+ 2010-03-18 21:27 . 2010-03-18 21:27 1221464 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\wpftxt_amd64.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 1663320 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\wpfgfx_x86.dll
+ 2010-03-18 21:27 . 2010-03-18 21:27 2153816 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\wpfgfx_amd64.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 1303896 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\WindowsBase_x86.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 1303896 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\WindowsBase_amd64.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 6346600 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationFramework_x86.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 6346600 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationFramework_amd64.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 3545952 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationCore_x86.dll
+ 2010-03-18 21:27 . 2010-03-18 21:27 3453792 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationCore_amd64.dll
+ 2009-04-04 01:21 . 2009-04-04 01:21 8543096 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6425\OARTCONV.DLL
+ 2011-10-12 10:14 . 2011-10-12 10:14 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\d23388948ad58ad0fbd4eb2b8ce3af84\WindowsBase.ni.dll
+ 2011-10-12 10:24 . 2011-10-12 10:24 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\5a2dc348e7292fe2927385e4a31a4532\UIAutomationClientsideProviders.ni.dll
+ 2011-10-12 10:12 . 2011-10-12 10:12 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\9a1aea68b24af9040536b0677c6c35ab\System.Xml.ni.dll
+ 2011-10-12 10:12 . 2011-10-12 10:12 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\e814961ae6ed88dea384d113dca52c04\System.Xaml.ni.dll
+ 2011-10-12 10:24 . 2011-10-12 10:24 1601024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\4a53ea5c28bc2ee641327029846dc0e6\System.WorkflowServices.ni.dll
+ 2011-10-12 10:24 . 2011-10-12 10:24 2887680 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Run#\a4b719b9f5eeaea1aa3e2ce3f06cd954\System.Workflow.Runtime.ni.dll
+ 2011-10-12 10:24 . 2011-10-12 10:24 5909504 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\52cd2eea5350877e82c9a9820eee4fbe\System.Workflow.ComponentModel.ni.dll
+ 2011-10-12 10:24 . 2011-10-12 10:24 3743744 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\4b0ff2bb7beae8ba3b876bba9945ed35\System.Workflow.Activities.ni.dll
+ 2011-10-12 10:24 . 2011-10-12 10:24 5627904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\1d65501f517ac04f851625cfc1c20abb\System.Windows.Forms.DataVisualization.ni.dll
+ 2011-10-12 10:17 . 2011-10-12 10:17 2287104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\f3b68cbb1b9fef83bd166a01415892c5\System.Web.Services.ni.dll
+ 2011-10-12 10:23 . 2011-10-12 10:23 2964480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\75b51a53bf2e93e7545e68381457d9bb\System.Web.Mobile.ni.dll
+ 2011-10-12 10:22 . 2011-10-12 10:22 3804672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\f9048bd32edcf1c4f57f15fb2588c505\System.Web.Extensions.ni.dll
+ 2011-10-12 10:23 . 2011-10-12 10:23 1100800 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\4921677b6a29ffaa02036f45abb77b7e\System.Web.Extensions.Design.ni.dll
+ 2011-10-12 10:23 . 2011-10-12 10:23 5599232 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\d5a159b6fffcc286f6730050681add27\System.Web.DataVisualization.ni.dll
+ 2011-10-12 10:23 . 2011-10-12 10:23 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\680da560f61c4c594f504fe784c04d20\System.Speech.ni.dll
+ 2011-10-12 10:23 . 2011-10-12 10:23 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\ee537f5c792668106adacdcd2e5b185f\System.ServiceModel.Discovery.ni.dll
+ 2011-10-12 10:22 . 2011-10-12 10:22 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\3d07edda7a71c988260a553534cab32a\System.ServiceModel.Activities.ni.dll
+ 2011-10-12 10:21 . 2011-10-12 10:21 1506816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\15128dac3368c707d4554d167644ec54\System.ServiceModel.Web.ni.dll
+ 2011-10-12 10:16 . 2011-10-12 10:16 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\f68180d9f4ade9c313f9ad20422eb1c0\System.Runtime.Serialization.ni.dll
+ 2011-10-12 10:16 . 2011-10-12 10:16 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\b719608cfb73833aec4ffb15928325ec\System.Runtime.DurableInstancing.ni.dll
+ 2011-10-12 10:19 . 2011-10-12 10:19 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\7fd539a7cc8fba27e16b0e32ba41eb54\System.Printing.ni.dll
+ 2011-10-12 10:22 . 2011-10-12 10:22 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\1bb0e129449a55ddd883368e3aa3c922\System.Management.ni.dll
+ 2011-10-12 10:22 . 2011-10-12 10:22 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\06cd9761b93a2882309d01af90f9cc9c\System.IdentityModel.ni.dll
+ 2011-10-12 10:16 . 2011-10-12 10:16 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\5a86b6067f001cef079bde90f001d54d\System.EnterpriseServices.ni.dll
+ 2011-10-12 10:16 . 2011-10-12 10:16 2290688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\a167f693a1c75650b73e1c63231d879d\System.Drawing.ni.dll
+ 2011-10-12 10:16 . 2011-10-12 10:16 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\860ec610fac6c83debf77d84c6145ab4\System.DirectoryServices.ni.dll
+ 2011-10-12 10:23 . 2011-10-12 10:23 1217536 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\39f9fc075ec143345b32e19c2f9a2dde\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-10-12 10:18 . 2011-10-12 10:18 2402816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\410945be3ec8a637b6cd6eae72e43368\System.Deployment.ni.dll
+ 2011-10-12 10:17 . 2011-10-12 10:17 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\d9c354c0ac635de922c7d53d4619fdb6\System.Data.ni.dll
+ 2011-10-12 10:12 . 2011-10-12 10:12 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\98dd37909515a67fd621cfafd612c24e\System.Data.SqlXml.ni.dll
+ 2011-10-12 10:21 . 2011-10-12 10:21 2702848 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\c728fa115704e9bb4bd8f1687937abf9\System.Data.Services.ni.dll
+ 2011-10-12 10:22 . 2011-10-12 10:22 1798656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\7f671e2b6e3112a0eef84f8353b628b9\System.Data.Services.Client.ni.dll
+ 2011-10-12 10:18 . 2011-10-12 10:18 1498112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\5707bdff115f1265354a1c22f2026b9a\System.Data.OracleClient.ni.dll
+ 2011-10-12 10:21 . 2011-10-12 10:21 3386368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\eb7264494ea0af497b92ea427e942ac2\System.Data.Linq.ni.dll
+ 2011-10-12 10:21 . 2011-10-12 10:21 1750528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity.#\911e0b2b3d5caae8169851cf05640492\System.Data.Entity.Design.ni.dll
+ 2011-10-12 10:12 . 2011-10-12 10:12 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\88d89c2eb5f36a33cec8d1734c311f23\System.Configuration.ni.dll
+ 2011-10-12 10:20 . 2011-10-12 10:20 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\e7b35e6834805f513151c702f842ee65\System.ComponentModel.Composition.ni.dll
+ 2011-10-12 10:19 . 2011-10-12 10:19 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\1540d14fd301d62241d230fa88f0b8ff\System.Activities.ni.dll
+ 2011-10-12 10:20 . 2011-10-12 10:20 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\a68d1111d860d0af6810bbcd4f117c87\System.Activities.Presentation.ni.dll
+ 2011-10-12 10:19 . 2011-10-12 10:19 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\da9be9b930c7a4cf948213101d6ef289\System.Activities.Core.Presentation.ni.dll
+ 2011-10-12 10:19 . 2011-10-12 10:19 4232704 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\38ca6544a50c75f91f387f242a7b3f5c\ReachFramework.ni.dll
+ 2011-10-12 10:16 . 2011-10-12 10:16 2056192 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\c9bb3f12c4f6f255805f1415f8ec3bb4\PresentationUI.ni.dll
+ 2011-10-12 10:14 . 2011-10-12 10:14 1891328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationBuildTa#\7eb9804c4cfe7519f599481fc0963b5c\PresentationBuildTasks.ni.dll
+ 2011-10-12 10:13 . 2011-10-12 10:13 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\a48478443ecab348f6ec13b2c8a2a9bb\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2011-10-17 02:13 . 2011-10-17 02:13 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\8e80c8cd5786d54daea86ef9695e0bf9\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2011-10-12 10:13 . 2011-10-12 10:13 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\8d82f84f064acfa2e734042c688fd599\Microsoft.VisualBasic.ni.dll
+ 2011-10-12 10:13 . 2011-10-12 10:13 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\72cbd2497c6b84681a6926a84be01f5c\Microsoft.Transactions.Bridge.ni.dll
+ 2011-10-12 10:22 . 2011-10-12 10:22 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\fdec29103893482cb31213e4f7d7bfcf\Microsoft.JScript.ni.dll
+ 2011-10-12 10:13 . 2011-10-12 10:13 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\5776a31cf6c5891f87a52a801f9e1f09\Microsoft.CSharp.ni.dll
+ 2011-10-12 10:13 . 2011-10-12 10:13 6004736 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build\f1d04aa2110520e93378c661211c6190\Microsoft.Build.ni.dll
+ 2011-10-12 10:19 . 2011-10-12 10:19 3820544 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\429fdb22ae5604c289ae4cf16b3ba581\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2011-10-12 10:13 . 2011-10-12 10:13 2521088 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Eng#\4822820cf3af306793ecfc6f88d91306\Microsoft.Build.Engine.ni.dll
+ 2011-10-12 10:11 . 2011-10-12 10:11 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\ee6f9e5bbc40e17c7127083bb021dbeb\AspNetMMCExt.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 3857920 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\9dacf8a5033dfbcb435be166d2f42cdf\WindowsBase.ni.dll
+ 2011-10-12 10:31 . 2011-10-12 10:31 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\ac9379a0db1d8da11fbc46f09da411db\UIAutomationClientsideProviders.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 9086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System\5286fe2d0167eb835a9f11025f1cb756\System.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\419103071a5a5d17738afbe9dd03d58a\System.Xml.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\a3ffdc1316821b5ceb32c9a788334329\System.Xaml.ni.dll
+ 2011-10-12 10:31 . 2011-10-12 10:31 1223168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\da69033af5e2cba8f00b5ca7b98d751d\System.WorkflowServices.ni.dll
+ 2011-10-12 10:31 . 2011-10-12 10:31 1971712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\0722bd9a4b88d65562531418177cd3eb\System.Workflow.Runtime.ni.dll
+ 2011-10-12 10:31 . 2011-10-12 10:31 4462080 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\f638262978c936c3303c8f23e6da9e13\System.Workflow.ComponentModel.ni.dll
+ 2011-10-12 10:31 . 2011-10-12 10:31 2871808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\adbd10ba85772fb12441501afd26f814\System.Workflow.Activities.ni.dll
+ 2011-10-12 10:31 . 2011-10-12 10:31 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\e3a0483820fafd51c8cd4576de6eb45f\System.Windows.Forms.DataVisualization.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 1925632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\7d68ecb18adfee450a345303ae8dd7d6\System.Web.Services.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 2334208 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\f0cc970ac370f5523342f4677b8df5c7\System.Web.Mobile.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 3126784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\6c0269c791905fa93765475b636ee204\System.Web.Extensions.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 4535808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\f047bae2ae236f2d43a950df8c3b5422\System.Web.DataVisualization.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\6663f8ba0327399c1a5b313707cff36f\System.Speech.ni.dll
+ 2011-10-12 10:29 . 2011-10-12 10:29 1086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\b5a0814c0de8cc90e98789c06c0adf47\System.ServiceModel.Web.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 1392640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\a19563d781ccd0807a41d27701d485c6\System.ServiceModel.Activities.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9be7f7f68d488eb02161d3f0663a61a4\System.ServiceModel.Discovery.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\993f89ba22499c379d2a9dd25d13cd94\System.Runtime.Serialization.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\41a4f6cc5d596e952fd880ae1a47308f\System.Runtime.DurableInstancing.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\0a30a201408744c5315446aef7fb3d5a\System.Printing.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\7c4eea005578d9990f604fda345fb2b4\System.Management.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\16c385f23b5e493899f0d206dfb60094\System.IdentityModel.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 1652736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\17bfc7131aca3a393f430121f79307bd\System.Drawing.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\83a815291644645a3ab1ce55452e1e61\System.DirectoryServices.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\1c2d038775f2c9d42468261118019e6b\System.Deployment.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\14d8a7579839b11151cd901b846d0afb\System.Data.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 2549760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\05f8ccf31515e720b1663e710e992211\System.Data.SqlXml.ni.dll
+ 2011-10-12 10:29 . 2011-10-12 10:29 2026496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\b2c87ce08823387b5ff02d9007d1d61c\System.Data.Services.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 1343488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\c05998cb3411b039bdfb5d852e1413be\System.Data.Services.Client.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\297e20aedbc0abc2711e8f15ae36f335\System.Data.OracleClient.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\d622a2c40d37cfdb88e4eea7315a323e\System.Data.Linq.ni.dll
+ 2011-10-12 10:29 . 2011-10-12 10:29 1424384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\98c71b377de6c34c0fd58f8cfdd302c5\System.Data.Entity.Design.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 7069696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\44a7d2597981a82da8b9e3e2298602de\System.Core.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 4129792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\e69e487d338ceb3883b7d175885f0794\System.Activities.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\cc25c620acedf02fd6b5c46238643cab\System.Activities.Presentation.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 1547264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\49577d8acbf16b6091f5466feae43403\System.Activities.Core.Presentation.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 2907136 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\2d23bb6dd81b41002c8f927b95b7b226\ReachFramework.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 1640448 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\ec64d7c99f7e030d39c355ce7a968600\PresentationUI.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 1479168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\77c9bb5aaa8ade0210be1b82157d229c\PresentationBuildTasks.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\c7dd3d91f33a79c70db8bd805a483f4b\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2011-10-17 02:11 . 2011-10-17 02:11 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\a5f3829a401e8335279745a0e690ee12\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\51df2ad80d91a7669dd1856a9c1061f9\Microsoft.VisualBasic.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\477c9b916a9aee0a8beb041ee00a5fcb\Microsoft.Transactions.Bridge.ni.dll
+ 2011-10-12 10:30 . 2011-10-12 10:30 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\614f6f698d269e2c56bf23feba58551c\Microsoft.JScript.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\f03a7f8f2393a04fac7fecc1c55bd02e\Microsoft.CSharp.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 4247552 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\cb596713b318ca6084459706ee3509d6\Microsoft.Build.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 2877440 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\a7dc4a3464c06fafd377f691b7be47ea\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2011-10-12 10:26 . 2011-10-12 10:26 1931264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\6b394cc83afec2d8a4baf7bad5c17bb5\Microsoft.Build.Engine.ni.dll
+ 2011-10-12 14:57 . 2011-10-12 14:57 4925440 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\38422ddfb88ccd3c565063035ebf3244\WindowsBase.ni.dll
+ 2011-10-13 01:55 . 2011-10-13 01:55 1461248 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\7fa48da22e345b49d1f50bbaa5ffc39c\UIAutomationClientsideProviders.ni.dll
+ 2011-10-12 15:00 . 2011-10-12 15:00 6948352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\d444289d3cf8f139ec57cee71c59a4f9\System.Xml.ni.dll
+ 2011-10-13 01:55 . 2011-10-13 01:55 1754112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\e8b4dc04ee54e114d7d086a604f182ef\System.WorkflowServices.ni.dll
+ 2011-10-12 15:00 . 2011-10-12 15:00 2702848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\9a013ea903974ab1d883ee7f12ff91b9\System.Workflow.Runtime.ni.dll
+ 2011-10-12 15:00 . 2011-10-12 15:00 5956608 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\31c2d4c2fdbe781d15597ea137791683\System.Workflow.ComponentModel.ni.dll
+ 2011-10-12 15:00 . 2011-10-12 15:00 3893248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\7c85a4813d3351c2edb5aec87cb12aea\System.Workflow.Activities.ni.dll
+ 2011-10-13 01:47 . 2011-10-13 01:47 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\42fb92855615614209655c12a1a3df22\System.Web.Services.ni.dll
+ 2011-10-13 01:55 . 2011-10-13 01:55 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\c4c3f2516a865a48ebdd9cdd545148d6\System.Web.Mobile.ni.dll
+ 2011-10-13 01:55 . 2011-10-13 01:55 3045888 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\fff6d4bb38838e825ee88fdaf546b853\System.Web.Extensions.ni.dll
+ 2011-10-13 01:55 . 2011-10-13 01:55 1154560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\7b503d7457232d97971ae8517c02a737\System.Web.Extensions.Design.ni.dll
+ 2011-10-13 01:55 . 2011-10-13 01:55 2726912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\e0ad1fc372b77c63962d0ac7435c8ea7\System.Speech.ni.dll
+ 2011-10-13 01:54 . 2011-10-13 01:54 2239488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\3d1ef1b7eca22a288603f0244c8a6b62\System.ServiceModel.Web.ni.dll
+ 2011-10-13 01:48 . 2011-10-13 01:48 3072512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\0923cf543f311891eeae4e5ce30ca46c\System.Runtime.Serialization.ni.dll
+ 2011-10-13 01:47 . 2011-10-13 01:47 1022464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\9953f48654bc7d17bedab12bc74c3f2e\System.Runtime.Remoting.ni.dll
+ 2011-10-13 01:52 . 2011-10-13 01:52 1453056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\c9a260f49f8d68c27828e886deed8c2a\System.Printing.ni.dll
+ 2011-10-13 01:51 . 2011-10-13 01:51 1408000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\2ecec1b5620795b9330bb6fadbe5e319\System.Management.ni.dll
+ 2011-10-13 01:49 . 2011-10-13 01:49 1428992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\6be3baa92a2cb8eae4bd5a98df3ef213\System.IdentityModel.ni.dll
+ 2011-10-13 01:47 . 2011-10-13 01:47 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\caab7166e3bd29ad25ddab20072bfa47\System.EnterpriseServices.ni.dll
+ 2011-10-12 14:59 . 2011-10-12 14:59 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\bb534aa272960f375bef0d75162b5249\System.Drawing.ni.dll
+ 2011-10-13 01:47 . 2011-10-13 01:47 1639936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\d331e73478ddb35b0cdf57fb5d20f36b\System.DirectoryServices.ni.dll
+ 2011-10-13 01:54 . 2011-10-13 01:54 1219584 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\8e50c51664409fd0827cad6f3bd6620f\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-10-13 01:47 . 2011-10-13 01:47 2433024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\7c69e3dc27ebcbcfb593441dde062f9f\System.Deployment.ni.dll
+ 2011-10-12 14:59 . 2011-10-12 14:59 8617984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\54a302a693fe200dca13ae027dd1483e\System.Data.ni.dll
+ 2011-10-13 01:46 . 2011-10-13 01:46 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\890ddce9d0da20701310973b426ad9bc\System.Data.SqlXml.ni.dll
+ 2011-10-13 01:54 . 2011-10-13 01:54 1845248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\a8d27863031d0e4a58d2b07108bfcc40\System.Data.Services.ni.dll
+ 2011-10-13 01:54 . 2011-10-13 01:54 1277440 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\482a5772033d3697d48cd56fabaa8f47\System.Data.Services.Client.ni.dll
+ 2011-10-13 01:47 . 2011-10-13 01:47 1512448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\f94166a266be79a233e9adaef6dab1b7\System.Data.OracleClient.ni.dll
+ 2011-10-12 14:59 . 2011-10-12 14:59 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\a9b091af2bfa6b42d6d4ba21bbab2654\System.Data.Linq.ni.dll
+ 2011-10-13 01:54 . 2011-10-13 01:54 1078272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\90d0dcfcd0825d796e1f2dc43650940e\System.Data.Entity.Design.ni.dll
+ 2011-10-12 14:58 . 2011-10-12 14:58 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\d29cd9af48c9f04e62f28a358ce7a5ef\System.Core.ni.dll
+ 2011-10-13 01:46 . 2011-10-13 01:46 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\50f97a989230bfb46ad7522a8b5b2512\System.Configuration.ni.dll
+ 2011-10-13 01:52 . 2011-10-13 01:52 3101184 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\cea11bf24c34ec3c60e3c625a5352bf8\ReachFramework.ni.dll
+ 2011-10-13 01:52 . 2011-10-13 01:52 2109440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\2f6ef4c26e7407afd96c67a356654b49\PresentationUI.ni.dll
+ 2011-10-13 01:53 . 2011-10-13 01:53 1882112 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\f279cbbbf242e95f1585e0ed3cce3a8c\PresentationBuildTasks.ni.dll
+ 2011-10-13 01:53 . 2011-10-13 01:53 3482112 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\5668e146fdbccc3f9f4b21d5a70b7eb4\Narrator.ni.exe
+ 2011-10-13 01:53 . 2011-10-13 01:53 2314240 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\acd4d9299552d5e1680f939da1001675\MMCEx.ni.dll
+ 2011-10-13 01:50 . 2011-10-13 01:50 7836672 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\251386b18461d44e9ae1c9814fc21f86\MIGUIControls.ni.dll
+ 2011-10-17 02:12 . 2011-10-17 02:12 1877504 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\3ab5e0b72078ad9a64a11b5a53c50c66\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
+ 2011-10-13 01:52 . 2011-10-13 01:52 2173952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\dbe64f362e247628906a5e3d2a6f4382\Microsoft.VisualBasic.ni.dll
+ 2011-10-13 01:49 . 2011-10-13 01:49 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\f0e3b091c929659d66eb6d38806c9918\Microsoft.Transactions.Bridge.ni.dll
+ 2011-10-13 01:52 . 2011-10-13 01:52 2104832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a8ca266acdc1120f6cbaf16bf1f5be12\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2011-10-13 01:52 . 2011-10-13 01:52 1081856 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\70876695a10b89775f51fd2033220260\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2011-10-13 01:52 . 2011-10-13 01:52 5346816 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\4ee8d9de2acfeb69ef137dc0683adfab\Microsoft.PowerShell.Editor.ni.dll
+ 2011-10-13 01:52 . 2011-10-13 01:52 2101248 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\10508e612e25aeb8b29a7ef98429ecb4\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2011-10-17 02:12 . 2011-10-17 02:12 1186304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\fccd7d5060871f58853dd5d331cf73ed\Microsoft.Office.Tools.Word.v9.0.ni.dll
+ 2011-10-17 02:12 . 2011-10-17 02:12 1875456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\d09e9551fd2a161b05f5dc877e5c7cdd\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2011-10-13 01:49 . 2011-10-13 01:49 7721472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\7218c2e9747ae0b0de010750e6f4f6cc\Microsoft.MediaCenter.UI.ni.dll
+ 2011-10-13 01:51 . 2011-10-13 01:52 3208704 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\0d63b26057e00a40a7cfdfb58d7593cd\Microsoft.JScript.ni.dll
+ 2011-10-13 01:51 . 2011-10-13 01:51 2357248 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\3045878874146498c9da9a6eed4be62b\Microsoft.Ink.ni.dll
+ 2011-10-13 01:51 . 2011-10-13 01:51 2575872 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\82f74fab143033cd45fcd41b17ad022c\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2011-10-13 01:51 . 2011-10-13 01:51 2217984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\72488f2c9eb8bf1a2dde5c3496d8522a\Microsoft.Build.Tasks.ni.dll
+ 2011-10-13 01:47 . 2011-10-13 01:47 2433024 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\ce277fc44040a06e7b22f2715d7a05bf\Microsoft.Build.Engine.ni.dll
+ 2011-10-13 01:50 . 2011-10-13 01:50 1188352 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\9fa4fecb821f6b383105ca9c998822ff\Microsoft.Build.Engine.ni.dll
+ 2011-10-13 01:50 . 2011-10-13 01:50 2413056 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\0430891c4fd63c2c2c57e8818837b8e9\ehRecObj.ni.dll
+ 2011-10-16 23:42 . 2011-10-16 23:42 1984000 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\738c623aea8c89726fa53d742c8307ad\ehiVidCtl.ni.dll
+ 2011-10-17 02:12 . 2011-10-17 02:12 2002432 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\010ac6266e27f7d2fa33894ec4741645\ehiVidCtl.ni.dll
+ 2011-10-13 01:49 . 2011-10-13 01:49 2885120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\98e0dc72b212c67832a3ab534793f196\ehiProxy.ni.dll
+ 2011-10-13 01:49 . 2011-10-13 01:49 1039872 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiPlay\a0e13fcedfd3edbc2b31061df9e7103c\ehiPlay.ni.dll
+ 2011-10-13 01:49 . 2011-10-13 01:49 3039232 c:\windows\assembly\NativeImages_v2.0.50727_64\ehepg\51f89ed8312bfbd2e4b432063c6b94a5\ehepg.ni.dll
+ 2011-10-12 15:01 . 2011-10-12 15:01 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\fd2c727bcef2e019eb96c1145f423701\WindowsBase.ni.dll
+ 2011-10-13 01:44 . 2011-10-13 01:44 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\0bb1ae8e8223cb3155fdc02c81b9c0f6\UIAutomationClientsideProviders.ni.dll
+ 2011-10-12 15:01 . 2011-10-12 15:01 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\f9c36ea806e77872dce891c77b68fac3\System.ni.dll
+ 2011-10-12 15:02 . 2011-10-12 15:02 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c1c06a392871267db27f7cbc40e1c4fb\System.Xml.ni.dll
+ 2011-10-13 01:44 . 2011-10-13 01:44 1316864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\6dabb1ffbb64fc70a68dab460e675d2d\System.WorkflowServices.ni.dll
+ 2011-10-12 15:02 . 2011-10-12 15:02 1911296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\32259fbfebf9a97e29e33871a93f5d8d\System.Workflow.Runtime.ni.dll
+ 2011-10-12 15:02 . 2011-10-12 15:02 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\83db549eedd1bce50ec47994f82b22b7\System.Workflow.ComponentModel.ni.dll
+ 2011-10-12 15:02 . 2011-10-12 15:02 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\2d2634b61157090f267aac490a552d03\System.Workflow.Activities.ni.dll
+ 2011-10-12 15:47 . 2011-10-12 15:47 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\6b88a2bf58d8529fc33f8f3437a7ff06\System.Web.Services.ni.dll
+ 2011-10-13 01:44 . 2011-10-13 01:44 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\961b365e93e523044c1825e244f4372f\System.Web.Mobile.ni.dll
+ 2011-10-13 01:44 . 2011-10-13 01:44 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\a366c18bbc8075ca50f763097f32e94e\System.Web.Extensions.ni.dll
+ 2011-10-13 01:44 . 2011-10-13 01:44 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\44b6cec3e6f65ffdf524a5fb2786e0d9\System.Speech.ni.dll
+ 2011-10-13 01:44 . 2011-10-13 01:44 1651200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ecfad34a8e869b6d7ed9d3ead3a0e97d\System.ServiceModel.Web.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 2346496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\4b4c359912c1241246f50a4c47dbab3c\System.Runtime.Serialization.ni.dll
+ 2011-10-12 15:50 . 2011-10-12 15:50 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\8400b1072cb176c6f5e62909bae1ac51\System.Printing.ni.dll
+ 2011-10-12 15:49 . 2011-10-12 15:49 8365056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\0ea6852e2bacda9371e60589ca813cd3\System.Management.Automation.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\dbcb4baf3d2ed9e62645bd332fc221f2\System.IdentityModel.ni.dll
+ 2011-10-12 15:02 . 2011-10-12 15:02 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\367c4043efc2f32d843cb588b0dc97fc\System.Drawing.ni.dll
+ 2011-10-12 15:47 . 2011-10-12 15:47 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\2abf48d164deefdf200182a3bdadfbeb\System.DirectoryServices.ni.dll
+ 2011-10-12 15:47 . 2011-10-12 15:47 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\4e0e6e88d80780d87bb74e72d5bb1230\System.Deployment.ni.dll
+ 2011-10-12 15:01 . 2011-10-12 15:01 6621696 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\9e53d9921c4bb153f1ffbe1ae0e1b615\System.Data.ni.dll
+ 2011-10-12 15:47 . 2011-10-12 15:47 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\2b2dd2c19c570013eb8fce9bb6578e45\System.Data.SqlXml.ni.dll
+ 2011-10-13 01:44 . 2011-10-13 01:44 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\f4a17d0040e3f75d243f4ec1c644cea4\System.Data.Services.ni.dll
+ 2011-10-12 15:47 . 2011-10-12 15:47 1119232 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\9354bcdb983f56cecddb68035849d9a0\System.Data.OracleClient.ni.dll
+ 2011-10-12 15:01 . 2011-10-12 15:01 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\e7424f28e09b19df2dcce8c1ebb1e78f\System.Data.Linq.ni.dll
+ 2011-10-13 01:43 . 2011-10-13 01:43 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\619b6d874f92baf012a63329d05af051\System.Data.Entity.ni.dll
+ 2011-10-12 15:01 . 2011-10-12 15:01 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\a272814095d94aad779e9d07b2e877c9\System.Core.ni.dll
+ 2011-10-12 15:50 . 2011-10-12 15:50 2146816 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\afd2adfd3c5547a55b5cfddf362c6417\ReachFramework.ni.dll
+ 2011-10-12 15:50 . 2011-10-12 15:50 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\30efb8cc2564a09e296fe28653ab377c\PresentationUI.ni.dll
+ 2011-10-12 15:50 . 2011-10-12 15:50 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\05ffe0aaa7e9d46ba1603656fb1ac025\PresentationBuildTasks.ni.dll
+ 2011-10-12 15:50 . 2011-10-12 15:50 2538496 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\699c5770ad3d5e67bae2e172b0781d9a\Narrator.ni.exe
+ 2011-10-12 15:50 . 2011-10-12 15:50 1536512 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\dc38366e3458237ab394a5082b2f17fe\MMCEx.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 6340096 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\7a21126b43da3012cdf81aefc8af03d7\MIGUIControls.ni.dll
+ 2011-10-17 02:10 . 2011-10-17 02:10 1301504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\13ab013c38bf8053523d89cb0761f520\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
+ 2011-10-12 15:50 . 2011-10-12 15:50 1711616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\b67478ec034fdf811a748f1b6b5b1c95\Microsoft.VisualBasic.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\570eaca98d76305811de424f100ecf2c\Microsoft.Transactions.Bridge.ni.dll
+ 2011-10-12 15:50 . 2011-10-12 15:50 3722752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7d0d44c4dac29fee4fa2ec95495225e2\Microsoft.PowerShell.Editor.ni.dll
+ 2011-10-12 15:49 . 2011-10-12 15:49 1609728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4c668a5f510712762c2b8557ed1cf5c1\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2011-10-12 15:50 . 2011-10-12 15:50 1704448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\45940afe22941c4117712a2205bc9763\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2011-10-17 01:37 . 2011-10-17 01:37 1184256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\378dd2a9cfefdb493ab3ba9bd813e266\Microsoft.Office.Interop.InfoPath.SemiTrust.ni.dll
+ 2011-10-17 01:37 . 2011-10-17 01:37 1787904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\34d7edfab3c25daaebaea06ae51b9932\Microsoft.Office.InfoPath.Client.Internal.Host.ni.dll
+ 2011-10-17 01:37 . 2011-10-17 01:37 4751360 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\fb680e89dae468187ca252251b79390b\Microsoft.Office.BusinessApplications.SyncServices.ni.dll
+ 2011-10-17 01:37 . 2011-10-17 01:37 3235840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\7e40515d1da228dcd0c5d46cb426d1d6\Microsoft.Office.BusinessData.ni.dll
+ 2011-10-17 01:37 . 2011-10-17 01:37 2091008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\425e15567359513c32988ede58df056c\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll
+ 2011-10-17 01:37 . 2011-10-17 01:37 1563136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\0a2e61cac97f414482c5097ca8b2cf69\Microsoft.Office.BusinessApplications.Runtime.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 5486080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\842503edef3ebd8bf3c191140118b94b\Microsoft.MediaCenter.UI.ni.dll
+ 2011-10-12 15:49 . 2011-10-12 15:49 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\d827704baef0f300ed2bbee9fb6cf431\Microsoft.JScript.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\5e7d10bc7fc82ee30a5b696f4b0b4dc9\Microsoft.Ink.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\e696d9164bbb978ea5208643ea66e2e6\Microsoft.Build.Tasks.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 1873408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a8f4947810fb41497af7167b9dd8f957\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2011-10-12 15:47 . 2011-10-12 15:47 1778176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\83e03901d0f3ea0247df30ba82d40855\Microsoft.Build.Engine.ni.dll
- 2010-10-10 19:14 . 2010-10-10 19:14 1550200 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Excel\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2011-10-17 01:30 . 2011-10-17 01:30 1550200 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Excel\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
- 2010-10-10 19:15 . 2010-10-10 19:15 1857400 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2011-10-17 01:32 . 2011-10-17 01:32 1857400 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
- 2010-10-10 19:15 . 2010-10-10 19:15 1689472 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.dll
+ 2011-10-17 01:31 . 2011-10-17 01:31 1689472 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.dll
- 2011-06-16 00:26 . 2011-03-29 10:52 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-10-11 23:26 . 2011-07-08 11:52 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-10-11 23:26 . 2011-07-08 11:53 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-06-16 00:26 . 2011-03-29 10:52 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-10-17 01:31 . 2011-10-17 01:31 8007680 c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
- 2010-10-10 19:15 . 2010-10-10 19:15 8007680 c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
+ 2006-11-02 12:33 . 2011-10-30 12:09 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat
- 2006-11-02 12:33 . 2011-09-02 11:38 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2006-11-02 12:35 . 2011-10-12 10:11 50086344 c:\windows\system32\mrt.exe
+ 2011-10-11 23:26 . 2011-07-08 11:52 10020688 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
+ 2011-10-17 01:36 . 2011-10-17 01:36 24806400 c:\windows\Installer\a3ace.msi
+ 2010-08-13 21:08 . 2010-08-13 21:08 41272320 c:\windows\Installer\5d499.msp
+ 2011-07-21 19:36 . 2011-07-21 19:36 66808320 c:\windows\Installer\5d47f.msp
+ 2011-06-20 06:28 . 2011-06-20 06:28 18457088 c:\windows\Installer\5d418.msp
+ 2010-11-11 19:52 . 2010-11-11 19:52 13486592 c:\windows\Installer\5d3e8.msp
+ 2011-03-08 20:33 . 2011-03-08 20:33 54645248 c:\windows\Installer\5d37a.msp
+ 2011-05-19 06:06 . 2011-05-19 06:06 38672896 c:\windows\Installer\42e234d.msp
+ 2011-10-12 10:16 . 2011-10-12 10:16 20333568 c:\windows\Installer\3e38a84.msp
+ 2011-07-12 00:33 . 2011-07-12 00:33 23254016 c:\windows\Installer\3e38a79.msp
+ 2010-03-13 07:05 . 2010-03-13 07:05 11121528 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.4763\OARTCONV.DLL
+ 2010-03-13 22:08 . 2010-03-13 22:08 20516712 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.4763\OART.DLL
+ 2010-03-25 17:25 . 2010-03-25 17:25 30969208 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.4763\GROOVE.EXE
+ 2011-10-12 10:08 . 2011-10-12 10:08 11872768 c:\windows\assembly\NativeImages_v4.0.30319_64\System\c9d45f7c0deab777cea3e4fe77c02031\System.ni.dll
+ 2011-10-12 10:18 . 2011-10-12 10:18 17290752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\7850c7a1f97fc3980b67ed7d31416aea\System.Windows.Forms.ni.dll
+ 2011-10-12 10:17 . 2011-10-12 10:17 15744000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\11d53986a1d3ad49ac79df5c27a7502d\System.Web.ni.dll
+ 2011-10-12 10:22 . 2011-10-12 10:22 24551936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\41ff109cc439d1cdb05465f9101261c3\System.ServiceModel.ni.dll
+ 2011-10-12 10:18 . 2011-10-12 10:18 13300736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\8964cb91b999eb0b77400b22bb68033d\System.Design.ni.dll
+ 2011-10-12 10:21 . 2011-10-12 10:21 18480128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\f0634b66ceb548b635218f02f1101f18\System.Data.Entity.ni.dll
+ 2011-10-12 10:13 . 2011-10-12 10:13 10439168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\06e5638d1925f6cf87ff8fad1ef06d75\System.Core.ni.dll
+ 2011-10-12 10:15 . 2011-10-12 10:15 24406528 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\9b5148ac4ab43aa07d5dbcfbe54ceaf5\PresentationFramework.ni.dll
+ 2011-10-12 10:14 . 2011-10-12 10:14 15907328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\ffb7c7fb374f445e39f7224134ebca02\PresentationCore.ni.dll
+ 2011-10-12 10:08 . 2011-10-12 10:08 19348992 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\e0e5fbe72e8813a135fc878ff32b4bee\mscorlib.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 13138432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\2de8b7360d6a58fa7fd1b451fa88dde6\System.Windows.Forms.ni.dll
+ 2011-10-12 10:27 . 2011-10-12 10:27 12067840 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\f611b5e2b48f6b11d6e4d2ca71750680\System.Web.ni.dll
+ 2011-10-12 10:29 . 2011-10-12 10:29 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\559ebac0a85ae55da09827b8048f77bd\System.ServiceModel.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 10999296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\f917609a9883595e30abde30d1117826\System.Design.ni.dll
+ 2011-10-12 10:29 . 2011-10-12 10:29 13346816 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\78afce4e1bd3d345ef1fff004659191c\System.Data.Entity.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 18000384 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\813a0913bea1269e48613509609e72b4\PresentationFramework.ni.dll
+ 2011-10-12 10:10 . 2011-10-12 10:10 11450880 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\8244412387a82c0acd3d63622e22cef5\PresentationCore.ni.dll
+ 2011-10-12 10:09 . 2011-10-12 10:09 14407680 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a774bd593b8420bae4a8cf1d46af3ba2\mscorlib.ni.dll
+ 2011-10-12 14:57 . 2011-10-12 14:57 10597888 c:\windows\assembly\NativeImages_v2.0.50727_64\System\f12d03e6dad70f35e012254871553713\System.ni.dll
+ 2011-10-12 15:00 . 2011-10-12 15:00 17377792 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\5cb03828bc75159bc60c7ba3b192f63d\System.Windows.Forms.ni.dll
+ 2011-10-13 01:47 . 2011-10-13 01:47 15225856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\9d8f4ec5694b056b4b4b79f11c6b3b95\System.Web.ni.dll
+ 2011-10-13 01:48 . 2011-10-13 01:48 23813632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\08b309e856a0be5fd3e19fa2f15a671f\System.ServiceModel.ni.dll
+ 2011-10-13 01:51 . 2011-10-13 01:51 11254784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\f20cd853902d31f596cb77e1fb0a5011\System.Management.Automation.ni.dll
+ 2011-10-12 14:59 . 2011-10-12 14:59 13718528 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\53d32ce36522b35c6617583803e46428\System.Design.ni.dll
+ 2011-10-13 01:54 . 2011-10-13 01:54 13758976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\0359dddfa810980ea79ff603f8977974\System.Data.Entity.ni.dll
+ 2011-10-12 14:58 . 2011-10-12 14:58 19176960 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\9571673404921b0e6a53a4d1d00891a2\PresentationFramework.ni.dll
+ 2011-10-12 14:57 . 2011-10-12 14:57 16513536 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\6cc39b5515d14c1670b7a1a47b947420\PresentationCore.ni.dll
+ 2011-10-12 14:56 . 2011-10-12 14:56 15564800 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\897e1f6e4749dcdf03064150aa556c8c\mscorlib.ni.dll
+ 2011-10-13 01:50 . 2011-10-13 01:50 15825920 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\e1807995ad54a8ec2aaef6e7fdd35371\ehshell.ni.dll
+ 2011-10-12 15:02 . 2011-10-12 15:02 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1363115565fff5a641243a48f396f107\System.Windows.Forms.ni.dll
+ 2011-10-12 15:47 . 2011-10-12 15:47 11804672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\e00630ec1e225a2376fdd430645e20f7\System.Web.ni.dll
+ 2011-10-12 15:48 . 2011-10-12 15:48 17404416 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\6b2ee1fdc6a182722db04af9c3cd10c3\System.ServiceModel.ni.dll
+ 2011-10-12 15:02 . 2011-10-12 15:02 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\0e8e3007e61a2ba9454600dce8193b65\System.Design.ni.dll
+ 2011-10-12 15:01 . 2011-10-12 15:01 14328832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94f892556ec9fa7a508fc9d214ceaedf\PresentationFramework.ni.dll
+ 2011-10-12 15:01 . 2011-10-12 15:01 12216832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53f949f4664bb316f9b7a00d73a6e290\PresentationCore.ni.dll
+ 2011-10-12 15:01 . 2011-10-12 15:01 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll
+ 2011-04-07 03:12 . 2011-04-07 03:12 194340864 c:\windows\Installer\42e2389.msp
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1555968]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 65536]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-07-07 449584]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe" [2011-04-25 202296]
"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2011-06-15 307200]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe"
"HP Health Check Scheduler"="c:\program files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [x]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-10 135664]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-10 135664]
R3 MEMSWEEP2;MEMSWEEP2;c:\windows\system32\EB1.tmp [x]
R3 Mkd2Nadr;Mkd2Nadr;c:\windows\system32\drivers\Mkd2Nadr.sys [x]
R3 Mkd3kfNt;Mkd3kfNt;c:\windows\system32\drivers\Mkd3kfNt.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [x]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2010-02-17 14920]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2010-02-17 12360]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-05-04 128384]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 LVPrcS64;Process Monitor;c:\program files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe [2010-05-08 197976]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-07 366640]
S2 nlsX86cc;NLS Service;c:\windows\SysWOW64\NLSSRV32.EXE [2011-03-21 68928]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-08-15 2027840]
S2 vpnagent;Cisco AnyConnect VPN Agent;c:\program files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe [2009-12-17 497856]
S3 CompFilter64;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbflt64.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x]
S3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech HD Webcam C510(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-05-31 11856]
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-10-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-10 22:52]
.
2011-10-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-10 22:52]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-22 15851040]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-22 82464]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndtmStart Page =
hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndtmLocal Page = %SystemRoot%\system32\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Add to Anti-Banner - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.254
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
FF - ProfilePath - c:\users\Aman\AppData\Roaming\Mozilla\Firefox\Profiles\regxz67k.default\
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\EB1.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.9"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Cisco Systems\VPN Client\cvpnd.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\Common Files\Logishrd\LVMVFM\LVPrS64H.exe
.
**************************************************************************
.
Completion time: 2011-10-31 04:47:57 - machine was rebooted
ComboFix-quarantined-files.txt 2011-10-31 11:47
ComboFix2.txt 2011-09-08 08:27
.
Pre-Run: 312,036,544,512 bytes free
Post-Run: 312,363,237,376 bytes free
.
- - End Of File - - 82B885AFD49EE37CCC1DFE50B4530652