|
Plagegeister aller Art und deren Bekämpfung: Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scrWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
20.06.2011, 19:36 | #1 |
| Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scr Hallo zusammen, auf meinem USB-Stick sind plötzlich alle vorhandenen Ordner durch Verknüpfungen ersetzt worden, die als Ziel F:\jeuiwu.scr angeben. Die Verknüpfungen lassen sich nicht öffnen. Außerdem sind Ordner hinzugekommen, die nicht von mir erstellt wurden (.SpotlightV-100 .Trashes und einige andere) Wenn ich den USB-Stick anschliesse, meldet antivir, dass der zugriff auf autorun.inf für das Laufwerk des USB-Sticks verhindert wurde. Scans mit Antivir und Malbytes haben keinen Fund ergeben. Der OTL-Scan lautet: OTL logfile created on: 20.06.2011 20:17:22 - Run 1 OTL by OldTimer - Version 3.2.24.1 Folder = C:\Dokumente und Einstellungen\Anja\Eigene Dateien\Downloads Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1011,88 Mb Total Physical Memory | 474,39 Mb Available Physical Memory | 46,88% Memory free 2,37 Gb Paging File | 1,87 Gb Available in Paging File | 78,96% Paging File free Paging file location(s): C:\pagefile.sys 1512 3024 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 143,05 Gb Total Space | 130,00 Gb Free Space | 90,88% Space Free | Partition Type: NTFS Drive D: | 1,90 Gb Total Space | 0,60 Gb Free Space | 31,83% Space Free | Partition Type: FAT Computer Name: ANJAMINI | User Name: Anja | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Anja\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH) PRC - C:\Programme\SITECOM\150N USB Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.) PRC - C:\Programme\Launch Manager\LManager.exe (Dritek System Inc.) PRC - C:\Programme\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) PRC - C:\Programme\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe (Acer) PRC - C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) PRC - C:\Programme\Acer\Acer VCM\RS_Service.exe (Acer Incorporated) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\Anja\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\BtMmHook.dll (Broadcom Corporation.) ========== Win32 Services (SafeList) ========== SRV - (AppMgmt) -- File not found SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) SRV - (osppsvc) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (RS_Service) -- C:\Programme\Acer\Acer VCM\RS_Service.exe (Acer Incorporated) SRV - (IAANTMON) Intel(R) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) ========== Driver Services (SafeList) ========== DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH) DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH) DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation) DRV - (RTL8192su) -- C:\WINDOWS\system32\drivers\rtl8192su.sys (Realtek Semiconductor Corporation ) DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH) DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH) DRV - (L1e) -- C:\WINDOWS\system32\drivers\l1e51x86.sys (Atheros Communications, Inc.) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.) DRV - (AR5416) -- C:\WINDOWS\system32\drivers\athw.sys (Atheros Communications, Inc.) DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.) DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.) DRV - (BTWDNDIS) -- C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.) DRV - (btaudio) -- C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.) DRV - (btwhid) -- C:\WINDOWS\system32\drivers\btwhid.sys (Broadcom Corporation.) DRV - (BTDriver) -- C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.) DRV - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\WINDOWS\system32\drivers\snp2uvc.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=xph&d=0210&m=ao531h IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=xph&d=0210&m=ao531h IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - HKLM\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.03.30 15:56:50 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.03.30 15:56:21 | 000,000,000 | ---D | M] [2010.03.30 15:56:57 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja\Anwendungsdaten\Mozilla\Extensions [2011.04.15 09:58:42 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Anja\Anwendungsdaten\Mozilla\Firefox\Profiles\pxnmveb4.default\extensions [2011.03.22 17:04:04 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Anja\Anwendungsdaten\Mozilla\Firefox\Profiles\pxnmveb4.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.03.30 15:56:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2010.03.16 20:28:04 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.03.16 20:28:04 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.03.16 20:28:04 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.03.16 20:28:04 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.03.16 20:28:04 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2008.04.14 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [AzMixerSel] C:\Programme\Realtek\Audio\Drivers\AzMixerSel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation) O4 - HKLM..\Run: [LManager] C:\Programme\Launch Manager\LManager.exe (Dritek System Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [NotificationCenterLauncher] C:\Programme\Acer\Acer eRecovery Management\NotificationLauncher.exe (Acer) O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe (sonix) O4 - HKLM..\Run: [snp2uvc] C:\WINDOWS\System32\csnp2uvc.dll ( ) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Acer VCM.lnk = C:\Programme\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk = C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Sitecom 150N USB Wireless LAN Utility.lnk = C:\Programme\SITECOM\150N USB Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Senden an &Bluetooth-Gerät... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Senden an Bluetooth - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Acer\Acer VCM\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: GinaDLL - (C:\WINDOWS\SYSTEM32\RtlGina\RtlGina.DLL) - C:\WINDOWS\system32\RtlGina\RtlGina.dll (Realtek) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Anja\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Anja\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.02.28 10:48:40 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - Unable to obtain root file information for disk D:\ O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.06.20 19:59:46 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2011.06.20 19:26:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp [2011.06.20 19:11:35 | 000,000,000 | RHSD | C] -- C:\cmdcons [2011.06.20 19:10:26 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2011.06.20 19:10:26 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2011.06.20 19:10:26 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2011.06.20 19:10:26 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2011.06.20 19:10:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2011.06.20 19:09:12 | 000,000,000 | ---D | C] -- C:\Qoobox [2011.06.20 19:09:08 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Anja\Startmenü\Programme\Verwaltung [2011.06.20 18:32:15 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Anja\Recent [2011.06.20 17:39:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData [2011.06.20 17:16:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Anwendungsdaten\Malwarebytes [2011.06.20 17:16:24 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011.06.20 17:16:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware [2011.06.20 17:16:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2011.06.20 17:16:17 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011.06.20 17:16:17 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2011.06.20 09:04:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\HzE32 [2011.06.08 09:08:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\KONTEXT_Rechnungen [2011.06.08 09:08:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\Musik2 [2011.06.08 09:07:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\Disko Pause [2011.06.08 09:07:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\Bewerbung [2011.06.08 09:06:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\KSV [2011.06.08 09:06:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\Julia [2011.06.08 09:05:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\Abrechnungen [2011.06.06 11:38:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\HzE [2011.06.06 11:38:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Anja\Desktop\Juni_2011 [2009.03.29 14:37:47 | 000,196,608 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll [2009.03.29 14:37:45 | 000,172,032 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll [2009.02.28 19:31:44 | 000,049,152 | ---- | C] ( ) -- C:\WINDOWS\Interop.IWshRuntimeLibrary.dll [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.06.20 20:02:52 | 000,454,056 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2011.06.20 20:02:52 | 000,436,936 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011.06.20 20:02:52 | 000,082,196 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2011.06.20 20:02:52 | 000,069,162 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011.06.20 19:58:43 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011.06.20 19:58:41 | 1061,105,664 | -HS- | M] () -- C:\hiberfil.sys [2011.06.20 19:55:03 | 000,001,204 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-538525854-1017937101-1279371858-1005UA.job [2011.06.20 19:11:40 | 000,000,327 | RHS- | M] () -- C:\boot.ini [2011.06.20 17:33:08 | 000,137,656 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys [2011.06.20 17:33:08 | 000,061,960 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2011.06.20 17:16:24 | 000,000,760 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2011.06.20 08:52:11 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011.06.10 09:33:14 | 000,002,201 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\aircore.lnk [2011.06.10 09:08:04 | 000,000,406 | ---- | M] () -- C:\Dokumente und Einstellungen\Anja\Desktop\Verknüpfung mit LAN-Verbindung 2.lnk [2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011.05.29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.06.20 19:11:39 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2011.06.20 19:11:37 | 000,262,448 | RHS- | C] () -- C:\cmldr [2011.06.20 19:10:26 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2011.06.20 19:10:26 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2011.06.20 19:10:26 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2011.06.20 19:10:26 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2011.06.20 19:10:26 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2011.06.20 17:16:24 | 000,000,760 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2011.06.10 09:08:04 | 000,000,406 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja\Desktop\Verknüpfung mit LAN-Verbindung 2.lnk [2011.03.10 13:50:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2010.03.30 15:56:51 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010.03.02 16:21:30 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2010.03.02 00:23:27 | 000,004,608 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.02.27 17:42:45 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe [2010.02.24 20:54:57 | 000,000,142 | ---- | C] () -- C:\Dokumente und Einstellungen\Anja\Anwendungsdaten\wklnhst.dat [2009.03.29 14:38:22 | 000,626,688 | ---- | C] () -- C:\WINDOWS\Image.dll [2009.03.29 14:37:47 | 001,769,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys [2009.03.29 14:37:47 | 000,028,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys [2009.03.29 14:37:47 | 000,000,036 | ---- | C] () -- C:\WINDOWS\PidList.ini [2009.02.28 19:31:36 | 000,454,056 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat [2009.02.28 19:31:36 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat [2009.02.28 19:31:36 | 000,082,196 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat [2009.02.28 19:31:36 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat [2009.02.28 19:31:23 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2009.02.28 19:31:21 | 000,436,936 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2009.02.28 19:31:21 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2009.02.28 19:31:21 | 000,069,162 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2009.02.28 19:31:21 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2009.02.28 19:31:20 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2009.02.28 19:31:20 | 000,004,524 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2009.02.28 19:31:19 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2009.02.28 19:31:17 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2009.02.28 19:31:16 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2009.02.28 19:31:10 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2009.02.28 19:31:08 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2009.02.28 12:48:26 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2009.02.28 11:43:42 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll [2009.02.28 11:41:29 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX2.dat [2009.02.28 11:41:29 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX1.dat [2009.02.28 11:41:29 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX0.dat [2009.02.28 11:41:29 | 000,000,164 | ---- | C] () -- C:\WINDOWS\System32\drivers\SamSfPa.dat [2009.02.28 11:41:29 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\rtkhdaud.dat [2009.02.28 10:52:20 | 000,032,768 | ---- | C] () -- C:\WINDOWS\AMove.exe [2009.02.28 10:52:20 | 000,006,782 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2009.02.28 10:50:39 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009.02.28 10:46:49 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009.02.28 10:46:01 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2009.02.28 10:43:46 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009.02.28 10:43:03 | 000,342,624 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009.02.25 04:20:23 | 000,020,480 | ---- | C] () -- C:\WINDOWS\LauncheRyDiscCalc.exe [2008.12.11 14:22:10 | 002,854,976 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll [2001.11.14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll < End of report > Habe ich es mit einem Virus zu tun, oder was ist das Problem? Ich hoffe ich habe die Regeln weitestgehend befolgt und es gibt hier jemanden, der mir helfen kann. Eigene Recherchen waren leider nicht zielführend, weshalb ich mich an dieses Board wende. Grüße, spiegi79 |
21.06.2011, 11:30 | #2 | ||
/// Winkelfunktion /// TB-Süch-Tiger™ | Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scrZitat:
Einen ganz klaren Hinweis gibt es auch zu http://www.trojaner-board.de/95175-combofix.html Zitat:
__________________ |
21.06.2011, 12:04 | #3 |
| Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scr Lieber Arne,
__________________leider hatte ich bei meinen vorangegangenen Recherchen einen Thread entdeckt, in dem ein ähnliches Problem besprochen wurde. Hier wurde CF als Lösungsansatz empfohlen und leider waren die Teilnehmer dort nicht sooo versiert und haben auf eventuelle Gefahren nicht hingewiesen. Als ich mich gestern mit meinem Problem an das TB wendete, habe ich den Hinweis gelesen und war selbst etwas erschrocken, dass manche Diskutanten solche Empfehlungen raushauen, ohne auf die Konsequenzen hinzuweisen. Gibt es sonst Dinge, die Dir am Log aufgefallen sind, die mir weiterhelfen könnten? Grüße, Stephan |
21.06.2011, 12:51 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scr Nein, aber du wirst vermutlich schon eine Menge entfernt haben mit CF und Malwarebytes. Davon würde ich auch gern mal alle Logs sehen, das von CF natürlich auch.
__________________ Logfiles bitte immer in CODE-Tags posten |
21.06.2011, 14:31 | #5 |
| Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scr CF Log: Combofix Logfile: Code:
ATTFilter ComboFix 11-06-20.01 - Anja 21.06.2011 15:11:29.2.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.49.1031.18.1012.323 [GMT 2:00] ausgeführt von:: c:\dokumente und einstellungen\Anja\Eigene Dateien\Downloads\ComboFix.exe AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7} . . ((((((((((((((((((((((( Dateien erstellt von 2011-05-21 bis 2011-06-21 )))))))))))))))))))))))))))))) . . 2011-06-20 20:54 . 2011-06-20 20:54 -------- d-----w- c:\windows\ServicePackFiles 2011-06-20 15:39 . 2011-06-20 16:25 -------- d-----w- c:\windows\system32\NtmsData 2011-06-20 15:34 . 2011-06-20 15:34 -------- d-----w- c:\dokumente und einstellungen\LocalService\Startmenü 2011-06-20 15:16 . 2011-06-20 15:16 -------- d-----w- c:\dokumente und einstellungen\Anja\Anwendungsdaten\Malwarebytes 2011-06-20 15:16 . 2011-05-29 07:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-06-20 15:16 . 2011-06-20 15:16 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes 2011-06-20 15:16 . 2011-06-20 15:16 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware 2011-06-20 15:16 . 2011-05-29 07:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-06-20 15:33 . 2010-03-30 16:40 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2011-06-20 15:33 . 2010-03-30 16:40 137656 ----a-w- c:\windows\system32\drivers\avipbb.sys 2011-05-02 15:31 . 2009-02-28 08:46 692736 ----a-w- c:\windows\system32\inetcomm.dll 2011-04-29 16:19 . 2009-02-28 17:31 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-04-25 15:44 . 2009-02-28 17:31 832512 ----a-w- c:\windows\system32\wininet.dll 2011-04-25 15:44 . 2009-02-28 17:31 1830912 ----a-w- c:\windows\system32\inetcpl.cpl 2011-04-25 15:44 . 2009-02-28 17:31 78336 ----a-w- c:\windows\system32\ieencode.dll 2011-04-25 15:44 . 2009-02-28 17:31 17408 ----a-w- c:\windows\system32\corpol.dll 2011-04-25 12:01 . 2009-02-28 17:31 389120 ----a-w- c:\windows\system32\html.iec 2011-04-21 13:37 . 2009-02-28 17:31 105472 ----a-w- c:\windows\system32\drivers\mup.sys . . ((((((((((((((((((((((((((((( SnapShot@2011-06-20_17.19.57 ))))))))))))))))))))))))))))))))))))))))) . + 2011-04-18 20:51 . 2011-04-18 20:51 51024 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f\vcomp90.dll + 2011-04-18 20:51 . 2011-04-18 20:51 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90rus.dll + 2011-04-18 20:51 . 2011-04-18 20:51 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90kor.dll + 2011-04-18 20:51 . 2011-04-18 20:51 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90jpn.dll + 2011-04-18 20:51 . 2011-04-18 20:51 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90ita.dll + 2011-04-18 20:51 . 2011-04-18 20:51 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90fra.dll + 2011-04-18 20:51 . 2011-04-18 20:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esp.dll + 2011-04-18 20:51 . 2011-04-18 20:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esn.dll + 2011-04-18 20:51 . 2011-04-18 20:51 53584 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll + 2011-04-18 20:51 . 2011-04-18 20:51 63312 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90deu.dll + 2011-04-18 20:51 . 2011-04-18 20:51 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90cht.dll + 2011-04-18 20:51 . 2011-04-18 20:51 35664 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90chs.dll + 2011-04-18 20:51 . 2011-04-18 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90u.dll + 2011-04-18 20:51 . 2011-04-18 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90.dll + 2011-05-13 18:17 . 2011-05-13 18:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll + 2011-05-13 17:45 . 2011-05-13 17:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll + 2011-05-13 17:45 . 2011-05-13 17:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll + 2011-05-13 17:45 . 2011-05-13 17:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll + 2011-05-13 17:45 . 2011-05-13 17:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll + 2011-05-13 23:06 . 2011-05-13 23:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll + 2011-05-13 23:23 . 2011-05-13 23:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll + 2011-05-13 16:37 . 2011-05-13 16:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll - 2010-03-30 14:08 . 2010-02-22 14:22 18808 c:\windows\system32\spmsg.dll + 2010-03-30 14:08 . 2010-07-05 13:14 18808 c:\windows\system32\spmsg.dll + 2009-02-28 17:31 . 2011-04-25 15:44 44544 c:\windows\system32\pngfilt.dll - 2009-02-28 17:31 . 2010-12-20 23:06 44544 c:\windows\system32\pngfilt.dll - 2009-02-28 17:31 . 2011-06-20 15:13 69162 c:\windows\system32\perfc009.dat + 2009-02-28 17:31 . 2011-06-21 10:48 69162 c:\windows\system32\perfc009.dat - 2009-02-28 17:31 . 2011-06-20 15:13 82196 c:\windows\system32\perfc007.dat + 2009-02-28 17:31 . 2011-06-21 10:48 82196 c:\windows\system32\perfc007.dat + 2007-08-13 17:54 . 2011-04-25 15:44 52224 c:\windows\system32\msfeedsbs.dll - 2007-08-13 17:54 . 2010-12-20 23:06 52224 c:\windows\system32\msfeedsbs.dll - 2009-02-28 17:31 . 2010-12-20 23:06 27648 c:\windows\system32\jsproxy.dll + 2009-02-28 17:31 . 2011-04-25 15:44 27648 c:\windows\system32\jsproxy.dll + 2007-08-13 17:39 . 2011-04-25 12:00 13824 c:\windows\system32\ieudinit.exe - 2007-08-13 17:39 . 2010-12-20 12:54 13824 c:\windows\system32\ieudinit.exe + 2009-02-28 17:31 . 2011-04-25 15:44 44544 c:\windows\system32\iernonce.dll - 2009-02-28 17:31 . 2010-12-20 23:06 44544 c:\windows\system32\iernonce.dll - 2009-02-28 17:31 . 2010-12-20 12:54 70656 c:\windows\system32\ie4uinit.exe + 2009-02-28 17:31 . 2011-04-25 12:00 70656 c:\windows\system32\ie4uinit.exe + 2007-08-13 17:36 . 2011-04-25 15:44 63488 c:\windows\system32\icardie.dll - 2007-08-13 17:36 . 2010-12-20 23:06 63488 c:\windows\system32\icardie.dll + 2009-02-28 17:31 . 2009-04-20 17:17 45568 c:\windows\system32\dnsrslvr.dll - 2009-02-28 17:31 . 2008-04-14 12:00 45568 c:\windows\system32\dnsrslvr.dll - 2009-02-28 17:31 . 2010-12-20 23:06 44544 c:\windows\system32\dllcache\pngfilt.dll + 2009-02-28 17:31 . 2011-04-25 15:44 44544 c:\windows\system32\dllcache\pngfilt.dll + 2010-01-05 09:52 . 2011-04-25 15:44 52224 c:\windows\system32\dllcache\msfeedsbs.dll - 2010-01-05 09:52 . 2010-12-20 23:06 52224 c:\windows\system32\dllcache\msfeedsbs.dll - 2009-02-28 17:31 . 2010-12-20 23:06 27648 c:\windows\system32\dllcache\jsproxy.dll + 2009-02-28 17:31 . 2011-04-25 15:44 27648 c:\windows\system32\dllcache\jsproxy.dll - 2009-12-31 15:32 . 2010-12-20 12:54 13824 c:\windows\system32\dllcache\ieudinit.exe + 2009-12-31 15:32 . 2011-04-25 12:00 13824 c:\windows\system32\dllcache\ieudinit.exe - 2009-02-28 17:31 . 2010-12-20 23:06 44544 c:\windows\system32\dllcache\iernonce.dll + 2009-02-28 17:31 . 2011-04-25 15:44 44544 c:\windows\system32\dllcache\iernonce.dll + 2009-02-28 17:31 . 2011-04-25 15:44 78336 c:\windows\system32\dllcache\ieencode.dll - 2009-02-28 17:31 . 2010-12-20 23:06 78336 c:\windows\system32\dllcache\ieencode.dll + 2009-02-28 17:31 . 2011-04-25 12:00 70656 c:\windows\system32\dllcache\ie4uinit.exe - 2009-02-28 17:31 . 2010-12-20 12:54 70656 c:\windows\system32\dllcache\ie4uinit.exe - 2010-01-05 09:52 . 2010-12-20 23:06 63488 c:\windows\system32\dllcache\icardie.dll + 2010-01-05 09:52 . 2011-04-25 15:44 63488 c:\windows\system32\dllcache\icardie.dll + 2009-02-28 17:31 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll - 2009-02-28 17:31 . 2008-04-14 12:00 45568 c:\windows\system32\dllcache\dnsrslvr.dll + 2009-02-28 17:31 . 2011-04-25 15:44 17408 c:\windows\system32\dllcache\corpol.dll - 2009-02-28 17:31 . 2010-12-20 23:06 17408 c:\windows\system32\dllcache\corpol.dll + 2011-06-20 20:50 . 2011-06-20 20:50 49936 c:\windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}\ppvwicon.exe - 2011-03-28 06:43 . 2011-03-28 06:43 49936 c:\windows\Installer\{95120000-00AF-0407-0000-0000000FF1CE}\ppvwicon.exe + 2010-09-16 20:18 . 2011-06-20 20:48 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe - 2010-09-16 20:18 . 2011-03-28 06:13 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe + 2010-09-16 20:18 . 2011-06-20 20:48 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe - 2010-09-16 20:18 . 2011-03-28 06:13 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe - 2010-09-16 20:18 . 2011-03-28 06:13 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe + 2010-09-16 20:18 . 2011-06-20 20:48 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe + 2011-06-20 20:50 . 2011-06-20 20:50 35600 c:\windows\Installer\{90120000-0020-0407-0000-0000000FF1CE}\O12ConvIcon.exe - 2011-03-28 06:19 . 2011-03-28 06:19 35600 c:\windows\Installer\{90120000-0020-0407-0000-0000000FF1CE}\O12ConvIcon.exe + 2011-06-20 20:54 . 2010-12-20 23:06 44544 c:\windows\ie7updates\KB2530548-IE7\pngfilt.dll + 2011-06-20 20:54 . 2010-12-20 23:06 52224 c:\windows\ie7updates\KB2530548-IE7\msfeedsbs.dll + 2011-06-20 20:54 . 2010-12-20 23:06 27648 c:\windows\ie7updates\KB2530548-IE7\jsproxy.dll + 2011-06-20 20:54 . 2010-12-20 12:54 13824 c:\windows\ie7updates\KB2530548-IE7\ieudinit.exe + 2011-06-20 20:54 . 2010-12-20 23:06 44544 c:\windows\ie7updates\KB2530548-IE7\iernonce.dll + 2011-06-20 20:54 . 2010-12-20 23:06 78336 c:\windows\ie7updates\KB2530548-IE7\ieencode.dll + 2011-06-20 20:54 . 2010-12-20 12:54 70656 c:\windows\ie7updates\KB2530548-IE7\ie4uinit.exe + 2011-06-20 20:54 . 2010-12-20 23:06 63488 c:\windows\ie7updates\KB2530548-IE7\icardie.dll + 2011-06-20 20:54 . 2010-12-20 23:06 17408 c:\windows\ie7updates\KB2530548-IE7\corpol.dll + 2011-06-21 10:28 . 2011-06-21 10:28 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\14f03172549726c9f212d15803c582b1\WindowsLiveWriter.ni.exe + 2011-06-21 10:30 . 2011-06-21 10:30 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\001e328a56f2dea62eeada98b32de124\WindowsLive.Writer.Api.ni.dll + 2011-06-21 09:56 . 2011-06-21 09:56 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\1492e9393417d6e91b5ddc746b5ef320\UIAutomationProvider.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\61c3b1e170de97a8d418b610bd9b0c77\System.Windows.Presentation.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a4173f12a0fea30f95bc56ab04f64cae\System.Web.DynamicData.Design.ni.dll + 2011-06-21 12:27 . 2011-06-21 12:27 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\ab5802527ce15dbcc25e301dbbb4d666\System.ComponentModel.DataAnnotations.ni.dll + 2011-06-21 12:14 . 2011-06-21 12:14 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\177a17af98d803ab79006d6785706462\System.AddIn.Contract.ni.dll + 2011-06-21 09:52 . 2011-06-21 09:52 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\e9bb32c656a2f80b629f129d738c392b\PresentationFontCache.ni.exe + 2011-06-21 09:51 . 2011-06-21 09:51 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\d54d318ae1eb0667badea576d0534f9d\PresentationCFFRasterizer.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\87fe1d01b568b3bc9c750b7cf7802516\Microsoft.Vsa.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\fd20ce2f385161b1369c5e556fbaa4c8\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\eee550512a379bb648e503ff636f4b0d\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e0843b99c3f9a0324a51578e3f323d23\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll + 2011-06-21 12:13 . 2011-06-21 12:13 30720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d59b49e8cc232005285024952f7f79fe\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.resources.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 84992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d032575b44d5e4437f871cfa726a318f\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll + 2011-06-21 10:26 . 2011-06-21 10:26 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a9926811e09d8150dd7aad36a187efaa\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a8113c27fe37bf6dbc6c92a295401b75\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll + 2011-06-21 12:13 . 2011-06-21 12:13 46592 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8b3224fcf6748fccc720d86ae329625a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.resources.ni.dll + 2011-06-21 10:26 . 2011-06-21 10:26 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\75a371c688f5f1559a2853e9cf31e047\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 31232 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\7224e7461ed1700e71326adbacb03d4e\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.resources.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\71d95e73f90a5230e1325f23f3f4d608\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll + 2011-06-21 12:14 . 2011-06-21 12:14 12288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\69d26d9d73fbb1986122042e73a3488e\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.resources.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 13824 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5db3b403ec1eac6333326bb510673589\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.resources.ni.dll + 2011-06-21 12:14 . 2011-06-21 12:14 12288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4750e124318ab0e6f2b6f9b8c5b0eb14\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.resources.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 24064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\43f6b23ea9348abaa8cf3fbea1c36b96\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.resources.ni.dll + 2011-06-21 10:26 . 2011-06-21 10:26 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\25de66e61dca030957769c876a2b6ab6\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll + 2011-06-21 12:13 . 2011-06-21 12:13 26624 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2275003f64b2411514383d542265165c\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.resources.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\14a034c23023e7dc5ab1d1ce14cd782b\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.resources.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 28672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\06a78ba61b76a7236028adbd1c1077bb\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\a96b02abbfcaae424cfb91a198a9e0e9\Microsoft.VisualC.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\994f15ba0b5ff81ae392618e155ae8bd\Microsoft.Office.Tools.Word.v9.0.resources.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 26112 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\99031d1c0f7915eaa60219fe6f99571e\Microsoft.Office.Tools.v9.0.resources.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\620ffb1c5f34b01b3bbec0e49b833e40\Microsoft.Office.Tools.Common.v9.0.resources.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\27838ffed058cadd32938b3315adbdd8\Microsoft.Office.Tools.Outlook.v9.0.resources.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 14848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\22103598f54177f96e954b2771e88ee0\Microsoft.Office.Tools.Excel.v9.0.resources.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\f5057c30d89ad8d99e38c946a68def9e\Microsoft.Build.Framework.ni.dll + 2011-06-21 11:04 . 2011-06-21 11:04 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\623c05a555ac0719a1367f511d4a9270\Microsoft.Build.Framework.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\c40d3caad8bff3c52db7e7562286406a\dfsvc.ni.exe + 2011-06-21 10:26 . 2011-06-21 10:26 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d9228d58804dfd75fd92a4d12ffac8af\Accessibility.ni.dll - 2011-03-23 14:49 . 2011-03-23 14:49 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2011-06-21 09:49 . 2011-06-21 09:49 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2011-03-23 14:49 . 2011-03-23 14:49 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2011-06-21 09:49 . 2011-06-21 09:49 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2011-03-23 14:50 . 2011-03-23 14:50 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2011-06-21 09:49 . 2011-06-21 09:49 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2011-06-21 09:49 . 2011-06-21 09:49 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2011-03-23 14:50 . 2011-03-23 14:50 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2011-06-21 09:49 . 2011-06-21 09:49 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2011-03-23 14:50 . 2011-03-23 14:50 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2011-06-21 09:49 . 2011-06-21 09:49 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2011-03-23 14:50 . 2011-03-23 14:50 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2011-03-23 14:50 . 2011-03-23 14:50 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2011-06-21 09:49 . 2011-06-21 09:49 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2011-06-21 09:49 . 2011-06-21 09:49 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2011-03-23 14:50 . 2011-03-23 14:50 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2011-03-23 14:49 . 2011-03-23 14:49 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2011-06-21 09:49 . 2011-06-21 09:49 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2011-03-23 14:49 . 2011-03-23 14:49 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2011-06-21 09:49 . 2011-06-21 09:49 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2011-06-21 09:49 . 2011-06-21 09:49 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2011-03-23 14:49 . 2011-03-23 14:49 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2011-03-23 14:50 . 2011-03-23 14:50 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2011-06-21 09:49 . 2011-06-21 09:49 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2011-06-21 09:49 . 2011-06-21 09:49 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-03-23 14:49 . 2011-03-23 14:49 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2011-06-21 09:49 . 2011-06-21 09:49 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll - 2011-03-23 14:49 . 2011-03-23 14:49 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll - 2008-05-05 05:25 . 2010-08-27 01:43 5632 c:\windows\system32\xpsp4res.dll + 2008-05-05 05:25 . 2011-02-17 12:54 5632 c:\windows\system32\xpsp4res.dll + 2011-06-21 09:49 . 2011-06-21 09:49 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2011-03-23 14:49 . 2011-03-23 14:49 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2011-06-21 09:49 . 2011-06-21 09:49 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2011-03-23 14:50 . 2011-03-23 14:50 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2011-06-21 09:49 . 2011-06-21 09:49 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2011-03-23 14:49 . 2011-03-23 14:49 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2011-06-21 09:49 . 2011-06-21 09:49 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2011-03-23 14:49 . 2011-03-23 14:49 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2011-06-21 09:49 . 2011-06-21 09:49 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll - 2011-03-23 14:50 . 2011-03-23 14:50 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll - 2011-03-23 14:50 . 2011-03-23 14:50 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2011-06-21 09:49 . 2011-06-21 09:49 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2011-04-18 20:51 . 2011-04-18 20:51 653136 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll + 2011-04-18 20:51 . 2011-04-18 20:51 569680 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll + 2011-04-18 20:51 . 2011-04-18 20:51 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcm90.dll + 2011-04-18 20:51 . 2011-04-18 20:51 159048 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll + 2011-05-13 23:17 . 2011-05-13 23:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll + 2011-05-13 23:12 . 2011-05-13 23:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll + 2011-05-13 23:11 . 2011-05-13 23:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll + 2009-02-28 17:31 . 2011-04-25 15:44 233472 c:\windows\system32\webcheck.dll - 2009-02-28 17:31 . 2010-12-20 23:06 233472 c:\windows\system32\webcheck.dll + 2009-02-28 17:31 . 2011-03-04 06:44 434176 c:\windows\system32\vbscript.dll - 2009-02-28 17:31 . 2010-12-20 23:06 105984 c:\windows\system32\url.dll + 2009-02-28 17:31 . 2011-04-25 15:44 105984 c:\windows\system32\url.dll + 2009-02-28 17:31 . 2011-06-21 10:48 436936 c:\windows\system32\perfh009.dat - 2009-02-28 17:31 . 2011-06-20 15:13 436936 c:\windows\system32\perfh009.dat - 2009-02-28 17:31 . 2011-06-20 15:13 454056 c:\windows\system32\perfh007.dat + 2009-02-28 17:31 . 2011-06-21 10:48 454056 c:\windows\system32\perfh007.dat + 2009-02-28 17:31 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll - 2009-02-28 17:31 . 2008-04-14 12:00 551936 c:\windows\system32\oleaut32.dll - 2009-02-28 17:31 . 2010-12-20 23:06 102912 c:\windows\system32\occache.dll + 2009-02-28 17:31 . 2011-04-25 15:44 102912 c:\windows\system32\occache.dll - 2009-02-28 17:31 . 2008-06-20 17:46 247296 c:\windows\system32\mswsock.dll + 2009-02-28 17:31 . 2008-06-20 16:02 247296 c:\windows\system32\mswsock.dll - 2009-02-28 17:31 . 2010-12-20 23:06 671232 c:\windows\system32\mstime.dll + 2009-02-28 17:31 . 2011-04-25 15:44 671232 c:\windows\system32\mstime.dll + 2009-02-28 17:31 . 2011-04-25 15:44 193024 c:\windows\system32\msrating.dll - 2009-02-28 17:31 . 2010-12-20 23:06 193024 c:\windows\system32\msrating.dll + 2009-02-28 17:31 . 2011-04-25 15:44 478208 c:\windows\system32\mshtmled.dll - 2009-02-28 17:31 . 2010-12-20 23:06 478208 c:\windows\system32\mshtmled.dll - 2007-08-13 17:54 . 2010-12-20 23:06 468480 c:\windows\system32\msfeeds.dll + 2007-08-13 17:54 . 2011-04-25 15:44 468480 c:\windows\system32\msfeeds.dll + 2009-02-28 17:31 . 2011-02-08 13:33 974848 c:\windows\system32\mfc42u.dll - 2009-02-28 17:31 . 2010-09-18 11:22 974848 c:\windows\system32\mfc42u.dll + 2009-02-28 17:31 . 2011-02-08 13:33 978944 c:\windows\system32\mfc42.dll + 2009-02-28 17:31 . 2011-03-04 06:44 512000 c:\windows\system32\jscript.dll - 2009-02-28 17:31 . 2009-08-13 15:15 512000 c:\windows\system32\jscript.dll - 2007-08-13 17:34 . 2010-12-20 23:06 268288 c:\windows\system32\iertutil.dll + 2007-08-13 17:34 . 2011-04-25 15:44 268288 c:\windows\system32\iertutil.dll + 2009-02-28 17:31 . 2011-04-25 15:44 192512 c:\windows\system32\iepeers.dll - 2009-02-28 17:31 . 2010-12-20 23:06 192512 c:\windows\system32\iepeers.dll + 2009-02-28 17:31 . 2011-04-25 15:44 384512 c:\windows\system32\iedkcs32.dll - 2009-02-28 17:31 . 2010-12-20 23:06 384512 c:\windows\system32\iedkcs32.dll - 2007-07-11 11:27 . 2010-12-20 23:06 380928 c:\windows\system32\ieapfltr.dll + 2007-07-11 11:27 . 2011-04-25 15:44 380928 c:\windows\system32\ieapfltr.dll - 2009-02-28 17:31 . 2010-12-20 11:23 161792 c:\windows\system32\ieakui.dll + 2009-02-28 17:31 . 2011-04-21 10:56 161792 c:\windows\system32\ieakui.dll - 2009-02-28 17:31 . 2010-12-20 23:06 230400 c:\windows\system32\ieaksie.dll + 2009-02-28 17:31 . 2011-04-25 15:44 230400 c:\windows\system32\ieaksie.dll - 2009-02-28 17:31 . 2010-12-20 23:06 153088 c:\windows\system32\ieakeng.dll + 2009-02-28 17:31 . 2011-04-25 15:44 153088 c:\windows\system32\ieakeng.dll + 2009-02-28 08:45 . 2011-02-11 14:44 236032 c:\windows\system32\fxscover.exe + 2009-02-28 08:43 . 2011-06-21 06:56 342624 c:\windows\system32\FNTCACHE.DAT - 2009-02-28 08:43 . 2011-03-28 09:15 342624 c:\windows\system32\FNTCACHE.DAT + 2009-02-28 17:31 . 2011-04-25 15:44 133120 c:\windows\system32\extmgr.dll - 2009-02-28 17:31 . 2010-12-20 23:06 133120 c:\windows\system32\extmgr.dll - 2009-02-28 17:31 . 2010-12-20 23:06 214528 c:\windows\system32\dxtrans.dll + 2009-02-28 17:31 . 2011-04-25 15:44 214528 c:\windows\system32\dxtrans.dll + 2009-02-28 17:31 . 2011-04-25 15:44 347136 c:\windows\system32\dxtmsft.dll - 2009-02-28 17:31 . 2010-12-20 23:06 347136 c:\windows\system32\dxtmsft.dll + 2009-02-28 17:31 . 2011-02-17 13:18 357888 c:\windows\system32\drivers\srv.sys + 2009-02-28 17:31 . 2011-02-16 13:22 138496 c:\windows\system32\drivers\afd.sys - 2009-02-28 17:31 . 2008-08-14 10:04 138496 c:\windows\system32\drivers\afd.sys + 2009-02-28 17:31 . 2011-03-03 06:54 149504 c:\windows\system32\dnsapi.dll + 2009-02-28 17:31 . 2011-04-25 15:44 832512 c:\windows\system32\dllcache\wininet.dll - 2009-02-28 17:31 . 2010-12-20 23:06 832512 c:\windows\system32\dllcache\wininet.dll - 2009-02-28 17:31 . 2010-12-20 23:06 233472 c:\windows\system32\dllcache\webcheck.dll + 2009-02-28 17:31 . 2011-04-25 15:44 233472 c:\windows\system32\dllcache\webcheck.dll + 2009-02-28 08:47 . 2011-04-30 08:50 766464 c:\windows\system32\dllcache\vgx.dll + 2009-02-28 17:31 . 2011-03-04 06:44 434176 c:\windows\system32\dllcache\vbscript.dll - 2009-02-28 17:31 . 2010-12-20 23:06 105984 c:\windows\system32\dllcache\url.dll + 2009-02-28 17:31 . 2011-04-25 15:44 105984 c:\windows\system32\dllcache\url.dll + 2009-02-28 17:31 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys + 2009-02-28 17:31 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll - 2009-02-28 17:31 . 2008-04-14 12:00 551936 c:\windows\system32\dllcache\oleaut32.dll + 2009-02-28 17:31 . 2011-04-25 15:44 102912 c:\windows\system32\dllcache\occache.dll - 2009-02-28 17:31 . 2010-12-20 23:06 102912 c:\windows\system32\dllcache\occache.dll + 2009-02-28 17:31 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys - 2009-02-28 17:31 . 2008-06-20 17:46 247296 c:\windows\system32\dllcache\mswsock.dll + 2009-02-28 17:31 . 2008-06-20 16:02 247296 c:\windows\system32\dllcache\mswsock.dll + 2009-02-28 17:31 . 2011-04-25 15:44 671232 c:\windows\system32\dllcache\mstime.dll - 2009-02-28 17:31 . 2010-12-20 23:06 671232 c:\windows\system32\dllcache\mstime.dll + 2009-02-28 17:31 . 2011-04-25 15:44 193024 c:\windows\system32\dllcache\msrating.dll - 2009-02-28 17:31 . 2010-12-20 23:06 193024 c:\windows\system32\dllcache\msrating.dll + 2009-02-28 17:31 . 2011-04-25 15:44 478208 c:\windows\system32\dllcache\mshtmled.dll - 2009-02-28 17:31 . 2010-12-20 23:06 478208 c:\windows\system32\dllcache\mshtmled.dll + 2010-01-05 09:52 . 2011-04-25 15:44 468480 c:\windows\system32\dllcache\msfeeds.dll - 2010-01-05 09:52 . 2010-12-20 23:06 468480 c:\windows\system32\dllcache\msfeeds.dll + 2009-02-28 09:28 . 2011-04-29 16:19 456320 c:\windows\system32\dllcache\mrxsmb.sys - 2009-02-28 17:31 . 2010-09-18 11:22 974848 c:\windows\system32\dllcache\mfc42u.dll + 2009-02-28 17:31 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll + 2009-02-28 17:31 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll + 2009-02-28 17:31 . 2011-03-04 06:44 512000 c:\windows\system32\dllcache\jscript.dll - 2009-02-28 17:31 . 2009-08-13 15:15 512000 c:\windows\system32\dllcache\jscript.dll + 2009-02-28 08:46 . 2011-05-02 15:31 692736 c:\windows\system32\dllcache\inetcomm.dll - 2009-02-28 08:46 . 2010-06-09 07:43 692736 c:\windows\system32\dllcache\inetcomm.dll + 2009-02-28 08:46 . 2011-04-21 10:58 634648 c:\windows\system32\dllcache\iexplore.exe - 2009-02-28 08:46 . 2010-12-20 11:25 634648 c:\windows\system32\dllcache\iexplore.exe + 2010-01-05 09:52 . 2011-04-25 15:44 268288 c:\windows\system32\dllcache\iertutil.dll - 2010-01-05 09:52 . 2010-12-20 23:06 268288 c:\windows\system32\dllcache\iertutil.dll - 2009-02-28 17:31 . 2010-12-20 23:06 192512 c:\windows\system32\dllcache\iepeers.dll + 2009-02-28 17:31 . 2011-04-25 15:44 192512 c:\windows\system32\dllcache\iepeers.dll + 2009-02-28 17:31 . 2011-04-25 15:44 384512 c:\windows\system32\dllcache\iedkcs32.dll - 2009-02-28 17:31 . 2010-12-20 23:06 384512 c:\windows\system32\dllcache\iedkcs32.dll + 2010-01-05 09:52 . 2011-04-25 15:44 380928 c:\windows\system32\dllcache\ieapfltr.dll - 2010-01-05 09:52 . 2010-12-20 23:06 380928 c:\windows\system32\dllcache\ieapfltr.dll + 2009-02-28 17:31 . 2011-04-21 10:56 161792 c:\windows\system32\dllcache\ieakui.dll - 2009-02-28 17:31 . 2010-12-20 11:23 161792 c:\windows\system32\dllcache\ieakui.dll - 2009-02-28 17:31 . 2010-12-20 23:06 230400 c:\windows\system32\dllcache\ieaksie.dll + 2009-02-28 17:31 . 2011-04-25 15:44 230400 c:\windows\system32\dllcache\ieaksie.dll + 2009-02-28 17:31 . 2011-04-25 15:44 153088 c:\windows\system32\dllcache\ieakeng.dll - 2009-02-28 17:31 . 2010-12-20 23:06 153088 c:\windows\system32\dllcache\ieakeng.dll + 2009-02-28 08:45 . 2011-02-11 14:44 236032 c:\windows\system32\dllcache\fxscover.exe + 2009-02-28 17:31 . 2011-04-25 15:44 133120 c:\windows\system32\dllcache\extmgr.dll - 2009-02-28 17:31 . 2010-12-20 23:06 133120 c:\windows\system32\dllcache\extmgr.dll + 2009-02-28 17:31 . 2011-04-25 15:44 214528 c:\windows\system32\dllcache\dxtrans.dll - 2009-02-28 17:31 . 2010-12-20 23:06 214528 c:\windows\system32\dllcache\dxtrans.dll + 2009-02-28 17:31 . 2011-04-25 15:44 347136 c:\windows\system32\dllcache\dxtmsft.dll - 2009-02-28 17:31 . 2010-12-20 23:06 347136 c:\windows\system32\dllcache\dxtmsft.dll + 2009-02-28 17:31 . 2011-03-03 06:54 149504 c:\windows\system32\dllcache\dnsapi.dll + 2009-02-28 17:31 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll + 2009-02-28 17:31 . 2011-02-16 13:22 138496 c:\windows\system32\dllcache\afd.sys - 2009-02-28 17:31 . 2008-08-14 10:04 138496 c:\windows\system32\dllcache\afd.sys - 2009-02-28 17:31 . 2010-12-20 23:06 124928 c:\windows\system32\dllcache\advpack.dll + 2009-02-28 17:31 . 2011-04-25 15:44 124928 c:\windows\system32\dllcache\advpack.dll + 2009-02-28 17:31 . 2011-02-15 12:56 290432 c:\windows\system32\atmfd.dll - 2009-02-28 17:31 . 2010-12-20 23:06 124928 c:\windows\system32\advpack.dll + 2009-02-28 17:31 . 2011-04-25 15:44 124928 c:\windows\system32\advpack.dll + 2011-02-11 14:44 . 2011-02-11 14:44 236032 c:\windows\ServicePackFiles\ServicePackCache\i386\fxscover.exe + 2011-03-25 04:15 . 2011-03-25 04:15 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll - 2010-05-11 04:40 . 2010-05-11 04:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2011-03-25 04:15 . 2011-03-25 04:15 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2011-03-25 04:15 . 2011-03-25 04:15 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll - 2010-05-11 04:40 . 2010-05-11 04:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2011-06-20 20:50 . 2011-06-20 20:50 223744 c:\windows\Installer\9221b7.msi + 2010-10-23 00:18 . 2010-10-23 00:18 127488 c:\windows\Installer\9221b0.msp + 2011-06-20 20:40 . 2011-06-20 20:40 467456 c:\windows\Installer\922138.msi + 2010-09-16 20:18 . 2011-06-20 20:48 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe - 2010-09-16 20:18 . 2011-03-28 06:13 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe + 2010-09-16 20:18 . 2011-06-20 20:48 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe - 2010-09-16 20:18 . 2011-03-28 06:13 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe - 2010-09-16 20:18 . 2011-03-28 06:13 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe + 2010-09-16 20:18 . 2011-06-20 20:48 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe - 2010-09-16 20:18 . 2011-03-28 06:13 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe + 2010-09-16 20:18 . 2011-06-20 20:48 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe + 2011-06-20 20:50 . 2008-05-27 17:23 765952 c:\windows\ie7updates\KB2544521-IE7\vgx.dll + 2011-06-20 20:50 . 2010-07-05 13:14 388984 c:\windows\ie7updates\KB2544521-IE7\spuninst\updspapi.dll + 2011-06-20 20:50 . 2010-07-05 13:14 234872 c:\windows\ie7updates\KB2544521-IE7\spuninst\spuninst.exe + 2011-06-20 20:54 . 2010-12-20 23:06 832512 c:\windows\ie7updates\KB2530548-IE7\wininet.dll + 2011-06-20 20:54 . 2010-12-20 23:06 233472 c:\windows\ie7updates\KB2530548-IE7\webcheck.dll + 2011-06-20 20:54 . 2010-12-20 23:06 105984 c:\windows\ie7updates\KB2530548-IE7\url.dll + 2011-06-20 20:54 . 2010-07-05 13:14 388984 c:\windows\ie7updates\KB2530548-IE7\spuninst\updspapi.dll + 2011-06-20 20:54 . 2010-07-05 13:14 234872 c:\windows\ie7updates\KB2530548-IE7\spuninst\spuninst.exe + 2011-06-20 20:54 . 2010-12-20 23:06 102912 c:\windows\ie7updates\KB2530548-IE7\occache.dll + 2011-06-20 20:54 . 2010-12-20 23:06 671232 c:\windows\ie7updates\KB2530548-IE7\mstime.dll + 2011-06-20 20:54 . 2010-12-20 23:06 193024 c:\windows\ie7updates\KB2530548-IE7\msrating.dll + 2011-06-20 20:54 . 2010-12-20 23:06 478208 c:\windows\ie7updates\KB2530548-IE7\mshtmled.dll + 2011-06-20 20:54 . 2010-12-20 23:06 468480 c:\windows\ie7updates\KB2530548-IE7\msfeeds.dll + 2011-06-20 20:54 . 2010-12-20 11:25 634648 c:\windows\ie7updates\KB2530548-IE7\iexplore.exe + 2011-06-20 20:54 . 2010-12-20 23:06 268288 c:\windows\ie7updates\KB2530548-IE7\iertutil.dll + 2011-06-20 20:54 . 2010-12-20 23:06 192512 c:\windows\ie7updates\KB2530548-IE7\iepeers.dll + 2011-06-20 20:54 . 2010-12-20 23:06 384512 c:\windows\ie7updates\KB2530548-IE7\iedkcs32.dll + 2011-06-20 20:54 . 2010-12-20 23:06 380928 c:\windows\ie7updates\KB2530548-IE7\ieapfltr.dll + 2011-06-20 20:54 . 2010-12-20 11:23 161792 c:\windows\ie7updates\KB2530548-IE7\ieakui.dll + 2011-06-20 20:54 . 2010-12-20 23:06 230400 c:\windows\ie7updates\KB2530548-IE7\ieaksie.dll + 2011-06-20 20:54 . 2010-12-20 23:06 153088 c:\windows\ie7updates\KB2530548-IE7\ieakeng.dll + 2011-06-20 20:54 . 2010-12-20 23:06 133120 c:\windows\ie7updates\KB2530548-IE7\extmgr.dll + 2011-06-20 20:54 . 2010-12-20 23:06 214528 c:\windows\ie7updates\KB2530548-IE7\dxtrans.dll + 2011-06-20 20:54 . 2010-12-20 23:06 347136 c:\windows\ie7updates\KB2530548-IE7\dxtmsft.dll + 2011-06-20 20:54 . 2010-12-20 23:06 124928 c:\windows\ie7updates\KB2530548-IE7\advpack.dll + 2011-06-21 11:04 . 2011-06-21 11:04 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\8ba27eaa0f7d987f92319c64aefd2e98\WsatConfig.ni.exe + 2011-06-21 10:30 . 2011-06-21 10:30 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\e35bee0f224efe574608370f536d8ebc\WindowsLiveLocal.WriterPlugin.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\eb4871cbcebc4a226a6c7eb682e6f040\WindowsLive.Writer.Passport.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e7e80ec67096c4310845b6b12db3d389\WindowsLive.Writer.HtmlEditor.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d78f83ddd58e30d6b7beb63b7534f092\WindowsLive.Writer.Interop.SHDocVw.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c2a77f6420de112dee89c194fe00156e\WindowsLive.Writer.Extensibility.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bab63c4ebf0030221694e2d918e3b54d\WindowsLive.Writer.Interop.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9c19342a016c3963e7ce77a43d352be2\WindowsLive.Writer.BlogClient.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7c880551adc6bae9c8ef7491a18f6adc\WindowsLive.Writer.Interop.Mshtml.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\76132671cbbd97c4501948fa9ea01a02\WindowsLive.Writer.Mshtml.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5a91ee382585b6033b636e6342324217\WindowsLive.Writer.HtmlParser.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\54a89119959017e4abd48234e8ebddce\WindowsLive.Writer.FileDestinations.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4a04dd885c3b0b98cc10f3058af9be10\WindowsLive.Writer.Controls.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3f5a18aa50fc474f456b532e4d3eb245\WindowsLive.Writer.Localization.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3c07f0235745c04d6881daf936a69f8a\WindowsLive.Writer.BrowserControl.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3a2aa42d36b1ccbd377d0813a5526083\WindowsLive.Writer.Instrumentation.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0634673ca4dcb9072881476e55538995\WindowsLive.Writer.SpellChecker.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\5cf7c3191cf1e95d7049952235751f3b\WindowsLive.Client.ni.dll + 2011-06-21 09:56 . 2011-06-21 09:56 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\431d5dc1cfcc0c0530e813f370931670\WindowsFormsIntegration.ni.dll + 2011-06-21 09:56 . 2011-06-21 09:56 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\3740d6db28af31a6523a79fcdd71fbeb\UIAutomationTypes.ni.dll + 2011-06-21 09:56 . 2011-06-21 09:56 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\00dfe5563886a1f69c96b3acb839107b\UIAutomationClient.ni.dll + 2011-06-21 12:32 . 2011-06-21 12:32 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\80187a9cfed4fd0ec82746495be76764\System.Xml.Linq.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\58c421c537b1c3f3878458ad306b2a42\System.Web.Routing.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\dc26fff00ce95d24fd190f38904bb2b3\System.Web.RegularExpressions.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4e3dd4d7f9aeda74a2fcefee036e5070\System.Web.Extensions.Design.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\4fb1c0c07f40248b463f2e33444b9477\System.Web.Entity.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\4dfcffc6e6d02bdcdc185d5527a8097e\System.Web.Entity.Design.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\4b921d1cffcd5e80ea14c51db967edd6\System.Web.DynamicData.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\702b506e56d3a7051aea7822cd915c7f\System.Web.Abstractions.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\7c430c38d71d632c019ae37d5ef12c8e\System.Transactions.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\0f3d321ebd65af974ff0ad424223276d\System.ServiceProcess.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\e4bcb14e8e53c8dcaff3d2c20daf746e\System.Security.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\503ccbb50e9c06c2f0b02ad8c3f2d100\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\bdaf7904d223589a0f464de58d27e691\System.Runtime.Remoting.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\ac53723e41898bc0e8a591c2e4f6f39b\System.Net.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\19280e723d215c0d6607d3884f453cdf\System.Management.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\4a3a674008d8102c1aa5b3fc18251ef7\System.Management.Instrumentation.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7f5f5bfd5f8d6587c96870751a6eb44d\System.IO.Log.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\de1bf796614ca11afd9fab95edb1b4e2\System.IdentityModel.Selectors.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\94aae9e592c0f104120572f9925fca12\System.EnterpriseServices.Wrapper.dll + 2011-06-21 10:30 . 2011-06-21 10:30 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\94aae9e592c0f104120572f9925fca12\System.EnterpriseServices.ni.dll + 2011-06-21 09:55 . 2011-06-21 09:55 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\1af8683e05c42eb32f46578fe5a8f83f\System.Drawing.Design.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\791a6643b70542b148d977ff42f2f2ef\System.DirectoryServices.Protocols.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\31759ad8be21735f0a369c37514c2efc\System.DirectoryServices.AccountManagement.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\df507a4500e73fa4cfc13f65a1c9055e\System.Data.Services.Client.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\d1778fffc09d783bc90512b65d35be66\System.Data.Services.Design.ni.dll + 2011-06-21 12:29 . 2011-06-21 12:29 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\5a47a8bf16370c93b3c6a471e48cc67a\System.Data.Entity.Design.ni.dll + 2011-06-21 12:27 . 2011-06-21 12:27 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\50492d147392c238edc5a614beccb91b\System.Data.DataSetExtensions.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\48f8b951a598647dd309ca2031807a5d\System.Configuration.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\fa21b6c9badcf916bb254b4b823c2463\System.Configuration.Install.ni.dll + 2011-06-21 10:26 . 2011-06-21 10:26 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\77015cc1e6d9e7d20e63903777afd6df\System.AddIn.ni.dll + 2011-06-21 11:04 . 2011-06-21 11:04 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6ca41c7917119c3a9de0bcdca525001d\SMSvcHost.ni.exe + 2011-06-21 10:31 . 2011-06-21 10:31 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8ff6d395f8861384bc9bfbe34cafb64e\SMDiagnostics.ni.dll + 2011-06-21 10:31 . 2011-06-21 10:31 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\67dc00c24e551003f6dacb73fe9cf881\ServiceModelReg.ni.exe + 2011-06-21 09:53 . 2011-06-21 09:53 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e468e9265c844f74577530e4df71f120\PresentationFramework.Aero.ni.dll + 2011-06-21 09:53 . 2011-06-21 09:53 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\959709491c71caef88fb41b0eb159714\PresentationFramework.Classic.ni.dll + 2011-06-21 09:53 . 2011-06-21 09:53 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\807b62468c2893ee943dffff63a34d8d\PresentationFramework.Royale.ni.dll + 2011-06-21 09:53 . 2011-06-21 09:53 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\6cf82f370413a2cd1e6bc54060334753\PresentationFramework.Luna.ni.dll + 2011-06-21 11:04 . 2011-06-21 11:04 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\0add35a0fbe0c381c998b651c5979902\MSBuild.ni.exe + 2011-06-21 10:27 . 2011-06-21 10:27 192000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ff24473a5b2dda08b8ae390b6e75d1a8\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll + 2011-06-21 12:13 . 2011-06-21 12:13 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\db1a94f676561eb282639bcd5c987191\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll + 2011-06-21 12:13 . 2011-06-21 12:13 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d54a7d04e0a66a9f4e50472163b9c273\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 183808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c2c2d019ce1cdbd3cf3b549ff3a9f51f\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll + 2011-06-21 12:14 . 2011-06-21 12:14 137728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ac7145ed1610c3db5bba4725e664b7a8\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a85212e9f79ad6684db62e3c3610e8ed\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll + 2011-06-21 12:14 . 2011-06-21 12:14 153088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\986f6ee54b97ba767e96bbd589351338\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.resources.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 365056 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8a3207dbcdc2102f9c64e4b51cb2825b\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll + 2011-06-21 10:26 . 2011-06-21 10:26 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8185d8f05fe0811bcbebbbbc314d2513\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4e12d226960964fb732a6980b95cbcbc\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll + 2011-06-21 12:13 . 2011-06-21 12:13 664064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4b90b15dd3293d7a8195253b5d3dfce6\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2f452825f2a8fe43338b4e87b768c52a\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\23d5384b9adc1c91d202e90bf7c56e54\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll + 2011-06-21 12:13 . 2011-06-21 12:13 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\22b0d7a7d1c2d41d51948a6f3c6938f4\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll + 2011-06-21 12:13 . 2011-06-21 12:13 146944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1f8c9ad39ddd71c4d41866f942f7d425\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll + 2011-06-21 12:14 . 2011-06-21 12:14 622080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\18cb2f69043e587e2ffd18eb13037add\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll + 2011-06-21 10:31 . 2011-06-21 10:31 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\667dc256d9eb3577f2514c89c5974aff\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 947200 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\f032b2116b476ac40112f49fd54d0322\Microsoft.Office.Tools.Excel.v9.0.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 658944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\d94fe7212ab25239a53d309867204d63\Microsoft.Office.Tools.Word.v9.0.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 155648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\4dad0e7f76132ae6e9604af31f6a81d4\Microsoft.Office.Tools.Outlook.v9.0.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 815616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\4895e7a8351a5e9764a0ba4085ca5800\Microsoft.Office.Tools.Common.v9.0.ni.dll + 2011-06-21 10:26 . 2011-06-21 10:26 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\108a83d4af91e2662eaa2db1aa88ebf9\Microsoft.Office.Tools.v9.0.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d5561a4ad04c22f0eb5acf4736c7936e\Microsoft.Build.Utilities.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\1a0623063225521aa43044314cc5e721\Microsoft.Build.Utilities.v3.5.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\530f98922474a31636c34fa3db9a63ba\Microsoft.Build.Engine.ni.dll + 2011-06-21 11:04 . 2011-06-21 11:04 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\7e75fca3ca1f36df8ac624190d9cd283\Microsoft.Build.Conversion.v3.5.ni.dll + 2011-06-21 11:04 . 2011-06-21 11:04 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\80bd17388778c90f301746ad88700758\CustomMarshalers.ni.dll + 2011-06-21 10:31 . 2011-06-21 10:31 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\c0f5f3c318a92212bbe3b413eeb2b374\ComSvcConfig.ni.exe + 2011-06-21 10:26 . 2011-06-21 10:26 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\0524928cbd0a686db3960ef688d0d37e\AspNetMMCExt.ni.dll + 2011-06-21 09:49 . 2011-06-21 09:49 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2011-03-23 14:49 . 2011-03-23 14:49 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2011-06-21 09:49 . 2011-06-21 09:49 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2011-03-23 14:49 . 2011-03-23 14:49 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2011-06-21 09:49 . 2011-06-21 09:49 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2011-03-23 14:50 . 2011-03-23 14:50 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2011-06-21 09:49 . 2011-06-21 09:49 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2011-03-23 14:50 . 2011-03-23 14:50 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2011-03-23 14:50 . 2011-03-23 14:50 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2011-06-21 09:49 . 2011-06-21 09:49 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2011-06-21 09:49 . 2011-06-21 09:49 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2011-03-23 14:50 . 2011-03-23 14:50 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2011-03-23 14:50 . 2011-03-23 14:50 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2011-06-21 09:49 . 2011-06-21 09:49 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2011-06-21 09:49 . 2011-06-21 09:49 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2011-03-23 14:50 . 2011-03-23 14:50 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2011-03-23 14:50 . 2011-03-23 14:50 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2011-06-21 09:49 . 2011-06-21 09:49 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2011-03-23 14:50 . 2011-03-23 14:50 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2011-06-21 09:49 . 2011-06-21 09:49 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2011-06-21 09:49 . 2011-06-21 09:49 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2011-03-23 14:49 . 2011-03-23 14:49 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2011-03-23 14:50 . 2011-03-23 14:50 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2011-06-21 09:49 . 2011-06-21 09:49 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2011-03-23 14:50 . 2011-03-23 14:50 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2011-06-21 09:49 . 2011-06-21 09:49 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2011-03-23 14:50 . 2011-03-23 14:50 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2011-06-21 09:49 . 2011-06-21 09:49 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2011-03-23 14:50 . 2011-03-23 14:50 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2011-06-21 09:49 . 2011-06-21 09:49 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2011-06-21 09:49 . 2011-06-21 09:49 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2011-03-23 14:50 . 2011-03-23 14:50 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2011-06-21 09:49 . 2011-06-21 09:49 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2011-03-23 14:50 . 2011-03-23 14:50 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2011-06-21 09:49 . 2011-06-21 09:49 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2011-03-23 14:50 . 2011-03-23 14:50 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2011-06-21 09:49 . 2011-06-21 09:49 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2011-03-23 14:50 . 2011-03-23 14:50 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2011-03-23 14:50 . 2011-03-23 14:50 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2011-06-21 09:49 . 2011-06-21 09:49 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2011-03-23 14:50 . 2011-03-23 14:50 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2011-06-21 09:49 . 2011-06-21 09:49 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2011-03-23 14:49 . 2011-03-23 14:49 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2011-06-21 09:49 . 2011-06-21 09:49 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2011-06-21 09:49 . 2011-06-21 09:49 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2011-03-23 14:50 . 2011-03-23 14:50 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2011-03-23 14:50 . 2011-03-23 14:50 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2011-06-21 09:49 . 2011-06-21 09:49 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2011-06-21 09:49 . 2011-06-21 09:49 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-03-23 14:50 . 2011-03-23 14:50 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2011-06-21 09:49 . 2011-06-21 09:49 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2011-03-23 14:50 . 2011-03-23 14:50 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2011-06-20 20:14 . 2010-10-23 00:50 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll + 2011-04-18 20:51 . 2011-04-18 20:51 3781960 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll + 2011-04-18 20:51 . 2011-04-18 20:51 3766600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90.dll + 2011-05-13 18:04 . 2011-05-13 18:04 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80u.dll + 2011-05-13 18:04 . 2011-05-13 18:04 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80.dll + 2009-02-28 17:31 . 2011-03-03 13:53 1858048 c:\windows\system32\win32k.sys + 2009-02-28 17:31 . 2011-04-25 15:44 1168896 c:\windows\system32\urlmon.dll + 2009-02-28 17:31 . 2011-04-25 15:44 3608576 c:\windows\system32\mshtml.dll + 2007-08-13 17:54 . 2011-04-25 15:44 6076416 c:\windows\system32\ieframe.dll + 2009-02-28 17:31 . 2011-03-03 13:53 1858048 c:\windows\system32\dllcache\win32k.sys + 2009-02-28 17:31 . 2011-04-25 15:44 1168896 c:\windows\system32\dllcache\urlmon.dll + 2009-02-28 17:31 . 2011-04-25 15:44 3608576 c:\windows\system32\dllcache\mshtml.dll + 2010-01-05 09:52 . 2011-04-25 15:44 6076416 c:\windows\system32\dllcache\ieframe.dll - 2008-07-25 09:17 . 2008-07-25 09:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2011-03-25 04:15 . 2011-03-25 04:15 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2011-01-18 02:39 . 2011-01-18 02:39 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll - 2010-03-23 03:32 . 2010-03-23 03:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2011-03-25 04:15 . 2011-03-25 04:15 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2011-03-25 04:15 . 2011-03-25 04:15 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2010-05-11 04:40 . 2010-05-11 04:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2011-01-18 21:36 . 2011-01-18 21:36 2687488 c:\windows\Installer\974ba5.msp + 2011-04-29 10:28 . 2011-04-29 10:28 1995264 c:\windows\Installer\9221be.msp + 2010-10-23 00:18 . 2010-10-23 00:18 1508864 c:\windows\Installer\9221aa.msp + 2011-03-17 17:20 . 2011-03-17 17:20 1961984 c:\windows\Installer\9221a3.msp + 2011-04-29 10:33 . 2011-04-29 10:33 8173568 c:\windows\Installer\922173.msp + 2011-03-17 18:01 . 2011-03-17 18:01 9563648 c:\windows\Installer\92215c.msp + 2011-03-17 17:27 . 2011-03-17 17:27 3462656 c:\windows\Installer\922154.msp + 2010-11-20 21:33 . 2010-11-20 21:33 1980928 c:\windows\Installer\92213f.msp + 2011-04-29 10:30 . 2011-04-29 10:30 1197056 c:\windows\Installer\92212a.msp - 2010-09-16 20:18 . 2011-03-28 06:13 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe + 2010-09-16 20:18 . 2011-06-20 20:48 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe - 2010-09-16 20:18 . 2011-03-28 06:13 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe + 2010-09-16 20:18 . 2011-06-20 20:48 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe - 2010-09-16 20:18 . 2011-03-28 06:13 4520288 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe + 2010-09-16 20:18 . 2011-06-20 20:48 4520288 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe + 2010-09-16 20:18 . 2011-06-20 20:48 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe - 2010-09-16 20:18 . 2011-03-28 06:13 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe + 2010-09-16 20:18 . 2011-06-20 20:48 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe - 2010-09-16 20:18 . 2011-03-28 06:13 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe + 2010-03-24 18:28 . 2010-03-24 18:28 1479520 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\XLICONS.EXE + 2010-03-24 18:28 . 2010-03-24 18:28 3792736 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\PPTICO.EXE + 2010-03-09 07:57 . 2010-03-09 07:57 9696616 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\PPCORE.DLL + 2011-06-20 20:54 . 2010-12-20 23:06 1168384 c:\windows\ie7updates\KB2530548-IE7\urlmon.dll + 2011-06-20 20:54 . 2010-12-20 23:06 3606528 c:\windows\ie7updates\KB2530548-IE7\mshtml.dll + 2011-06-20 20:54 . 2010-12-20 23:06 6075904 c:\windows\ie7updates\KB2530548-IE7\ieframe.dll + 2011-06-21 10:29 . 2011-06-21 10:29 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6eab790bbaef82c6899096a435feb42d\WindowsLive.Writer.PostEditor.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4d11f51df2834a010e71c1042d21a6d8\WindowsLive.Writer.ApplicationFramework.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 2002944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\20c26b4bb15c136429f6d5ad6f3c68ab\WindowsLive.Writer.CoreServices.ni.dll + 2011-06-21 09:52 . 2011-06-21 09:52 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\11526c1635b97a7d49e25e72ed6e9662\WindowsBase.ni.dll + 2011-06-21 09:56 . 2011-06-21 09:56 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\901c3796073853746fecd8979c679494\UIAutomationClientsideProviders.ni.dll + 2011-06-21 09:51 . 2011-06-21 09:51 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\f6a9a002526806f3a5b745cf5c407cae\System.ni.dll + 2011-06-21 09:56 . 2011-06-21 09:56 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f354057a5b4fad4c399da28449ba0d92\System.Xml.ni.dll + 2011-06-21 12:32 . 2011-06-21 12:32 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\2877dda3e0f0faeba527b4bf1efe9cb5\System.WorkflowServices.ni.dll + 2011-06-21 12:32 . 2011-06-21 12:32 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\d7cb3697989fe6fa3a08d2821d38aa5e\System.Workflow.Runtime.ni.dll + 2011-06-21 12:32 . 2011-06-21 12:32 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\4ac04107c35485d415f9e1bebfd155dd\System.Workflow.ComponentModel.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\2169feb8bd57d96e621fa26d9391d463\System.Workflow.Activities.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f31f1579160d87470cba918f06276e0d\System.Web.Services.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\bdad1c0f4eb846543b234353fd2b926f\System.Web.Mobile.ni.dll + 2011-06-21 12:31 . 2011-06-21 12:31 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\647bfe6da40e8160b967c41424901dc8\System.Web.Extensions.ni.dll + 2011-06-21 09:55 . 2011-06-21 09:55 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\2047e63293e067b351b8f0e038253f33\System.Speech.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ead07662976fb7094811461c568643d5\System.ServiceModel.Web.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c889a45c82004537f1620dd3b211af66\System.Runtime.Serialization.ni.dll + 2011-06-21 09:55 . 2011-06-21 09:55 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\c64aa916251a45206a805ab6488b9255\System.Printing.ni.dll + 2011-06-21 10:27 . 2011-06-21 10:27 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\a8039af85f459c19c041313f9fe0d7e8\System.IdentityModel.ni.dll + 2011-06-21 09:55 . 2011-06-21 09:55 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\a59b17e6040e3f6286a2227dfdb17096\System.Drawing.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\55211bc8f4fcff47c05bfc3020d97148\System.DirectoryServices.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\f9ff2fb342cd5102e2d95883b3433a5d\System.Deployment.ni.dll + 2011-06-21 09:54 . 2011-06-21 09:54 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\05d99241bd45cbd96a6053841790a4a2\System.Data.ni.dll + 2011-06-21 10:29 . 2011-06-21 10:29 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ef31ab37b0d7c3c1a6d72646966c8911\System.Data.SqlXml.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\f945e9c32c775bb604ab83d8933f1b2c\System.Data.Services.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\e12e3036e337cbeb2d274b37ff4c1279\System.Data.OracleClient.ni.dll + 2011-06-21 09:54 . 2011-06-21 09:54 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\283e9bf48e17bdb34acdc93bd5721be0\System.Data.Linq.ni.dll + 2011-06-21 12:29 . 2011-06-21 12:29 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\368c85cccea8a1206be5c849fd6614e3\System.Data.Entity.ni.dll + 2011-06-21 09:54 . 2011-06-21 09:54 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\bd2e04dfab2993479ae17ea3fa4f6222\System.Core.ni.dll + 2011-06-21 09:54 . 2011-06-21 09:54 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4f82a0a1b4405ef61dfa088d11161e35\ReachFramework.ni.dll + 2011-06-21 09:54 . 2011-06-21 09:54 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\148505f5b0307230de5d355f10d30a20\PresentationUI.ni.dll + 2011-06-21 09:51 . 2011-06-21 09:51 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\1fab86af683c04bdb0aaf65ce7fcd9e5\PresentationBuildTasks.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 1301504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\70fb685bf3e3d2424ed1ec8154e0eb0b\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll + 2011-06-21 11:06 . 2011-06-21 11:06 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7292ca9d793cb71cf3d41ae663e7139b\Microsoft.VisualBasic.ni.dll + 2011-06-21 10:31 . 2011-06-21 10:31 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\abaf7a180354ed5ec099fb69339b538a\Microsoft.Transactions.Bridge.ni.dll + 2011-06-21 12:30 . 2011-06-21 12:30 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b41db9f2897f538203911026bb0abd5d\Microsoft.JScript.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a91940f9033c7910f3f64c061571cec9\Microsoft.Build.Tasks.v3.5.ni.dll + 2011-06-21 11:05 . 2011-06-21 11:05 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\5195a94327ccef45d202776e932e847b\Microsoft.Build.Tasks.ni.dll + 2011-06-21 11:04 . 2011-06-21 11:04 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3efbca53acdd34586bd7f6f87e71ed62\Microsoft.Build.Engine.ni.dll - 2011-03-23 14:50 . 2011-03-23 14:50 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2011-06-21 09:49 . 2011-06-21 09:49 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2011-06-21 09:49 . 2011-06-21 09:49 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2011-03-23 14:50 . 2011-03-23 14:50 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2011-06-21 09:49 . 2011-06-21 09:49 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2011-03-23 14:49 . 2011-03-23 14:49 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2011-06-21 09:49 . 2011-06-21 09:49 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2011-03-23 14:49 . 2011-03-23 14:49 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2011-03-23 14:49 . 2011-03-23 14:49 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2011-06-21 09:49 . 2011-06-21 09:49 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2011-03-23 14:50 . 2011-03-23 14:50 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2011-06-21 09:49 . 2011-06-21 09:49 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2011-06-21 09:49 . 2011-06-21 09:49 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2011-03-23 14:50 . 2011-03-23 14:50 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2010-03-30 14:25 . 2011-06-03 15:56 47716296 c:\windows\system32\MRT.exe + 2009-04-04 05:33 . 2009-04-04 05:33 37043200 c:\windows\Installer\9b44ae.msp + 2011-03-28 01:27 . 2011-03-28 01:27 15456256 c:\windows\Installer\974bb1.msp + 2011-03-17 17:15 . 2011-03-17 17:15 44327424 c:\windows\Installer\92218a.msp + 2011-02-11 18:47 . 2011-02-11 18:47 12028928 c:\windows\Installer\92216b.msp + 2011-03-08 11:33 . 2011-03-08 11:33 54645248 c:\windows\Installer\922122.msp + 2010-03-12 22:50 . 2010-03-12 22:50 17800544 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\XL12CNV.EXE + 2010-03-13 12:53 . 2010-03-13 12:53 20753760 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\EXCEL.EXE + 2011-06-21 09:56 . 2011-06-21 09:56 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\29d16d2f164fe2263539789ecd0d9d4f\System.Windows.Forms.ni.dll + 2011-06-21 10:30 . 2011-06-21 10:30 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\1fb5d8788c9a9a7f44e2d0fa19c62729\System.Web.ni.dll + 2011-06-21 10:28 . 2011-06-21 10:28 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\23abc8e4b535b9cd9c5560266c655ac2\System.ServiceModel.ni.dll + 2011-06-21 09:55 . 2011-06-21 09:55 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\ee914f59ad8211e0b6734dccffd9986e\System.Design.ni.dll + 2011-06-21 09:53 . 2011-06-21 09:53 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\999df2b262da53356dda514512bb7bb8\PresentationFramework.ni.dll + 2011-06-21 09:52 . 2011-06-21 09:52 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\caafa254739e326b0cf55eed815b4333\PresentationCore.ni.dll + 2011-06-21 09:51 . 2011-06-21 09:51 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni.dll . -- Snapshot auf jetziges Datum zurückgesetzt -- . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAAnotif"="c:\programme\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-09-12 182808] "RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864] "AzMixerSel"="c:\programme\Realtek\Audio\Drivers\AzMixerSel.exe" [2006-07-17 53248] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-28 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-28 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-28 137752] "LManager"="c:\programme\Launch Manager\LManager.exe" [2009-02-20 817672] "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952] "MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392] "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168] "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168] "SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2009-01-22 1422632] "snp2uvc"="c:\windows\system32\csnp2uvc.dll" [2008-11-03 196608] "PLFSetL"="c:\windows\PLFSetL.exe" [2008-07-03 94208] "NotificationCenterLauncher"="c:\programme\Acer\Acer eRecovery Management\NotificationLauncher.exe" [2008-12-22 225280] "Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2011-06-20 281768] "Malwarebytes' Anti-Malware"="c:\programme\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\ Acer VCM.lnk - c:\programme\Acer\Acer VCM\AcerVCM.exe [2009-2-28 565248] BTTray.lnk - c:\programme\WIDCOMM\Bluetooth Software\BTTray.exe [2008-12-11 604776] Sitecom 150N USB Wireless LAN Utility.lnk - c:\programme\SITECOM\150N USB Wireless LAN Utility\RtWLan.exe [2010-3-2 929792] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Programme\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Programme\\SITECOM\\150N USB Wireless LAN Utility\\RtWLan.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1542:TCP"= 1542:TCP:Realtek WPS TCP Prot "1542:UDP"= 1542:UDP:Realtek WPS UDP Prot "53:UDP"= 53:UDP:Realtek AP UDP Prot . R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [30.03.2010 18:40 136360] R2 MBAMService;MBAMService;c:\programme\Malwarebytes' Anti-Malware\mbamservice.exe [20.06.2011 17:16 366640] R2 RS_Service;Raw Socket Service;c:\programme\Acer\Acer VCM\RS_Service.exe [28.02.2009 12:18 237568] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [20.06.2011 17:16 22712] R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\drivers\rtl8192su.sys [02.03.2010 16:41 588032] S3 osppsvc;Office Software Protection Platform;c:\programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [09.01.2010 21:37 4640000] S3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RTS5121.sys --> c:\windows\system32\Drivers\RTS5121.sys [?] S3 Rts516xIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys --> c:\windows\system32\DRIVERS\Rts516xIR.sys [?] . Inhalt des "geplante Tasks" Ordners . 2011-04-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-538525854-1017937101-1279371858-1005Core.job - c:\dokumente und einstellungen\Anja\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe [2010-03-30 13:50] . 2011-06-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-538525854-1017937101-1279371858-1005UA.job - c:\dokumente und einstellungen\Anja\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe [2010-03-30 13:50] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=xph&d=0210&m=ao531h mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=xph&d=0210&m=ao531h IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000 IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Senden an &Bluetooth-Gerät... - c:\programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Senden an Bluetooth - c:\programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\dokumente und einstellungen\Anja\Anwendungsdaten\Mozilla\Firefox\Profiles\pxnmveb4.default\ FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\programme\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net Rootkit scan 2011-06-21 15:18 Windows 5.1.2600 Service Pack 3 NTFS . Scanne versteckte Prozesse... . Scanne versteckte Autostarteinträge... . Scanne versteckte Dateien... . Scan erfolgreich abgeschlossen versteckte Dateien: 0 . ************************************************************************** . --------------------- Durch laufende Prozesse gestartete DLLs --------------------- . - - - - - - - > 'winlogon.exe'(760) c:\windows\SYSTEM32\RtlGina\RtlGina.DLL c:\windows\system32\igfxdev.dll . - - - - - - - > 'explorer.exe'(3104) c:\windows\system32\btmmhook.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Zeit der Fertigstellung: 2011-06-21 15:25:36 ComboFix-quarantined-files.txt 2011-06-21 13:25 ComboFix2.txt 2011-06-20 17:26 . Vor Suchlauf: 15 Verzeichnis(se), 138.377.474.048 Bytes frei Nach Suchlauf: 17 Verzeichnis(se), 138.398.941.184 Bytes frei . - - End Of File - - 28B12B8C4FD9372B6D03559C3F617B7F MB Log: Malwarebytes' Anti-Malware 1.51.0.1200 www.malwarebytes.org Datenbank Version: 6902 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.13 21.06.2011 14:44:24 mbam-log-2011-06-21 (14-44-24).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Durchsuchte Objekte: 180488 Laufzeit: 35 Minute(n), 51 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) Der Vollständigkeit halber: Ich habe inzwischen die Ordner welche nicht von mir erstellt wurden inklusive der Verknüpfungen vom Stick entfernt. Auch die problematische autorun.inf-Datei wurde von mir gelöscht. Wenigstens gibt Antivir jetzt keinen Alarm mehr, wenn man den Stick einsteckt, allerdings sind jetzt alle alten Ordner blass hinterlegt, aber ich kann wieder auf die Dateien zugreifen. Grüße, Stephan |
21.06.2011, 15:42 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scr Das sind jetzt aber keine neu erstellten Logs? Ich wollte die ursprünglichen Logs sehen, wo protokolliert wird, welche Schädlinge entfernt wurden.
__________________ --> Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scr |
Themen zu Ordner auf USB-Stick werden zu Verknüpfungen - zusätzliche Ordner werden erstellt - iuewiu.scr |
.dll, 0x00000001, adobe, antivir, autorun.inf, avg, avira, bho, desktop, document, einstellungen, excel.exe, explorer, firefox, format, helper, home, jeuiwu.scr, lan-verbindung, launch, logfile, mbamservice.exe, microsoft, mozilla, musik, nodrives, ordner, ordner werden zu verknüpfungen, otl-scan, pdf, problem, realtek, registry, scans zeigen keinen befund, sched.exe, searchplugins, senden, software, usb-stick, virus |