|
Plagegeister aller Art und deren Bekämpfung: Smart hddWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
02.04.2012, 19:47 | #1 |
| Smart hdd Hallo, soeben ist mein Desktop schwarz geworden und etliche Warnfenster mit der Überschrift "System Message - Write Fault Error" haben sich aufgetan, sowie eines, das sich SMART Check nennt. Ich verstehe nicht, warum meine Firewall und mein Virusschutz das nicht abgeblockt haben. Wärt ihr so nett und würdet mir bitte helfen, diesen Virus loszuwerden, denn ich nutze den Laptop auch beruflich. Vorab, ich bin was PC's betrifft sehr unbedarft. Danke! |
02.04.2012, 19:48 | #2 |
/// Malware-holic | Smart hdd hi,
__________________Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter activex netsvcs msconfig %SYSTEMDRIVE%\*. %PROGRAMFILES%\*.exe %LOCALAPPDATA%\*.exe %systemroot%\*. /mp /s /md5start userinit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll ws2ifsl.sys sceclt.dll ntelogon.dll winlogon.exe logevent.dll user32.DLL explorer.exe iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys /md5stop %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\system32\*.dll /lockedfiles %USERPROFILE%\*.* %USERPROFILE%\Local Settings\Temp\*.exe %USERPROFILE%\Local Settings\Temp\*.dll %USERPROFILE%\Application Data\*.exe HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs CREATERESTOREPOINT
__________________ |
02.04.2012, 19:57 | #3 |
| Smart hdd Hallo,
__________________wie kann ich es auf dem Desktop speichern, wenn ich keinen Zugriff mehr auf diesem habe, da alles schwarz ist. |
02.04.2012, 19:58 | #4 |
/// Malware-holic | Smart hdd öffne taskmanager, neuer task, tippe dort firefox.exe bzw iexplore.exe lade dann otl gehe auf neuer task, durchsuchen, und navigiere in deinen download ordner und starte otl
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
02.04.2012, 19:59 | #5 |
| Smart hdd auch der Task Manager lässt sich nicht mehr öffnen. Er erscheint nur kurz und verschwindet sofort wieder. Bitte ich brauche Hilfe... OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 02.04.2012 21:32:44 - Run 2 OTL by OldTimer - Version 3.2.39.2 Folder = C:\Dokumente und Einstellungen\MS\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,93 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 75,79% Memory free 5,70 Gb Paging File | 5,20 Gb Available in Paging File | 91,28% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 465,75 Gb Total Space | 391,40 Gb Free Space | 84,04% Space Free | Partition Type: NTFS Computer Name: MS-81B1A4635884 | User Name: MS | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "5985:TCP" = 5985:TCP:*:Disabled:Windows-Remoteverwaltung ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\WINDOWS\system32\IgrsSvcs.exe" = C:\WINDOWS\system32\IgrsSvcs.exe:*:Enabled:IGRS Service Host Process -- (Microsoft Corporation) "C:\Programme\Lenovo\ReadyComm\ReadyComm.exe" = C:\Programme\Lenovo\ReadyComm\ReadyComm.exe:*:Enabled:Lenovo ReadyComm Main Program -- (Lenovo Group Limited) "C:\Programme\Lenovo\ReadyComm\AppSvc.exe" = C:\Programme\Lenovo\ReadyComm\AppSvc.exe:*:Enabled:Lenovo ReadyComm AppSvc Application -- (Lenovo Group Limited) "C:\Programme\Lenovo\ReadyComm\ConnSvc.exe" = C:\Programme\Lenovo\ReadyComm\ConnSvc.exe:*:Enabled:Lenovo ReadyComm ConnSvc Application -- (Lenovo Group Limited) "C:\Programme\Lenovo\ReadyComm\Projectionist.exe" = C:\Programme\Lenovo\ReadyComm\Projectionist.exe:*:Enabled:Lenovo ReadyComm Project Application -- (Lenovo Group Limited) "C:\Programme\Lenovo\ReadyComm\common\IGRS.exe" = C:\Programme\Lenovo\ReadyComm\common\IGRS.exe:*:Enabled:Lenovo ReadyComm IGRS Application -- (Lenovo Group Limited) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\WINDOWS\system32\IgrsSvcs.exe" = C:\WINDOWS\system32\IgrsSvcs.exe:*:Enabled:IGRS Service Host Process -- (Microsoft Corporation) "C:\Programme\Lenovo\ReadyComm\ReadyComm.exe" = C:\Programme\Lenovo\ReadyComm\ReadyComm.exe:*:Enabled:Lenovo ReadyComm Main Program -- (Lenovo Group Limited) "C:\Programme\Lenovo\ReadyComm\AppSvc.exe" = C:\Programme\Lenovo\ReadyComm\AppSvc.exe:*:Enabled:Lenovo ReadyComm AppSvc Application -- (Lenovo Group Limited) "C:\Programme\Lenovo\ReadyComm\ConnSvc.exe" = C:\Programme\Lenovo\ReadyComm\ConnSvc.exe:*:Enabled:Lenovo ReadyComm ConnSvc Application -- (Lenovo Group Limited) "C:\Programme\Lenovo\ReadyComm\Projectionist.exe" = C:\Programme\Lenovo\ReadyComm\Projectionist.exe:*:Enabled:Lenovo ReadyComm Project Application -- (Lenovo Group Limited) "C:\Programme\Lenovo\ReadyComm\common\IGRS.exe" = C:\Programme\Lenovo\ReadyComm\common\IGRS.exe:*:Enabled:Lenovo ReadyComm IGRS Application -- (Lenovo Group Limited) "C:\Programme\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Programme\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server -- (PeeringPortal) "C:\Programme\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Programme\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server -- (PeeringPortal) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu "{05BFB060-4F22-4710-B0A2-2801A1B606C5}" = Microsoft Antimalware "{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0dc15999-6e35-4fdb-b5f8-6510f2d6b361}" = Nero 9 "{1280E900-35DA-4E08-A700-B79A5B2B8532}" = Microsoft Antimalware Service DE-DE Language Pack "{17542DBF-E17C-4562-BC4D-FA3EF3076C45}" = Lenovo ReadyComm 5 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 29 "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{359CFC0A-BEB1-440D-95BA-CF63A86DA34F}" = Nero Recode "{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision "{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client DE-DE Language Pack "{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent "{54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B}" = Microsoft Security Client "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress "{5967A03E-3B74-4DF1-B591-2D89CA26BDC9}" = LaCie Backup Software v1.5.2378 "{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{76C66170-C538-4E77-B54D-48E136B5B533}" = Lenovo ReadyComm 5.0 Service "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights "{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE) "{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{8991E763-21F5-4DEA-A938-5D9D77DCB488}" = Broadcom 802.11 Wireless Driver "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (German) 12 "{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007 "{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007 "{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007 "{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007 "{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007 "{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007 "{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007 "{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007 "{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007 "{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007 "{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader "{97B4DF0B-7499-455F-AFBA-F70F64D6D86A}" = SweetIM for Messenger 3.5 "{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}" = iTunes "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9E82B934-9A25-445B-B8DF-8012808074AC}" = Nero PhotoSnap "{A1194237-547A-461d-BD44-B97B1574A7DA}" = SweetIM Toolbar for Internet Explorer 4.1 "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI "{A209525B-3377-43F4-B886-32F6B6E7356F}" = Nero WaveEditor "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5 "{AC76BA86-7AD7-1031-7B44-A95000000001}" = Adobe Reader 9.5.0 - Deutsch "{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}" = Lenovo EasyCamera "{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}" = Energy Management "{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center "{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU "{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU "{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}" = Apple Mobile Device Support "{C5A7CB6C-E76D-408F-BA0E-85605420FE9D}" = SoundTrax "{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime "{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack "{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver "{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D025A639-B9C9-417D-8531-208859000AF8}" = NeroBurningROM "{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones "{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities "{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}" = Nero ShowTime "{DFB19121-0609-49C1-92B1-546E5A940FE8}" = Onekey Theater "{E498385E-1C51-459A-B45F-1721E37AA1A0}" = Movie Templates - Starter Kit "{E630D30A-79EE-407A-8F51-9D57D1F45230}" = gs_x86 "{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver "{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio "{F5212949-60B3-43FC-A178-4A7B0BEDAD69}" = eDocPrintPro v3.17.0 "{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool "6194C28A8F62DD817EA1B918E6E46E806A21B452" = Windows-Treiberpaket - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0) "65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Windows-Treiberpaket - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0) "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.9 "Ashampoo ClipFinder HD_is1" = Ashampoo ClipFinder HD v.2.2.3 "Athan" = Athan Basic 4.2 "CNXT_AUDIO_HDA" = Conexant HD Audio "ENTERPRISE" = Microsoft Office Enterprise 2007 "EPSON Printer and Utilities" = EPSON-Drucker-Software "Fender FUSE" = Fender FUSE 2.4.1.27 "Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7 "Free Studio_is1" = Free Studio version 5.1.5 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324 "GPL Ghostscript 8.15" = GPL Ghostscript 8.15 "GPL Ghostscript Fonts" = GPL Ghostscript Fonts "ie8" = Windows Internet Explorer 8 "InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery "InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack "Microsoft Security Client" = Microsoft Security Essentials "SynTPDeinstKey" = Synaptics Pointing Device Driver "TuneUp Utilities" = TuneUp Utilities "TuxGuitar_0" = TuxGuitar 1.2 "Uninstall_is1" = Uninstall 1.0.0.1 "VLC media player" = VLC media player 1.1.11 "Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinLiveSuite_Wave3" = Windows Live Essentials "WinRAR archiver" = WinRAR 4.00 (32-Bit) "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "2221869471.fuse.fender.com" = Fender FUSE ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 18.03.2012 05:36:01 | Computer Name = MS-81B1A4635884 | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 19.03.2012 14:30:50 | Computer Name = MS-81B1A4635884 | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung iexplore.exe, Version 8.0.6001.18702, fehlgeschlagenes Modul mshtml.dll, Version 8.0.6001.19190, Fehleradresse 0x00067978. Error - 22.03.2012 16:17:53 | Computer Name = MS-81B1A4635884 | Source = Microsoft Office 12 | ID = 5000 Description = EventType officelifeboathang, P1 winword.exe, P2 12.0.6612.1000, P3 wwlib.dll, P4 12.0.6612.1000, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL. Error - 23.03.2012 04:08:49 | Computer Name = MS-81B1A4635884 | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 23.03.2012 04:52:31 | Computer Name = MS-81B1A4635884 | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 23.03.2012 10:22:38 | Computer Name = MS-81B1A4635884 | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 24.03.2012 03:14:11 | Computer Name = MS-81B1A4635884 | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung iexplore.exe, Version 8.0.6001.18702, fehlgeschlagenes Modul mshtml.dll, Version 8.0.6001.19190, Fehleradresse 0x000dfc6e. Error - 30.03.2012 01:56:29 | Computer Name = MS-81B1A4635884 | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung iexplore.exe, Version 8.0.6001.18702, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x5601c3f6. Error - 01.04.2012 12:07:47 | Computer Name = MS-81B1A4635884 | Source = MPSampleSubmission | ID = 5000 Description = EventType mptelemetry, P1 2152759308, P2 unspecified, P3 scanfile, P4 3.0.8402.0, P5 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094), P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL. Error - 01.04.2012 12:11:17 | Computer Name = MS-81B1A4635884 | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung LacieBackup.exe, Version 1.5.2378.16573, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. [ System Events ] Error - 01.04.2012 15:08:14 | Computer Name = MS-81B1A4635884 | Source = PlugPlayManager | ID = 12 Description = Das Gerät "Realtek PCIe FE Family Controller" (PCI\VEN_10EC&DEV_8136&SUBSYS_392E17AA&REV_02\4&dbab9b0&0&00E2) wurde ohne vorbereitende Maßnahmen vom System entfernt. Error - 01.04.2012 23:23:18 | Computer Name = MS-81B1A4635884 | Source = Print | ID = 23 Description = Der Drucker BoD easyPrint DE,0 konnte nicht initialisiert werden, da der Treiber BoD Printer DE nicht gefunden wurde. Error - 02.04.2012 07:44:31 | Computer Name = MS-81B1A4635884 | Source = Print | ID = 23 Description = Der Drucker BoD easyPrint DE,0 konnte nicht initialisiert werden, da der Treiber BoD Printer DE nicht gefunden wurde. Error - 02.04.2012 13:54:48 | Computer Name = MS-81B1A4635884 | Source = Print | ID = 23 Description = Der Drucker BoD easyPrint DE,0 konnte nicht initialisiert werden, da der Treiber BoD Printer DE nicht gefunden wurde. Error - 02.04.2012 14:31:44 | Computer Name = MS-81B1A4635884 | Source = SRService | ID = 104 Description = Die Initialisierung der Systemwiederherstellung ist fehlgeschlagen. Error - 02.04.2012 14:31:50 | Computer Name = MS-81B1A4635884 | Source = Print | ID = 23 Description = Der Drucker BoD easyPrint DE,0 konnte nicht initialisiert werden, da der Treiber BoD Printer DE nicht gefunden wurde. Error - 02.04.2012 14:31:52 | Computer Name = MS-81B1A4635884 | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Systemwiederherstellungsdienst" wurde mit folgendem Fehler beendet: %%5 Error - 02.04.2012 15:09:22 | Computer Name = MS-81B1A4635884 | Source = SRService | ID = 104 Description = Die Initialisierung der Systemwiederherstellung ist fehlgeschlagen. Error - 02.04.2012 15:09:24 | Computer Name = MS-81B1A4635884 | Source = Print | ID = 23 Description = Der Drucker BoD easyPrint DE,0 konnte nicht initialisiert werden, da der Treiber BoD Printer DE nicht gefunden wurde. Error - 02.04.2012 15:09:26 | Computer Name = MS-81B1A4635884 | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Systemwiederherstellungsdienst" wurde mit folgendem Fehler beendet: %%5 [ TuneUp Events ] Error - 26.03.2012 15:23:54 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:25:04 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:27:44 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:27:44 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:27:44 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:36:49 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:36:54 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:37:04 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:37:09 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 26.03.2012 15:37:41 | Computer Name = MS-81B1A4635884 | Source = TuneUp.UtilitiesSvc | ID = 300 Description = < End of report > OTL Logfile: Code:
ATTFilter OTL logfile created on: 02.04.2012 21:32:44 - Run 2 OTL by OldTimer - Version 3.2.39.2 Folder = C:\Dokumente und Einstellungen\MS\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,93 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 75,79% Memory free 5,70 Gb Paging File | 5,20 Gb Available in Paging File | 91,28% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 465,75 Gb Total Space | 391,40 Gb Free Space | 84,04% Space Free | Partition Type: NTFS Computer Name: MS-81B1A4635884 | User Name: MS | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation) PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) PRC - c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) PRC - C:\Programme\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo) PRC - C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe (Nero AG) PRC - C:\Programme\USB Camera\VM331_STI.EXE (Vimicro) PRC - C:\Programme\CONEXANT\SmartAudio\SmAudio.exe (Conexant Systems, Inc.) PRC - C:\Programme\Lenovo\ReadyComm\common\IGRS.exe (Lenovo Group Limited) PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\WINDOWS\system32\IgrsSvcs.exe (Microsoft Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe (Microsoft Corporation) ========== Modules (No Company Name) ========== MOD - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU () ========== Win32 Services (SafeList) ========== SRV - (TuneUp.Defrag) -- C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software) SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation) SRV - (MsMpSvc) -- c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) SRV - (UNS) Intel(R) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) Intel(R) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (Nero BackItUp Scheduler 4.0) -- C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe (Nero AG) SRV - (Lenovo ReadyComm ConnSvc) -- C:\Programme\Lenovo\ReadyComm\ConnSvc.exe (Lenovo Group Limited) SRV - (Lenovo ReadyComm AppSvc) -- C:\Programme\Lenovo\ReadyComm\AppSvc.exe (Lenovo Group Limited) SRV - (IGRS) -- C:\Programme\Lenovo\ReadyComm\common\IGRS.exe (Lenovo Group Limited) SRV - (ReadyComm.DirectRouter) -- C:\Programme\Lenovo\ReadyComm\common\router.dll (Lenovo Group Limited) SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (WDICA) -- File not found DRV - (PDRFRAME) -- File not found DRV - (PDRELI) -- File not found DRV - (PDFRAME) -- File not found DRV - (PDCOMP) -- File not found DRV - (PCIDump) -- File not found DRV - (lbrtfdc) -- File not found DRV - (i2omgmt) -- File not found DRV - (Changer) -- File not found DRV - (catchme) -- C:\DOKUME~1\MS\LOKALE~1\Temp\catchme.sys File not found DRV - (MpKsl31951d8f) -- c:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Microsoft Antimalware\Definition Updates\{881FFE01-8B50-4AB4-A4ED-7EF62ED8F8DE}\MpKsl31951d8f.sys (Microsoft Corporation) DRV - (CnxtHdAudService) -- C:\WINDOWS\system32\drivers\CHDAU32.sys (Conexant Systems Inc.) DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation ) DRV - (Impcd) -- C:\WINDOWS\system32\drivers\Impcd.sys (Intel Corporation) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (sscdmdm) -- C:\WINDOWS\system32\drivers\sscdmdm.sys (MCCI Corporation) DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) -- C:\WINDOWS\system32\drivers\sscdbus.sys (MCCI Corporation) DRV - (sscdmdfl) -- C:\WINDOWS\system32\drivers\sscdmdfl.sys (MCCI Corporation) DRV - (IntcDAud) Intel(R) -- C:\WINDOWS\system32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (RSUSBSTOR) -- C:\WINDOWS\system32\drivers\RtsUStor.sys (Realtek Semiconductor Corp.) DRV - (vm331avs) -- C:\WINDOWS\system32\drivers\vm331avs.sys (Vimicro Corporation) DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation) DRV - (HECI) Intel(R) -- C:\WINDOWS\system32\drivers\HECI.sys (Intel Corporation) DRV - (ACPIVPC) -- C:\WINDOWS\system32\drivers\AcpiVpc.sys (Lenovo Corporation) DRV - (wsvd) -- C:\WINDOWS\system32\drivers\wsvd.sys (CyberLink) DRV - (wdmirror) -- C:\WINDOWS\system32\drivers\WDMirror.sys (Windows (R) Codename Longhorn DDK provider) DRV - (Bridge0) -- C:\WINDOWS\system32\drivers\wdbridge.sys (Lenovo) DRV - (WimFltr) -- C:\WINDOWS\system32\drivers\WimFltr.sys (Microsoft Corporation) DRV - (StarOpen) -- C:\WINDOWS\System32\drivers\StarOpen.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programme\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) O1 HOSTS File: ([2011.05.26 05:37:00 | 000,000,098 | -H-- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [331BigDog] C:\Programme\USB Camera\VM331_STI.EXE (Vimicro) O4 - HKLM..\Run: [Athan] C:\Programme\Athan\Athan.exe (www.IslamicFinder.org) O4 - HKLM..\Run: [MSC] c:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [OnekeyStudio] C:\Programme\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo) O4 - HKLM..\Run: [SmartAudio] C:\Programme\CONEXANT\SMARTAUDIO\SMAUDIO.EXE (Conexant Systems, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SweetIM] C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [XWUKViYTgmpEre.exe] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1279544010156 (MUWebControl Class) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos-beta/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3D4F80F4-10E6-406C-BB8E-C2822FBAE628}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012.04.02 21:21:52 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2012.04.02 21:10:30 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\MS\Recent [2012.04.02 20:55:35 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe [2012.04.02 20:33:54 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Startmenü\Programme\SMART HDD [2012.03.31 17:12:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Desktop\Amazon MP3 [2012.03.31 14:47:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Desktop\Homepageprojekt [2012.03.15 21:24:15 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\kodak [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.04.02 21:29:03 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe [2012.04.02 21:14:03 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job [2012.04.02 21:09:44 | 000,002,206 | -H-- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012.04.02 21:08:54 | 000,002,048 | -H-- | M] () -- C:\WINDOWS\bootstat.dat [2012.04.02 21:08:51 | 3144,572,928 | -HS- | M] () -- C:\hiberfil.sys [2012.04.02 20:34:37 | 000,000,256 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp [2012.04.02 20:33:55 | 000,000,839 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\SMART_HDD.lnk [2012.04.02 20:33:55 | 000,000,184 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vpr [2012.04.02 20:33:55 | 000,000,000 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vp [2012.04.02 20:33:49 | 000,221,184 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp.exe [2012.04.02 20:15:43 | 000,300,544 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe [2012.04.02 19:59:40 | 000,000,412 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{4A970276-BB22-4637-ABD5-40A859D9A97C}.job [2012.04.01 18:00:19 | 000,000,622 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\profile.xml [2012.03.30 17:23:25 | 001,389,389 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\one_step_closer_by_samirmalik.jpg [2012.03.29 05:32:21 | 004,164,511 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\DSC_0060.JPG [2012.03.15 22:08:53 | 000,290,088 | -H-- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012.03.13 06:36:55 | 002,871,119 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\hartmann7619.jpg [2012.03.11 20:07:47 | 000,002,870 | -H-- | M] () -- C:\WINDOWS\quran.ini [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2012.04.02 20:33:55 | 000,000,839 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\SMART_HDD.lnk [2012.04.02 20:33:55 | 000,000,184 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vpr [2012.04.02 20:33:55 | 000,000,000 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vp [2012.04.02 20:33:50 | 000,000,256 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp [2012.04.02 20:33:49 | 000,221,184 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp.exe [2012.04.02 20:17:45 | 000,300,544 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe [2012.03.30 17:23:25 | 001,389,389 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\one_step_closer_by_samirmalik.jpg [2012.03.29 05:32:10 | 004,164,511 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\DSC_0060.JPG [2012.03.13 06:36:47 | 002,871,119 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\hartmann7619.jpg [2012.02.18 09:27:23 | 000,003,072 | -H-- | C] () -- C:\WINDOWS\System32\iacenc.dll [2011.08.10 21:48:52 | 000,334,616 | -H-- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2011.05.26 21:40:17 | 000,256,512 | -H-- | C] () -- C:\WINDOWS\PEV.exe [2011.05.26 21:40:17 | 000,089,088 | -H-- | C] () -- C:\WINDOWS\MBR.exe [2011.05.26 21:40:16 | 000,098,816 | -H-- | C] () -- C:\WINDOWS\sed.exe [2011.05.26 21:40:16 | 000,080,412 | -H-- | C] () -- C:\WINDOWS\grep.exe [2011.05.26 21:40:16 | 000,068,096 | -H-- | C] () -- C:\WINDOWS\zip.exe [2011.01.29 17:54:32 | 000,000,135 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2011.01.23 23:05:07 | 000,002,528 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\$_hpcst$.hpc [2011.01.21 16:43:48 | 000,000,000 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LauncherAccess.dt [2011.01.21 16:41:58 | 000,005,632 | -H-- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010.10.25 14:29:03 | 000,000,112 | -H-- | C] () -- C:\WINDOWS\ActiveSkin.INI [2010.10.17 11:47:13 | 000,000,049 | -H-- | C] () -- C:\WINDOWS\minipad.ini [2010.10.17 11:47:10 | 000,002,870 | -H-- | C] () -- C:\WINDOWS\quran.ini [2010.10.10 22:33:19 | 000,111,932 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat [2010.10.10 22:33:19 | 000,031,053 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern131.dat [2010.10.10 22:33:19 | 000,027,417 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern121.dat [2010.10.10 22:33:19 | 000,026,154 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat [2010.10.10 22:33:19 | 000,024,903 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat [2010.10.10 22:33:19 | 000,021,390 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat [2010.10.10 22:33:19 | 000,020,148 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat [2010.10.10 22:33:19 | 000,011,811 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat [2010.10.10 22:33:19 | 000,004,943 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat [2010.10.10 22:33:19 | 000,001,146 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat [2010.10.10 22:33:19 | 000,001,139 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat [2010.10.10 22:33:19 | 000,001,139 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat [2010.10.10 22:33:19 | 000,001,136 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat [2010.10.10 22:33:19 | 000,001,129 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat [2010.10.10 22:33:19 | 000,001,129 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat [2010.10.10 22:33:19 | 000,001,120 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat [2010.10.10 22:33:19 | 000,001,107 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat [2010.10.10 22:33:19 | 000,001,104 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat [2010.10.10 22:33:19 | 000,000,097 | -H-- | C] () -- C:\WINDOWS\System32\PICSDK.ini [2010.10.01 19:20:29 | 000,018,432 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.08.31 08:15:27 | 000,000,189 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\default.rss [2010.08.31 08:14:55 | 000,000,069 | -H-- | C] () -- C:\WINDOWS\NeroDigital.ini [2010.07.19 16:12:21 | 000,000,622 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\profile.xml [2010.07.19 16:01:28 | 000,016,648 | RH-- | C] () -- C:\WINDOWS\System32\LogAPI.dll [2010.07.19 15:46:13 | 000,127,868 | -H-- | C] () -- C:\WINDOWS\System32\igcompkrng575.bin [2010.07.19 15:46:10 | 000,870,560 | -H-- | C] () -- C:\WINDOWS\System32\igkrng575.bin [2010.07.19 15:46:10 | 000,004,096 | -H-- | C] ( ) -- C:\WINDOWS\System32\IGFXDEVLib.dll [2010.07.19 15:46:03 | 000,000,151 | -H-- | C] () -- C:\WINDOWS\System32\GfxUI.exe.config [2010.07.19 15:02:13 | 000,004,161 | -H-- | C] () -- C:\WINDOWS\ODBCINST.INI [2010.07.19 15:01:00 | 000,290,088 | -H-- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.07.19 14:47:33 | 000,080,416 | -H-- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll [2010.07.19 14:45:47 | 000,001,340 | -H-- | C] () -- C:\WINDOWS\vm331Rmv.ini [2010.07.19 14:15:39 | 000,002,048 | -H-- | C] () -- C:\WINDOWS\bootstat.dat [2010.07.19 14:09:11 | 000,021,740 | -H-- | C] () -- C:\WINDOWS\System32\emptyregdb.dat ========== LOP Check ========== [2011.11.22 21:14:15 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eDocPrintPro [2011.01.23 23:05:15 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung [2011.07.18 15:54:50 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM [2010.07.19 16:11:00 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp [2010.07.19 18:00:43 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software [2012.04.02 21:21:52 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2010.10.02 10:28:07 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [2010.07.19 17:58:55 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} [2010.10.03 10:39:33 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Amazon [2011.07.21 05:41:38 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Ashampoo [2011.09.18 13:17:59 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoft [2011.04.03 11:30:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers [2012.01.28 21:22:52 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Fender [2011.01.29 17:54:36 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\LaCie [2010.07.19 16:01:32 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Lenovo [2011.07.23 08:49:24 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\PriceGong [2011.01.23 23:05:02 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Samsung [2010.10.08 16:40:01 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\TeamViewer [2010.07.19 18:00:53 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\TuneUp Software [2010.07.19 15:20:57 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Windows Desktop Search [2010.10.02 16:28:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Windows Search [2011.07.18 16:04:02 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\WordToPDF [2012.04.02 21:14:03 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job [2012.04.02 19:59:40 | 000,000,412 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{4A970276-BB22-4637-ABD5-40A859D9A97C}.job ========== Purity Check ========== < End of report > Was soll ich nun tun? Sorry, ich war gestern total neben der Spur. Hier kommt der Quick Scan:OTL Logfile: Code:
ATTFilter OTL logfile created on: 02.04.2012 21:32:44 - Run 2 OTL by OldTimer - Version 3.2.39.2 Folder = C:\Dokumente und Einstellungen\MS\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,93 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 75,79% Memory free 5,70 Gb Paging File | 5,20 Gb Available in Paging File | 91,28% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 465,75 Gb Total Space | 391,40 Gb Free Space | 84,04% Space Free | Partition Type: NTFS Computer Name: MS-81B1A4635884 | User Name: MS | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation) PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) PRC - c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) PRC - C:\Programme\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo) PRC - C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe (Nero AG) PRC - C:\Programme\USB Camera\VM331_STI.EXE (Vimicro) PRC - C:\Programme\CONEXANT\SmartAudio\SmAudio.exe (Conexant Systems, Inc.) PRC - C:\Programme\Lenovo\ReadyComm\common\IGRS.exe (Lenovo Group Limited) PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\WINDOWS\system32\IgrsSvcs.exe (Microsoft Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe (Microsoft Corporation) ========== Modules (No Company Name) ========== MOD - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU () ========== Win32 Services (SafeList) ========== SRV - (TuneUp.Defrag) -- C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software) SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation) SRV - (MsMpSvc) -- c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) SRV - (UNS) Intel(R) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) Intel(R) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (Nero BackItUp Scheduler 4.0) -- C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe (Nero AG) SRV - (Lenovo ReadyComm ConnSvc) -- C:\Programme\Lenovo\ReadyComm\ConnSvc.exe (Lenovo Group Limited) SRV - (Lenovo ReadyComm AppSvc) -- C:\Programme\Lenovo\ReadyComm\AppSvc.exe (Lenovo Group Limited) SRV - (IGRS) -- C:\Programme\Lenovo\ReadyComm\common\IGRS.exe (Lenovo Group Limited) SRV - (ReadyComm.DirectRouter) -- C:\Programme\Lenovo\ReadyComm\common\router.dll (Lenovo Group Limited) SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (WDICA) -- File not found DRV - (PDRFRAME) -- File not found DRV - (PDRELI) -- File not found DRV - (PDFRAME) -- File not found DRV - (PDCOMP) -- File not found DRV - (PCIDump) -- File not found DRV - (lbrtfdc) -- File not found DRV - (i2omgmt) -- File not found DRV - (Changer) -- File not found DRV - (catchme) -- C:\DOKUME~1\MS\LOKALE~1\Temp\catchme.sys File not found DRV - (MpKsl31951d8f) -- c:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Microsoft Antimalware\Definition Updates\{881FFE01-8B50-4AB4-A4ED-7EF62ED8F8DE}\MpKsl31951d8f.sys (Microsoft Corporation) DRV - (CnxtHdAudService) -- C:\WINDOWS\system32\drivers\CHDAU32.sys (Conexant Systems Inc.) DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation ) DRV - (Impcd) -- C:\WINDOWS\system32\drivers\Impcd.sys (Intel Corporation) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (sscdmdm) -- C:\WINDOWS\system32\drivers\sscdmdm.sys (MCCI Corporation) DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) -- C:\WINDOWS\system32\drivers\sscdbus.sys (MCCI Corporation) DRV - (sscdmdfl) -- C:\WINDOWS\system32\drivers\sscdmdfl.sys (MCCI Corporation) DRV - (IntcDAud) Intel(R) -- C:\WINDOWS\system32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (RSUSBSTOR) -- C:\WINDOWS\system32\drivers\RtsUStor.sys (Realtek Semiconductor Corp.) DRV - (vm331avs) -- C:\WINDOWS\system32\drivers\vm331avs.sys (Vimicro Corporation) DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation) DRV - (HECI) Intel(R) -- C:\WINDOWS\system32\drivers\HECI.sys (Intel Corporation) DRV - (ACPIVPC) -- C:\WINDOWS\system32\drivers\AcpiVpc.sys (Lenovo Corporation) DRV - (wsvd) -- C:\WINDOWS\system32\drivers\wsvd.sys (CyberLink) DRV - (wdmirror) -- C:\WINDOWS\system32\drivers\WDMirror.sys (Windows (R) Codename Longhorn DDK provider) DRV - (Bridge0) -- C:\WINDOWS\system32\drivers\wdbridge.sys (Lenovo) DRV - (WimFltr) -- C:\WINDOWS\system32\drivers\WimFltr.sys (Microsoft Corporation) DRV - (StarOpen) -- C:\WINDOWS\System32\drivers\StarOpen.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programme\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) O1 HOSTS File: ([2011.05.26 05:37:00 | 000,000,098 | -H-- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [331BigDog] C:\Programme\USB Camera\VM331_STI.EXE (Vimicro) O4 - HKLM..\Run: [Athan] C:\Programme\Athan\Athan.exe (www.IslamicFinder.org) O4 - HKLM..\Run: [MSC] c:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [OnekeyStudio] C:\Programme\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo) O4 - HKLM..\Run: [SmartAudio] C:\Programme\CONEXANT\SMARTAUDIO\SMAUDIO.EXE (Conexant Systems, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SweetIM] C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [XWUKViYTgmpEre.exe] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1279544010156 (MUWebControl Class) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos-beta/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3D4F80F4-10E6-406C-BB8E-C2822FBAE628}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012.04.02 21:21:52 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2012.04.02 21:10:30 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\MS\Recent [2012.04.02 20:55:35 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe [2012.04.02 20:33:54 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Startmenü\Programme\SMART HDD [2012.03.31 17:12:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Desktop\Amazon MP3 [2012.03.31 14:47:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Desktop\Homepageprojekt [2012.03.15 21:24:15 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\kodak [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.04.02 21:29:03 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe [2012.04.02 21:14:03 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job [2012.04.02 21:09:44 | 000,002,206 | -H-- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012.04.02 21:08:54 | 000,002,048 | -H-- | M] () -- C:\WINDOWS\bootstat.dat [2012.04.02 21:08:51 | 3144,572,928 | -HS- | M] () -- C:\hiberfil.sys [2012.04.02 20:34:37 | 000,000,256 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp [2012.04.02 20:33:55 | 000,000,839 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\SMART_HDD.lnk [2012.04.02 20:33:55 | 000,000,184 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vpr [2012.04.02 20:33:55 | 000,000,000 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vp [2012.04.02 20:33:49 | 000,221,184 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp.exe [2012.04.02 20:15:43 | 000,300,544 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe [2012.04.02 19:59:40 | 000,000,412 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{4A970276-BB22-4637-ABD5-40A859D9A97C}.job [2012.04.01 18:00:19 | 000,000,622 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\profile.xml [2012.03.30 17:23:25 | 001,389,389 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\one_step_closer_by_samirmalik.jpg [2012.03.29 05:32:21 | 004,164,511 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\DSC_0060.JPG [2012.03.15 22:08:53 | 000,290,088 | -H-- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012.03.13 06:36:55 | 002,871,119 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\hartmann7619.jpg [2012.03.11 20:07:47 | 000,002,870 | -H-- | M] () -- C:\WINDOWS\quran.ini [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2012.04.02 20:33:55 | 000,000,839 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\SMART_HDD.lnk [2012.04.02 20:33:55 | 000,000,184 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vpr [2012.04.02 20:33:55 | 000,000,000 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vp [2012.04.02 20:33:50 | 000,000,256 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp [2012.04.02 20:33:49 | 000,221,184 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp.exe [2012.04.02 20:17:45 | 000,300,544 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe [2012.03.30 17:23:25 | 001,389,389 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\one_step_closer_by_samirmalik.jpg [2012.03.29 05:32:10 | 004,164,511 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\DSC_0060.JPG [2012.03.13 06:36:47 | 002,871,119 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\hartmann7619.jpg [2012.02.18 09:27:23 | 000,003,072 | -H-- | C] () -- C:\WINDOWS\System32\iacenc.dll [2011.08.10 21:48:52 | 000,334,616 | -H-- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2011.05.26 21:40:17 | 000,256,512 | -H-- | C] () -- C:\WINDOWS\PEV.exe [2011.05.26 21:40:17 | 000,089,088 | -H-- | C] () -- C:\WINDOWS\MBR.exe [2011.05.26 21:40:16 | 000,098,816 | -H-- | C] () -- C:\WINDOWS\sed.exe [2011.05.26 21:40:16 | 000,080,412 | -H-- | C] () -- C:\WINDOWS\grep.exe [2011.05.26 21:40:16 | 000,068,096 | -H-- | C] () -- C:\WINDOWS\zip.exe [2011.01.29 17:54:32 | 000,000,135 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2011.01.23 23:05:07 | 000,002,528 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\$_hpcst$.hpc [2011.01.21 16:43:48 | 000,000,000 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LauncherAccess.dt [2011.01.21 16:41:58 | 000,005,632 | -H-- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010.10.25 14:29:03 | 000,000,112 | -H-- | C] () -- C:\WINDOWS\ActiveSkin.INI [2010.10.17 11:47:13 | 000,000,049 | -H-- | C] () -- C:\WINDOWS\minipad.ini [2010.10.17 11:47:10 | 000,002,870 | -H-- | C] () -- C:\WINDOWS\quran.ini [2010.10.10 22:33:19 | 000,111,932 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat [2010.10.10 22:33:19 | 000,031,053 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern131.dat [2010.10.10 22:33:19 | 000,027,417 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern121.dat [2010.10.10 22:33:19 | 000,026,154 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat [2010.10.10 22:33:19 | 000,024,903 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat [2010.10.10 22:33:19 | 000,021,390 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat [2010.10.10 22:33:19 | 000,020,148 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat [2010.10.10 22:33:19 | 000,011,811 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat [2010.10.10 22:33:19 | 000,004,943 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat [2010.10.10 22:33:19 | 000,001,146 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat [2010.10.10 22:33:19 | 000,001,139 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat [2010.10.10 22:33:19 | 000,001,139 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat [2010.10.10 22:33:19 | 000,001,136 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat [2010.10.10 22:33:19 | 000,001,129 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat [2010.10.10 22:33:19 | 000,001,129 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat [2010.10.10 22:33:19 | 000,001,120 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat [2010.10.10 22:33:19 | 000,001,107 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat [2010.10.10 22:33:19 | 000,001,104 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat [2010.10.10 22:33:19 | 000,000,097 | -H-- | C] () -- C:\WINDOWS\System32\PICSDK.ini [2010.10.01 19:20:29 | 000,018,432 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.08.31 08:15:27 | 000,000,189 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\default.rss [2010.08.31 08:14:55 | 000,000,069 | -H-- | C] () -- C:\WINDOWS\NeroDigital.ini [2010.07.19 16:12:21 | 000,000,622 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\profile.xml [2010.07.19 16:01:28 | 000,016,648 | RH-- | C] () -- C:\WINDOWS\System32\LogAPI.dll [2010.07.19 15:46:13 | 000,127,868 | -H-- | C] () -- C:\WINDOWS\System32\igcompkrng575.bin [2010.07.19 15:46:10 | 000,870,560 | -H-- | C] () -- C:\WINDOWS\System32\igkrng575.bin [2010.07.19 15:46:10 | 000,004,096 | -H-- | C] ( ) -- C:\WINDOWS\System32\IGFXDEVLib.dll [2010.07.19 15:46:03 | 000,000,151 | -H-- | C] () -- C:\WINDOWS\System32\GfxUI.exe.config [2010.07.19 15:02:13 | 000,004,161 | -H-- | C] () -- C:\WINDOWS\ODBCINST.INI [2010.07.19 15:01:00 | 000,290,088 | -H-- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.07.19 14:47:33 | 000,080,416 | -H-- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll [2010.07.19 14:45:47 | 000,001,340 | -H-- | C] () -- C:\WINDOWS\vm331Rmv.ini [2010.07.19 14:15:39 | 000,002,048 | -H-- | C] () -- C:\WINDOWS\bootstat.dat [2010.07.19 14:09:11 | 000,021,740 | -H-- | C] () -- C:\WINDOWS\System32\emptyregdb.dat ========== LOP Check ========== [2011.11.22 21:14:15 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eDocPrintPro [2011.01.23 23:05:15 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung [2011.07.18 15:54:50 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM [2010.07.19 16:11:00 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp [2010.07.19 18:00:43 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software [2012.04.02 21:21:52 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2010.10.02 10:28:07 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [2010.07.19 17:58:55 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} [2010.10.03 10:39:33 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Amazon [2011.07.21 05:41:38 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Ashampoo [2011.09.18 13:17:59 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoft [2011.04.03 11:30:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers [2012.01.28 21:22:52 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Fender [2011.01.29 17:54:36 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\LaCie [2010.07.19 16:01:32 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Lenovo [2011.07.23 08:49:24 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\PriceGong [2011.01.23 23:05:02 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Samsung [2010.10.08 16:40:01 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\TeamViewer [2010.07.19 18:00:53 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\TuneUp Software [2010.07.19 15:20:57 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Windows Desktop Search [2010.10.02 16:28:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Windows Search [2011.07.18 16:04:02 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\WordToPDF [2012.04.02 21:14:03 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job [2012.04.02 19:59:40 | 000,000,412 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{4A970276-BB22-4637-ABD5-40A859D9A97C}.job ========== Purity Check ========== < End of report > |
03.04.2012, 12:58 | #6 |
/// Malware-holic | Smart hdd hi du bekommst genau wie jeder andere hilfe, nämlich dann, wenn wir zeit haben. dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user. wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts. • Starte bitte die OTL.exe • Kopiere nun das Folgende in die Textbox. Code:
ATTFilter :OTL O4 - HKLM..\Run: [XWUKViYTgmpEre.exe] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe () [2012.04.02 20:33:54 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Startmenü\Programme\SMART HDD [2012.04.02 20:34:37 | 000,000,256 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp [2012.04.02 20:33:55 | 000,000,839 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\SMART_HDD.lnk [2012.04.02 20:33:55 | 000,000,184 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vpr [2012.04.02 20:33:55 | 000,000,000 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-3YbgATEofds2Vp [2012.04.02 20:33:49 | 000,221,184 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\3YbgATEofds2Vp.exe [2012.04.02 20:15:43 | 000,300,544 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe :Files C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XWUKViYTgmpEre.exe :Commands [Reboot] • Schliesse bitte nun alle Programme. • Klicke nun bitte auf den Fix Button. • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen. • Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren. starte in den normalen modus. falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang in den Thread posten! Drücke bitte die + E Taste.
lade unhide: http://filepony.de/download-unhide/ doppelklicken, dateien werden sichtbar
__________________ --> Smart hdd |
03.04.2012, 18:14 | #7 |
| Smart hdd Hallo, ich habe den ersten Schritt mit OTL.exe getätigt, aber es war auf dem Desktop keine Textdatei zu finden. Hinsichtlich des zweiten Schrittes. Den Ordner habe ich gefunden. Haben bei --> Senden an kommt da nichts mit ZIP, sondern wird nur das CD-Rom Laufwerk angezeigt. Also ich habe den ersten Schritt nun drei Mal ausprobiert, leider wurde zu keinem Zeitpunkt eine Textdatei erstellt. Ich gehe doch richtig davon aus, dass diese auf dem Desktop zu finden ist. Hallo Markus, ich habe gesehen, dass ich de allerersten OTL Quick Scan falsch gemacht habe, nämlich in der Hinsicht, dass ich den Text von dir nicht in das Textfeld reinkopiert habe. Dies habe ich jetzt einmal getan. Hier di OTL.txt Datei:OTL Logfile: Code:
ATTFilter OTL logfile created on: 03.04.2012 19:56:19 - Run 4 OTL by OldTimer - Version 3.2.39.2 Folder = C:\Dokumente und Einstellungen\MS\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,93 Gb Total Physical Memory | 2,47 Gb Available Physical Memory | 84,36% Memory free 5,70 Gb Paging File | 5,43 Gb Available in Paging File | 95,23% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 465,75 Gb Total Space | 391,42 Gb Free Space | 84,04% Space Free | Partition Type: NTFS Computer Name: MS-81B1A4635884 | User Name: MS | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation) PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) PRC - c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) PRC - C:\Programme\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo) PRC - C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe (Nero AG) PRC - C:\Programme\USB Camera\VM331_STI.EXE (Vimicro) PRC - C:\Programme\CONEXANT\SmartAudio\SmAudio.exe (Conexant Systems, Inc.) PRC - C:\Programme\Lenovo\ReadyComm\common\IGRS.exe (Lenovo Group Limited) PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\WINDOWS\system32\IgrsSvcs.exe (Microsoft Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe (Microsoft Corporation) ========== Modules (No Company Name) ========== MOD - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU () ========== Win32 Services (SafeList) ========== SRV - (TuneUp.Defrag) -- C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software) SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation) SRV - (MsMpSvc) -- c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) SRV - (UNS) Intel(R) -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) Intel(R) -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (Nero BackItUp Scheduler 4.0) -- C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe (Nero AG) SRV - (Lenovo ReadyComm ConnSvc) -- C:\Programme\Lenovo\ReadyComm\ConnSvc.exe (Lenovo Group Limited) SRV - (Lenovo ReadyComm AppSvc) -- C:\Programme\Lenovo\ReadyComm\AppSvc.exe (Lenovo Group Limited) SRV - (IGRS) -- C:\Programme\Lenovo\ReadyComm\common\IGRS.exe (Lenovo Group Limited) SRV - (ReadyComm.DirectRouter) -- C:\Programme\Lenovo\ReadyComm\common\router.dll (Lenovo Group Limited) SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (WDICA) -- File not found DRV - (PDRFRAME) -- File not found DRV - (PDRELI) -- File not found DRV - (PDFRAME) -- File not found DRV - (PDCOMP) -- File not found DRV - (PCIDump) -- File not found DRV - (lbrtfdc) -- File not found DRV - (i2omgmt) -- File not found DRV - (Changer) -- File not found DRV - (catchme) -- C:\DOKUME~1\MS\LOKALE~1\Temp\catchme.sys File not found DRV - (CnxtHdAudService) -- C:\WINDOWS\system32\drivers\CHDAU32.sys (Conexant Systems Inc.) DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation ) DRV - (Impcd) -- C:\WINDOWS\system32\drivers\Impcd.sys (Intel Corporation) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (sscdmdm) -- C:\WINDOWS\system32\drivers\sscdmdm.sys (MCCI Corporation) DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) -- C:\WINDOWS\system32\drivers\sscdbus.sys (MCCI Corporation) DRV - (sscdmdfl) -- C:\WINDOWS\system32\drivers\sscdmdfl.sys (MCCI Corporation) DRV - (IntcDAud) Intel(R) -- C:\WINDOWS\system32\drivers\IntcDAud.sys (Intel(R) Corporation) DRV - (RSUSBSTOR) -- C:\WINDOWS\system32\drivers\RtsUStor.sys (Realtek Semiconductor Corp.) DRV - (vm331avs) -- C:\WINDOWS\system32\drivers\vm331avs.sys (Vimicro Corporation) DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation) DRV - (HECI) Intel(R) -- C:\WINDOWS\system32\drivers\HECI.sys (Intel Corporation) DRV - (ACPIVPC) -- C:\WINDOWS\system32\drivers\AcpiVpc.sys (Lenovo Corporation) DRV - (wsvd) -- C:\WINDOWS\system32\drivers\wsvd.sys (CyberLink) DRV - (wdmirror) -- C:\WINDOWS\system32\drivers\WDMirror.sys (Windows (R) Codename Longhorn DDK provider) DRV - (Bridge0) -- C:\WINDOWS\system32\drivers\wdbridge.sys (Lenovo) DRV - (WimFltr) -- C:\WINDOWS\system32\drivers\WimFltr.sys (Microsoft Corporation) DRV - (StarOpen) -- C:\WINDOWS\System32\drivers\StarOpen.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programme\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) O1 HOSTS File: ([2011.05.26 05:37:00 | 000,000,098 | -H-- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [331BigDog] C:\Programme\USB Camera\VM331_STI.EXE (Vimicro) O4 - HKLM..\Run: [Athan] C:\Programme\Athan\Athan.exe (www.IslamicFinder.org) O4 - HKLM..\Run: [MSC] c:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [OnekeyStudio] C:\Programme\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo) O4 - HKLM..\Run: [SmartAudio] C:\Programme\CONEXANT\SMARTAUDIO\SMAUDIO.EXE (Conexant Systems, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SweetIM] C:\Programme\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1279544010156 (MUWebControl Class) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos-beta/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3D4F80F4-10E6-406C-BB8E-C2822FBAE628}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ActiveX: {0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - Microsoft .NET Framework 1.1 Security Update (KB2656353) ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8 ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Sicherheitsupdate für Windows XP (KB923789) ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ActiveX: {8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework ActiveX: {C314CE45-3392-3B73-B4E1-139CD41CA933} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Shockwave Flash ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E78BFA60-5393-4C38-82AB-E8019E464EB4} - .NET Framework ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {EF289A85-8E57-408d-BE47-73B55609861A} - RootsUpdate ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE ActiveX: Microsoft Base Smart Card Crypto Provider Package - NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: UxTuneUp - C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software) NetSvcs: WmdmPmSp - File not found CREATERESTOREPOINT Error creating restore point. ========== Files/Folders - Created Within 30 Days ========== [2012.04.03 18:48:02 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\MS\Recent [2012.04.02 21:21:52 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2012.04.02 20:55:35 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe [2012.03.31 17:12:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Desktop\Amazon MP3 [2012.03.31 14:47:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Desktop\Homepageprojekt [2012.03.15 21:24:15 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\kodak [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.04.03 19:35:20 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job [2012.04.03 19:30:41 | 000,002,206 | -H-- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012.04.03 19:30:13 | 000,002,048 | -H-- | M] () -- C:\WINDOWS\bootstat.dat [2012.04.03 19:30:10 | 3144,572,928 | -HS- | M] () -- C:\hiberfil.sys [2012.04.03 18:57:45 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\MS\Desktop\OTL.exe [2012.04.03 18:48:20 | 000,000,412 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{4A970276-BB22-4637-ABD5-40A859D9A97C}.job [2012.04.01 18:00:19 | 000,000,622 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\profile.xml [2012.03.30 17:23:25 | 001,389,389 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\one_step_closer_by_samirmalik.jpg [2012.03.29 05:32:21 | 004,164,511 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\DSC_0060.JPG [2012.03.15 22:08:53 | 000,290,088 | -H-- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012.03.13 06:36:55 | 002,871,119 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\Desktop\hartmann7619.jpg [2012.03.11 20:07:47 | 000,002,870 | -H-- | M] () -- C:\WINDOWS\quran.ini [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2012.03.30 17:23:25 | 001,389,389 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\one_step_closer_by_samirmalik.jpg [2012.03.29 05:32:10 | 004,164,511 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\DSC_0060.JPG [2012.03.13 06:36:47 | 002,871,119 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Desktop\hartmann7619.jpg [2012.02.18 09:27:23 | 000,003,072 | -H-- | C] () -- C:\WINDOWS\System32\iacenc.dll [2011.08.10 21:48:52 | 000,334,616 | -H-- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2011.05.26 21:40:17 | 000,256,512 | -H-- | C] () -- C:\WINDOWS\PEV.exe [2011.05.26 21:40:17 | 000,089,088 | -H-- | C] () -- C:\WINDOWS\MBR.exe [2011.05.26 21:40:16 | 000,098,816 | -H-- | C] () -- C:\WINDOWS\sed.exe [2011.05.26 21:40:16 | 000,080,412 | -H-- | C] () -- C:\WINDOWS\grep.exe [2011.05.26 21:40:16 | 000,068,096 | -H-- | C] () -- C:\WINDOWS\zip.exe [2011.01.29 17:54:32 | 000,000,135 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2011.01.23 23:05:07 | 000,002,528 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\$_hpcst$.hpc [2011.01.21 16:43:48 | 000,000,000 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LauncherAccess.dt [2011.01.21 16:41:58 | 000,005,632 | -H-- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010.10.25 14:29:03 | 000,000,112 | -H-- | C] () -- C:\WINDOWS\ActiveSkin.INI [2010.10.17 11:47:13 | 000,000,049 | -H-- | C] () -- C:\WINDOWS\minipad.ini [2010.10.17 11:47:10 | 000,002,870 | -H-- | C] () -- C:\WINDOWS\quran.ini [2010.10.10 22:33:19 | 000,111,932 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat [2010.10.10 22:33:19 | 000,031,053 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern131.dat [2010.10.10 22:33:19 | 000,027,417 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern121.dat [2010.10.10 22:33:19 | 000,026,154 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat [2010.10.10 22:33:19 | 000,024,903 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat [2010.10.10 22:33:19 | 000,021,390 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat [2010.10.10 22:33:19 | 000,020,148 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat [2010.10.10 22:33:19 | 000,011,811 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat [2010.10.10 22:33:19 | 000,004,943 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat [2010.10.10 22:33:19 | 000,001,146 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat [2010.10.10 22:33:19 | 000,001,139 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat [2010.10.10 22:33:19 | 000,001,139 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat [2010.10.10 22:33:19 | 000,001,136 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat [2010.10.10 22:33:19 | 000,001,129 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat [2010.10.10 22:33:19 | 000,001,129 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat [2010.10.10 22:33:19 | 000,001,120 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat [2010.10.10 22:33:19 | 000,001,107 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat [2010.10.10 22:33:19 | 000,001,104 | -H-- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat [2010.10.10 22:33:19 | 000,000,097 | -H-- | C] () -- C:\WINDOWS\System32\PICSDK.ini [2010.10.01 19:20:29 | 000,018,432 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.08.31 08:15:27 | 000,000,189 | -H-- | C] () -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\default.rss [2010.08.31 08:14:55 | 000,000,069 | -H-- | C] () -- C:\WINDOWS\NeroDigital.ini [2010.07.19 16:12:21 | 000,000,622 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\profile.xml [2010.07.19 16:01:28 | 000,016,648 | RH-- | C] () -- C:\WINDOWS\System32\LogAPI.dll [2010.07.19 15:46:13 | 000,127,868 | -H-- | C] () -- C:\WINDOWS\System32\igcompkrng575.bin [2010.07.19 15:46:10 | 000,870,560 | -H-- | C] () -- C:\WINDOWS\System32\igkrng575.bin [2010.07.19 15:46:10 | 000,004,096 | -H-- | C] ( ) -- C:\WINDOWS\System32\IGFXDEVLib.dll [2010.07.19 15:46:03 | 000,000,151 | -H-- | C] () -- C:\WINDOWS\System32\GfxUI.exe.config [2010.07.19 15:02:13 | 000,004,161 | -H-- | C] () -- C:\WINDOWS\ODBCINST.INI [2010.07.19 15:01:00 | 000,290,088 | -H-- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.07.19 14:47:33 | 000,080,416 | -H-- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll [2010.07.19 14:45:47 | 000,001,340 | -H-- | C] () -- C:\WINDOWS\vm331Rmv.ini [2010.07.19 14:15:39 | 000,002,048 | -H-- | C] () -- C:\WINDOWS\bootstat.dat [2010.07.19 14:09:11 | 000,021,740 | -H-- | C] () -- C:\WINDOWS\System32\emptyregdb.dat ========== LOP Check ========== [2011.11.22 21:14:15 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eDocPrintPro [2011.01.23 23:05:15 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung [2011.07.18 15:54:50 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM [2010.07.19 16:11:00 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp [2010.07.19 18:00:43 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software [2012.04.02 21:21:52 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2010.10.02 10:28:07 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [2010.07.19 17:58:55 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} [2010.10.03 10:39:33 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Amazon [2011.07.21 05:41:38 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Ashampoo [2011.09.18 13:17:59 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoft [2011.04.03 11:30:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers [2012.01.28 21:22:52 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Fender [2011.01.29 17:54:36 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\LaCie [2010.07.19 16:01:32 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Lenovo [2011.07.23 08:49:24 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\PriceGong [2011.01.23 23:05:02 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Samsung [2010.10.08 16:40:01 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\TeamViewer [2010.07.19 18:00:53 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\TuneUp Software [2010.07.19 15:20:57 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Windows Desktop Search [2010.10.02 16:28:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\Windows Search [2011.07.18 16:04:02 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\MS\Anwendungsdaten\WordToPDF [2012.04.03 19:35:20 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job [2012.04.03 18:48:20 | 000,000,412 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{4A970276-BB22-4637-ABD5-40A859D9A97C}.job ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2010.07.19 15:24:09 | 000,000,000 | -H-D | M] -- C:\c3a9e3a898ccef95b5d7e45f [2011.05.26 21:44:03 | 000,000,000 | RHSD | M] -- C:\cmdcons [2011.01.21 16:49:08 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen [2010.07.19 16:10:38 | 000,000,000 | -H-D | M] -- C:\Drivers [2011.07.18 15:56:45 | 000,000,000 | -H-D | M] -- C:\gs [2010.07.19 18:21:39 | 000,000,000 | -H-D | M] -- C:\IDE [2010.07.19 15:46:00 | 000,000,000 | -H-D | M] -- C:\Intel [2010.07.19 17:15:46 | 000,000,000 | -H-D | M] -- C:\Lenovo [2010.10.17 11:47:49 | 000,000,000 | -H-D | M] -- C:\MINIPAD [2010.07.19 18:14:55 | 000,000,000 | RH-D | M] -- C:\MSOCache [2012.02.26 18:50:59 | 000,000,000 | RH-D | M] -- C:\Programme [2011.05.26 21:50:53 | 000,000,000 | -H-D | M] -- C:\Qoobox [2011.06.13 15:50:00 | 000,000,000 | -H-D | M] -- C:\QURAN [2011.05.26 22:21:40 | 000,000,000 | -HSD | M] -- C:\RECYCLER [2011.05.28 09:34:27 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2012.04.02 21:22:08 | 000,000,000 | -H-D | M] -- C:\WINDOWS [2011.05.26 05:36:38 | 000,000,000 | -H-D | M] -- C:\_OTL < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < MD5 for: AGP440.SYS > [2004.08.04 02:10:00 | 018,782,319 | -H-- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys [2008.04.14 08:03:54 | 020,108,202 | -H-- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys [2008.04.14 08:03:54 | 020,108,202 | -H-- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys [2008.04.14 00:06:40 | 000,042,368 | -H-- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys [2008.04.14 00:06:40 | 000,042,368 | -H-- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys [2008.04.14 00:06:40 | 000,042,368 | -H-- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys < MD5 for: ATAPI.SYS > [2004.08.04 02:10:00 | 018,782,319 | -H-- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys [2008.04.14 08:03:54 | 020,108,202 | -H-- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys [2008.04.14 08:03:54 | 020,108,202 | -H-- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys [2008.04.14 00:10:32 | 000,096,512 | -H-- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys [2008.04.14 00:10:32 | 000,096,512 | -H-- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys [2008.04.14 00:10:32 | 000,096,512 | -H-- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys [2008.04.14 00:10:32 | 000,096,512 | -H-- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys [2008.04.14 00:10:32 | 000,096,512 | -H-- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\atapi.sys [2008.04.14 00:10:32 | 000,096,512 | -H-- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\i386\atapi.sys < MD5 for: EVENTLOG.DLL > [2008.04.14 07:52:12 | 000,056,320 | -H-- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ERDNT\cache\eventlog.dll [2008.04.14 07:52:12 | 000,056,320 | -H-- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll [2008.04.14 07:52:12 | 000,056,320 | -H-- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll < MD5 for: EXPLORER.EXE > [2011.01.16 15:55:21 | 000,255,488 | -H-- | M] () MD5=3C33B26F2F7FA61D882515F2D6078691 -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX0\procs\explorer.exe [2011.01.16 15:55:21 | 000,255,488 | -H-- | M] () MD5=3C33B26F2F7FA61D882515F2D6078691 -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX1\procs\explorer.exe [2011.01.16 15:55:21 | 000,255,488 | -H-- | M] () MD5=3C33B26F2F7FA61D882515F2D6078691 -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX2\procs\explorer.exe [2011.01.16 15:55:21 | 000,255,488 | -H-- | M] () MD5=3C33B26F2F7FA61D882515F2D6078691 -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX3\procs\explorer.exe [2011.01.16 15:55:21 | 000,255,488 | -H-- | M] () MD5=3C33B26F2F7FA61D882515F2D6078691 -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX4\procs\explorer.exe [2011.01.16 15:55:21 | 000,255,488 | ---- | M] () MD5=3C33B26F2F7FA61D882515F2D6078691 -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX5\procs\explorer.exe [2008.04.14 07:52:46 | 001,036,800 | -H-- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\ERDNT\cache\explorer.exe [2008.04.14 07:52:46 | 001,036,800 | -H-- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\explorer.exe [2008.04.14 07:52:46 | 001,036,800 | -H-- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe [2005.08.16 01:54:58 | 000,001,536 | -H-- | M] () MD5=ABC6379205DE2618851C4FCBF72112EB -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX0\h\explorer.exe [2005.08.16 01:54:58 | 000,001,536 | -H-- | M] () MD5=ABC6379205DE2618851C4FCBF72112EB -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX1\h\explorer.exe [2005.08.16 01:54:58 | 000,001,536 | -H-- | M] () MD5=ABC6379205DE2618851C4FCBF72112EB -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX2\h\explorer.exe [2005.08.16 01:54:58 | 000,001,536 | -H-- | M] () MD5=ABC6379205DE2618851C4FCBF72112EB -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX3\h\explorer.exe [2005.08.16 01:54:58 | 000,001,536 | -H-- | M] () MD5=ABC6379205DE2618851C4FCBF72112EB -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX4\h\explorer.exe [2005.08.16 01:54:58 | 000,001,536 | ---- | M] () MD5=ABC6379205DE2618851C4FCBF72112EB -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX5\h\explorer.exe < MD5 for: IASTOR.SYS > [2009.10.02 12:40:50 | 000,432,664 | -H-- | M] (Intel Corporation) MD5=D5EDB998656E6ECF1A17C78DAB019A3C -- C:\Drivers\Intel Matrix Storage Manager Driver\iaStor.sys [2009.11.20 14:59:26 | 000,432,664 | -H-- | M] (Intel Corporation) MD5=EDF5ECC965FAAA533D35E02F47B9132E -- C:\Drivers\Intel Matrix Storage Manager Driver\IRST\iaStor.sys < MD5 for: NETLOGON.DLL > [2008.04.14 07:52:20 | 000,407,040 | -H-- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ERDNT\cache\netlogon.dll [2008.04.14 07:52:20 | 000,407,040 | -H-- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll [2008.04.14 07:52:20 | 000,407,040 | -H-- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll < MD5 for: SCECLI.DLL > [2008.04.14 07:52:24 | 000,187,904 | -H-- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ERDNT\cache\scecli.dll [2008.04.14 07:52:24 | 000,187,904 | -H-- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll [2008.04.14 07:52:24 | 000,187,904 | -H-- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll < MD5 for: USER32.DLL > [2008.04.14 07:52:32 | 000,580,096 | -H-- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\ERDNT\cache\user32.dll [2008.04.14 07:52:32 | 000,580,096 | -H-- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\ServicePackFiles\i386\user32.dll [2008.04.14 07:52:32 | 000,580,096 | -H-- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll < MD5 for: USERINIT.EXE > [2008.04.14 07:53:04 | 000,026,624 | -H-- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ERDNT\cache\userinit.exe [2008.04.14 07:53:04 | 000,026,624 | -H-- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe [2008.04.14 07:53:04 | 000,026,624 | -H-- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX0\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX1\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX2\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX3\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX4\userinit.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX5\userinit.exe < MD5 for: WINLOGON.EXE > [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX0\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX1\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX2\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX3\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | -H-- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX4\winlogon.exe [2009.05.26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Dokumente und Einstellungen\MS\Lokale Einstellungen\Temp\RarSFX5\winlogon.exe [2008.04.14 07:53:06 | 000,513,024 | -H-- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ERDNT\cache\winlogon.exe [2008.04.14 07:53:06 | 000,513,024 | -H-- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe [2008.04.14 07:53:06 | 000,513,024 | -H-- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe < MD5 for: WS2IFSL.SYS > [2001.08.31 14:32:16 | 000,012,032 | -H-- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys [2001.08.31 14:32:16 | 000,012,032 | -H-- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > [2010.07.19 16:00:17 | 000,094,208 | -H-- | M] () -- C:\WINDOWS\System32\config\default.sav [2010.07.19 16:00:17 | 000,663,552 | -H-- | M] () -- C:\WINDOWS\System32\config\software.sav [2010.07.19 16:00:17 | 000,458,752 | -H-- | M] () -- C:\WINDOWS\System32\config\system.sav < %systemroot%\system32\*.dll /lockedfiles > [1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] < %USERPROFILE%\*.* > [2012.04.03 19:29:32 | 006,815,744 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\ntuser.dat [2012.04.03 19:56:15 | 000,001,024 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\ntuser.dat.LOG [2012.03.24 14:59:34 | 000,000,000 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\NTUSER.DAT_tureg_new.LOG [2012.03.24 12:16:12 | 006,553,600 | -H-- | M] () -- C:\Dokumente und Einstellungen\MS\NTUSER.DAT_tureg_old [2012.04.03 19:29:32 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\MS\ntuser.ini < %USERPROFILE%\Local Settings\Temp\*.exe > < %USERPROFILE%\Local Settings\Temp\*.dll > < %USERPROFILE%\Application Data\*.exe > < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Kmode: %SystemRoot%\system32\win32k.sys [2012.02.03 11:57:08 | 001,860,224 | -H-- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 < > < End of report > Es hat sich aber keine Extra.txt Datei gebildet. Gleiches gilt für die Geschichte mit dem Fix Button. |
04.04.2012, 14:00 | #8 |
/// Malware-holic | Smart hdd hi, du kannst moved files auch mit winrar zip oder 7zip packen ebenfalls alles über rechtsklick zu finden. ja, das mit dem fehlenden script hatte ich schon gesehen. wollte nur erst mal den rechner "zugänglicher" machen.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
04.04.2012, 18:12 | #9 |
| Smart hdd Lieber Markus, habe es soeben hochgeladen. |
04.04.2012, 20:09 | #10 | |
/// Malware-holic | Smart hdd danke combofix: Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!Downloade dir bitte Combofix von einem dieser Downloadspiegel Link 1 Link 2 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
05.04.2012, 04:47 | #11 |
| Smart hdd Guten Morgen Markus, hier die Logfile. Es gibt ein Problem. Trojaner Board sagt, der Post hätte zuviele Zeichen. Als Anhang geht es auch nicht, da dann gesagt wird, die Datei sei zu groß. Ich werde den Log aufteilen, hoffe, dass ist okay. Folgende Dinge sind geschehen: 1. Die Dateien auf meinem Desktop sind nicht mehr grau unterlegt 2. In der Taskleiste ist wieder Smart HDD erschienen. Grüße Mhmmm geht auch nicht... Ich habe es über den Upload Channel hochgeladen. Hoffe das war okay. Grüße |
05.04.2012, 11:56 | #12 |
/// Malware-holic | Smart hdd bitte das log als archiv gepackt hier anhängen, oder auf 2 posts aufteilen
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
05.04.2012, 17:56 | #13 |
| Smart hdd ComboFix 12-04-04.02 - MS 05.04.2012 5:30.2.4 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.49.1031.18.2999.2521 [GMT 2:00] ausgeführt von:: c:\dokumente und einstellungen\MS\Desktop\ComboFix.exe AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF} AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\dokumente und einstellungen\All Users\Anwendungsdaten\TEMP c:\dokumente und einstellungen\All Users\Anwendungsdaten\TEMP\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}\PostBuild.exe c:\dokumente und einstellungen\MS\Anwendungsdaten\PriceGong c:\dokumente und einstellungen\MS\WINDOWS c:\windows\iun6002.exe c:\windows\system\QTURKEY2.FON c:\windows\system\QURAAN2S.FON c:\windows\system32\dllcache\dlimport.exe . . ((((((((((((((((((((((( Dateien erstellt von 2012-03-05 bis 2012-04-05 )))))))))))))))))))))))))))))) . . 2012-04-04 17:12 . 2012-03-14 02:15 6582328 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Microsoft\Microsoft Antimalware\Definition Updates\{0D67EF81-3B11-49E4-A409-5393748A91F4}\mpengine.dll 2012-04-03 18:56 . 2012-04-05 03:28 1290106 ----a-w- c:\windows\system32\PerfStringBackup.TMP 2012-04-02 19:21 . 2012-04-02 19:21 -------- d-sh--w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936} 2012-03-15 19:53 . 2012-03-15 19:53 -------- d--h--w- c:\windows\system32\wbem\Repository 2012-03-15 19:24 . 2012-03-15 19:24 -------- d--h--w- c:\dokumente und einstellungen\MS\Anwendungsdaten\kodak . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-03-14 02:15 . 2010-07-19 15:42 6582328 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2012-02-19 15:18 . 2011-05-29 17:55 414368 ---ha-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-02-03 09:57 . 2004-08-03 23:46 1860224 ---ha-w- c:\windows\system32\win32k.sys 2012-01-31 12:44 . 2010-07-19 13:11 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-01-11 19:06 . 2012-02-18 07:27 3072 ---h--w- c:\windows\system32\iacenc.dll 2012-01-09 16:20 . 2010-07-19 12:07 139784 ---ha-w- c:\windows\system32\drivers\rdpwd.sys . . ((((((((((((((((((((((((((((( SnapShot@2011-05-26_19.49.11 ))))))))))))))))))))))))))))))))))))))))) . + 2011-04-18 20:51 . 2011-04-18 20:51 51024 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f\vcomp90.dll + 2011-04-18 20:51 . 2011-04-18 20:51 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90rus.dll + 2011-04-18 20:51 . 2011-04-18 20:51 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90kor.dll + 2011-04-18 20:51 . 2011-04-18 20:51 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90jpn.dll + 2011-04-18 20:51 . 2011-04-18 20:51 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90ita.dll + 2011-04-18 20:51 . 2011-04-18 20:51 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90fra.dll + 2011-04-18 20:51 . 2011-04-18 20:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esp.dll + 2011-04-18 20:51 . 2011-04-18 20:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esn.dll + 2011-04-18 20:51 . 2011-04-18 20:51 53584 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll + 2011-04-18 20:51 . 2011-04-18 20:51 63312 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90deu.dll + 2011-04-18 20:51 . 2011-04-18 20:51 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90cht.dll + 2011-04-18 20:51 . 2011-04-18 20:51 35664 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90chs.dll + 2011-04-18 20:51 . 2011-04-18 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90u.dll + 2011-04-18 20:51 . 2011-04-18 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90.dll + 2011-05-13 18:17 . 2011-05-13 18:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll + 2011-05-13 17:45 . 2011-05-13 17:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll + 2011-05-13 17:45 . 2011-05-13 17:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll + 2011-05-13 17:45 . 2011-05-13 17:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll + 2011-05-13 17:45 . 2011-05-13 17:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll + 2011-05-13 23:06 . 2011-05-13 23:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll + 2011-05-13 23:23 . 2011-05-13 23:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll + 2011-05-13 16:37 . 2011-05-13 16:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll + 2012-01-11 15:45 . 2012-01-11 15:45 21880 c:\windows\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe - 2010-10-06 06:44 . 2010-10-06 06:44 21880 c:\windows\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe + 2012-04-05 03:24 . 2012-04-05 03:24 16384 c:\windows\Temp\Perflib_Perfdata_284.dat - 2011-05-20 14:05 . 2011-01-12 16:32 30016 c:\windows\system32\uxtuneup.dll + 2011-12-30 12:55 . 2011-11-21 14:10 30016 c:\windows\system32\uxtuneup.dll + 2010-07-19 12:29 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe - 2010-07-19 12:29 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe + 2010-07-19 16:01 . 2011-11-21 14:13 30528 c:\windows\system32\TURegOpt.exe - 2010-07-19 16:01 . 2011-01-12 16:37 30528 c:\windows\system32\TURegOpt.exe + 2010-07-19 16:33 . 2009-02-27 02:42 66440 c:\windows\system32\spool\drivers\w32x86\msonpui.dll + 2010-07-19 16:34 . 2009-02-26 18:18 64360 c:\windows\system32\spool\drivers\w32x86\mdiui.dll + 2010-07-19 16:33 . 2009-02-27 02:42 66440 c:\windows\system32\spool\drivers\w32x86\3\msonpui.dll + 2010-07-19 16:34 . 2009-02-26 18:18 64360 c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll + 2001-08-31 12:30 . 2012-02-19 07:55 89572 c:\windows\system32\perfc009.dat + 2004-08-03 23:58 . 2011-11-20 06:12 61952 c:\windows\system32\packager.exe + 2001-08-31 12:30 . 2011-09-26 09:41 23040 c:\windows\system32\oleaccrc.dll - 2001-08-31 12:30 . 2009-10-08 12:57 23040 c:\windows\system32\oleaccrc.dll + 2010-07-19 16:34 . 2009-02-27 02:42 31640 c:\windows\system32\msonpmon.dll + 2004-08-03 23:57 . 2011-12-17 19:43 66560 c:\windows\system32\mshtmled.dll - 2004-08-03 23:57 . 2011-02-22 23:05 66560 c:\windows\system32\mshtmled.dll - 2009-03-08 02:31 . 2011-02-22 23:05 55296 c:\windows\system32\msfeedsbs.dll + 2009-03-08 02:31 . 2011-12-17 19:43 55296 c:\windows\system32\msfeedsbs.dll + 2010-07-19 16:34 . 2009-02-26 18:18 29552 c:\windows\system32\mdimon.dll - 2004-08-03 23:57 . 2008-04-14 05:52 23040 c:\windows\system32\mciseq.dll + 2004-08-03 23:57 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll + 2004-08-03 23:57 . 2011-12-17 19:43 43520 c:\windows\system32\licmgr10.dll - 2004-08-03 23:57 . 2011-02-22 23:05 43520 c:\windows\system32\licmgr10.dll + 2004-08-03 23:57 . 2011-12-17 19:43 25600 c:\windows\system32\jsproxy.dll - 2004-08-03 23:57 . 2011-02-22 23:05 25600 c:\windows\system32\jsproxy.dll + 2012-01-28 19:21 . 2008-04-13 23:15 60032 c:\windows\system32\drivers\USBAUDIO.sys + 2001-08-31 12:30 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys - 2010-07-19 13:05 . 2011-02-22 23:05 12800 c:\windows\system32\dllcache\xpshims.dll + 2010-07-19 13:05 . 2011-12-17 19:43 12800 c:\windows\system32\dllcache\xpshims.dll + 2012-01-28 19:21 . 2008-04-13 23:15 60032 c:\windows\system32\dllcache\usbaudio.sys + 2011-11-20 06:12 . 2011-11-20 06:12 61952 c:\windows\system32\dllcache\packager.exe - 2001-08-31 12:30 . 2009-10-08 12:57 23040 c:\windows\system32\dllcache\oleaccrc.dll + 2001-08-31 12:30 . 2011-09-26 09:41 23040 c:\windows\system32\dllcache\oleaccrc.dll + 2011-08-10 03:08 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys - 2009-03-08 02:31 . 2011-02-22 23:05 66560 c:\windows\system32\dllcache\mshtmled.dll + 2009-03-08 02:31 . 2011-12-17 19:43 66560 c:\windows\system32\dllcache\mshtmled.dll + 2010-07-19 13:05 . 2011-12-17 19:43 55296 c:\windows\system32\dllcache\msfeedsbs.dll - 2010-07-19 13:05 . 2011-02-22 23:05 55296 c:\windows\system32\dllcache\msfeedsbs.dll + 2011-10-14 14:47 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll + 2009-03-08 02:34 . 2011-12-17 19:43 43520 c:\windows\system32\dllcache\licmgr10.dll - 2009-03-08 02:34 . 2011-02-22 23:05 43520 c:\windows\system32\dllcache\licmgr10.dll - 2009-03-08 02:33 . 2011-02-22 23:05 25600 c:\windows\system32\dllcache\jsproxy.dll + 2009-03-08 02:33 . 2011-12-17 19:43 25600 c:\windows\system32\dllcache\jsproxy.dll + 2009-12-14 07:08 . 2011-10-28 05:31 33280 c:\windows\system32\dllcache\csrsrv.dll - 2009-12-14 07:08 . 2010-12-09 14:29 33280 c:\windows\system32\dllcache\csrsrv.dll + 2004-08-03 23:57 . 2011-10-28 05:31 33280 c:\windows\system32\csrsrv.dll - 2004-08-03 23:57 . 2010-12-09 14:29 33280 c:\windows\system32\csrsrv.dll + 2011-12-26 02:54 . 2011-12-26 02:54 15120 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine.dll + 2011-07-09 07:30 . 2011-07-09 07:30 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll - 2011-02-10 02:10 . 2011-02-10 02:10 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll + 2011-12-26 02:54 . 2011-12-26 02:54 33552 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe + 2011-12-25 02:49 . 2011-12-25 02:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2011-12-25 10:07 . 2011-12-25 10:07 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll - 2010-09-23 14:55 . 2010-09-23 14:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll - 2010-09-23 01:26 . 2010-09-23 01:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2011-12-24 21:55 . 2011-12-24 21:55 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - 2010-09-23 01:26 . 2010-09-23 01:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2011-12-24 21:55 . 2011-12-24 21:55 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2010-09-23 01:26 . 2010-09-23 01:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2011-12-24 21:55 . 2011-12-24 21:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2011-12-24 22:49 . 2011-12-24 22:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2010-09-23 02:17 . 2010-09-23 02:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2011-12-24 22:49 . 2011-12-24 22:49 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll - 2010-09-23 02:17 . 2010-09-23 02:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2012-01-11 15:45 . 2012-01-11 15:45 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll - 2010-10-06 06:44 . 2010-10-06 06:44 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll + 2012-02-18 19:24 . 2012-02-18 19:24 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll - 2011-04-15 07:50 . 2011-04-15 07:50 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll - 2010-07-19 15:41 . 2010-07-19 15:41 11136 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\WindowsFormsIntegration.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 11136 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\WindowsFormsIntegration.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 87400 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\WindowsBase.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 87400 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\WindowsBase.resources.dll + 2012-02-18 19:24 . 2012-02-18 19:24 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2011-04-15 07:50 . 2011-04-15 07:50 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2010-07-19 15:41 . 2010-07-19 15:41 13688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\UIAutomationTypes.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 13688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\UIAutomationTypes.resources.dll - 2011-04-15 07:50 . 2011-04-15 07:50 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2012-02-18 19:24 . 2012-02-18 19:24 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2011-06-29 20:22 . 2011-06-29 20:22 10104 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\UIAutomationProvider.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 10104 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\UIAutomationProvider.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 16272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\UIAutomationClientsideProviders. resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 16272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\UIAutomationClientsideProviders. resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 15224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\UIAutomationClient.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 15224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\UIAutomationClient.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 14192 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Xml.Linq.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 14192 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Xml.Linq.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 64360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Xaml.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 64360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Xaml.resources.dll + 2012-01-11 15:45 . 2012-01-11 15:45 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll - 2010-10-06 06:44 . 2010-10-06 06:44 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll - 2011-04-15 07:50 . 2011-04-15 07:50 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-02-18 19:24 . 2012-02-18 19:24 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-02-18 19:24 . 2012-02-18 19:24 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2011-04-15 07:50 . 2011-04-15 07:50 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2010-07-19 15:41 . 2010-07-19 15:41 11160 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Windows.Input.Manipula tions.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 11160 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Windows.Input.Manipula tions.resources.dll + 2012-01-11 15:45 . 2012-01-11 15:45 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisua lization.Design.dll - 2010-10-06 06:44 . 2010-10-06 06:44 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisua lization.Design.dll - 2010-07-19 15:40 . 2010-07-19 15:40 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Web.Services.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Web.Services.resources.dll + 2012-01-11 15:45 . 2012-01-11 15:45 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll - 2010-10-06 06:44 . 2010-10-06 06:44 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll + 2012-01-11 15:45 . 2012-01-11 15:45 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2010-10-06 06:44 . 2010-10-06 06:44 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2012-01-11 15:45 . 2012-01-11 15:45 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll - 2010-10-06 06:44 . 2010-10-06 06:44 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll + 2012-01-11 15:45 . 2012-01-11 15:45 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll - 2010-10-06 06:44 . 2010-10-06 06:44 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll - 2011-04-15 07:49 . 2011-04-15 07:49 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-02-18 19:24 . 2012-02-18 19:24 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2011-06-29 20:22 . 2011-06-29 20:22 12688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Web.ApplicationServices.re sources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 12688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Web.ApplicationServices.re sources.dll + 2012-01-11 15:45 . 2012-01-11 15:45 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll - 2010-10-06 06:44 . 2010-10-06 06:44 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll - 2010-07-19 15:40 . 2010-07-19 15:40 23416 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Transactions.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Transactions.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 23416 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Transactions.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Transactions.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 59248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Speech.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 59248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Speech.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 36736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 36736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll - 2010-10-06 06:44 . 2010-10-06 06:44 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll + 2012-01-11 15:45 . 2012-01-11 15:45 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll + 2012-01-11 15:45 . 2012-01-11 15:45 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dl l - 2010-10-06 06:44 . 2010-10-06 06:44 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dl l - 2010-07-19 15:40 . 2010-07-19 15:40 17288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ServiceModel.Routing.resource s.dll + 2011-06-29 20:22 . 2011-06-29 20:22 17288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ServiceModel.Routing.resource s.dll - 2010-07-19 15:40 . 2010-07-19 15:40 48016 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ServiceModel.Discovery.reso urces.dll + 2011-06-29 20:22 . 2011-06-29 20:22 48016 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ServiceModel.Discovery.reso urces.dll - 2011-04-15 07:49 . 2011-04-15 07:49 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2012-02-18 19:24 . 2012-02-18 19:24 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2011-06-29 20:22 . 2011-06-29 20:22 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ServiceModel.Channels.resour ces.dll - 2010-07-19 15:40 . 2010-07-19 15:40 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ServiceModel.Channels.resour ces.dll - 2010-07-19 15:40 . 2010-07-19 15:40 41872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ServiceModel.Activities.re sources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 41872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ServiceModel.Activities.re sources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Security.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Security.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 17840 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Runtime.Seri alization.Formatters.Soap.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 17840 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Runtime.Seri alization.Formatters.Soap.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 27008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 27008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 51088 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Runtime.DurableInstancin g.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 51088 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Runtime.DurableInstancin g.resources.dll + 2012-01-11 15:45 . 2012-01-11 15:45 95592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll - 2010-10-06 06:44 . 2010-10-06 06:44 95592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll + 2011-06-29 20:22 . 2011-06-29 20:22 22896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Printing.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Printing.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 22896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Printing.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Printing.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll + 2012-02-18 19:24 . 2012-02-18 19:24 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll + 2011-06-29 20:22 . 2011-06-29 20:22 12144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Numerics.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 12144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Numerics.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 24936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Net.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 24936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Net.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 74608 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Messaging.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 74608 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Messaging.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 19832 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Management.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 19832 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Management.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 17304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Management.Instrumentat ion.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 17304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Management.Instrumentat ion.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 17776 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.IO.Log.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 17776 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.IO.Log.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 50064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.IdentityModel.Selectors.re sources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 50064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.IdentityModel.Selectors.re sources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 52088 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.IdentityModel.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 52088 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.IdentityModel.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 29064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.EnterpriseServices.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.EnterpriseServices.resources.dl l - 2010-07-19 15:41 . 2010-07-19 15:41 29064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.EnterpriseServices.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.EnterpriseServices.resources.dl l + 2011-06-29 20:22 . 2011-06-29 20:22 12144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\system.dynamic.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Dynamic.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 12144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\system.dynamic.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Dynamic.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 20848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Drawing.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 20848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Drawing.resources.dll - 2010-10-06 06:44 . 2010-10-06 06:44 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2012-01-11 15:45 . 2012-01-11 15:45 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2010-07-19 15:41 . 2010-07-19 15:41 37248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.DirectoryServices.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 37248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.DirectoryServices.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 23448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.DirectoryServices.Prot ocols.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 23448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.DirectoryServices.Prot ocols.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 32168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.DirectoryServi ces.AccountManagement.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 32168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.DirectoryServi ces.AccountManagement.resources.dll + 2012-02-18 19:24 . 2012-02-18 19:24 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll - 2011-04-15 07:49 . 2011-04-15 07:49 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2011-06-29 20:22 . 2011-06-29 20:22 10608 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Device.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 10608 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Device.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 35704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\system.data.sqlxml.resources\v4.0_4.0.0.0_de_b77a5c561934e089\system.data.sqlxml.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 35704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\system.data.sqlxml.resources\v4.0_4.0.0.0_de_b77a5c561934e089\system.data.sqlxml.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 46472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.Services.Client.resource s.dll + 2011-06-29 20:22 . 2011-06-29 20:22 46472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.Services.Client.resource s.dll + 2011-06-29 20:22 . 2011-06-29 20:22 51568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.Linq.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 51568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.Linq.resources.dll + 2012-02-18 19:24 . 2012-02-18 19:24 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll - 2011-04-15 07:49 . 2011-04-15 07:49 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2011-06-29 20:22 . 2011-06-29 20:22 11152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.DataSetExtensions.reso urces.dll - 2010-07-19 15:40 . 2010-07-19 15:40 11152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.DataSetExtensions.reso urces.dll + 2011-06-29 20:22 . 2011-06-29 20:22 85352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Core.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 85352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Core.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Configuration.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Configuration.resources.dll + 2012-02-18 19:23 . 2012-02-18 19:23 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2011-04-15 07:49 . 2011-04-15 07:49 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2010-07-19 15:40 . 2010-07-19 15:40 23944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Configuration.Install.resour ces.dll + 2011-06-29 20:22 . 2011-06-29 20:22 23944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Configuration.Install.resour ces.dll - 2011-04-15 07:49 . 2011-04-15 07:49 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations. dll + 2012-02-18 19:24 . 2012-02-18 19:24 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations. dll + 2011-06-29 20:22 . 2011-06-29 20:22 18336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ComponentModel.Data Annotations.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 18336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.ComponentModel.Data Annotations.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 31128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.ComponentModel.Composit ion.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 31128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.ComponentModel.Composit ion.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 24424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.AddIn.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 24424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.AddIn.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2012-02-18 19:24 . 2012-02-18 19:24 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2010-07-19 15:40 . 2010-07-19 15:40 16792 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Activities.DurableIns tancing.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 16792 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Activities.DurableIns tancing.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 16736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\sysglobl.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 16736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\sysglobl.resources.dll + 2012-02-18 19:24 . 2012-02-18 19:24 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll - 2011-04-15 07:49 . 2011-04-15 07:49 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll - 2010-07-19 15:40 . 2010-07-19 15:40 10608 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics.resources\v4.0_4.0.0.0_de_b77a5c561934e089\SMDiagnostics.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 10608 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics.resources\v4.0_4.0.0.0_de_b77a5c561934e089\SMDiagnostics.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 16736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Regasm.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\Regasm.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 16736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Regasm.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\Regasm.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 34160 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\ReachFramework.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 34160 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\ReachFramework.resources.dll - 2010-10-06 06:44 . 2010-10-06 06:44 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe + 2012-01-11 15:45 . 2012-01-11 15:45 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe - 2011-04-15 07:49 . 2011-04-15 07:49 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2012-02-18 19:23 . 2012-02-18 19:23 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2010-10-06 06:44 . 2010-10-06 06:44 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll + 2012-01-11 15:45 . 2012-01-11 15:45 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll - 2010-07-19 15:41 . 2010-07-19 15:41 55168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 55168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 15768 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compa tibility.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 15768 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compa tibility.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibilit y.Data.dll + 2012-02-18 19:24 . 2012-02-18 19:24 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibilit y.Data.dll - 2010-07-19 15:41 . 2010-07-19 15:41 15272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualBasic. Compatibility.Data.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 15272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\Microsoft.VisualBasic. Compatibility.Data.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 24976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.reso urces.dll + 2011-06-29 20:22 . 2011-06-29 20:22 24976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.reso urces.dll + 2011-06-29 20:22 . 2011-06-29 20:22 11160 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.Dtc.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge. Dtc.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 11160 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.Dtc.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge. Dtc.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 40824 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Jscript.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\Microsoft.JScript.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 40824 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Jscript.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\Microsoft.JScript.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 30576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\Microsoft.CSharp.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 30576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\Microsoft.CSharp.resources.dll + 2012-01-11 15:45 . 2012-01-11 15:45 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll - 2010-10-06 06:44 . 2010-10-06 06:44 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll + 2011-06-29 20:22 . 2011-06-29 20:22 12632 c:\windows\Microsoft.NET\assembly\GAC_MSIL\jsc.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\JSC.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 12632 c:\windows\Microsoft.NET\assembly\GAC_MSIL\jsc.resources\v4.0_10.0.0.0_de_b03f5f7f11d50a3a\JSC.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 10088 c:\windows\Microsoft.NET\assembly\GAC_MSIL\InstallUtil.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\InstallUtil.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 10088 c:\windows\Microsoft.NET\assembly\GAC_MSIL\InstallUtil.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\InstallUtil.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 11632 c:\windows\Microsoft.NET\assembly\GAC_MSIL\CustomMarshalers.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\CustomMarshalers.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 11632 c:\windows\Microsoft.NET\assembly\GAC_MSIL\CustomMarshalers.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\CustomMarshalers.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 29024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\caspol.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\caspol.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 29024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\caspol.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\caspol.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 11112 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AddInUtil.resources\v4.0_4.0.0.0_de_b77a5c561934e089\AddInUtil.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 11112 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AddInUtil.resources\v4.0_4.0.0.0_de_b77a5c561934e089\AddInUtil.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2012-02-18 19:23 . 2012-02-18 19:23 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2011-04-15 07:49 . 2011-04-15 07:49 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-02-18 19:23 . 2012-02-18 19:23 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-02-18 19:23 . 2012-02-18 19:23 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-04-15 07:49 . 2011-04-15 07:49 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2011-06-29 20:22 . 2011-06-29 20:22 19968 c:\windows\Installer\b58fa7.msi + 2011-08-09 03:17 . 2011-08-09 03:17 54272 c:\windows\Installer\57408e.msi + 2011-08-09 03:16 . 2011-08-09 03:16 28160 c:\windows\Installer\574064.msi + 2011-11-22 19:14 . 2011-11-22 19:14 22486 c:\windows\Installer\{F5212949-60B3-43FC-A178-4A7B0BEDAD69}\_6FEFF9B68218417F98F549.exe + 2011-07-18 13:54 . 2011-07-18 13:54 10134 c:\windows\Installer\{A1194237-547A-461d-BD44-B97B1574A7DA}\ARPPRODUCTICON.exe + 2011-07-18 13:54 . 2011-07-18 13:54 10134 c:\windows\Installer\{97B4DF0B-7499-455F-AFBA-F70F64D6D86A}\ARPPRODUCTICON.exe - 2010-07-19 16:34 . 2011-05-11 16:20 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe + 2010-07-19 16:34 . 2012-03-15 20:00 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2010-07-19 16:34 . 2011-05-11 16:20 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2010-07-19 16:34 . 2012-03-15 20:00 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe - 2010-07-19 16:34 . 2011-05-11 16:20 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2010-07-19 16:34 . 2012-03-15 20:00 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2010-07-19 13:43 . 2012-02-18 19:26 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll - 2010-07-19 13:43 . 2011-04-21 04:02 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll + 2009-02-26 11:09 . 2009-02-26 11:09 10120 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\XLCALL32.DLL + 2009-02-26 16:43 . 2009-02-26 16:43 71520 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\XL12CNVP.DLL + 2009-02-26 15:45 . 2009-02-26 15:45 20808 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\WRD12EXE.EXE + 2006-07-24 08:50 . 2006-07-24 08:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\VBAME.DLL + 2009-02-26 10:09 . 2009-02-26 10:09 43352 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLRPC.DLL + 2009-02-26 13:24 . 2009-02-26 13:24 71536 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\ONFILTER.DLL + 2009-02-26 13:24 . 2009-02-26 13:24 97680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\ONENOTEM.EXE + 2006-07-24 08:50 . 2006-07-24 08:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MSADDNDR.DLL + 2009-02-26 10:09 . 2009-02-26 10:09 20352 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MLSHEXT.DLL + 2010-07-19 16:28 . 2010-07-19 16:28 35648 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OLCTLPIA.DLL + 2006-10-26 18:13 . 2006-10-26 18:13 56192 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACECNFLT.EXE + 2012-02-18 19:27 . 2011-11-04 19:13 12800 c:\windows\ie8updates\KB2647516-IE8\xpshims.dll + 2012-02-18 19:27 . 2011-11-04 19:13 66560 c:\windows\ie8updates\KB2647516-IE8\mshtmled.dll + 2012-02-18 19:27 . 2011-11-04 19:13 55296 c:\windows\ie8updates\KB2647516-IE8\msfeedsbs.dll + 2012-02-18 19:27 . 2011-11-04 19:13 43520 c:\windows\ie8updates\KB2647516-IE8\licmgr10.dll + 2012-02-18 19:27 . 2011-11-04 19:13 25600 c:\windows\ie8updates\KB2647516-IE8\jsproxy.dll + 2011-12-15 17:50 . 2011-08-22 23:41 12800 c:\windows\ie8updates\KB2618444-IE8\xpshims.dll + 2011-12-15 17:50 . 2011-08-22 23:41 66560 c:\windows\ie8updates\KB2618444-IE8\mshtmled.dll + 2011-12-15 17:50 . 2011-08-22 23:41 55296 c:\windows\ie8updates\KB2618444-IE8\msfeedsbs.dll + 2011-12-15 17:50 . 2011-08-22 23:41 43520 c:\windows\ie8updates\KB2618444-IE8\licmgr10.dll + 2011-12-15 17:50 . 2011-08-22 23:41 25600 c:\windows\ie8updates\KB2618444-IE8\jsproxy.dll + 2011-10-12 03:59 . 2011-06-23 18:31 12800 c:\windows\ie8updates\KB2586448-IE8\xpshims.dll + 2011-10-12 03:59 . 2011-06-23 18:31 66560 c:\windows\ie8updates\KB2586448-IE8\mshtmled.dll + 2011-10-12 03:59 . 2011-06-23 18:31 55296 c:\windows\ie8updates\KB2586448-IE8\msfeedsbs.dll + 2011-10-12 03:59 . 2011-06-23 18:31 43520 c:\windows\ie8updates\KB2586448-IE8\licmgr10.dll + 2011-10-12 03:59 . 2011-06-23 18:31 25600 c:\windows\ie8updates\KB2586448-IE8\jsproxy.dll + 2011-08-10 03:57 . 2011-04-25 16:05 12800 c:\windows\ie8updates\KB2559049-IE8\xpshims.dll + 2011-08-10 03:57 . 2011-04-25 16:05 66560 c:\windows\ie8updates\KB2559049-IE8\mshtmled.dll + 2011-08-10 03:57 . 2011-04-25 16:05 55296 c:\windows\ie8updates\KB2559049-IE8\msfeedsbs.dll + 2011-08-10 03:57 . 2011-04-25 16:05 43520 c:\windows\ie8updates\KB2559049-IE8\licmgr10.dll + 2011-08-10 03:57 . 2011-04-25 16:05 25600 c:\windows\ie8updates\KB2559049-IE8\jsproxy.dll + 2011-06-16 04:05 . 2011-02-22 23:05 12800 c:\windows\ie8updates\KB2530548-IE8\xpshims.dll + 2011-06-16 04:05 . 2011-02-22 23:05 66560 c:\windows\ie8updates\KB2530548-IE8\mshtmled.dll + 2011-06-16 04:05 . 2011-02-22 23:05 55296 c:\windows\ie8updates\KB2530548-IE8\msfeedsbs.dll + 2011-06-16 04:05 . 2011-02-22 23:05 43520 c:\windows\ie8updates\KB2530548-IE8\licmgr10.dll + 2011-06-16 04:05 . 2011-02-22 23:05 25600 c:\windows\ie8updates\KB2530548-IE8\jsproxy.dll + 2012-01-11 15:49 . 2012-01-11 15:49 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_bb2aafec\System.Drawing.Design.dll + 2012-01-11 15:49 . 2012-01-11 15:49 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_c984b0a1\CustomMarshalers.dll + 2011-10-12 04:02 . 2011-10-12 04:02 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\6f4a1ba24dffa86dd2a2ab8127e0b16d\UIAutomationProvider.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\4cfa0d99fd3e867fc223f2f2ec5bbd02\System.Xaml.Hosting.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\604691fa729c36593aa141b07addb1da\System.Windows.Presentation.ni.dll + 2011-10-12 17:25 . 2011-10-12 17:25 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\3447b1ea4537dd7a1b7796efb935f4b0\System.Web.Routing.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\424e8ca4d7f4801c44945180bbe46ca4\System.Web.DynamicData.Design.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\df5e961346901ef1662daac2708f3888\System.Web.ApplicationServices.ni.dll + 2011-10-12 17:25 . 2011-10-12 17:25 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\5dd4316500d6e940dfed628463fe4595\System.Web.Abstractions.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\ce55cdba82e9103fc891b17d90f5a38f\System.ServiceModel.Channels.ni.dll + 2011-10-12 17:25 . 2011-10-12 17:25 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\6ab752f8ab98f09615768a90d50593c1\System.ServiceModel.ServiceMoniker40.ni.dll + 2011-10-12 04:03 . 2011-10-12 04:03 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\b811cdf42feaf9a32408b03ab1c4e2d5\System.AddIn.Contract.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\296f7d103134885dd98e7664faef0915\Microsoft.Workflow.Compiler.ni.exe + 2011-10-12 04:02 . 2011-10-12 04:02 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\cfba497fc860b32b8d895f57bf148aa7\Microsoft.VisualC.ni.dll + 2011-10-12 04:01 . 2011-10-12 04:01 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\1f368300314889ee35325be9f80ef1c3\Accessibility.ni.dll + 2011-10-12 16:53 . 2011-10-12 16:53 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\dab766b18e6fe0a8f53a93c56be7b40e\System.Windows.Presentation.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\31b65443e56a470d199f293085576e05\System.Web.DynamicData.Design.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\89dfd3999ad1d72c59243d7b4bf40d5a\System.ComponentModel.DataAnnotations.ni.dll + 2011-10-12 17:22 . 2011-10-12 17:22 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3aa4296d4aa01fe0533de2c15f818d5f\PresentationFontCache.ni.exe + 2012-02-19 07:53 . 2012-02-19 07:53 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\820acb71782d9cd006800b3ac7e1ca53\PresentationCFFRasterizer.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\34f5b348d1b44c212fa9e91d092e8af7\Microsoft.WSMan.Runtime.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\d07f0222f62dbed7898a6e2e909d407a\Microsoft.Vsa.ni.dll + 2011-10-12 17:22 . 2011-10-12 17:22 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll + 2011-10-12 17:22 . 2011-10-12 17:22 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e\Microsoft.Build.Framework.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 91648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Backgroun#\c27da951a1739077901b201137925795\Microsoft.BackgroundIntelligentTransfer.Managemen t.ni.dll + 2011-10-12 17:22 . 2011-10-12 17:22 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\ab7ce2d94ca725c3889a4e3c1ee88ece\dfsvc.ni.exe + 2011-10-12 17:21 . 2011-10-12 17:21 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll - 2011-04-15 07:55 . 2011-04-15 07:55 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2012-02-18 19:30 . 2012-02-18 19:30 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2012-02-18 19:30 . 2012-02-18 19:30 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2011-04-15 07:55 . 2011-04-15 07:55 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2012-02-18 19:30 . 2012-02-18 19:30 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2011-04-15 07:55 . 2011-04-15 07:55 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2011-04-15 07:55 . 2011-04-15 07:55 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2012-02-18 19:30 . 2012-02-18 19:30 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2012-02-18 19:30 . 2012-02-18 19:30 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2011-04-15 07:55 . 2011-04-15 07:55 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2011-04-15 07:55 . 2011-04-15 07:55 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2012-02-18 19:30 . 2012-02-18 19:30 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2012-02-18 19:30 . 2012-02-18 19:30 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll - 2011-04-15 07:55 . 2011-04-15 07:55 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll - 2011-04-15 07:55 . 2011-04-15 07:55 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2012-02-18 19:30 . 2012-02-18 19:30 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2011-04-15 07:55 . 2011-04-15 07:55 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2012-02-18 19:30 . 2012-02-18 19:30 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2011-07-31 08:11 . 2011-07-31 08:11 69632 c:\windows\assembly\GAC_MSIL\Google.GData.YouTube\1.8.0.0__af04a32718ae8833\Google.GData.YouTube.dll + 2011-07-31 08:11 . 2011-07-31 08:11 90112 c:\windows\assembly\GAC_MSIL\Google.GData.Extensions\1.8.0.0__0b4c5df2ebf20876\Google.GData.Extensions.dll - 2011-04-15 07:55 . 2011-04-15 07:55 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2012-02-18 19:30 . 2012-02-18 19:30 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2012-02-18 19:30 . 2012-02-18 19:30 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2011-04-15 07:55 . 2011-04-15 07:55 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2011-04-15 07:55 . 2011-04-15 07:55 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-02-18 19:30 . 2012-02-18 19:30 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-02-18 19:30 . 2012-02-18 19:30 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-04-15 07:55 . 2011-04-15 07:55 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-01-31 15:18 . 2011-01-31 15:18 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2012-01-11 15:49 . 2012-01-11 15:49 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2012-03-02 10:44 . 2012-03-02 10:44 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll - 2010-07-19 16:40 . 2010-07-19 16:40 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2012-03-02 10:44 . 2012-03-02 10:44 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2012-03-02 10:44 . 2012-03-02 10:44 34696 c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll + 2012-02-18 19:22 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2661637\update\spcustom.dll + 2012-02-18 19:22 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2661637\spmsg.dll + 2012-02-18 19:27 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2660465\update\spcustom.dll + 2012-02-18 19:27 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2660465\spmsg.dll + 2012-02-18 19:27 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2647516-IE8\update\spcustom.dll + 2012-02-18 19:27 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2647516-IE8\spmsg.dll + 2012-02-18 07:29 . 2011-12-17 19:42 12800 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\xpshims.dll + 2012-02-18 07:29 . 2011-12-17 19:42 66560 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\mshtmled.dll + 2012-02-18 07:29 . 2011-12-17 19:42 55296 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\msfeedsbs.dll + 2012-02-18 07:29 . 2011-12-17 19:42 43520 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\licmgr10.dll + 2012-02-18 07:29 . 2011-12-17 19:42 25600 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\jsproxy.dll + 2012-01-11 15:51 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2646524\update\spcustom.dll + 2012-01-11 15:51 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2646524\spmsg.dll + 2011-11-12 08:17 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2641690\update\spcustom.dll + 2011-11-12 08:17 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2641690\spmsg.dll + 2011-12-15 17:51 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2639417\update\spcustom.dll + 2011-12-15 17:51 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2639417\spmsg.dll + 2011-12-15 17:46 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2633171\update\spcustom.dll + 2011-12-15 17:30 . 2011-10-26 10:51 16896 c:\windows\$hf_mig$\KB2633171\update\mpsyschk.dll + 2011-12-15 17:46 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2633171\spmsg.dll + 2012-01-11 15:51 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2631813\update\spcustom.dll + 2012-01-11 15:51 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2631813\spmsg.dll + 2011-12-15 17:51 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2624667\update\spcustom.dll + 2011-12-15 17:51 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2624667\spmsg.dll + 2011-12-15 17:46 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2620712\update\spcustom.dll + 2011-12-15 17:46 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2620712\spmsg.dll + 2011-10-28 05:30 . 2011-10-28 05:30 33280 c:\windows\$hf_mig$\KB2620712\SP3QFE\csrsrv.dll + 2011-12-15 17:47 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2619339\update\spcustom.dll + 2011-12-15 17:47 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2619339\spmsg.dll + 2011-12-15 17:47 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2618451\update\spcustom.dll + 2011-12-15 17:47 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2618451\spmsg.dll + 2011-12-15 17:50 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2618444-IE8\update\spcustom.dll + 2011-12-15 17:50 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2618444-IE8\spmsg.dll + 2011-12-15 17:29 . 2011-11-04 19:12 12800 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\xpshims.dll + 2011-12-15 17:29 . 2011-11-04 19:12 66560 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mshtmled.dll + 2011-12-15 17:29 . 2011-11-04 19:12 55296 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\msfeedsbs.dll + 2011-12-15 17:29 . 2011-11-04 19:12 43520 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\licmgr10.dll + 2011-12-15 17:29 . 2011-11-04 19:12 25600 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\jsproxy.dll + 2011-09-16 05:41 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2616676\update\spcustom.dll + 2011-09-16 05:41 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2616676\spmsg.dll + 2011-09-07 04:01 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2607712\update\spcustom.dll + 2011-09-07 04:01 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2607712\spmsg.dll + 2012-01-11 15:46 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2603381\update\spcustom.dll + 2012-01-11 15:46 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2603381\spmsg.dll + 2012-01-11 15:50 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2598479\update\spcustom.dll + 2012-01-11 15:50 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2598479\spmsg.dll + 2011-10-14 14:45 . 2011-10-14 14:45 23040 c:\windows\$hf_mig$\KB2598479\SP3QFE\mciseq.dll + 2011-10-12 04:00 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2592799\update\spcustom.dll + 2011-10-12 04:00 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2592799\spmsg.dll + 2011-10-12 03:59 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2586448-IE8\update\spcustom.dll + 2011-10-12 03:59 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2586448-IE8\spmsg.dll + 2011-10-12 01:56 . 2011-08-22 23:40 12800 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\xpshims.dll + 2011-10-12 01:56 . 2011-08-22 23:40 66560 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtmled.dll + 2011-10-12 01:56 . 2011-08-22 23:40 55296 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeedsbs.dll + 2011-10-12 01:56 . 2011-08-22 23:40 43520 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\licmgr10.dll + 2011-10-12 01:56 . 2011-08-22 23:40 25600 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\jsproxy.dll + 2012-01-26 16:38 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2585542\update\spcustom.dll + 2012-01-26 16:38 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2585542\spmsg.dll + 2012-01-11 15:41 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2584146\update\spcustom.dll + 2012-01-11 15:41 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2584146\spmsg.dll + 2011-11-20 06:11 . 2011-11-20 06:11 61952 c:\windows\$hf_mig$\KB2584146\SP3QFE\packager.exe + 2011-09-16 05:37 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2570947\update\spcustom.dll + 2011-09-16 05:37 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2570947\spmsg.dll + 2011-08-10 04:10 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2570222\update\spcustom.dll + 2011-08-10 04:10 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2570222\spmsg.dll + 2011-08-10 04:13 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2567680\update\spcustom.dll + 2011-08-10 04:13 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2567680\spmsg.dll + 2011-10-12 04:01 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2567053\update\spcustom.dll + 2011-10-12 04:01 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2567053\spmsg.dll + 2011-08-10 03:57 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2566454\update\spcustom.dll + 2011-08-10 03:57 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2566454\spmsg.dll + 2011-08-10 03:08 . 2011-07-08 13:51 10496 c:\windows\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys + 2011-08-10 03:57 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll + 2011-08-10 03:57 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2562937\spmsg.dll + 2011-08-10 03:57 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2559049-IE8\update\spcustom.dll + 2011-08-10 03:57 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2559049-IE8\spmsg.dll + 2011-08-10 03:08 . 2011-06-23 18:29 12800 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\xpshims.dll + 2011-08-10 03:08 . 2011-06-23 18:29 66560 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtmled.dll + 2011-08-10 03:08 . 2011-06-23 18:29 55296 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeedsbs.dll + 2011-08-10 03:08 . 2011-06-23 18:29 43520 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\licmgr10.dll + 2011-08-10 03:08 . 2011-06-23 18:29 25600 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\jsproxy.dll + 2011-07-13 19:54 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2555917\update\spcustom.dll + 2011-07-13 19:54 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2555917\spmsg.dll + 2011-06-16 04:05 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2544893\update\spcustom.dll + 2011-06-16 04:05 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2544893\spmsg.dll + 2011-11-09 11:57 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2544893-v2\update\spcustom.dll + 2011-11-09 11:57 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2544893-v2\spmsg.dll + 2011-06-16 04:03 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2544521-IE8\update\spcustom.dll + 2011-06-16 04:03 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2544521-IE8\spmsg.dll + 2011-06-29 03:28 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2541763\update\spcustom.dll + 2011-06-29 03:28 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2541763\spmsg.dll + 2011-06-16 04:05 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2536276\update\spcustom.dll + 2011-06-16 04:05 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2536276\spmsg.dll + 2011-08-10 04:12 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2536276-v2\update\spcustom.dll + 2011-08-10 04:12 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2536276-v2\spmsg.dll + 2011-06-16 04:06 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2535512\update\spcustom.dll + 2011-06-16 04:06 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2535512\spmsg.dll + 2011-06-16 04:05 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2530548-IE8\update\spcustom.dll + 2011-06-16 04:05 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2530548-IE8\spmsg.dll + 2011-06-16 03:19 . 2011-04-25 16:04 12800 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\xpshims.dll + 2011-06-16 03:19 . 2011-04-25 16:04 66560 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtmled.dll + 2011-06-16 03:19 . 2011-04-25 16:04 55296 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeedsbs.dll + 2011-06-16 03:19 . 2011-04-25 16:04 43520 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\licmgr10.dll + 2011-06-16 03:19 . 2011-04-25 16:04 25600 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\jsproxy.dll + 2011-07-13 19:56 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2507938\update\spcustom.dll + 2011-07-13 19:56 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2507938\spmsg.dll + 2011-04-26 11:02 . 2011-04-26 11:02 33280 c:\windows\$hf_mig$\KB2507938\SP3QFE\csrsrv.dll + 2011-06-16 04:06 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2503665\update\spcustom.dll + 2011-06-16 04:06 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2503665\spmsg.dll + 2011-06-16 04:06 . 2010-07-05 13:14 26488 c:\windows\$hf_mig$\KB2476490\update\spcustom.dll + 2011-06-16 04:06 . 2010-07-05 13:14 18808 c:\windows\$hf_mig$\KB2476490\spmsg.dll - 2011-04-15 07:55 . 2011-04-15 07:55 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2012-02-18 19:30 . 2012-02-18 19:30 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll |
05.04.2012, 17:57 | #14 |
| Smart hdd c:\windows\system32\dllcache\iacenc.dll + 2011-06-29 20:22 . 2011-06-29 20:22 9608 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Windows.Presentation.resource s.dll - 2010-07-19 15:41 . 2010-07-19 15:41 9608 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Windows.Presentation.resource s.dll + 2011-10-12 04:01 . 2011-10-12 04:01 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fed35fa53f20bd75214f2eca0cde1ece\dfsvc.ni.exe - 2011-04-15 07:55 . 2011-04-15 07:55 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2012-02-18 19:30 . 2012-02-18 19:30 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2011-04-15 07:55 . 2011-04-15 07:55 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2012-02-18 19:30 . 2012-02-18 19:30 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2011-04-15 07:55 . 2011-04-15 07:55 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2012-02-18 19:30 . 2012-02-18 19:30 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2011-04-15 07:55 . 2011-04-15 07:55 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2012-02-18 19:30 . 2012-02-18 19:30 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2012-02-18 07:27 . 2012-01-11 19:05 3072 c:\windows\$hf_mig$\KB2661637\SP3QFE\iacenc.dll + 2012-01-11 15:36 . 2011-11-03 18:17 4608 c:\windows\$hf_mig$\KB2603381\update\customaddreg.dll - 2011-04-15 07:49 . 2011-04-15 07:49 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll + 2012-02-18 19:23 . 2012-02-18 19:23 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll - 2011-04-15 07:49 . 2011-04-15 07:49 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll + 2012-02-18 19:23 . 2012-02-18 19:23 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll - 2011-04-15 07:55 . 2011-04-15 07:55 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2012-02-18 19:30 . 2012-02-18 19:30 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll - 2011-04-15 07:55 . 2011-04-15 07:55 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2012-02-18 19:30 . 2012-02-18 19:30 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2011-04-18 20:51 . 2011-04-18 20:51 653136 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll + 2011-04-18 20:51 . 2011-04-18 20:51 569680 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll + 2011-04-18 20:51 . 2011-04-18 20:51 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcm90.dll + 2011-04-18 20:51 . 2011-04-18 20:51 159048 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll + 2011-05-13 23:17 . 2011-05-13 23:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll + 2011-05-13 23:12 . 2011-05-13 23:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll + 2011-05-13 23:11 . 2011-05-13 23:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll + 2004-08-03 23:57 . 2011-11-25 21:57 293888 c:\windows\system32\winsrv.dll - 2004-08-03 23:57 . 2010-06-18 17:44 293888 c:\windows\system32\winsrv.dll - 2004-08-03 23:57 . 2008-04-14 05:52 178176 c:\windows\system32\winmm.dll + 2004-08-03 23:57 . 2011-10-14 14:47 178176 c:\windows\system32\winmm.dll + 2004-08-03 23:57 . 2011-12-17 19:43 916992 c:\windows\system32\wininet.dll - 2004-08-03 23:57 . 2009-08-25 09:17 354816 c:\windows\system32\winhttp.dll + 2004-08-03 23:57 . 2011-11-16 14:21 354816 c:\windows\system32\winhttp.dll - 2004-08-03 23:57 . 2009-03-08 02:34 105984 c:\windows\system32\url.dll + 2004-08-03 23:57 . 2011-12-17 19:43 105984 c:\windows\system32\url.dll + 2008-07-29 17:59 . 2011-09-26 09:41 614912 c:\windows\system32\uiautomationcore.dll - 2008-07-29 17:59 . 2009-10-08 12:57 614912 c:\windows\system32\uiautomationcore.dll + 2011-07-18 14:11 . 2002-08-29 11:41 455168 c:\windows\system32\spool\drivers\w32x86\PSCRIPT5.DLL + 2011-07-18 14:11 . 2002-08-29 10:41 130048 c:\windows\system32\spool\drivers\w32x86\PS5UI.DLL + 2010-07-19 16:33 . 2009-02-27 02:42 863128 c:\windows\system32\spool\drivers\w32x86\msonpdrv.dll + 2010-07-19 16:34 . 2011-05-31 16:25 792432 c:\windows\system32\spool\drivers\w32x86\mdigraph.dll + 2011-11-22 19:14 . 2011-01-10 16:56 946176 c:\windows\system32\spool\drivers\w32x86\eDocUI.dll + 2011-07-18 13:51 . 2008-04-14 05:52 543232 c:\windows\system32\spool\drivers\w32x86\3\PSCRIPT5.DLL + 2011-07-18 13:51 . 2008-04-14 05:52 728576 c:\windows\system32\spool\drivers\w32x86\3\PS5UI.DLL + 2010-07-19 16:33 . 2009-02-27 02:42 863128 c:\windows\system32\spool\drivers\w32x86\3\msonpdrv.dll + 2010-07-19 16:34 . 2011-05-31 16:25 792432 c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll + 2011-11-22 19:14 . 2011-01-10 16:56 946176 c:\windows\system32\spool\drivers\w32x86\3\eDocUI.dll + 2004-08-03 23:57 . 2011-11-16 14:21 152064 c:\windows\system32\schannel.dll + 2012-03-15 19:52 . 2012-03-15 19:54 488276 c:\windows\system32\Restore\rstrlog.dat - 2004-08-03 23:57 . 2008-04-14 05:52 387072 c:\windows\system32\qdvd.dll + 2004-08-03 23:57 . 2011-11-03 15:28 387072 c:\windows\system32\qdvd.dll + 2011-01-10 10:51 . 2011-01-10 10:51 151552 c:\windows\system32\psconvert.dll + 2001-08-31 12:30 . 2012-02-19 07:55 505726 c:\windows\system32\perfh009.dat + 2001-08-31 12:30 . 2012-02-19 07:55 556206 c:\windows\system32\perfh007.dat + 2001-08-31 12:30 . 2012-02-19 07:55 117198 c:\windows\system32\perfc007.dat - 2004-08-03 23:57 . 2008-04-14 05:52 551936 c:\windows\system32\oleaut32.dll + 2004-08-03 23:57 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll - 2001-08-31 12:30 . 2009-10-08 12:57 220160 c:\windows\system32\oleacc.dll + 2001-08-31 12:30 . 2011-09-26 09:41 220160 c:\windows\system32\oleacc.dll + 2004-08-03 23:57 . 2011-12-17 19:43 206848 c:\windows\system32\occache.dll - 2004-08-03 23:57 . 2011-02-22 23:05 206848 c:\windows\system32\occache.dll - 2004-08-03 23:57 . 2011-02-22 23:05 611840 c:\windows\system32\mstime.dll + 2004-08-03 23:57 . 2011-12-17 19:43 611840 c:\windows\system32\mstime.dll + 2009-03-08 02:32 . 2011-12-17 19:43 602112 c:\windows\system32\msfeeds.dll - 2009-03-08 02:32 . 2011-02-22 23:05 602112 c:\windows\system32\msfeeds.dll + 2012-02-19 15:18 . 2012-02-19 15:18 250016 c:\windows\system32\Macromed\Flash\FlashUtil11f_ActiveX.exe + 2012-02-19 15:18 . 2012-02-19 15:18 335520 c:\windows\system32\Macromed\Flash\FlashUtil11f_ActiveX.dll + 2011-11-12 09:43 . 2011-11-12 09:43 247968 c:\windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe + 2011-10-28 06:01 . 2011-10-03 03:06 157472 c:\windows\system32\javaws.exe - 2011-05-22 09:27 . 2011-02-02 19:40 157472 c:\windows\system32\javaws.exe + 2011-10-28 06:01 . 2011-10-03 03:06 145184 c:\windows\system32\javaw.exe - 2011-05-22 09:27 . 2011-02-02 19:40 145184 c:\windows\system32\javaw.exe + 2011-10-28 06:01 . 2011-10-03 03:06 145184 c:\windows\system32\java.exe - 2011-05-22 09:27 . 2011-02-02 19:40 145184 c:\windows\system32\java.exe - 2010-07-19 12:09 . 2011-03-07 05:33 692736 c:\windows\system32\inetcomm.dll + 2010-07-19 12:09 . 2011-10-10 14:22 692736 c:\windows\system32\inetcomm.dll + 2004-08-03 23:57 . 2011-12-17 19:43 184320 c:\windows\system32\iepeers.dll - 2004-08-03 23:57 . 2011-02-22 23:05 184320 c:\windows\system32\iepeers.dll - 2004-08-03 23:57 . 2011-02-22 23:05 387584 c:\windows\system32\iedkcs32.dll + 2004-08-03 23:57 . 2011-12-17 19:43 387584 c:\windows\system32\iedkcs32.dll + 2004-08-03 23:57 . 2011-12-16 12:23 174080 c:\windows\system32\ie4uinit.exe + 2010-07-19 13:01 . 2012-03-15 20:08 290088 c:\windows\system32\FNTCACHE.DAT + 2004-08-03 23:57 . 2011-10-18 11:13 186880 c:\windows\system32\encdec.dll - 2004-08-03 23:57 . 2011-02-09 13:53 186880 c:\windows\system32\encdec.dll + 2011-01-10 11:17 . 2011-01-10 11:17 643072 c:\windows\system32\eDocPort32.dll + 2011-01-10 10:49 . 2011-01-10 10:49 638976 c:\windows\system32\eDocPort.dll + 2004-08-03 22:15 . 2011-04-21 13:37 105472 c:\windows\system32\drivers\mup.sys + 2004-08-03 22:15 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys + 2010-03-25 19:30 . 2011-04-18 11:18 165648 c:\windows\system32\drivers\MpFilter.sys + 2004-08-03 22:14 . 2011-08-17 13:49 138496 c:\windows\system32\drivers\afd.sys - 2004-08-03 22:14 . 2008-10-16 14:43 138496 c:\windows\system32\drivers\afd.sys - 2010-06-18 17:44 . 2010-06-18 17:44 293888 c:\windows\system32\dllcache\winsrv.dll + 2010-06-18 17:44 . 2011-11-25 21:57 293888 c:\windows\system32\dllcache\winsrv.dll + 2011-10-14 14:47 . 2011-10-14 14:47 178176 c:\windows\system32\dllcache\winmm.dll + 2009-03-08 02:34 . 2011-12-17 19:43 916992 c:\windows\system32\dllcache\wininet.dll + 2008-12-16 12:30 . 2011-11-16 14:21 354816 c:\windows\system32\dllcache\winhttp.dll - 2008-12-16 12:30 . 2009-08-25 09:17 354816 c:\windows\system32\dllcache\winhttp.dll + 2009-03-08 02:33 . 2011-04-30 03:01 758784 c:\windows\system32\dllcache\vgx.dll - 2009-03-08 02:34 . 2009-03-08 02:34 105984 c:\windows\system32\dllcache\url.dll + 2009-03-08 02:34 . 2011-12-17 19:43 105984 c:\windows\system32\dllcache\url.dll + 2008-12-05 06:55 . 2011-11-16 14:21 152064 c:\windows\system32\dllcache\schannel.dll + 2011-08-10 03:09 . 2012-01-09 16:20 139784 c:\windows\system32\dllcache\rdpwd.sys + 2011-11-03 15:28 . 2011-11-03 15:28 387072 c:\windows\system32\dllcache\qdvd.dll + 2010-12-20 17:32 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll - 2001-08-31 12:30 . 2009-10-08 12:57 220160 c:\windows\system32\dllcache\oleacc.dll + 2001-08-31 12:30 . 2011-09-26 09:41 220160 c:\windows\system32\dllcache\oleacc.dll - 2009-03-08 02:34 . 2011-02-22 23:05 206848 c:\windows\system32\dllcache\occache.dll + 2009-03-08 02:34 . 2011-12-17 19:43 206848 c:\windows\system32\dllcache\occache.dll + 2011-06-16 03:19 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys + 2009-03-08 02:32 . 2011-12-17 19:43 611840 c:\windows\system32\dllcache\mstime.dll - 2009-03-08 02:32 . 2011-02-22 23:05 611840 c:\windows\system32\dllcache\mstime.dll - 2010-07-19 13:05 . 2011-02-22 23:05 602112 c:\windows\system32\dllcache\msfeeds.dll + 2010-07-19 13:05 . 2011-12-17 19:43 602112 c:\windows\system32\dllcache\msfeeds.dll + 2010-07-19 12:57 . 2011-07-15 13:29 456320 c:\windows\system32\dllcache\mrxsmb.sys - 2010-01-29 14:59 . 2011-03-07 05:33 692736 c:\windows\system32\dllcache\inetcomm.dll + 2010-01-29 14:59 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll + 2010-07-19 13:05 . 2011-12-17 19:43 247808 c:\windows\system32\dllcache\ieproxy.dll - 2010-07-19 13:05 . 2011-02-22 23:05 247808 c:\windows\system32\dllcache\ieproxy.dll + 2009-03-08 02:31 . 2011-12-17 19:43 184320 c:\windows\system32\dllcache\iepeers.dll - 2009-03-08 02:31 . 2011-02-22 23:05 184320 c:\windows\system32\dllcache\iepeers.dll - 2010-07-19 13:05 . 2011-02-22 23:05 743424 c:\windows\system32\dllcache\iedvtool.dll + 2010-07-19 13:05 . 2011-12-17 19:43 743424 c:\windows\system32\dllcache\iedvtool.dll + 2009-03-08 12:09 . 2011-12-17 19:43 387584 c:\windows\system32\dllcache\iedkcs32.dll - 2009-03-08 12:09 . 2011-02-22 23:05 387584 c:\windows\system32\dllcache\iedkcs32.dll + 2009-03-08 02:32 . 2011-12-16 12:23 174080 c:\windows\system32\dllcache\ie4uinit.exe + 2011-02-09 13:53 . 2011-10-18 11:13 186880 c:\windows\system32\dllcache\encdec.dll - 2011-02-09 13:53 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll + 2011-09-03 10:17 . 2011-09-28 07:06 604160 c:\windows\system32\dllcache\crypt32.dll + 2008-06-20 11:40 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys - 2008-06-20 11:40 . 2008-10-16 14:43 138496 c:\windows\system32\dllcache\afd.sys + 2010-07-19 16:17 . 2011-10-03 03:06 472808 c:\windows\system32\deployJava1.dll - 2010-07-19 16:17 . 2011-02-02 19:40 472808 c:\windows\system32\deployJava1.dll + 2004-08-03 23:57 . 2011-09-28 07:06 604160 c:\windows\system32\crypt32.dll - 2004-08-03 23:57 . 2008-04-14 05:52 604160 c:\windows\system32\crypt32.dll + 2012-03-14 04:51 . 2012-03-14 04:51 266240 c:\windows\system32\config\systemprofile\ntuser.dat + 2001-08-23 13:00 . 2008-04-14 14:42 506368 c:\windows\system32\athan\msxml.dll + 2011-12-26 02:54 . 2011-12-26 02:54 496400 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine4.dll + 2011-07-09 07:30 . 2011-07-09 07:30 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll - 2011-02-10 02:10 . 2011-02-10 02:10 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll + 2011-12-26 03:39 . 2011-12-26 03:39 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe + 2011-07-09 07:30 . 2011-07-09 07:30 956240 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll - 2010-04-02 18:35 . 2010-04-02 18:35 438648 c:\windows\Microsoft.NET\Framework\v4.0.30319\de\System.Windows.Forms.resources.dll + 2011-04-12 11:02 . 2011-04-12 11:02 438648 c:\windows\Microsoft.NET\Framework\v4.0.30319\de\System.Windows.Forms.resources.dll - 2010-04-02 18:35 . 2010-04-02 18:35 230240 c:\windows\Microsoft.NET\Framework\v4.0.30319\de\System.resources.dll + 2011-03-22 17:48 . 2011-03-22 17:48 230240 c:\windows\Microsoft.NET\Framework\v4.0.30319\de\System.resources.dll - 2010-04-02 18:35 . 2010-04-02 18:35 322400 c:\windows\Microsoft.NET\Framework\v4.0.30319\de\mscorlib.resources.dll + 2011-04-12 11:02 . 2011-04-12 11:02 322400 c:\windows\Microsoft.NET\Framework\v4.0.30319\de\mscorlib.resources.dll - 2011-02-10 02:10 . 2011-02-10 02:10 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll + 2011-04-12 13:11 . 2011-04-12 13:11 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll + 2011-12-25 02:49 . 2011-12-25 02:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2011-07-07 03:18 . 2011-07-07 03:18 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll - 2011-01-18 02:39 . 2011-01-18 02:39 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll - 2011-01-18 02:39 . 2011-01-18 02:39 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2011-03-25 04:15 . 2011-03-25 04:15 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2011-07-07 03:18 . 2011-07-07 03:18 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll - 2011-01-18 02:39 . 2011-01-18 02:39 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2011-12-24 21:55 . 2011-12-24 21:55 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2010-09-23 01:26 . 2010-09-23 01:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2011-12-24 21:53 . 2011-12-24 21:53 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2010-09-23 01:25 . 2010-09-23 01:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2011-12-24 22:49 . 2011-12-24 22:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll - 2010-09-23 02:17 . 2010-09-23 02:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2012-02-18 19:24 . 2012-02-18 19:24 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2011-04-15 07:50 . 2011-04-15 07:50 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll + 2012-02-18 19:24 . 2012-02-18 19:24 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll - 2011-04-15 07:50 . 2011-04-15 07:50 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2011-06-29 20:22 . 2011-06-29 20:22 161640 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.xml.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.xml.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 161640 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.xml.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.xml.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll + 2012-02-18 19:24 . 2012-02-18 19:24 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2011-04-15 07:49 . 2011-04-15 07:49 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-02-18 19:24 . 2012-02-18 19:24 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-01-11 15:45 . 2012-01-11 15:45 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll - 2010-10-06 06:44 . 2010-10-06 06:44 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll + 2012-01-11 15:45 . 2012-01-11 15:45 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll - 2010-10-06 06:44 . 2010-10-06 06:44 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll - 2010-07-19 15:41 . 2010-07-19 15:41 438648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 438648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 212896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Windows.Forms.Data Visualization.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 212896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Windows.Forms.Data Visualization.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-02-18 19:24 . 2012-02-18 19:24 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-01-11 15:45 . 2012-01-11 15:45 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2010-10-06 06:44 . 2010-10-06 06:44 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2012-01-11 15:45 . 2012-01-11 15:45 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll - 2010-10-06 06:44 . 2010-10-06 06:44 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll - 2010-10-06 06:44 . 2010-10-06 06:44 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll + 2012-01-11 15:45 . 2012-01-11 15:45 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll - 2010-10-06 06:44 . 2010-10-06 06:44 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll + 2012-01-11 15:45 . 2012-01-11 15:45 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll - 2010-10-06 06:44 . 2010-10-06 06:44 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll + 2012-01-11 15:45 . 2012-01-11 15:45 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll + 2012-02-18 19:24 . 2012-02-18 19:24 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2011-04-15 07:49 . 2011-04-15 07:49 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2011-04-15 07:49 . 2011-04-15 07:49 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2012-02-18 19:24 . 2012-02-18 19:24 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2010-10-06 06:44 . 2010-10-06 06:44 316272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll + 2012-01-11 15:45 . 2012-01-11 15:45 316272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll + 2012-02-18 19:24 . 2012-02-18 19:24 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll - 2011-04-15 07:49 . 2011-04-15 07:49 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2011-06-29 20:22 . 2011-06-29 20:22 522616 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.ServiceModel.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 522616 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.ServiceModel.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll + 2012-02-18 19:24 . 2012-02-18 19:24 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll + 2012-02-18 19:24 . 2012-02-18 19:24 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll - 2011-04-15 07:49 . 2011-04-15 07:49 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll - 2010-10-06 06:44 . 2010-10-06 06:44 170872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll + 2012-01-11 15:45 . 2012-01-11 15:45 170872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll - 2011-04-15 07:49 . 2011-04-15 07:49 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2012-02-18 19:24 . 2012-02-18 19:24 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2010-07-19 15:40 . 2010-07-19 15:40 107400 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.RunTime.Serialization.resour ces.dll + 2011-06-29 20:22 . 2011-06-29 20:22 107400 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.RunTime.Serialization.resour ces.dll + 2012-02-18 19:24 . 2012-02-18 19:24 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Fo rmatters.Soap.dll - 2011-04-15 07:49 . 2011-04-15 07:49 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Fo rmatters.Soap.dll - 2011-04-15 07:49 . 2011-04-15 07:49 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2012-02-18 19:24 . 2012-02-18 19:24 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2011-04-15 07:49 . 2011-04-15 07:49 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2012-02-18 19:24 . 2012-02-18 19:24 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2011-06-29 20:22 . 2011-06-29 20:22 230240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 230240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.resources.dll + 2012-02-18 19:24 . 2012-02-18 19:24 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll - 2011-04-15 07:49 . 2011-04-15 07:49 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll + 2012-02-18 19:24 . 2012-02-18 19:24 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2011-04-15 07:49 . 2011-04-15 07:49 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2011-04-15 07:49 . 2011-04-15 07:49 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2012-02-18 19:24 . 2012-02-18 19:24 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2012-02-18 19:24 . 2012-02-18 19:24 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll - 2011-04-15 07:49 . 2011-04-15 07:49 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2012-02-18 19:24 . 2012-02-18 19:24 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll - 2011-04-15 07:49 . 2011-04-15 07:49 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll - 2011-04-15 07:49 . 2011-04-15 07:49 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-02-18 19:24 . 2012-02-18 19:24 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-02-18 19:24 . 2012-02-18 19:24 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2011-04-15 07:49 . 2011-04-15 07:49 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2012-02-18 19:23 . 2012-02-18 19:23 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2011-04-15 07:49 . 2011-04-15 07:49 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll + 2012-02-18 19:24 . 2012-02-18 19:24 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2011-04-15 07:49 . 2011-04-15 07:49 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2011-04-15 07:49 . 2011-04-15 07:49 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2012-02-18 19:23 . 2012-02-18 19:23 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2012-02-18 19:23 . 2012-02-18 19:23 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2011-04-15 07:49 . 2011-04-15 07:49 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2011-04-15 07:49 . 2011-04-15 07:49 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountM anagement.dll + 2012-02-18 19:23 . 2012-02-18 19:23 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountM anagement.dll - 2011-04-15 07:49 . 2011-04-15 07:49 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2012-02-18 19:23 . 2012-02-18 19:23 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2011-06-29 20:22 . 2011-06-29 20:22 284536 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Deployment.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 284536 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\System.Deployment.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2012-02-18 19:23 . 2012-02-18 19:23 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2010-10-06 06:44 . 2010-10-06 06:44 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll + 2012-01-11 15:45 . 2012-01-11 15:45 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll + 2012-01-11 15:45 . 2012-01-11 15:45 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll - 2010-10-06 06:44 . 2010-10-06 06:44 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll - 2011-04-15 07:49 . 2011-04-15 07:49 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-02-18 19:24 . 2012-02-18 19:24 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll - 2010-07-19 15:40 . 2010-07-19 15:40 349032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 349032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll + 2012-02-18 19:24 . 2012-02-18 19:24 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll - 2010-07-19 15:41 . 2010-07-19 15:41 488824 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.Entity.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 488824 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.resources\v4.0_4.0.0.0_de_b77a5c561934e089\System.Data.Entity.resources.dll - 2010-10-06 06:44 . 2010-10-06 06:44 804720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll + 2012-01-11 15:45 . 2012-01-11 15:45 804720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll + 2012-02-18 19:23 . 2012-02-18 19:23 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2011-04-15 07:49 . 2011-04-15 07:49 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2012-02-18 19:24 . 2012-02-18 19:24 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll - 2011-04-15 07:49 . 2011-04-15 07:49 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll + 2012-02-18 19:24 . 2012-02-18 19:24 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2011-04-15 07:49 . 2011-04-15 07:49 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll + 2011-06-29 20:22 . 2011-06-29 20:22 109432 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Activities.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 109432 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Activities.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 551824 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Activities.Presentation.re sources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 551824 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Activities.Presentation.re sources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll + 2012-02-18 19:24 . 2012-02-18 19:24 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll - 2011-04-15 07:49 . 2011-04-15 07:49 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-02-18 19:24 . 2012-02-18 19:24 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2011-06-29 20:22 . 2011-06-29 20:22 239000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Activities.Core.Prese ntation.resources.dll - 2010-07-19 15:40 . 2010-07-19 15:40 239000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\System.Activities.Core.Prese ntation.resources.dll + 2012-02-18 19:23 . 2012-02-18 19:23 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2011-04-15 07:49 . 2011-04-15 07:49 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2011-04-15 07:50 . 2011-04-15 07:50 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2012-02-18 19:24 . 2012-02-18 19:24 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2012-02-18 19:24 . 2012-02-18 19:24 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll - 2011-04-15 07:50 . 2011-04-15 07:50 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2011-06-29 20:22 . 2011-06-29 20:22 365936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\PresentationUI.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 365936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\PresentationUI.resources.dll + 2012-02-18 19:24 . 2012-02-18 19:24 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2011-04-15 07:50 . 2011-04-15 07:50 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2011-06-29 20:22 . 2011-06-29 20:22 267648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll - 2010-07-19 15:41 . 2010-07-19 15:41 267648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll + 2012-02-18 19:24 . 2012-02-18 19:24 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2011-04-15 07:50 . 2011-04-15 07:50 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2011-04-15 07:50 . 2011-04-15 07:50 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-02-18 19:24 . 2012-02-18 19:24 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-02-18 19:24 . 2012-02-18 19:24 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2011-04-15 07:50 . 2011-04-15 07:50 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2010-07-19 15:41 . 2010-07-19 15:41 110960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationCore.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 110960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationCore.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll - 2010-10-06 06:44 . 2010-10-06 06:44 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll + 2012-01-11 15:45 . 2012-01-11 15:45 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll - 2010-07-19 15:40 . 2010-07-19 15:40 322400 c:\windows\Microsoft.NET\assembly\GAC_MSIL\mscorlib.resources\v4.0_4.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll + 2011-06-29 20:22 . 2011-06-29 20:22 322400 c:\windows\Microsoft.NET\assembly\GAC_MSIL\mscorlib.resources\v4.0_4.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll - 2011-04-15 07:49 . 2011-04-15 07:49 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2012-02-18 19:23 . 2012-02-18 19:23 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2012-02-18 19:24 . 2012-02-18 19:24 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2011-04-15 07:49 . 2011-04-15 07:49 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-02-18 19:24 . 2012-02-18 19:24 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2011-04-15 07:49 . 2011-04-15 07:49 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2012-02-18 19:23 . 2012-02-18 19:23 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2011-04-15 07:49 . 2011-04-15 07:49 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-02-18 19:23 . 2012-02-18 19:23 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2011-04-15 07:49 . 2011-04-15 07:49 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2010-10-06 06:44 . 2010-10-06 06:44 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll + 2012-01-11 15:45 . 2012-01-11 15:45 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll - 2010-10-06 06:44 . 2010-10-06 06:44 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2012-01-11 15:45 . 2012-01-11 15:45 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2012-01-11 15:45 . 2012-01-11 15:45 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2010-10-06 06:44 . 2010-10-06 06:44 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2010-10-06 06:44 . 2010-10-06 06:44 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2012-01-11 15:45 . 2012-01-11 15:45 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2011-04-15 07:49 . 2011-04-15 07:49 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-02-18 19:24 . 2012-02-18 19:24 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-02-18 19:24 . 2012-02-18 19:24 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2011-04-15 07:49 . 2011-04-15 07:49 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2011-04-15 07:49 . 2011-04-15 07:49 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-02-18 19:23 . 2012-02-18 19:23 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-02-18 19:23 . 2012-02-18 19:23 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-04-15 07:49 . 2011-04-15 07:49 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2010-10-06 06:44 . 2010-10-06 06:44 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2012-01-11 15:45 . 2012-01-11 15:45 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2011-04-15 07:49 . 2011-04-15 07:49 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-02-18 19:24 . 2012-02-18 19:24 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2011-12-25 04:40 . 2011-12-25 04:40 819200 c:\windows\Installer\c542e.msp + 2011-11-22 19:13 . 2011-11-22 19:13 164864 c:\windows\Installer\a29a3.msi + 2011-10-28 06:01 . 2011-10-28 06:01 203776 c:\windows\Installer\878ab.msi + 2011-11-21 14:22 . 2011-11-21 14:22 607232 c:\windows\Installer\7e412b.msp + 2011-11-15 09:55 . 2011-11-15 09:55 721408 c:\windows\Installer\7e412a.msp + 2011-11-21 14:22 . 2011-11-21 14:22 666112 c:\windows\Installer\7e3fda.msp + 2011-11-15 09:55 . 2011-11-15 09:55 666112 c:\windows\Installer\7e3fd9.msp + 2011-08-09 03:17 . 2011-08-09 03:17 785920 c:\windows\Installer\574080.msi + 2011-08-09 03:16 . 2011-08-09 03:16 483840 c:\windows\Installer\57405a.msi + 2011-08-09 03:16 . 2011-08-09 03:16 301056 c:\windows\Installer\574052.msi + 2011-07-18 09:46 . 2011-07-18 09:46 641024 c:\windows\Installer\3b2497.msp + 2011-05-31 18:22 . 2011-05-31 18:22 840192 c:\windows\Installer\3b2496.msp + 2011-04-12 09:41 . 2011-04-12 09:41 623104 c:\windows\Installer\3b2495.msp + 2011-03-17 18:03 . 2011-03-17 18:03 308736 c:\windows\Installer\2c42e3.msp + 2011-06-16 04:07 . 2011-06-16 04:07 223744 c:\windows\Installer\2c42a2.msi + 2011-06-16 04:05 . 2011-06-16 04:05 467456 c:\windows\Installer\2c427c.msi + 2011-08-20 12:39 . 2011-08-20 12:39 371272 c:\windows\Installer\{AA59DDE4-B672-4621-A016-4C248204957A}\SkypeIcon.exe + 2012-03-02 10:41 . 2012-03-02 10:41 217864 c:\windows\Installer\{90120000-006E-0407-0000-0000000FF1CE}\misc.exe - 2010-07-19 16:49 . 2010-07-19 16:49 217864 c:\windows\Installer\{90120000-006E-0407-0000-0000000FF1CE}\misc.exe + 2010-07-19 16:34 . 2012-03-15 20:00 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2010-07-19 16:34 . 2011-05-11 16:20 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe + 2010-07-19 16:34 . 2012-03-15 20:00 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe - 2010-07-19 16:34 . 2011-05-11 16:20 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2010-07-19 16:34 . 2012-03-15 20:00 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe - 2010-07-19 16:34 . 2011-05-11 16:20 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe - 2010-07-19 16:34 . 2011-05-11 16:20 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe + 2010-07-19 16:34 . 2012-03-15 20:00 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2010-07-19 16:34 . 2011-05-11 16:20 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe + 2010-07-19 16:34 . 2012-03-15 20:00 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe + 2010-07-19 16:34 . 2012-03-15 20:00 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2010-07-19 16:34 . 2011-05-11 16:20 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2010-07-19 16:34 . 2011-05-11 16:20 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2010-07-19 16:34 . 2012-03-15 20:00 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2011-01-14 05:10 . 2011-01-14 05:10 155520 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD6.DLL + 2011-01-14 05:10 . 2011-01-14 05:10 140160 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL2.DLL + 2007-06-07 17:51 . 2007-06-07 17:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\SSGEN.DLL + 2007-06-07 17:51 . 2007-06-07 17:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLFLTR.DLL + 2008-03-19 04:27 . 2008-03-19 04:27 661536 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OGALEGIT.DLL + 2006-07-24 08:50 . 2006-07-24 08:50 125744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MSSTDFMT.DLL + 2008-10-25 04:18 . 2008-10-25 04:18 172880 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\IEAWSDC.DLL + 2009-02-26 10:09 . 2009-02-26 10:09 154000 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\ENVELOPE.DLL + 2006-10-27 13:35 . 2006-10-27 13:35 436512 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\UMOUTLOOKADDIN.DLL + 2006-10-26 18:13 . 2006-10-26 18:13 764800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACECNF.DLL + 2012-02-18 19:27 . 2011-11-04 19:13 916992 c:\windows\ie8updates\KB2647516-IE8\wininet.dll + 2012-02-18 19:27 . 2011-11-04 19:13 105984 c:\windows\ie8updates\KB2647516-IE8\url.dll + 2012-02-18 19:27 . 2010-07-05 13:14 388984 c:\windows\ie8updates\KB2647516-IE8\spuninst\updspapi.dll + 2012-02-18 19:27 . 2010-07-05 13:14 234872 c:\windows\ie8updates\KB2647516-IE8\spuninst\spuninst.exe + 2012-02-18 19:27 . 2011-11-04 19:13 206848 c:\windows\ie8updates\KB2647516-IE8\occache.dll + 2012-02-18 19:27 . 2011-11-04 19:13 611840 c:\windows\ie8updates\KB2647516-IE8\mstime.dll + 2012-02-18 19:27 . 2011-11-04 19:13 602112 c:\windows\ie8updates\KB2647516-IE8\msfeeds.dll + 2012-02-18 19:27 . 2011-11-04 19:13 247808 c:\windows\ie8updates\KB2647516-IE8\ieproxy.dll + 2012-02-18 19:27 . 2011-11-04 19:13 184320 c:\windows\ie8updates\KB2647516-IE8\iepeers.dll + 2012-02-18 19:27 . 2011-11-04 19:13 743424 c:\windows\ie8updates\KB2647516-IE8\iedvtool.dll + 2012-02-18 19:27 . 2011-11-04 19:13 387584 c:\windows\ie8updates\KB2647516-IE8\iedkcs32.dll + 2012-02-18 19:27 . 2011-11-04 11:24 174080 c:\windows\ie8updates\KB2647516-IE8\ie4uinit.exe + 2011-12-15 17:50 . 2011-08-22 23:41 916480 c:\windows\ie8updates\KB2618444-IE8\wininet.dll + 2011-12-15 17:50 . 2011-08-22 23:41 105984 c:\windows\ie8updates\KB2618444-IE8\url.dll + 2011-12-15 17:50 . 2010-07-05 13:14 388984 c:\windows\ie8updates\KB2618444-IE8\spuninst\updspapi.dll + 2011-12-15 17:50 . 2010-07-05 13:14 234872 c:\windows\ie8updates\KB2618444-IE8\spuninst\spuninst.exe + 2011-12-15 17:50 . 2011-08-22 23:41 206848 c:\windows\ie8updates\KB2618444-IE8\occache.dll + 2011-12-15 17:50 . 2011-08-22 23:41 611840 c:\windows\ie8updates\KB2618444-IE8\mstime.dll + 2011-12-15 17:50 . 2011-08-22 23:41 602112 c:\windows\ie8updates\KB2618444-IE8\msfeeds.dll + 2011-12-15 17:50 . 2011-08-22 23:41 247808 c:\windows\ie8updates\KB2618444-IE8\ieproxy.dll + 2011-12-15 17:50 . 2011-08-22 23:41 184320 c:\windows\ie8updates\KB2618444-IE8\iepeers.dll + 2011-12-15 17:50 . 2011-08-22 23:41 743424 c:\windows\ie8updates\KB2618444-IE8\iedvtool.dll + 2011-12-15 17:50 . 2011-08-22 23:41 387584 c:\windows\ie8updates\KB2618444-IE8\iedkcs32.dll + 2011-12-15 17:50 . 2011-08-22 11:56 174080 c:\windows\ie8updates\KB2618444-IE8\ie4uinit.exe + 2011-10-12 03:59 . 2011-06-23 18:31 916480 c:\windows\ie8updates\KB2586448-IE8\wininet.dll + 2011-10-12 03:59 . 2011-06-23 18:31 105984 c:\windows\ie8updates\KB2586448-IE8\url.dll + 2011-10-12 03:59 . 2010-07-05 13:14 388984 c:\windows\ie8updates\KB2586448-IE8\spuninst\updspapi.dll + 2011-10-12 03:59 . 2010-07-05 13:14 234872 c:\windows\ie8updates\KB2586448-IE8\spuninst\spuninst.exe + 2011-10-12 03:59 . 2011-06-23 18:31 206848 c:\windows\ie8updates\KB2586448-IE8\occache.dll + 2011-10-12 03:59 . 2011-06-23 18:31 611840 c:\windows\ie8updates\KB2586448-IE8\mstime.dll + 2011-10-12 03:59 . 2011-06-23 18:31 602112 c:\windows\ie8updates\KB2586448-IE8\msfeeds.dll + 2011-10-12 03:59 . 2011-06-23 18:31 247808 c:\windows\ie8updates\KB2586448-IE8\ieproxy.dll + 2011-10-12 03:59 . 2011-06-23 18:31 184320 c:\windows\ie8updates\KB2586448-IE8\iepeers.dll + 2011-10-12 03:59 . 2011-06-23 18:31 743424 c:\windows\ie8updates\KB2586448-IE8\iedvtool.dll + 2011-10-12 03:59 . 2011-06-23 18:31 387584 c:\windows\ie8updates\KB2586448-IE8\iedkcs32.dll + 2011-10-12 03:59 . 2011-06-23 12:05 173568 c:\windows\ie8updates\KB2586448-IE8\ie4uinit.exe + 2011-08-10 03:57 . 2011-04-25 16:05 916480 c:\windows\ie8updates\KB2559049-IE8\wininet.dll + 2011-08-10 03:57 . 2009-03-08 02:34 105984 c:\windows\ie8updates\KB2559049-IE8\url.dll + 2011-08-10 03:57 . 2010-07-05 13:14 388984 c:\windows\ie8updates\KB2559049-IE8\spuninst\updspapi.dll + 2011-08-10 03:57 . 2010-07-05 13:14 234872 c:\windows\ie8updates\KB2559049-IE8\spuninst\spuninst.exe + 2011-08-10 03:57 . 2011-04-25 16:05 206848 c:\windows\ie8updates\KB2559049-IE8\occache.dll + 2011-08-10 03:57 . 2011-04-25 16:05 611840 c:\windows\ie8updates\KB2559049-IE8\mstime.dll + 2011-08-10 03:57 . 2011-04-25 16:05 602112 c:\windows\ie8updates\KB2559049-IE8\msfeeds.dll + 2011-08-10 03:57 . 2011-04-25 16:05 247808 c:\windows\ie8updates\KB2559049-IE8\ieproxy.dll + 2011-08-10 03:57 . 2011-04-25 16:05 184320 c:\windows\ie8updates\KB2559049-IE8\iepeers.dll + 2011-08-10 03:57 . 2011-04-25 16:05 743424 c:\windows\ie8updates\KB2559049-IE8\iedvtool.dll + 2011-08-10 03:57 . 2011-04-25 16:05 387584 c:\windows\ie8updates\KB2559049-IE8\iedkcs32.dll + 2011-08-10 03:57 . 2011-04-25 12:01 173568 c:\windows\ie8updates\KB2559049-IE8\ie4uinit.exe + 2011-06-16 04:03 . 2009-03-08 02:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll + 2011-06-16 04:03 . 2010-07-05 13:14 388984 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll + 2011-06-16 04:03 . 2010-07-05 13:14 234872 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe + 2011-06-16 04:05 . 2011-02-22 23:05 916480 c:\windows\ie8updates\KB2530548-IE8\wininet.dll + 2011-06-16 04:05 . 2010-07-05 13:14 388984 c:\windows\ie8updates\KB2530548-IE8\spuninst\updspapi.dll + 2011-06-16 04:05 . 2010-07-05 13:14 234872 c:\windows\ie8updates\KB2530548-IE8\spuninst\spuninst.exe + 2011-06-16 04:05 . 2011-02-22 23:05 206848 c:\windows\ie8updates\KB2530548-IE8\occache.dll + 2011-06-16 04:05 . 2011-02-22 23:05 611840 c:\windows\ie8updates\KB2530548-IE8\mstime.dll + 2011-06-16 04:05 . 2011-02-22 23:05 602112 c:\windows\ie8updates\KB2530548-IE8\msfeeds.dll + 2011-06-16 04:05 . 2011-02-22 23:05 247808 c:\windows\ie8updates\KB2530548-IE8\ieproxy.dll + 2011-06-16 04:05 . 2011-02-22 23:05 184320 c:\windows\ie8updates\KB2530548-IE8\iepeers.dll + 2011-06-16 04:05 . 2011-02-22 23:05 743424 c:\windows\ie8updates\KB2530548-IE8\iedvtool.dll + 2011-06-16 04:05 . 2011-02-22 23:05 387584 c:\windows\ie8updates\KB2530548-IE8\iedkcs32.dll + 2011-06-16 04:05 . 2011-02-18 11:49 173568 c:\windows\ie8updates\KB2530548-IE8\ie4uinit.exe + 2010-07-19 12:57 . 2011-07-15 13:29 456320 c:\windows\Driver Cache\i386\mrxsmb.sys + 2012-01-11 15:49 . 2012-01-11 15:49 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_6c84eea6\System.Drawing.dll + 2012-01-11 15:50 . 2012-01-11 15:50 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_59b8f0ea\System.Drawing.Design.dll + 2012-01-11 15:50 . 2012-01-11 15:50 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_ae0a88f4\CustomMarshalers.dll + 2012-02-19 08:52 . 2012-02-19 08:52 404480 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\d20ad8f0a8ae4396393e1f12acb68546\XamlBuildTask.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\05519155c428dd154d4d948d7c232427\WsatConfig.ni.exe + 2012-02-19 08:51 . 2012-02-19 08:51 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\5b2066cece646c758c73a13cca7c82b7\WindowsFormsIntegration.ni.dll + 2011-10-12 04:03 . 2011-10-12 04:03 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\c170b431f43ab80000d31bcc58acd1a5\UIAutomationTypes.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\1bc856ec98668f28b06dc195e6f73603\UIAutomationClient.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\8a6f500c40e3fa7da71110af6c0a60ac\System.Xml.Linq.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\ca11ffdc7fa5af9ba6902d72b0b932c2\System.Windows.Input.Manipulations.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\0f9b1fb6e45b53adb5cb15e6ee4c3924\System.Windows.Forms.DataVisualization.Design.ni. dll + 2012-02-19 08:49 . 2012-02-19 08:49 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\9d010b26cae10628874cb8ff61cc52af\System.Web.RegularExpressions.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 864256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\ba6a1c633c78faeadb3964fa3db07513\System.Web.Extensions.Design.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 334848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\533d991b3590f1347e7b727941335c55\System.Web.Entity.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\2daf972ea44ef790b2e329a5e41a398f\System.Web.Entity.Design.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 708096 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\585c4aabbec8a372b5e8c198e4854c0f\System.Web.DynamicData.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 260096 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\ef1f49de0f7db7644d2c32fd40147339\System.Web.DataVisualization.Design.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\c3a03bb69e38f5ed9ebce72d48a722ef\System.Transactions.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\d7fbfc6836ce7e53486ddb79b598ca8d\System.ServiceProcess.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f1a00750deae84241a140f4e4233fe71\System.ServiceModel.Routing.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 425472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\73a9874c15a0abf44b5db8aab1fe4dce\System.ServiceModel.Activation.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\09ee8d91e80e00991226aec062aa1e92\System.Security.ni.dll + 2011-10-12 04:02 . 2011-10-12 04:02 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\137a2ae391d89577ad63db08303a5158\System.Runtime.Serialization.Formatters.Soap.ni.d ll + 2012-02-19 08:48 . 2012-02-19 08:48 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\9b6e07791d63f180b725744b37edfd39\System.Runtime.Remoting.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 241664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\bdd675ae53cdf3ac2225468388f396ca\System.Runtime.Caching.ni.dll + 2011-10-12 03:57 . 2011-10-12 03:57 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\d038332bf07a163f855200919ee678cc\System.Numerics.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\ecf10c574f8bd9a05b021e7880a1041c\System.Net.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\f751ad889c61578ae7e1d656e798cd72\System.Messaging.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\98ec4a836fdbe4d88306206d6fc326ec\System.Management.Instrumentation.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\3aada4dce5c9f819d192b0bba0a298bc\System.IO.Log.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\015d3fcedc60e04e3fce6aa3b63057d9\System.IdentityModel.Selectors.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\47a2b7b2fa872de3078d49d0a4c10cb2\System.EnterpriseServices.Wrapper.dll + 2012-02-19 08:48 . 2012-02-19 08:48 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\47a2b7b2fa872de3078d49d0a4c10cb2\System.EnterpriseServices.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\30bdf637fad5e84fc46d7322f487c801\System.Dynamic.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 224768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\55f621652cd3b962fd8dac08ba1d4934\System.Drawing.Design.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\e05bc4bfe46686b77f1e28b466f79363\System.DirectoryServices.Protocols.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\9ada0ce9819a2eeb6d3b7d4942cf278f\System.DirectoryServices.AccountManagement.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\fa66f17c3937c91c1b480c24aa602812\System.Device.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 508416 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\63c40de47bb41198fa1786142223861d\System.Data.Services.Design.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\8b353356367e7da5d31e49057a59c749\System.Data.DataSetExtensions.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\363b05dd092178671e56531a9c4999b6\System.Configuration.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\8e28c1bf907bc67c6685db26050c19bd\System.Configuration.Install.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\ac4bd5fece3ee7b1632817a509bcd909\System.ComponentModel.DataAnnotations.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\768ccd38c2bf1f7045e79ac03cb679f1\System.ComponentModel.Composition.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\266d00e0694b48964ead82a67657462b\System.AddIn.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\754d38ef09a80e6bc721a0039d72b65b\System.Activities.DurableInstancing.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\024df3845eee3a86a396d972162fffc4\SMSvcHost.ni.exe + 2012-02-19 08:48 . 2012-02-19 08:48 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\ba4bc24df463a622c0e918d8c49672ed\SMDiagnostics.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 450560 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\daec0a92c216faca879f205a2e8e8169\PresentationFramework.Aero.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\942a5e3ee871f5f4a323d95505f9667c\PresentationFramework.Luna.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 327680 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\65bd29660d00ac08c14edad26ce38e2c\PresentationFramework.Royale.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\446fc2e471272940ddac8c8c949000cf\PresentationFramework.Classic.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\b170601bfe8cde2cead79961480b7e4f\MSBuild.ni.exe + 2012-02-19 08:48 . 2012-02-19 08:48 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\1650e4aa6645d4b8a1172331cc2afde9\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\d6386aaa2c8ab67caaee9684c3842c04\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 631808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\36330de8cde960b7d3bec7dbe1231db2\Microsoft.Build.Utilities.v4.0.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\3453f6201843fdfc6d2ac069c467dc84\Microsoft.Build.Framework.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\e42d59aac3d8e773efa64f5ba215c9c3\Microsoft.Build.Conversion.v4.0.ni.dll + 2011-10-12 04:02 . 2011-10-12 04:02 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\04226f317855c555a957f4c2d0dc240d\CustomMarshalers.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 474624 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\0f8c22531e68be9cb2448b66e9837f75\ComSvcConfig.ni.exe + 2012-02-19 08:48 . 2012-02-19 08:48 851968 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\3d51fcb4e792ab05fe48d21fc61f4b23\AspNetMMCExt.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\edc5691acfb65ac37f49de2ec497083a\WsatConfig.ni.exe + 2012-02-19 07:55 . 2012-02-19 07:55 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\4ad8369d6a60765d7e9b43cdf9023f41\WindowsFormsIntegration.ni.dll + 2011-10-12 16:53 . 2011-10-12 16:53 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\68f4157e570c77df653057c0583395bd\UIAutomationClient.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c2a12bd4056b44f8005a7eb3af161e6a\System.Xml.Linq.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\fc63b434b2f253cd27625487f7b02ac0\System.Web.Routing.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\67877f896b2b0e42286e838fe307f3fd\System.Web.RegularExpressions.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\86650d4fb220f94f25bb5da42a03d454\System.Web.Extensions.Design.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\654465871e547e131668874de7c60b8c\System.Web.Entity.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f0d6895f6e709d425cb5da6053c603d2\System.Web.Entity.Design.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3f3b7dc7208e302e39a2dfb5b2cb953b\System.Web.DynamicData.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\e9cddd213343f15d611b14620d649bb0\System.Web.Abstractions.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f25d114cb629d1f512f98883c6535a75\System.Transactions.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\11dcb806c92f55111f5fa9f1a90e3bdd\System.ServiceProcess.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\5fb9981f4147b537b53be9d58bf4e9b4\System.Security.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1335dd98ce5ce22ad1f51cc274ca5a1d\System.Runtime.Serialization.Formatters.Soap.ni.d ll + 2012-02-19 08:47 . 2012-02-19 08:47 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\a4b2b1ee81acd843970d9a81b281f1c1\System.Net.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e3436edde657a5111d39d5b2eecf9715\System.Management.Instrumentation.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\974ded7dd3bca225a1b90de778846c78\System.IO.Log.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\01eba24390736a59c39becd825b5756e\System.IdentityModel.Selectors.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.Wrapper.dll + 2012-02-19 08:47 . 2012-02-19 08:47 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\e9ae7ae6d1e9edc7aaf819889cd1c692\System.Drawing.Design.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\78a370dc153011708dd9e4cb0e606bfc\System.DirectoryServices.Protocols.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6e644fc7464d9fe23fc9cd6001296f2f\System.DirectoryServices.AccountManagement.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\bac39be66bb9f987c1948b766833f8e6\System.Data.Services.Client.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2b5ecd231320e57010043c408783d80b\System.Data.Services.Design.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\4ac9ac2326720485aefd4d79d2024945\System.Data.Entity.Design.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\d504d550fd0a6994fcb1466ea7be92af\System.Data.DataSetExtensions.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\28637135c6939e74450bbbf110b12643\System.Configuration.Install.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\958b5c0114d664ab5ba72575c301e2ea\System.AddIn.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4dcff3b0e79fc27e31549bb2af00efb5\SMSvcHost.ni.exe + 2012-02-19 08:45 . 2012-02-19 08:45 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\bd3bfd5b6ef659dac4d6cccb34577d33\SMDiagnostics.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\52015457bc28e7a9a563d9eab8ab0015\PresentationFramework.Royale.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\46a680814559114706a33282e9df4b7a\PresentationFramework.Classic.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2713754549b1114c9152d33efe5f72c7\PresentationFramework.Aero.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1552f18ca434c1dca6d082df476d089a\PresentationFramework.Luna.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7c51497b188c82e2ccbe6315549ce023\MSBuild.ni.exe + 2012-02-19 08:46 . 2012-02-19 08:46 508928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\9a51f6f48b8bb88e1ffe0276a18724a7\Microsoft.WSMan.Management.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f0f6dd614d294295c5d8386cc4192034\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b99685b2729aa2b6cfd3c81ffb50ec29\Microsoft.PowerShell.ConsoleHost.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 156160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7c6965d456a41e7f939b717cf8ae70fd\Microsoft.PowerShell.Security.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\75c6e8d5775b6a34f5f8076a9840c83a\Microsoft.PowerShell.Commands.Diagnostics.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 729600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\71311f01dfd70eef8195a85741fea78d\Microsoft.PowerShell.GraphicalHost.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 737792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7022f53018b2dbbd1db3918bba4b5614\Microsoft.PowerShell.Commands.Management.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\fd1338828beec8737fed8f50f4fcc567\Microsoft.Build.Utilities.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0d5f999c4b7e51151548c37c676c1b8e\Microsoft.Build.Utilities.v3.5.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\792168ce8fe03a3db43e12cf736cf91e\Microsoft.Build.Engine.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\0a5277c34ddc1f55df1defb4231e814f\Microsoft.Build.Conversion.v3.5.ni.dll + 2011-10-12 17:22 . 2011-10-12 17:22 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a8df37aadb089f1f34d3d2f103966fbc\ComSvcConfig.ni.exe + 2012-02-19 08:45 . 2012-02-19 08:45 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\25ce400b547f517258c8afb0480390ea\AspNetMMCExt.ni.dll + 2012-02-18 19:30 . 2012-02-18 19:30 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2011-04-15 07:55 . 2011-04-15 07:55 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-02-18 19:30 . 2012-02-18 19:30 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2011-04-15 07:55 . 2011-04-15 07:55 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2011-04-15 07:55 . 2011-04-15 07:55 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2012-02-18 19:30 . 2012-02-18 19:30 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2012-02-18 19:30 . 2012-02-18 19:30 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2011-04-15 07:55 . 2011-04-15 07:55 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2011-04-15 07:55 . 2011-04-15 07:55 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-02-18 19:30 . 2012-02-18 19:30 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-02-18 19:30 . 2012-02-18 19:30 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2011-04-15 07:55 . 2011-04-15 07:55 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2011-04-15 07:55 . 2011-04-15 07:55 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2012-02-18 19:30 . 2012-02-18 19:30 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2011-04-15 07:55 . 2011-04-15 07:55 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2012-02-18 19:30 . 2012-02-18 19:30 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2011-04-15 07:55 . 2011-04-15 07:55 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-02-18 19:30 . 2012-02-18 19:30 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2011-04-15 07:55 . 2011-04-15 07:55 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2012-02-18 19:30 . 2012-02-18 19:30 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2012-02-18 19:30 . 2012-02-18 19:30 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2011-04-15 07:55 . 2011-04-15 07:55 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2012-02-18 19:30 . 2012-02-18 19:30 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2011-04-15 07:55 . 2011-04-15 07:55 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2012-02-18 19:30 . 2012-02-18 19:30 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2011-04-15 07:55 . 2011-04-15 07:55 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2011-04-15 07:55 . 2011-04-15 07:55 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2012-02-18 19:30 . 2012-02-18 19:30 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2011-04-15 07:55 . 2011-04-15 07:55 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-02-18 19:30 . 2012-02-18 19:30 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2011-07-31 08:11 . 2011-07-31 08:11 111232 c:\windows\assembly\GAC_MSIL\Microsoft.WindowsAPICodePack\1.1.0.0__31bf3856ad364e35\Microsoft.WindowsAPICodePack.dll + 2011-07-31 08:11 . 2011-07-31 08:11 547968 c:\windows\assembly\GAC_MSIL\Microsoft.WindowsAPICodePack.Shell\1.1.0.0__31bf3856ad364e35\Microsoft.WindowsAPICodePack.Shell.dll - 2011-04-15 07:55 . 2011-04-15 07:55 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2012-02-18 19:30 . 2012-02-18 19:30 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2011-04-15 07:55 . 2011-04-15 07:55 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-02-18 19:30 . 2012-02-18 19:30 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-02-18 19:30 . 2012-02-18 19:30 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2011-04-15 07:55 . 2011-04-15 07:55 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2012-03-02 10:44 . 2012-03-02 10:44 608136 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host. dll - 2011-04-15 07:55 . 2011-04-15 07:55 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-02-18 19:30 . 2012-02-18 19:30 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-02-18 19:30 . 2012-02-18 19:30 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2011-04-15 07:55 . 2011-04-15 07:55 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2011-04-15 07:55 . 2011-04-15 07:55 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2012-02-18 19:30 . 2012-02-18 19:30 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2011-07-31 08:11 . 2011-07-31 08:11 200704 c:\windows\assembly\GAC_MSIL\Google.GData.Client\1.8.0.0__04a59ca9b0273830\Google.GData.Client.dll + 2012-02-18 19:30 . 2012-02-18 19:30 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2011-04-15 07:55 . 2011-04-15 07:55 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2011-04-15 07:55 . 2011-04-15 07:55 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-02-18 19:30 . 2012-02-18 19:30 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2011-04-15 07:55 . 2011-04-15 07:55 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-02-18 19:30 . 2012-02-18 19:30 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-02-18 19:30 . 2012-02-18 19:30 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-04-15 07:55 . 2011-04-15 07:55 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-04-15 07:55 . 2011-04-15 07:55 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2012-02-18 19:30 . 2012-02-18 19:30 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2012-03-02 10:44 . 2012-03-02 10:44 117160 c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal .Host.Interop.dll - 2010-07-19 16:41 . 2010-07-19 16:41 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll + 2012-03-02 10:44 . 2012-03-02 10:44 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll + 2011-12-15 17:51 . 2011-12-15 17:51 350080 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll + 2012-03-02 10:44 . 2012-03-02 10:44 149368 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll + 2012-02-18 19:22 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2661637\update\updspapi.dll + 2012-02-18 19:22 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2661637\update\update.exe + 2012-02-18 19:22 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2661637\spuninst.exe |
05.04.2012, 17:58 | #15 |
| Smart hdd c:\windows\$hf_mig$\KB2660465\update\updspapi.dll + 2012-02-18 19:27 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2660465\update\update.exe + 2012-02-18 19:27 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2660465\spuninst.exe + 2012-02-18 19:27 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2647516-IE8\update\updspapi.dll + 2012-02-18 19:27 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2647516-IE8\update\update.exe + 2012-02-18 19:27 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2647516-IE8\spuninst.exe + 2012-02-18 07:29 . 2011-12-17 19:42 919552 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\wininet.dll + 2012-02-18 07:29 . 2011-12-17 19:42 105984 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\url.dll + 2012-02-18 07:29 . 2011-12-17 19:42 206848 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\occache.dll + 2012-02-18 07:29 . 2011-12-17 19:42 611840 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\mstime.dll + 2012-02-18 07:29 . 2011-12-17 19:42 602112 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\msfeeds.dll + 2012-02-18 07:29 . 2011-12-17 19:42 247808 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\ieproxy.dll + 2012-02-18 07:29 . 2011-12-17 19:42 184320 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\iepeers.dll + 2012-02-18 07:29 . 2011-12-17 19:42 743424 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\iedvtool.dll + 2012-02-18 07:29 . 2011-12-17 19:42 387584 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\iedkcs32.dll + 2012-02-18 07:29 . 2011-12-16 12:33 174080 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\ie4uinit.exe + 2012-01-11 15:51 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2646524\update\updspapi.dll + 2012-01-11 15:51 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2646524\update\update.exe + 2012-01-11 15:51 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2646524\spuninst.exe + 2011-11-25 21:56 . 2011-11-25 21:56 293888 c:\windows\$hf_mig$\KB2646524\SP3QFE\winsrv.dll + 2011-11-12 08:17 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2641690\update\updspapi.dll + 2011-11-12 08:17 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2641690\update\update.exe + 2011-11-12 08:17 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2641690\spuninst.exe + 2011-09-28 07:05 . 2011-09-28 07:05 604672 c:\windows\$hf_mig$\KB2641690\SP3QFE\crypt32.dll + 2011-12-15 17:51 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2639417\update\updspapi.dll + 2011-12-15 17:51 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2639417\update\update.exe + 2011-12-15 17:51 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2639417\spuninst.exe + 2011-12-15 17:46 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2633171\update\updspapi.dll + 2011-12-15 17:46 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2633171\update\update.exe + 2011-12-15 17:46 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2633171\spuninst.exe + 2012-01-11 15:51 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2631813\update\updspapi.dll + 2012-01-11 15:51 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2631813\update\update.exe + 2012-01-11 15:51 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2631813\spuninst.exe + 2011-11-03 15:27 . 2011-11-03 15:27 387072 c:\windows\$hf_mig$\KB2631813\SP3QFE\qdvd.dll + 2011-12-15 17:51 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2624667\update\updspapi.dll + 2011-12-15 17:51 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2624667\update\update.exe + 2011-12-15 17:51 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2624667\spuninst.exe + 2011-12-15 17:46 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2620712\update\updspapi.dll + 2011-12-15 17:46 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2620712\update\update.exe + 2011-12-15 17:46 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2620712\spuninst.exe + 2011-12-15 17:47 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2619339\update\updspapi.dll + 2011-12-15 17:47 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2619339\update\update.exe + 2011-12-15 17:47 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2619339\spuninst.exe + 2011-10-18 11:12 . 2011-10-18 11:12 186880 c:\windows\$hf_mig$\KB2619339\SP3QFE\encdec.dll + 2011-12-15 17:47 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2618451\update\updspapi.dll + 2011-12-15 17:47 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2618451\update\update.exe + 2011-12-15 17:47 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2618451\spuninst.exe + 2011-12-15 17:50 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2618444-IE8\update\updspapi.dll + 2011-12-15 17:50 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2618444-IE8\update\update.exe + 2011-12-15 17:50 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2618444-IE8\spuninst.exe + 2011-12-15 17:29 . 2011-11-04 19:12 919552 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll + 2011-12-15 17:29 . 2011-11-04 19:12 105984 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\url.dll + 2011-12-15 17:29 . 2011-11-04 19:12 206848 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\occache.dll + 2011-12-15 17:29 . 2011-11-04 19:12 611840 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mstime.dll + 2011-12-15 17:29 . 2011-11-04 19:12 602112 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\msfeeds.dll + 2011-12-15 17:29 . 2011-11-04 19:12 247808 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ieproxy.dll + 2011-12-15 17:29 . 2011-11-04 19:12 184320 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iepeers.dll + 2011-12-15 17:29 . 2011-11-04 19:12 743424 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iedvtool.dll + 2011-12-15 17:29 . 2011-11-04 19:12 387584 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iedkcs32.dll + 2011-12-15 17:29 . 2011-10-25 12:01 174080 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ie4uinit.exe + 2011-09-16 05:41 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2616676\update\updspapi.dll + 2011-09-16 05:41 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2616676\update\update.exe + 2011-09-16 05:41 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2616676\spuninst.exe + 2011-09-09 09:10 . 2011-09-09 09:10 604672 c:\windows\$hf_mig$\KB2616676\SP3QFE\crypt32.dll + 2011-09-07 04:01 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2607712\update\updspapi.dll + 2011-09-07 04:01 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2607712\update\update.exe + 2011-09-07 04:01 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2607712\spuninst.exe + 2011-09-03 10:16 . 2011-09-03 10:16 604672 c:\windows\$hf_mig$\KB2607712\SP3QFE\crypt32.dll + 2012-01-11 15:46 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2603381\update\updspapi.dll + 2012-01-11 15:46 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2603381\update\update.exe + 2012-01-11 15:46 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2603381\spuninst.exe + 2012-01-11 15:50 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2598479\update\updspapi.dll + 2012-01-11 15:50 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2598479\update\update.exe + 2012-01-11 15:50 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2598479\spuninst.exe + 2011-10-14 14:45 . 2011-10-14 14:45 178176 c:\windows\$hf_mig$\KB2598479\SP3QFE\winmm.dll + 2011-10-12 04:00 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2592799\update\updspapi.dll + 2011-10-12 04:00 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2592799\update\update.exe + 2011-10-12 04:00 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2592799\spuninst.exe + 2011-10-12 01:56 . 2011-08-17 13:41 138496 c:\windows\$hf_mig$\KB2592799\SP3QFE\afd.sys + 2011-10-12 03:59 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2586448-IE8\update\updspapi.dll + 2011-10-12 03:59 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2586448-IE8\update\update.exe + 2011-10-12 03:59 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2586448-IE8\spuninst.exe + 2011-10-12 01:56 . 2011-08-22 23:40 919552 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll + 2011-10-12 01:56 . 2011-08-22 23:40 105984 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\url.dll + 2011-10-12 01:56 . 2011-08-22 23:40 206848 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\occache.dll + 2011-10-12 01:56 . 2011-08-22 23:40 611840 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mstime.dll + 2011-10-12 01:56 . 2011-08-22 23:40 602112 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeeds.dll + 2011-10-12 01:56 . 2011-08-22 23:40 247808 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieproxy.dll + 2011-10-12 01:56 . 2011-08-22 23:40 184320 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iepeers.dll + 2011-10-12 01:56 . 2011-08-22 23:40 743424 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedvtool.dll + 2011-10-12 01:56 . 2011-08-22 23:40 387584 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedkcs32.dll + 2011-10-12 01:56 . 2011-08-22 11:52 174080 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ie4uinit.exe + 2012-01-26 16:38 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2585542\update\updspapi.dll + 2012-01-26 16:38 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2585542\update\update.exe + 2012-01-26 16:38 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2585542\spuninst.exe + 2011-11-16 14:20 . 2011-11-16 14:20 354816 c:\windows\$hf_mig$\KB2585542\SP3QFE\winhttp.dll + 2011-11-16 14:20 . 2011-11-16 14:20 152064 c:\windows\$hf_mig$\KB2585542\SP3QFE\schannel.dll + 2012-01-11 15:41 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2584146\update\updspapi.dll + 2012-01-11 15:41 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2584146\update\update.exe + 2012-01-11 15:41 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2584146\spuninst.exe + 2011-09-16 05:37 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2570947\update\updspapi.dll + 2011-09-16 05:37 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2570947\update\update.exe + 2011-09-16 05:37 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2570947\spuninst.exe + 2011-08-10 04:10 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2570222\update\updspapi.dll + 2011-08-10 04:10 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2570222\update\update.exe + 2011-08-10 04:10 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2570222\spuninst.exe + 2011-08-10 03:09 . 2011-06-24 14:09 139656 c:\windows\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys + 2011-08-10 04:13 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2567680\update\updspapi.dll + 2011-08-10 04:13 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2567680\update\update.exe + 2011-08-10 04:13 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2567680\spuninst.exe + 2011-06-20 17:43 . 2011-06-20 17:43 293888 c:\windows\$hf_mig$\KB2567680\SP3QFE\winsrv.dll + 2011-10-12 04:01 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2567053\update\updspapi.dll + 2011-10-12 04:01 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2567053\update\update.exe + 2011-10-12 04:01 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2567053\spuninst.exe + 2011-08-10 03:57 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2566454\update\updspapi.dll + 2011-08-10 03:57 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2566454\update\update.exe + 2011-08-10 03:57 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2566454\spuninst.exe + 2011-08-10 03:57 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2562937\update\updspapi.dll + 2011-08-10 03:57 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2562937\update\update.exe + 2011-08-10 03:57 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2562937\spuninst.exe + 2011-08-10 03:57 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2559049-IE8\update\updspapi.dll + 2011-08-10 03:57 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2559049-IE8\update\update.exe + 2011-08-10 03:57 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2559049-IE8\spuninst.exe + 2011-08-10 03:08 . 2011-06-23 18:29 919552 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll + 2011-08-10 03:08 . 2011-06-23 18:29 105984 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\url.dll + 2011-08-10 03:08 . 2011-06-23 18:29 206848 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\occache.dll + 2011-08-10 03:08 . 2011-06-23 18:29 611840 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mstime.dll + 2011-08-10 03:08 . 2011-06-23 18:29 602112 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeeds.dll + 2011-08-10 03:08 . 2011-06-23 18:29 247808 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieproxy.dll + 2011-08-10 03:08 . 2011-06-23 18:29 184320 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iepeers.dll + 2011-08-10 03:08 . 2011-06-23 18:29 743424 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedvtool.dll + 2011-08-10 03:08 . 2011-06-23 18:29 387584 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedkcs32.dll + 2011-08-10 03:08 . 2011-06-23 12:19 173568 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ie4uinit.exe + 2011-07-13 19:54 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2555917\update\updspapi.dll + 2011-07-13 19:54 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2555917\update\update.exe + 2011-07-13 19:54 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2555917\spuninst.exe + 2011-06-16 04:05 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2544893\update\updspapi.dll + 2011-06-16 04:05 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2544893\update\update.exe + 2011-06-16 04:05 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2544893\spuninst.exe + 2011-06-16 03:18 . 2011-05-02 15:30 692736 c:\windows\$hf_mig$\KB2544893\SP3QFE\inetcomm.dll + 2011-11-09 11:57 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2544893-v2\update\updspapi.dll + 2011-11-09 11:57 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2544893-v2\update\update.exe + 2011-11-09 11:57 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2544893-v2\spuninst.exe + 2011-10-10 14:21 . 2011-10-10 14:21 692736 c:\windows\$hf_mig$\KB2544893-v2\SP3QFE\inetcomm.dll + 2011-06-16 04:03 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2544521-IE8\update\updspapi.dll + 2011-06-16 04:03 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2544521-IE8\update\update.exe + 2011-06-16 04:03 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2544521-IE8\spuninst.exe + 2011-06-16 03:18 . 2011-04-30 02:59 758784 c:\windows\$hf_mig$\KB2544521-IE8\SP3QFE\vgx.dll + 2011-06-29 03:28 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2541763\update\updspapi.dll + 2011-06-29 03:28 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2541763\update\update.exe + 2011-06-29 03:28 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2541763\spuninst.exe + 2011-04-29 17:23 . 2011-04-29 17:23 151552 c:\windows\$hf_mig$\KB2541763\SP3QFE\schannel.dll + 2011-06-16 04:05 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2536276\update\updspapi.dll + 2011-06-16 04:05 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2536276\update\update.exe + 2011-06-16 04:05 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2536276\spuninst.exe + 2011-06-16 03:19 . 2011-04-29 16:47 457856 c:\windows\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys + 2011-08-10 04:12 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2536276-v2\update\updspapi.dll + 2011-08-10 04:12 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2536276-v2\update\update.exe + 2011-08-10 04:12 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2536276-v2\spuninst.exe + 2011-08-10 03:09 . 2011-07-15 13:29 457856 c:\windows\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys + 2011-06-16 04:06 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2535512\update\updspapi.dll + 2011-06-16 04:06 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2535512\update\update.exe + 2011-06-16 04:06 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2535512\spuninst.exe + 2011-06-16 03:19 . 2011-04-21 13:52 105472 c:\windows\$hf_mig$\KB2535512\SP3QFE\mup.sys + 2011-06-16 04:05 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2530548-IE8\update\updspapi.dll + 2011-06-16 04:05 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2530548-IE8\update\update.exe + 2011-06-16 04:05 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2530548-IE8\spuninst.exe + 2011-06-16 03:19 . 2011-04-25 16:04 919552 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll + 2011-06-16 03:19 . 2011-04-25 16:04 206848 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\occache.dll + 2011-06-16 03:19 . 2011-04-25 16:04 611840 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mstime.dll + 2011-06-16 03:19 . 2011-04-25 16:04 602112 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeeds.dll + 2011-06-16 03:19 . 2011-04-25 16:04 247808 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieproxy.dll + 2011-06-16 03:19 . 2011-04-25 16:04 184320 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iepeers.dll + 2011-06-16 03:19 . 2011-04-25 16:04 743424 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedvtool.dll + 2011-06-16 03:19 . 2011-04-25 16:04 387584 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedkcs32.dll + 2011-06-16 03:19 . 2011-04-25 11:37 173568 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ie4uinit.exe + 2011-07-13 19:56 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2507938\update\updspapi.dll + 2011-07-13 19:56 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2507938\update\update.exe + 2011-07-13 19:56 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2507938\spuninst.exe + 2011-04-26 11:02 . 2011-04-26 11:02 293888 c:\windows\$hf_mig$\KB2507938\SP3QFE\winsrv.dll + 2011-06-16 04:06 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2503665\update\updspapi.dll + 2011-06-16 04:06 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2503665\update\update.exe + 2011-06-16 04:06 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2503665\spuninst.exe + 2011-06-16 03:19 . 2011-02-16 13:25 138496 c:\windows\$hf_mig$\KB2503665\SP3QFE\afd.sys + 2011-06-16 04:06 . 2010-07-05 13:14 388984 c:\windows\$hf_mig$\KB2476490\update\updspapi.dll + 2011-06-16 04:06 . 2010-07-05 13:14 765304 c:\windows\$hf_mig$\KB2476490\update\update.exe + 2011-06-16 04:06 . 2010-07-05 13:14 234872 c:\windows\$hf_mig$\KB2476490\spuninst.exe + 2010-12-20 17:30 . 2010-12-20 17:30 552448 c:\windows\$hf_mig$\KB2476490\SP3QFE\oleaut32.dll + 2011-04-18 20:51 . 2011-04-18 20:51 3781960 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll + 2011-04-18 20:51 . 2011-04-18 20:51 3766600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90.dll + 2011-05-13 18:04 . 2011-05-13 18:04 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80u.dll + 2011-05-13 18:04 . 2011-05-13 18:04 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80.dll + 2004-08-03 23:57 . 2011-12-17 19:43 1212416 c:\windows\system32\urlmon.dll + 2004-08-03 23:57 . 2011-11-03 15:28 1297920 c:\windows\system32\quartz.dll + 2004-08-03 23:57 . 2011-11-01 16:07 1288704 c:\windows\system32\ole32.dll + 2004-08-03 23:50 . 2011-10-26 10:49 2151424 c:\windows\system32\ntoskrnl.exe - 2004-08-03 23:50 . 2010-12-09 15:13 2151424 c:\windows\system32\ntoskrnl.exe - 2004-08-04 00:50 . 2010-12-09 15:13 2029568 c:\windows\system32\ntkrnlpa.exe + 2004-08-04 00:50 . 2011-10-26 10:49 2029568 c:\windows\system32\ntkrnlpa.exe + 2004-08-03 23:57 . 2011-12-17 19:43 5979136 c:\windows\system32\mshtml.dll + 2009-03-08 02:32 . 2011-12-17 19:43 2000384 c:\windows\system32\iertutil.dll + 2001-09-05 20:00 . 2001-09-05 20:00 1700352 c:\windows\system32\gdiplus.dll + 2011-07-07 01:28 . 2011-07-07 01:28 1193320 c:\windows\system32\FM20.DLL + 2010-05-02 08:05 . 2012-02-03 09:57 1860224 c:\windows\system32\dllcache\win32k.sys + 2009-03-08 02:34 . 2011-12-17 19:43 1212416 c:\windows\system32\dllcache\urlmon.dll + 2009-11-27 17:11 . 2011-11-03 15:28 1297920 c:\windows\system32\dllcache\quartz.dll + 2010-07-16 12:05 . 2011-11-01 16:07 1288704 c:\windows\system32\dllcache\ole32.dll - 2010-07-19 12:53 . 2010-12-09 15:13 2195072 c:\windows\system32\dllcache\ntoskrnl.exe + 2010-07-19 12:53 . 2011-10-26 10:49 2195072 c:\windows\system32\dllcache\ntoskrnl.exe + 2010-07-19 12:53 . 2011-10-26 10:49 2029568 c:\windows\system32\dllcache\ntkrpamp.exe - 2010-07-19 12:53 . 2010-12-09 15:13 2029568 c:\windows\system32\dllcache\ntkrpamp.exe + 2009-02-10 17:03 . 2011-10-26 10:49 2071680 c:\windows\system32\dllcache\ntkrnlpa.exe - 2009-02-10 17:03 . 2010-12-09 15:13 2071680 c:\windows\system32\dllcache\ntkrnlpa.exe + 2010-07-19 12:53 . 2011-10-26 10:49 2151424 c:\windows\system32\dllcache\ntkrnlmp.exe - 2010-07-19 12:53 . 2010-12-09 15:13 2151424 c:\windows\system32\dllcache\ntkrnlmp.exe + 2009-03-08 02:41 . 2011-12-17 19:43 5979136 c:\windows\system32\dllcache\mshtml.dll + 2010-07-19 13:05 . 2011-12-17 19:43 2000384 c:\windows\system32\dllcache\iertutil.dll + 2011-04-12 13:11 . 2011-04-12 13:11 5028200 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll + 2011-12-26 02:54 . 2011-12-26 02:54 1863464 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Extensions.dll + 2011-12-26 02:54 . 2011-12-26 02:54 5230864 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.dll + 2011-04-28 09:06 . 2011-04-28 09:06 1749880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.DataVisualization.dll + 2011-10-26 13:46 . 2011-10-26 13:46 3511880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll + 2011-07-09 07:30 . 2011-07-09 07:30 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll + 2011-07-09 07:30 . 2011-07-09 07:30 1142616 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll + 2011-07-09 07:30 . 2011-07-09 07:30 6724424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll + 2011-03-25 04:15 . 2011-03-25 04:15 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2008-07-25 09:17 . 2008-07-25 09:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2011-12-25 02:50 . 2011-12-25 02:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2011-10-26 02:39 . 2011-10-26 02:39 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2011-07-07 03:18 . 2011-07-07 03:18 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2011-07-07 03:18 . 2011-07-07 03:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2011-01-18 02:39 . 2011-01-18 02:39 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2011-12-25 10:07 . 2011-12-25 10:07 2064384 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll + 2011-12-25 10:06 . 2011-12-25 10:06 1269760 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2011-12-25 10:06 . 2011-12-25 10:06 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll - 2010-09-23 14:55 . 2010-09-23 14:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll - 2010-09-23 01:26 . 2010-09-23 01:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2011-12-24 21:54 . 2011-12-24 21:54 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2011-12-24 21:53 . 2011-12-24 21:53 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - 2010-09-23 14:55 . 2010-09-23 14:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2011-12-25 10:06 . 2011-12-25 10:06 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll - 2011-04-15 07:50 . 2011-04-15 07:50 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-02-18 19:24 . 2012-02-18 19:24 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-02-18 19:23 . 2012-02-18 19:23 3511880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll + 2012-02-18 19:24 . 2012-02-18 19:24 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - 2011-04-15 07:49 . 2011-04-15 07:49 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - 2010-10-06 06:44 . 2010-10-06 06:44 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll + 2012-01-11 15:45 . 2012-01-11 15:45 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll - 2010-10-06 06:44 . 2010-10-06 06:44 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll + 2012-01-11 15:45 . 2012-01-11 15:45 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll + 2012-02-18 19:24 . 2012-02-18 19:24 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-02-18 19:24 . 2012-02-18 19:24 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualizatio n.dll - 2011-04-15 07:49 . 2011-04-15 07:49 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualizatio n.dll + 2012-01-11 15:45 . 2012-01-11 15:45 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll + 2012-01-11 15:45 . 2012-01-11 15:45 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll - 2011-04-15 07:49 . 2011-04-15 07:49 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2012-02-18 19:24 . 2012-02-18 19:24 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2012-02-18 19:24 . 2012-02-18 19:24 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll - 2011-04-15 07:49 . 2011-04-15 07:49 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2012-01-11 15:45 . 2012-01-11 15:45 5078360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2010-10-06 06:44 . 2010-10-06 06:44 5078360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-02-18 19:24 . 2012-02-18 19:24 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2011-04-15 07:49 . 2011-04-15 07:49 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2011-04-15 07:49 . 2011-04-15 07:49 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll + 2012-02-18 19:24 . 2012-02-18 19:24 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2011-04-15 07:49 . 2011-04-15 07:49 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2012-02-18 19:24 . 2012-02-18 19:24 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2012-02-18 19:24 . 2012-02-18 19:24 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2011-04-15 07:49 . 2011-04-15 07:49 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2011-04-15 07:50 . 2011-04-15 07:50 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-02-18 19:24 . 2012-02-18 19:24 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-01-11 15:45 . 2012-01-11 15:45 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll - 2010-10-06 06:44 . 2010-10-06 06:44 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll + 2012-01-11 15:45 . 2012-01-11 15:45 1064816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll - 2010-10-06 06:44 . 2010-10-06 06:44 1064816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll + 2012-01-11 15:45 . 2012-01-11 15:45 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2011-04-15 07:49 . 2011-04-15 07:49 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-02-18 19:23 . 2012-02-18 19:23 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-02-18 19:24 . 2012-02-18 19:24 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2011-04-15 07:49 . 2011-04-15 07:49 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-02-18 19:23 . 2012-02-18 19:23 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2011-04-15 07:49 . 2011-04-15 07:49 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Co mpiler.dll + 2012-02-18 19:24 . 2012-02-18 19:24 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Co mpiler.dll + 2011-09-15 17:40 . 2011-09-15 17:40 3554816 c:\windows\Installer\f826c7.msp + 2011-09-15 17:40 . 2011-09-15 17:40 7959552 c:\windows\Installer\f826c0.msp + 2011-08-20 12:39 . 2011-08-20 12:39 1527808 c:\windows\Installer\ca6d91.msi + 2011-12-26 08:59 . 2011-12-26 08:59 4368896 c:\windows\Installer\c540f.msp + 2011-12-26 04:06 . 2011-12-26 04:06 5115392 c:\windows\Installer\c53fd.msp + 2011-12-08 18:24 . 2011-12-08 18:24 4989952 c:\windows\Installer\c53f6.msp + 2011-03-25 07:03 . 2011-03-25 07:03 5079552 c:\windows\Installer\b58f9d.msp + 2011-01-18 21:36 . 2011-01-18 21:36 2687488 c:\windows\Installer\b58f96.msp + 2011-11-22 19:14 . 2011-11-22 19:14 1079296 c:\windows\Installer\a29a7.msi + 2012-02-03 14:58 . 2012-02-03 14:58 3974656 c:\windows\Installer\7234a.msi + 2011-09-21 14:18 . 2011-09-21 14:18 4985856 c:\windows\Installer\6fe346.msp + 2012-02-29 22:45 . 2012-02-29 22:45 4989440 c:\windows\Installer\48e55.msp + 2011-07-18 09:46 . 2011-07-18 09:46 1029632 c:\windows\Installer\3b2343.msp + 2011-05-31 18:23 . 2011-05-31 18:23 1032704 c:\windows\Installer\3b2342.msp + 2011-04-12 09:42 . 2011-04-12 09:42 1030656 c:\windows\Installer\3b2341.msp + 2012-02-29 22:45 . 2012-02-29 22:45 4989440 c:\windows\Installer\387e2c.msp + 2011-08-10 15:43 . 2011-08-10 15:43 3795968 c:\windows\Installer\34dc00.msp + 2011-09-06 19:46 . 2011-09-06 19:46 9006080 c:\windows\Installer\34dbea.msp + 2011-06-21 09:59 . 2011-06-21 09:59 1764352 c:\windows\Installer\34dbd4.msp + 2011-08-24 04:37 . 2011-08-24 04:37 4985856 c:\windows\Installer\34dbbd.msp + 2011-08-10 15:42 . 2011-08-10 15:42 7070208 c:\windows\Installer\34dba7.msp + 2011-07-21 10:34 . 2011-07-21 10:34 3456000 c:\windows\Installer\34db92.msp + 2011-09-06 19:48 . 2011-09-06 19:48 8181248 c:\windows\Installer\34db87.msp + 2011-07-27 05:39 . 2011-07-27 05:39 9892352 c:\windows\Installer\34db54.msp + 2011-05-01 22:06 . 2011-05-01 22:06 2705920 c:\windows\Installer\31cd8e.msp + 2011-07-27 05:42 . 2011-07-27 05:42 4985856 c:\windows\Installer\31cd87.msp + 2011-04-28 15:51 . 2011-04-28 15:51 1375744 c:\windows\Installer\31cd72.msp + 2011-04-28 08:54 . 2011-04-28 08:54 2720768 c:\windows\Installer\31cd6c.msp + 2011-04-29 10:31 . 2011-04-29 10:31 9006080 c:\windows\Installer\2c42cd.msp + 2011-04-29 10:28 . 2011-04-29 10:28 1995264 c:\windows\Installer\2c42b7.msp + 2011-04-29 10:33 . 2011-04-29 10:33 8173568 c:\windows\Installer\2c4291.msp + 2011-10-30 21:54 . 2011-10-30 21:54 2748416 c:\windows\Installer\29279de.msp + 2011-10-26 14:38 . 2011-10-26 14:38 2830848 c:\windows\Installer\29279ce.msp + 2012-02-03 14:13 . 2012-02-03 14:13 4988928 c:\windows\Installer\29279c7.msp + 2011-06-21 10:01 . 2011-06-21 10:01 4991488 c:\windows\Installer\24bc8e.msp + 2011-07-18 13:54 . 2011-07-18 13:54 1346560 c:\windows\Installer\1c37f78.msi + 2011-07-18 13:54 . 2011-07-18 13:54 1517568 c:\windows\Installer\1c37f73.msi + 2011-11-01 12:34 . 2011-11-01 12:34 4250112 c:\windows\Installer\171b5a.msp + 2011-11-01 12:34 . 2011-11-01 12:34 2247168 c:\windows\Installer\171b42.msp + 2011-11-11 15:14 . 2011-11-11 15:14 9096192 c:\windows\Installer\171b2c.msp + 2011-11-01 12:34 . 2011-11-01 12:34 4225536 c:\windows\Installer\171b16.msp + 2011-11-01 12:34 . 2011-11-01 12:34 2531840 c:\windows\Installer\171afb.msp + 2011-11-11 15:15 . 2011-11-11 15:15 1795584 c:\windows\Installer\171ae5.msp + 2011-11-11 15:16 . 2011-11-11 15:16 8458240 c:\windows\Installer\171acf.msp - 2010-07-19 16:34 . 2011-05-11 16:20 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe + 2010-07-19 16:34 . 2012-03-15 20:00 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - 2010-07-19 16:34 . 2011-05-11 16:20 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2010-07-19 16:34 . 2012-03-15 20:00 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2011-01-14 05:10 . 2011-01-14 05:10 2395008 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD.DLL + 2011-01-14 05:10 . 2011-01-14 05:10 2180992 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKPOWERPOINT.DLL + 2011-01-14 05:10 . 2011-01-14 05:10 3443072 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL.DLL + 2009-10-09 21:10 . 2009-10-09 21:10 2594632 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\VBE6.DLL + 2006-10-26 18:25 . 2006-10-26 18:25 2172688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PSRCHFEA.DLL + 2012-02-18 19:27 . 2011-11-04 19:13 1212416 c:\windows\ie8updates\KB2647516-IE8\urlmon.dll + 2012-02-18 19:27 . 2011-11-04 19:13 5978112 c:\windows\ie8updates\KB2647516-IE8\mshtml.dll + 2012-02-18 19:27 . 2011-11-04 19:13 2000384 c:\windows\ie8updates\KB2647516-IE8\iertutil.dll + 2011-12-15 17:50 . 2011-08-22 23:41 1212416 c:\windows\ie8updates\KB2618444-IE8\urlmon.dll + 2011-12-15 17:50 . 2011-10-03 08:34 5971456 c:\windows\ie8updates\KB2618444-IE8\mshtml.dll + 2011-12-15 17:50 . 2011-08-22 23:41 2000384 c:\windows\ie8updates\KB2618444-IE8\iertutil.dll + 2011-10-12 03:59 . 2011-06-23 18:31 1212416 c:\windows\ie8updates\KB2586448-IE8\urlmon.dll + 2011-10-12 03:59 . 2011-07-25 15:09 5969920 c:\windows\ie8updates\KB2586448-IE8\mshtml.dll + 2011-10-12 03:59 . 2011-06-23 18:31 1991680 c:\windows\ie8updates\KB2586448-IE8\iertutil.dll + 2011-08-10 03:57 . 2011-04-25 16:05 1211904 c:\windows\ie8updates\KB2559049-IE8\urlmon.dll + 2011-08-10 03:57 . 2011-05-30 22:12 5964800 c:\windows\ie8updates\KB2559049-IE8\mshtml.dll + 2011-08-10 03:57 . 2011-04-25 16:05 1991680 c:\windows\ie8updates\KB2559049-IE8\iertutil.dll + 2011-06-16 04:05 . 2011-02-22 23:05 1210880 c:\windows\ie8updates\KB2530548-IE8\urlmon.dll + 2011-06-16 04:05 . 2011-02-22 23:05 5962240 c:\windows\ie8updates\KB2530548-IE8\mshtml.dll + 2011-06-16 04:05 . 2011-02-22 23:05 1991680 c:\windows\ie8updates\KB2530548-IE8\iertutil.dll - 2010-07-19 12:53 . 2010-12-09 15:13 2195072 c:\windows\Driver Cache\i386\ntoskrnl.exe + 2010-07-19 12:53 . 2011-10-26 10:49 2195072 c:\windows\Driver Cache\i386\ntoskrnl.exe + 2010-07-19 12:53 . 2011-10-26 10:49 2029568 c:\windows\Driver Cache\i386\ntkrpamp.exe - 2010-07-19 12:53 . 2010-12-09 15:13 2029568 c:\windows\Driver Cache\i386\ntkrpamp.exe + 2009-02-10 17:03 . 2011-10-26 10:49 2071680 c:\windows\Driver Cache\i386\ntkrnlpa.exe - 2009-02-10 17:03 . 2010-12-09 15:13 2071680 c:\windows\Driver Cache\i386\ntkrnlpa.exe + 2010-07-19 12:53 . 2011-10-26 10:49 2151424 c:\windows\Driver Cache\i386\ntkrnlmp.exe - 2010-07-19 12:53 . 2010-12-09 15:13 2151424 c:\windows\Driver Cache\i386\ntkrnlmp.exe + 2012-01-11 15:50 . 2012-01-11 15:50 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_a84d5097\System.dll + 2012-01-11 15:49 . 2012-01-11 15:49 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_887662c3\System.dll + 2012-01-11 15:49 . 2012-01-11 15:49 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_b37410db\System.Xml.dll + 2012-01-11 15:50 . 2012-01-11 15:50 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_8bad0fe5\System.Xml.dll + 2012-01-11 15:50 . 2012-01-11 15:50 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_7765dc4f\System.Windows.Forms.dll + 2012-01-11 15:49 . 2012-01-11 15:49 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_12435b7e\System.Windows.Forms.dll + 2012-01-11 15:50 . 2012-01-11 15:50 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_d383658f\System.Drawing.dll + 2012-01-11 15:49 . 2012-01-11 15:49 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_646106bd\System.Design.dll + 2012-01-11 15:50 . 2012-01-11 15:50 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_2e5bacce\System.Design.dll + 2012-01-11 15:50 . 2012-01-11 15:50 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_366e8dd4\mscorlib.dll + 2012-01-11 15:50 . 2012-01-11 15:50 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_358a3133\mscorlib.dll + 2012-02-18 19:25 . 2012-02-18 19:25 3798016 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\ff4ecc058f27a9c36136e5d38e43fb59\WindowsBase.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 1057792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\e06dfa0ecf8c6c4f9848eedb9f8db0c5\UIAutomationClientsideProviders.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 9090560 c:\windows\assembly\NativeImages_v4.0.30319_32\System\3ff4657a86a0e14b4be577969e0ec762\System.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 5618176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\21071fcc838660d96f10920c4c3cd206\System.Xml.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1781760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\04326608ac9ad05c2a1e8bd46a068a91\System.Xaml.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 1208320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\c556009e0e5660e595e96c8892d71a20\System.WorkflowServices.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 1969152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\a06075c7db129fbbbad91a3ef8a86ed7\System.Workflow.Runtime.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 4461568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\48ca9317dcbbaeb689d7cbbd87396789\System.Workflow.ComponentModel.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 2871808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\6f0669228cfa028d659248150a946773\System.Workflow.Activities.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\f9d4746b5e5edf68c3001feaa0f03893\System.Windows.Forms.DataVisualization.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 1897472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\5b3533ea2220d8154fda41196ccfd5fd\System.Web.Services.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\14859997ddfb00554d8279249476a707\System.Web.Mobile.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 3123200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\a0bb870affb51da775bf7a8b719909c3\System.Web.Extensions.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 4535808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\c18257390b26f04ab49544c32eb8d474\System.Web.DataVisualization.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 2011136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\7a9b2475f61a6db6393750142765c5f1\System.Speech.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 1128960 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\b663714058d4a0c1fcaa56e4ac223be5\System.ServiceModel.Discovery.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 1387520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\685616ff1660152acefb312db7061435\System.ServiceModel.Activities.ni.dll + 2012-02-19 08:50 . 2012-02-19 08:50 1051648 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\4eccdb29b32f74d134b8ee7cc6bf6742\System.ServiceModel.Web.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 2637312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\9db486997d651f0646a089ff6cfb605e\System.Runtime.Serialization.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1020928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\f56869ede7c0fddb751c39e050dd62a8\System.Runtime.DurableInstancing.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 1050112 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\1393672b78ebd95ec154740a55fe600b\System.Printing.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\b1b57351a88c0c9c46bd9424347336ea\System.Management.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 1072128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\a0204aa75b8665f3c674ff18eebbf13f\System.IdentityModel.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 1652736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\2ff57b810eb920860469184dd683cb8a\System.Drawing.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\b828e979c92841bd6a2ddd05ee2b0b73\System.DirectoryServices.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1878016 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\c100e2bfd00aa5b9f3c8e4ab6e2bfaf8\System.Deployment.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 6798336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\97586cdb698c29ba95fd83e44a0c0ca6\System.Data.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 2545152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\cc02699121b243dc52e77197ad973fc3\System.Data.SqlXml.ni.dll + 2012-02-19 08:50 . 2012-02-19 08:50 2018304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\99fc8fa36147938abddc97f8595cadb6\System.Data.Services.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 1338880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\81b00eddd2b081f8f7546a290d5ad9ef\System.Data.Services.Client.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\ba4294072ddc543e75aeab023c8b29ec\System.Data.OracleClient.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 2512384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\3d105e94140b8c742ed50a2c6194394c\System.Data.Linq.ni.dll + 2012-02-19 08:50 . 2012-02-19 08:50 1408512 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\1551e538d73af8f244efccb2ab3f0f19\System.Data.Entity.Design.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 7054336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\a2b1103ad3d9f329e0c9164994137c81\System.Core.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 4121088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\9ecc40af067f2aca2dda1f71500020fa\System.Activities.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 3713024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\17f4e3e5193e8b645d7405eda38596be\System.Activities.Presentation.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 1518080 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\d0abf08a9033e02b1ac26da22a51b586\System.Activities.Core.Presentation.ni.dll + 2012-02-19 08:49 . 2012-02-19 08:49 2859008 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\9e16cb68553721cdf0bfdb8a74f428ef\ReachFramework.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1630208 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\f511ee77a639501cf892d90f33927451\PresentationUI.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1478144 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\f3e86ceb8dc35190a68617b479f91742\PresentationBuildTasks.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\b33c90a95b6411b20fb109bd84ed0668\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1836544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\910f1781ed5873e2f9ffec2b687c3e99\Microsoft.VisualBasic.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\1d3556e5e6be255dde120df39bd18709\Microsoft.VisualBasic.Activities.Compiler.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1082368 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\a05d0a2bece90cfc10cb64ff7fe39e94\Microsoft.Transactions.Bridge.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\101b3fc8861dc9ed88896666432ae7c0\Microsoft.JScript.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\5e4d35f27edcdebe56cc5bb5b5174275\Microsoft.CSharp.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 4243456 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\4191345983216f38c5b1ffd936848fc8\Microsoft.Build.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 2868736 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\0100369f2f245fc120ff01ce380098b6\Microsoft.Build.Tasks.v4.0.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1929216 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\fefa53ed523f5e8ee5f5d479587cbaab\Microsoft.Build.Engine.ni.dll + 2012-02-19 07:53 . 2012-02-19 07:53 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\174c2f776741812aed02c337bbcd1dae\WindowsBase.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\94f5164ff4f664c5e4e7fb4c3af1abad\UIAutomationClientsideProviders.ni.dll + 2012-02-19 07:53 . 2012-02-19 07:53 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:48 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\c4c671c737b553db8e07664816475333\System.WorkflowServices.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\248ea47105ff4af6ee75e6fdd5b450a1\System.Workflow.Runtime.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\80a288b6611668160334668cc2608e4a\System.Workflow.ComponentModel.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\4c27548df5897320840ee0d65db38742\System.Workflow.Activities.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e9ba004858dcdb5958d86f26f043f85a\System.Web.Services.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\030cde14924eefebc06c240dbfe093a4\System.Web.Mobile.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6379c8ca8ae11effb415139990923ff1\System.Web.Extensions.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\e456140d5d6c43d7383bd36d3f9e12c6\System.Speech.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\285dfbf2380436e187cb624bd1cd4683\System.ServiceModel.Web.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f2532204217dc10f152afd077b09927c\System.Runtime.Serialization.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d51e6bb07124a1d780d1e024858e0dc1\System.Printing.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 8365056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\864ca331ebf1bcc1390374b2fa826a3c\System.Management.Automation.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\8ef05061cd205c4f2a8583d97f32a603\System.IdentityModel.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\77d0e93f024055d04c07cc2700b4c590\System.DirectoryServices.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\707a05a7d5a8d99dd56d1d50311a60d2\System.Deployment.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ae888f8633fce3ff1de98e32bce0abbf\System.Data.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\857300fa64d09c69125451fd8894f3da\System.Data.SqlXml.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\e9d4a1fb13572c769ddd9b86e55baab4\System.Data.Services.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3d9c33f71d15a3e2e240092a244eba3\System.Data.Linq.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\19cca2921cfe3d20265389e596ebfd69\System.Data.Entity.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\0a6d6717e76be12295711ff02c7aa1d4\System.Core.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\33cdfb4c322a528260016ac759230501\ReachFramework.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a6def83aee1aaf3336675ce58ac09013\PresentationUI.ni.dll + 2012-02-19 07:53 . 2012-02-19 07:53 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\6c828a4d9907977b6dc87b294d38bbb9\PresentationBuildTasks.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\96e485c02ad346a2bd26a635e7fcb023\Microsoft.VisualBasic.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f7071f9a1c0523540f6aa7f11c302fb6\Microsoft.Transactions.Bridge.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 1704448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\95bf3f263a4283cdb67bf8f92c518d3c\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 3722752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4344be5b3ca782a09d101084bd706f41\Microsoft.PowerShell.Editor.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 1609728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\073475f74ecf11e74fd4d68676c65f41\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\806b1d127ed3e906db972751e87585c4\Microsoft.JScript.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\912789fd859e0887e10a935cade08e72\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-02-19 08:46 . 2012-02-19 08:46 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\6c1d3eec78906cc2a2ecffb013114c50\Microsoft.Build.Tasks.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d6edd4b4619a9052d3dfe50c3067d5e0\Microsoft.Build.Engine.ni.dll + 2012-02-18 19:30 . 2012-02-18 19:30 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll - 2011-04-15 07:55 . 2011-04-15 07:55 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2012-02-18 19:30 . 2012-02-18 19:30 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2012-02-18 19:30 . 2012-02-18 19:30 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2011-04-15 07:55 . 2011-04-15 07:55 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-01-11 15:49 . 2012-01-11 15:49 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll - 2010-10-06 06:43 . 2010-10-06 06:43 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll - 2011-04-15 07:55 . 2011-04-15 07:55 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-02-18 19:30 . 2012-02-18 19:30 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-02-18 19:30 . 2012-02-18 19:30 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2011-04-15 07:55 . 2011-04-15 07:55 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2012-02-18 19:30 . 2012-02-18 19:30 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2011-04-15 07:55 . 2011-04-15 07:55 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-02-18 19:30 . 2012-02-18 19:30 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-01-11 15:49 . 2012-01-11 15:49 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll - 2011-01-31 15:18 . 2011-01-31 15:18 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2012-01-11 15:49 . 2012-01-11 15:49 2064384 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-01-11 15:49 . 2012-01-11 15:49 1269760 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2012-03-02 10:44 . 2012-03-02 10:44 1279864 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll + 2012-01-12 17:21 . 2012-01-12 17:21 1869184 c:\windows\$hf_mig$\KB2660465\SP3QFE\win32k.sys + 2012-02-18 07:29 . 2011-12-17 19:42 1214464 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\urlmon.dll + 2012-02-18 07:29 . 2011-12-17 19:42 5980160 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\mshtml.dll + 2012-02-18 07:29 . 2011-12-17 19:42 2001408 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\iertutil.dll + 2011-11-23 14:39 . 2011-11-23 14:39 1868672 c:\windows\$hf_mig$\KB2639417\SP3QFE\win32k.sys + 2011-10-26 10:49 . 2011-10-26 10:49 2195072 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe + 2011-10-26 10:49 . 2011-10-26 10:49 2029568 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrpamp.exe + 2011-10-26 10:49 . 2011-10-26 10:49 2071680 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe + 2011-10-26 10:49 . 2011-10-26 10:49 2151424 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrnlmp.exe + 2011-11-03 15:27 . 2011-11-03 15:27 1297920 c:\windows\$hf_mig$\KB2631813\SP3QFE\quartz.dll + 2011-11-01 16:05 . 2011-11-01 16:05 1289216 c:\windows\$hf_mig$\KB2624667\SP3QFE\ole32.dll + 2011-12-15 17:29 . 2011-11-04 19:12 1214464 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\urlmon.dll + 2011-12-15 17:29 . 2011-11-04 19:12 5978624 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll + 2011-12-15 17:29 . 2011-11-04 19:12 2001408 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iertutil.dll + 2011-10-12 01:56 . 2011-08-22 23:40 1214464 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\urlmon.dll + 2011-10-12 01:56 . 2011-10-03 08:33 5972992 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll + 2011-10-12 01:56 . 2011-08-22 23:40 2001408 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iertutil.dll + 2011-09-06 14:08 . 2011-09-06 14:08 1868032 c:\windows\$hf_mig$\KB2567053\SP3QFE\win32k.sys + 2011-08-10 03:08 . 2011-06-23 18:29 1214464 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\urlmon.dll + 2011-08-10 03:08 . 2011-07-25 15:08 5971456 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll + 2011-08-10 03:08 . 2011-06-23 18:29 1992192 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iertutil.dll + 2011-06-06 11:36 . 2011-06-06 11:36 1868032 c:\windows\$hf_mig$\KB2555917\SP3QFE\win32k.sys + 2011-06-16 03:19 . 2011-04-25 16:04 1213952 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\urlmon.dll + 2011-06-16 03:19 . 2011-05-30 22:11 5967360 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll + 2011-06-16 03:19 . 2011-04-25 16:04 1992192 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iertutil.dll + 2010-07-19 13:03 . 2012-03-15 20:03 54215544 c:\windows\system32\MRT.exe + 2009-03-08 02:39 . 2011-12-18 13:43 11082240 c:\windows\system32\ieframe.dll + 2010-07-19 13:05 . 2011-12-18 13:43 11082240 c:\windows\system32\dllcache\ieframe.dll + 2011-12-26 16:02 . 2011-12-26 16:02 12482048 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656353\M2656353Uninstall.msp + 2011-09-15 17:38 . 2011-09-15 17:38 10838528 c:\windows\Installer\f826b7.msp + 2011-09-15 17:37 . 2011-09-15 17:37 14140416 c:\windows\Installer\f826ad.msp + 2011-09-15 17:36 . 2011-09-15 17:36 33370624 c:\windows\Installer\f82501.msp + 2011-09-15 17:36 . 2011-09-15 17:36 15074816 c:\windows\Installer\f824f2.msp + 2011-12-26 08:02 . 2011-12-26 08:02 19677184 c:\windows\Installer\c5428.msp + 2011-03-28 01:27 . 2011-03-28 01:27 15456256 c:\windows\Installer\b58fb2.msp + 2011-04-13 09:37 . 2011-04-13 09:37 19201024 c:\windows\Installer\b58f8a.msp + 2011-10-12 04:06 . 2011-10-12 04:06 20333568 c:\windows\Installer\6fe35b.msp + 2011-07-11 18:43 . 2011-07-11 18:43 11641344 c:\windows\Installer\6fe350.msp + 2011-07-11 15:19 . 2011-07-11 15:19 10619904 c:\windows\Installer\6fe332.msp + 2011-07-12 13:50 . 2011-07-12 13:50 17555968 c:\windows\Installer\6fe327.msp + 2011-07-27 05:37 . 2011-07-27 05:37 11592192 c:\windows\Installer\34db71.msp + 2011-06-16 04:06 . 2011-06-16 04:06 20333056 c:\windows\Installer\2c429c.msp + 2012-02-18 19:26 . 2012-02-18 19:26 20333056 c:\windows\Installer\29279d8.msp + 2012-02-18 19:27 . 2011-11-04 19:13 11081728 c:\windows\ie8updates\KB2647516-IE8\ieframe.dll + 2011-12-15 17:50 . 2011-08-23 15:41 11081728 c:\windows\ie8updates\KB2618444-IE8\ieframe.dll + 2011-10-12 03:59 . 2011-06-23 18:31 11081728 c:\windows\ie8updates\KB2586448-IE8\ieframe.dll + 2011-08-10 03:57 . 2011-04-26 08:05 11081728 c:\windows\ie8updates\KB2559049-IE8\ieframe.dll + 2011-06-16 04:05 . 2011-02-22 23:05 11080704 c:\windows\ie8updates\KB2530548-IE8\ieframe.dll + 2012-02-18 19:25 . 2012-02-18 19:25 13137920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f28df9c2988724883cf19532d7f9f151\System.Windows.Forms.ni.dll + 2012-02-19 08:48 . 2012-02-19 08:49 12076032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\b75185e1ebcf4c5c9fce7a9795db574e\System.Web.ni.dll + 2012-02-19 08:51 . 2012-02-19 08:51 17996800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\7c73ac0ffec7d226ca3dac70df184f18\System.ServiceModel.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 10980352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\c32461220989dd7f16069ea1e6d6430f\System.Design.ni.dll + 2012-02-19 08:50 . 2012-02-19 08:50 13325312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\a275181f49dcdf245ec6a9d9287bb6c6\System.Data.Entity.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 17671168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\b72152b4330e2f009a868aa16c47acb4\PresentationFramework.ni.dll + 2012-02-18 19:25 . 2012-02-18 19:25 11106816 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\ed36e9ff00f2fb0f33f1c08b20a7afc0\PresentationCore.ni.dll + 2011-10-12 03:57 . 2011-10-12 03:57 14407680 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\52f4f785f7cf45a64606a8e13c8cf04c\mscorlib.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll + 2012-02-19 08:47 . 2012-02-19 08:47 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\29bdc8352d3c26e3c572ea60639dec3b\System.Web.ni.dll + 2012-02-19 08:45 . 2012-02-19 08:45 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\1cdcd6d97627d345d5ff446e6ec88b97\System.ServiceModel.ni.dll + 2012-02-19 07:55 . 2012-02-19 07:55 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c8f8fb506c32500acc1b6190d054f26\System.Design.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5060105fb9e169399fe45600b1e9215e\PresentationFramework.ni.dll + 2012-02-19 07:54 . 2012-02-19 07:54 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\0665bba8c9962deadc418881eb3a2a2a\PresentationCore.ni.dll + 2011-10-12 04:06 . 2011-10-12 04:06 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll + 2012-02-18 07:29 . 2011-12-17 19:42 11085312 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\ieframe.dll + 2011-11-05 13:12 . 2011-11-05 13:12 11083776 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ieframe.dll + 2011-10-12 01:56 . 2011-08-22 23:40 11084288 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieframe.dll + 2011-06-24 22:59 . 2011-06-24 22:59 11083776 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieframe.dll + 2011-06-16 03:19 . 2011-04-25 16:04 11083776 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieframe.dll + 2011-09-15 17:34 . 2011-09-15 17:34 428804608 c:\windows\Installer\f826a2.msp . -- Snapshot auf jetziges Datum zurückgesetzt -- . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2011-02-01 141616] . [HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}] [HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1] [HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}] [HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook] . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}] 2011-02-01 13:58 1499440 ---ha-r- c:\programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-02-01 1499440] . [HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}] [HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1] [HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}] [HKEY_CLASSES_ROOT\SWEETIE.IEToolbar] . [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-02-01 1499440] . [HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}] [HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1] [HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}] [HKEY_CLASSES_ROOT\SWEETIE.IEToolbar] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmartAudio"="c:\programme\CONEXANT\SMARTAUDIO\SMAUDIO.EXE" [2009-07-20 2713144] "SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2010-04-01 1738024] "331BigDog"="c:\programme\USB Camera\VM331_STI.EXE" [2009-09-15 536576] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-12 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-12 174616] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-12 145432] "OnekeyStudio"="c:\programme\Lenovo\Onekey Theater\OnekeyStudio.exe" [2009-12-22 708608] "GrooveMonitor"="c:\programme\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040] "MSC"="c:\programme\Microsoft Security Client\msseces.exe" [2011-06-15 997920] "SweetIM"="c:\programme\SweetIM\Messenger\SweetIM.exe" [2011-06-02 114992] "SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2011-06-09 254696] "Athan"="c:\programme\Athan\Athan.exe" [2011-11-20 1183744] "QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2009-05-26 413696] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] "DWQueuedReporting"="c:\progra~1\GEMEIN~1\MICROS~1\DW\dwtrig20.exe" [2011-07-27 434080] . c:\dokumente und einstellungen\MS\Startmenü\Programme\Autostart\ OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\programme\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\programme\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "ReadyComm5"=c:\programme\Lenovo\ReadyComm\ReadyComm.exe -TrayMode "AutoStartNPSAgent"=c:\programme\Samsung\Samsung New PC Studio\NPSAgent.exe "Skype"="c:\programme\Skype\Phone\Skype.exe" /nosplash /minimized . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" "QuickTime Task"="c:\programme\QuickTime\qttask.exe" -atboottime "iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" "EnergyUtility"=c:\programme\Lenovo\Energy Management\utility.exe "Energy Management"=c:\programme\Lenovo\Energy Management\Energy Management.exe "Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" "ApplyEsf-eDocPrintPro"="c:\programme\Gemeinsame Dateien\MAYComputer\eDocPrintPro\\ApplyEsf.exe" . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Programme\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\WINDOWS\\system32\\IgrsSvcs.exe"= "c:\\Programme\\Lenovo\\ReadyComm\\ReadyComm.exe"= "c:\\Programme\\Lenovo\\ReadyComm\\AppSvc.exe"= "c:\\Programme\\Lenovo\\ReadyComm\\ConnSvc.exe"= "c:\\Programme\\Lenovo\\ReadyComm\\Projectionist.exe"= "c:\\Programme\\Lenovo\\ReadyComm\\common\\IGRS.exe"= "c:\\Programme\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Programme\\Microsoft Office\\Office12\\GROOVE.EXE"= "c:\\Programme\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\Programme\\Bonjour\\mDNSResponder.exe"= "c:\\Programme\\iTunes\\iTunes.exe"= "c:\\Programme\\Samsung\\Samsung New PC Studio\\npsasvr.exe"= "c:\\Programme\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"= "c:\\Programme\\Skype\\Phone\\Skype.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "5985:TCP"= 5985:TCP:*isabled:Windows-Remoteverwaltung . R2 IGRS;IGRS;c:\programme\Lenovo\ReadyComm\common\IGRS.exe [14.07.2009 14:27 38152] R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter;c:\windows\System32\IgrsSvcs.exe -k IgrsSvcs --> c:\windows\System32\IgrsSvcs.exe -k IgrsSvcs [?] R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [21.11.2011 16:11 1052480] R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [19.07.2010 15:56 2320920] R3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\drivers\AcpiVpc.sys [19.07.2010 14:42 40704] R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [19.07.2010 15:46 132480] R3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\drivers\IntcDAud.sys [19.07.2010 15:46 235520] R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [24.02.2010 14:41 10064] R3 vm331avs;Digital Camera 1;c:\windows\system32\drivers\vm331avs.sys [19.07.2010 14:45 179072] R3 wdmirror;wdmirror;c:\windows\system32\drivers\WDMirror.sys [19.07.2010 16:01 11792] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.03.2010 13:16 130384] S3 Bridge0;Bridge0;c:\windows\system32\drivers\wdbridge.sys [19.07.2010 16:01 73744] S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc;c:\programme\Lenovo\ReadyComm\AppSvc.exe [19.07.2010 16:01 509192] S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc;c:\programme\Lenovo\ReadyComm\ConnSvc.exe [19.07.2010 16:01 579400] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [19.07.2010 14:41 182304] S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [04.08.2004 01:58 14336] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.03.2010 13:16 753504] S3 wsvd;wsvd;c:\windows\system32\drivers\wsvd.sys [21.07.2009 21:14 81704] . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] IgrsSvcs REG_MULTI_SZ ReadyComm.DirectRouter WINRM REG_MULTI_SZ WINRM . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhalt des "geplante Tasks" Ordners . 2012-04-05 c:\windows\Tasks\MP Scheduled Scan.job - c:\programme\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 13:39] . 2012-04-05 c:\windows\Tasks\User_Feed_Synchronization-{4A970276-BB22-4637-ABD5-40A859D9A97C}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 02:31] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://google.de/ uInternet Settings,ProxyOverride = *.local IE: Free YouTube Download - c:\dokumente und einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm IE: Free YouTube to Mp3 Converter - c:\dokumente und einstellungen\MS\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Nach Microsoft E&xel exportieren - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 . Supplementary scan did not complete! . - - - - Entfernte verwaiste Registrierungseinträge - - - - . WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) AddRemove-Athan - c:\windows\iun6002.exe AddRemove-2221869471.fuse.fender.com - c:\programme\Microsoft Silverlight\4.0.60831.0\Silverlight.Configuration.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net Rootkit scan 2012-04-05 05:35 Windows 5.1.2600 Service Pack 3 NTFS . Scanne versteckte Prozesse... . Scanne versteckte Autostarteinträge... . Scanne versteckte Dateien... . Scan erfolgreich abgeschlossen versteckte Dateien: 0 . ************************************************************************** . Zeit der Fertigstellung: 2012-04-05 05:40:14 ComboFix-quarantined-files.txt 2012-04-05 03:40 . . Nach Suchlauf: 15 Verzeichnis(se), 422.582.747.136 Bytes frei . - - End Of File - - 19D289E569635AA7BF3D8DB2471030AE |
Themen zu Smart hdd |
betrifft, check, desktop, desktop schwarz, error, etliche, fenster, firewall, laptop, loszuwerden, message, nutze, schwarz, smart, smart check, smart hdd, system, warum, write, write fault error, würde, würdet |