08-11 16:38 . 2010-08-11 16:38 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll
+ 2010-08-11 16:37 . 2010-08-11 16:37 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll
+ 2010-08-11 16:36 . 2010-08-11 16:36 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll
+ 2010-08-11 04:06 . 2010-06-24 12:24 11079168 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieframe.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 218032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-03-31 217088]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-02-22 483420]
"AESTFltr"="c:\windows\system32\AESTFltr.exe" [2009-02-22 729088]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-01-22 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-01-22 178712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-01-22 150040]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2008-12-12 2220032]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\udaterui.exe" [2009-01-17 136512]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2009-09-01 124240]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648]
"PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2004-04-15 57393]
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2004-04-15 40960]
"SetDefPrt"="c:\program files\Brother\Brmfl04b\BrStDvPt.exe" [2004-05-25 49152]
"ControlCenter2.0"="c:\program files\Brother\ControlCenter2\brctrcen.exe" [2004-07-20 851968]
"OpwareSE2"="c:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"OdTray.exe"="c:\program files\Juniper Networks\Odyssey Access Client\OdTray.exe" [2009-01-19 959784]
"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-07-17 288080]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-31 202256]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-08-20 1164584]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
Status Monitor.lnk - c:\program files\Brother\Brmfcmon\BrMfcWnd.exe [2009-10-24 819200]
VPN Client.lnk - c:\windows\Installer\{871DF2BE-41D2-4334-AC33-839AF16FC8FE}\Icon3E5562ED7.ico [2009-10-22 6144]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2010-4-5 494920]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OdysseyClient]
2009-11-14 00:51 210216 ----a-w- c:\windows\system32\odyEvent.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\McAfeeEngineService]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=

R0 odFips;odFips;c:\windows\system32\drivers\odFIPS.sys [1/19/2009 12:18 PM 9856]
R0 odFips2;odFips2;c:\windows\system32\drivers\odFIPS2.sys [1/19/2009 12:18 PM 282496]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [1/8/2010 12:51 AM 380928]
R2 JuniperAccessService;Juniper Unified Network Service;c:\program files\Common Files\Juniper Networks\JUNS\dsAccessService.exe [11/4/2008 6:10 PM 87416]
R2 McAfeeEngineService;McAfee Engine Service;c:\program files\McAfee\VirusScan Enterprise\engineserver.exe [8/31/2009 8:07 PM 21256]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [10/21/2009 1:42 PM 70728]
R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [10/14/2009 2:07 PM 112512]
R3 EacService;Juniper TNC Endpoint Assessment;c:\program files\Common Files\Juniper Networks\TNC Client\jTnccService.exe [1/19/2009 12:48 PM 116008]
R3 jnprna;Juniper Network Agent Miniport;c:\windows\system32\drivers\jnprna.sys [1/10/2009 5:26 PM 390144]
R3 JnprVaMgr;Juniper Networks Virtual Adapter Manager Service;c:\windows\system32\drivers\jnprvamgr.sys [8/26/2008 11:43 AM 29312]
R3 O2MDGRDR;O2MDGRDR;c:\windows\system32\drivers\o2mdg.sys [10/14/2009 2:07 PM 51616]
R3 O2SDGRDR;O2SDGRDR;c:\windows\system32\drivers\o2sdg.sys [10/14/2009 2:07 PM 41760]
S1 MpKslb893e8ee;MpKslb893e8ee;\??\c:\windows\system32\MpEngineStore\MpKslb893e8ee.sys --> c:\windows\system32\MpEngineStore\MpKslb893e8ee.sys [?]
S2 gupdate1ca56de70bd323a;Google Update Service (gupdate1ca56de70bd323a);c:\program files\Google\Update\GoogleUpdate.exe [10/26/2009 10:21 PM 133104]
S3 jnprva;Juniper Networks Virtual Adapter Service;c:\windows\system32\drivers\jnprva.sys [1/10/2009 5:26 PM 11008]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [1/15/2010 2:49 AM 227232]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [10/21/2009 1:42 PM 65448]
S3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [4/25/2008 6:16 AM 14336]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
.
Contents of the 'Scheduled Tasks' folder

2010-11-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-27 08:21]

2010-11-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-27 08:21]

2010-11-02 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1757713459-3713847079-1170734499-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-25 08:09]

2010-11-02 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1757713459-3713847079-1170734499-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-25 08:09]

2010-11-02 c:\windows\Tasks\User_Feed_Synchronization-{1BC48521-9876-4300-861C-A7B73E22DE9F}.job
- c:\windows\system32\msfeedssync.exe [2007-08-14 14:31]
.
.
------- Supplementary Scan -------
.
DPF: {A1662FB6-39BE-41BB-ACDC-0448FB1B5817} - hxxp://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_5/PhotoCenter_ActiveX_Control.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
FF - ProfilePath - c:\documents and settings\dien\Application Data\Mozilla\Firefox\Profiles\65dxkuyl.default\
FF - prefs.js: network.proxy.http -
FF - prefs.js: network.proxy.http_port -
FF - prefs.js: network.proxy.type -
FF - component: c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component: c:\program files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\components\SEPsearchhelperff.dll
FF - plugin: c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-SunJavaUpdateSched - c:\program files\Java\jre6\bin\jusched.exe



**************************************************************************
scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,79,00,73,00,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(2012)
c:\windows\system32\odyEvent.dll
.
Completion time: 2010-11-02 07:28:46
ComboFix-quarantined-files.txt 2010-11-02 17:28
ComboFix2.txt 2010-06-18 21:53
ComboFix3.txt 2010-06-18 07:27
ComboFix4.txt 2010-06-16 18:46

Pre-Run: 205,345,316,864 bytes free
Post-Run: 205,327,712,256 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - C917362EA0F46BD6FE0FDE88A0913B13

Hi,

Please download Malwarebytes Anti-Malware from Here.


Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply.
  

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5025

Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702

11/2/2010 11:56:51 AM
mbam-log-2010-11-02 (11-56-51).txt

Scan type: Quick scan
Objects scanned: 159774
Time elapsed: 4 minute(s), 37 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Hi,

Please run a free online scan with ESET Online Scanner by downloading it from 'here' and save it to your Desktop.

• Please ensure that you're logged into an Administrator account before running the scanner. The ESET Online Scanner will not work if you're on a limited account.
  
• Double-click esetsmartinstaller_enu.exe to execute the program.
  
• Check the box next to 'YES, I accept the Terms of Use'. Press 'Start'.
  
• If this is your first time installing the scanner, allow the ActiveX Control to install.
  
• Database download may take some time.
  
• On the next page, ensure the box next to 'Remove found threads' has been checked. Also ensure that the box next to 'Scan unwanted applications' is checked. Proceed by clicking on 'Start'.
  
  • The ESET Online Scanner will update the Virus Signature Database and begin the scan.
    
  • Please allow it to complete successfully and ensure that any current downloads are stopped.
  
  
• Once the scan's completed, please open 'Notepad' by navigating to 'Start', then 'Run', and type in 'Notepad'. Open the file located at 'C:\Program Files\ESET\ESET Online Scanner\log.txt'.
  
• Please Copy & Paste this log into your next reply.
  
• Press 'Finish'.
  

Hi sneakyone,

i tried clicking on the " ... downloading from 'here' ... on your post and this url came up everytime http://adf.ly/3Klx. Can you send me the link again for the Online scanner, thx.

Disregard previous post, here's the log:

SmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=801a1a2ace260a47b3ee5689ad34493b
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-11-03 07:50:31
# local_time=2010-11-02 09:50:31 (-1000, Hawaiian Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 11598979 11598979 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=85042
# found=2
# cleaned=2
# scan_time=4578
C:\System Volume Information\_restore{45B5E8B9-949A-471E-999D-F381DA56A2D3}\RP379\A0071581.exe a variant of Win32/Kryptik.HSO trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
E:\System Volume Information\_restore{45B5E8B9-949A-471E-999D-F381DA56A2D3}\RP379\A0071606.inf INF/Conficker worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

Thanks.

Hi,

How is your computer running now?

hi Sneakyone,

it's running fine, but still having problem downloading adobe reader, it downloaded the adobe download manager ok and was 80% thru downloading adobe reader when an error came up that i did have access to ... api, check on my access, had to cancel to get out rather than do an ignore, thanks.

Hi,

Have you removed all of the outdated Adobe products?

yes, it was all removed when I tried downloading from the adobe website.

Adobe reader and flash drive were all deleted at the control panel\delete or add programs, Adobe does not show up there, but Adobe reader folder was present under ProgramFiles\Adobe. I went to delete the folder but it was denied, error was "cannott delete 83PV-RKSJ-H, access denied" . This is one of many files in a subfolder under Adobe Reader 9. I was able to delete all the other subfolders, just this Cmap folder is denying access.

Hi Sneakyone,

I was able to delete the existing Adobe folders and files by giving myself full control over the files.

Tried to download Adobe reader again, while Adobe Download Manager was being loaded, got the same "getPlus + (R) error " as before " Operating System Error ..."

Thanks.

Hi,

Let me ask some of my colleagues about this as I am clueless at the moment.