|
Log-Analyse und Auswertung: TR/ATRAPS.Gen und TR/PSW.Kykymber.ceig in SysWOW64Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
14.06.2012, 14:22 | #16 |
| TR/ATRAPS.Gen und TR/PSW.Kykymber.ceig in SysWOW64 So hier der log: [CODE] Combofix Logfile: Code:
ATTFilter ComboFix 12-06-12.01 - Bernhard 14.06.2012 14:59:10.3.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4094.2928 [GMT 2:00] ausgeführt von:: c:\users\Bernhard\Desktop\ComboFix.exe Benutzte Befehlsschalter :: c:\users\Bernhard\Desktop\CFscript.txt AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((( Dateien erstellt von 2012-05-14 bis 2012-06-14 )))))))))))))))))))))))))))))) . . 2012-06-14 13:07 . 2012-06-14 13:07 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-06-13 21:02 . 2012-04-26 05:41 77312 ----a-w- c:\windows\system32\rdpwsx.dll 2012-06-13 21:02 . 2012-04-26 05:41 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll 2012-06-13 21:02 . 2012-04-26 05:34 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe 2012-06-13 20:56 . 2012-05-08 17:02 8955792 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{847F526A-8B17-413E-B7CB-60B0B9122AAF}\mpengine.dll 2012-06-11 10:54 . 2012-06-11 10:54 -------- d-----w- c:\users\Bernhard\AppData\Roaming\e-academy Inc 2012-06-11 10:54 . 2012-06-11 10:54 -------- d-----w- c:\users\Bernhard\AppData\Local\e-academy Inc 2012-06-09 01:11 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll 2012-06-09 01:11 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe 2012-06-09 01:11 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll 2012-06-09 01:11 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll 2012-06-09 01:10 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll 2012-06-09 01:10 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll 2012-06-09 01:10 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll 2012-06-09 01:10 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll 2012-06-09 01:10 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe 2012-06-06 08:57 . 2012-06-06 08:57 770384 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr100.dll 2012-06-06 08:57 . 2012-06-06 08:57 421200 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp100.dll 2012-05-30 06:29 . 2012-05-30 06:29 71680 ----a-w- c:\windows\system32\frapsv64.dll 2012-05-30 06:29 . 2012-05-30 06:29 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll 2012-05-29 07:37 . 2012-05-29 07:37 163048 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10141.bin 2012-05-21 12:46 . 2012-05-21 12:59 -------- d-----w- c:\users\Bernhard\AppData\Roaming\Mp3tag 2012-05-21 12:46 . 2012-05-21 12:46 -------- d-----w- c:\program files (x86)\Mp3tag 2012-05-21 12:41 . 2012-05-21 12:41 -------- d-----w- c:\users\Bernhard\AppData\Roaming\Hulubulu 2012-05-21 12:37 . 2012-05-21 12:37 -------- d-----w- c:\windows\Downloaded Installations 2012-05-20 17:18 . 2012-05-20 17:18 -------- d-----w- c:\users\Bernhard\AppData\Roaming\AnvSoft 2012-05-20 17:17 . 2012-05-20 17:17 -------- d-----w- c:\program files (x86)\AnvSoft 2012-05-20 17:04 . 2012-04-18 11:49 405176 ----a-w- c:\windows\SysWow64\Newtonsoft.Json.Net20.dll 2012-05-20 14:03 . 2012-03-22 11:43 2557952 ----a-w- c:\windows\SysWow64\QtCore4.dll 2012-05-17 08:52 . 2012-05-17 08:52 419488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-05-17 08:52 . 2011-09-07 11:17 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-05-11 07:50 . 2012-05-11 07:38 1668 ----a-w- c:\windows\system32\ASOROSet.bin 2012-05-11 07:05 . 2012-05-11 07:05 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2012-05-08 16:36 . 2012-03-24 11:59 98848 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2012-05-08 16:36 . 2012-03-24 11:59 132832 ----a-w- c:\windows\system32\drivers\avipbb.sys 2012-04-06 05:22 . 2012-04-06 05:22 11174400 ----a-w- c:\windows\system32\drivers\atikmdag.sys 2012-04-06 02:22 . 2012-04-06 02:22 159744 ----a-w- c:\windows\system32\atiapfxx.exe 2012-04-06 02:21 . 2011-05-25 03:07 909312 ----a-w- c:\windows\SysWow64\aticfx32.dll 2012-04-06 02:20 . 2010-08-31 18:58 1067520 ----a-w- c:\windows\system32\aticfx64.dll 2012-04-06 02:16 . 2012-04-06 02:16 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll 2012-04-06 02:16 . 2012-04-06 02:16 503808 ----a-w- c:\windows\system32\atieclxx.exe 2012-04-06 02:16 . 2012-04-06 02:16 236544 ----a-w- c:\windows\system32\atiesrxx.exe 2012-04-06 02:14 . 2012-04-06 02:14 120320 ----a-w- c:\windows\system32\atitmm64.dll 2012-04-06 02:14 . 2012-04-06 02:14 21504 ----a-w- c:\windows\system32\atimuixx.dll 2012-04-06 02:14 . 2012-04-06 02:14 59392 ----a-w- c:\windows\system32\atiedu64.dll 2012-04-06 02:14 . 2012-04-06 02:14 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll 2012-04-06 02:13 . 2011-05-25 02:58 6800896 ----a-w- c:\windows\SysWow64\atidxx32.dll 2012-04-06 02:10 . 2012-04-06 02:10 26181632 ----a-w- c:\windows\system32\atio6axx.dll 2012-04-06 02:00 . 2010-08-31 18:58 64000 ----a-w- c:\windows\system32\coinst.dll 2012-04-06 01:54 . 2010-08-31 18:58 7479296 ----a-w- c:\windows\system32\atidxx64.dll 2012-04-06 01:50 . 2012-04-06 01:50 19753984 ----a-w- c:\windows\SysWow64\atioglxx.dll 2012-04-06 01:35 . 2012-04-06 01:35 1120768 ----a-w- c:\windows\system32\atiumd6v.dll 2012-04-06 01:34 . 2012-04-06 01:34 1831424 ----a-w- c:\windows\SysWow64\atiumdmv.dll 2012-04-06 01:34 . 2012-04-06 01:34 4731904 ----a-w- c:\windows\system32\atiumd6a.dll 2012-04-06 01:34 . 2012-04-06 01:34 6203392 ----a-w- c:\windows\SysWow64\atiumdag.dll 2012-04-06 01:30 . 2012-04-06 01:30 51200 ----a-w- c:\windows\system32\aticalrt64.dll 2012-04-06 01:30 . 2012-04-06 01:30 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll 2012-04-06 01:30 . 2012-04-06 01:30 44544 ----a-w- c:\windows\system32\aticalcl64.dll 2012-04-06 01:30 . 2012-04-06 01:30 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll 2012-04-06 01:29 . 2012-04-06 01:29 16090624 ----a-w- c:\windows\system32\aticaldd64.dll 2012-04-06 01:25 . 2012-04-06 01:25 13764096 ----a-w- c:\windows\SysWow64\aticaldd.dll 2012-04-06 01:23 . 2012-04-06 01:23 7431680 ----a-w- c:\windows\system32\atiumd64.dll 2012-04-06 01:22 . 2012-04-06 01:22 4795904 ----a-w- c:\windows\SysWow64\atiumdva.dll 2012-04-06 01:11 . 2012-04-06 01:11 514560 ----a-w- c:\windows\system32\atiadlxx.dll 2012-04-06 01:11 . 2012-04-06 01:11 360448 ----a-w- c:\windows\SysWow64\atiadlxy.dll 2012-04-06 01:11 . 2012-04-06 01:11 17408 ----a-w- c:\windows\system32\atig6pxx.dll 2012-04-06 01:11 . 2012-04-06 01:11 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll 2012-04-06 01:11 . 2012-04-06 01:11 14848 ----a-w- c:\windows\system32\atiglpxx.dll 2012-04-06 01:11 . 2012-04-06 01:11 41984 ----a-w- c:\windows\system32\atig6txx.dll 2012-04-06 01:10 . 2012-04-06 01:10 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll 2012-04-06 01:10 . 2012-04-06 01:10 343040 ----a-w- c:\windows\system32\drivers\atikmpag.sys 2012-04-06 01:09 . 2010-08-31 18:58 54784 ----a-w- c:\windows\system32\atiuxp64.dll 2012-04-06 01:09 . 2011-05-25 02:24 41984 ----a-w- c:\windows\SysWow64\atiuxpag.dll 2012-04-06 01:09 . 2012-04-06 01:09 44544 ----a-w- c:\windows\system32\atiu9p64.dll 2012-04-06 01:09 . 2010-08-31 18:58 32256 ----a-w- c:\windows\SysWow64\atiu9pag.dll 2012-04-06 01:09 . 2012-04-06 01:09 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll 2012-04-06 01:06 . 2012-04-06 01:06 54784 ----a-w- c:\windows\system32\atimpc64.dll 2012-04-06 01:06 . 2012-04-06 01:06 54784 ----a-w- c:\windows\system32\amdpcom64.dll 2012-04-06 01:06 . 2012-04-06 01:06 53760 ----a-w- c:\windows\SysWow64\atimpc32.dll 2012-04-06 01:06 . 2012-04-06 01:06 53760 ----a-w- c:\windows\SysWow64\amdpcom32.dll 2012-04-05 20:34 . 2012-04-05 20:34 187392 ----a-w- c:\windows\system32\clinfo.exe 2012-04-05 20:34 . 2012-04-05 20:34 74752 ----a-w- c:\windows\system32\OpenVideo64.dll 2012-04-05 20:34 . 2012-04-05 20:34 64512 ----a-w- c:\windows\SysWow64\OpenVideo.dll 2012-04-05 20:33 . 2012-04-05 20:33 63488 ----a-w- c:\windows\system32\OVDecode64.dll 2012-04-05 20:33 . 2012-04-05 20:33 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll 2012-04-05 20:33 . 2012-04-05 20:33 16457216 ----a-w- c:\windows\system32\amdocl64.dll 2012-04-05 20:32 . 2012-04-05 20:32 13007872 ----a-w- c:\windows\SysWow64\amdocl.dll 2012-04-05 20:32 . 2012-04-05 20:32 54784 ----a-w- c:\windows\system32\OpenCL.dll 2012-04-05 20:32 . 2012-04-05 20:32 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll 2012-04-04 13:56 . 2012-04-14 15:17 24904 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-03-30 11:35 . 2012-05-11 07:10 1918320 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-03-17 07:58 . 2012-05-11 07:10 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys . . ((((((((((((((((((((((((((((( SnapShot@2012-06-12_07.04.58 ))))))))))))))))))))))))))))))))))))))))) . + 2012-06-14 00:10 . 2012-05-17 22:25 73216 c:\windows\SysWOW64\mshtmled.dll - 2012-04-11 21:45 . 2012-02-28 01:08 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2012-06-14 00:10 . 2012-05-17 22:31 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2012-06-14 00:10 . 2012-05-17 22:31 65024 c:\windows\SysWOW64\jsproxy.dll - 2012-04-11 21:45 . 2012-02-28 01:08 65024 c:\windows\SysWOW64\jsproxy.dll + 2010-08-31 18:59 . 2012-06-14 13:10 78476 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2012-06-14 13:10 45306 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-11-18 22:06 . 2012-06-14 13:10 17696 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-333037292-1054110904-1588077299-1001_UserData.bin + 2012-06-14 00:10 . 2012-05-18 01:51 96768 c:\windows\system32\mshtmled.dll - 2012-04-11 21:45 . 2012-02-28 06:47 86528 c:\windows\system32\migration\WininetPlugin.dll + 2012-06-14 00:10 . 2012-05-18 01:56 86528 c:\windows\system32\migration\WininetPlugin.dll + 2012-06-14 00:10 . 2012-05-18 01:56 85504 c:\windows\system32\jsproxy.dll - 2012-04-11 21:45 . 2012-02-28 06:47 85504 c:\windows\system32\jsproxy.dll + 2010-11-22 22:01 . 2012-06-12 16:08 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-11-22 22:01 . 2012-06-12 07:03 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:46 . 2012-06-12 11:42 91888 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2010-11-22 22:01 . 2012-06-12 07:03 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-11-22 22:01 . 2012-06-12 16:08 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-11-22 22:01 . 2012-06-12 16:08 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-11-22 22:01 . 2012-06-12 07:03 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-04-21 08:15 . 2012-04-21 08:15 78912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe - 2012-05-11 15:47 . 2012-05-11 15:47 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-06-14 00:26 . 2012-06-14 00:26 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-06-14 00:26 . 2012-06-14 00:26 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2012-05-11 15:47 . 2012-05-11 15:47 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2012-06-14 00:26 . 2012-06-14 00:26 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2012-05-11 15:47 . 2012-05-11 15:47 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2012-06-14 00:26 . 2012-06-14 00:26 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll - 2012-05-11 15:47 . 2012-05-11 15:47 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll - 2012-05-11 15:47 . 2012-05-11 15:47 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-06-14 00:26 . 2012-06-14 00:26 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-06-14 00:26 . 2012-06-14 00:26 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-05-11 15:47 . 2012-05-11 15:47 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-05-11 15:47 . 2012-05-11 15:47 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-06-14 00:26 . 2012-06-14 00:26 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-06-14 00:26 . 2012-06-14 00:26 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll - 2012-05-11 15:47 . 2012-05-11 15:47 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2012-06-14 00:26 . 2012-06-14 00:26 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2012-05-11 15:47 . 2012-05-11 15:47 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2012-05-11 15:47 . 2012-05-11 15:47 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2012-06-14 00:26 . 2012-06-14 00:26 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll - 2012-05-11 15:47 . 2012-05-11 15:47 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2012-06-14 00:26 . 2012-06-14 00:26 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2012-06-14 00:26 . 2012-06-14 00:26 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2012-05-11 15:47 . 2012-05-11 15:47 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2012-05-11 15:47 . 2012-05-11 15:47 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll + 2012-06-14 00:26 . 2012-06-14 00:26 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll - 2012-05-11 15:47 . 2012-05-11 15:47 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2012-06-14 00:26 . 2012-06-14 00:26 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2012-05-11 15:47 . 2012-05-11 15:47 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2012-06-14 00:26 . 2012-06-14 00:26 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll - 2012-05-11 15:47 . 2012-05-11 15:47 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll + 2012-06-14 00:26 . 2012-06-14 00:26 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll + 2012-06-14 00:26 . 2012-06-14 00:26 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2012-05-11 15:47 . 2012-05-11 15:47 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2012-05-11 15:47 . 2012-05-11 15:47 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2012-06-14 00:26 . 2012-06-14 00:26 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2012-06-14 00:26 . 2012-06-14 00:26 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2012-05-11 15:47 . 2012-05-11 15:47 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2012-05-11 15:47 . 2012-05-11 15:47 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-06-14 00:26 . 2012-06-14 00:26 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-11 15:47 . 2012-05-11 15:47 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-14 00:26 . 2012-06-14 00:26 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2012-05-11 15:47 . 2012-05-11 15:47 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-06-14 00:26 . 2012-06-14 00:26 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-11 15:47 . 2012-05-11 15:47 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-14 00:26 . 2012-06-14 00:26 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2011-07-12 13:38 . 2012-06-14 00:28 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2011-07-12 13:38 . 2012-05-11 15:49 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2011-07-12 13:38 . 2012-05-11 15:49 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2011-07-12 13:38 . 2012-06-14 00:28 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2011-07-12 13:38 . 2012-06-14 00:28 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe - 2011-07-12 13:38 . 2012-05-11 15:49 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2012-06-14 04:49 . 2012-06-14 04:49 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\eef76dd965ea0a8ae5fb0c734d84389c\System.Web.DynamicData.Design.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\2fb26c3fb9f4d57eac1bc353551e6518\WindowsLiveWriter.ni.exe + 2012-06-14 04:53 . 2012-06-14 04:53 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d7994969e32f2a3c9d695864e07dee72\WindowsLive.Writer.Api.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\2b97ccae44726f13c418f1406180c3e8\System.Web.DynamicData.Design.ni.dll + 2012-04-11 10:17 . 2010-11-13 00:08 24576 c:\windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.Drawing.Resources.dll - 2012-04-11 10:17 . 2010-11-12 23:26 24576 c:\windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.Drawing.Resources.dll + 2012-06-14 13:08 . 2012-06-14 13:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2012-06-12 07:03 . 2012-06-12 07:03 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2012-06-12 07:03 . 2012-06-12 07:03 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-06-14 13:08 . 2012-06-14 13:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2012-04-11 21:45 . 2012-02-28 01:09 231936 c:\windows\SysWOW64\url.dll + 2012-06-14 00:10 . 2012-05-17 22:33 231936 c:\windows\SysWOW64\url.dll - 2012-04-11 21:45 . 2012-02-28 01:06 716800 c:\windows\SysWOW64\jscript.dll + 2012-06-14 00:10 . 2012-05-17 22:29 716800 c:\windows\SysWOW64\jscript.dll + 2012-06-14 00:10 . 2012-05-17 22:29 142848 c:\windows\SysWOW64\ieUnatt.exe - 2011-09-27 16:13 . 2011-09-27 16:13 142848 c:\windows\SysWOW64\ieUnatt.exe - 2012-04-11 21:45 . 2012-02-28 00:59 176640 c:\windows\SysWOW64\ieui.dll + 2012-06-14 00:10 . 2012-05-17 22:20 176640 c:\windows\SysWOW64\ieui.dll + 2012-06-13 21:01 . 2012-04-24 04:36 140288 c:\windows\SysWOW64\cryptsvc.dll + 2012-06-13 21:01 . 2012-04-24 04:36 103936 c:\windows\SysWOW64\cryptnet.dll + 2010-11-23 18:06 . 2012-06-14 06:03 341246 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin - 2012-04-11 21:45 . 2012-02-28 06:48 237056 c:\windows\system32\url.dll + 2012-06-14 00:10 . 2012-05-18 01:58 237056 c:\windows\system32\url.dll + 2012-06-13 21:01 . 2012-05-01 05:40 209920 c:\windows\system32\profsvc.dll - 2011-06-26 14:26 . 2010-11-20 13:27 209920 c:\windows\system32\profsvc.dll - 2009-07-14 02:36 . 2012-05-14 10:27 619146 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2012-06-14 00:26 619146 c:\windows\system32\perfh009.dat - 2009-08-04 09:51 . 2012-05-14 10:27 657910 c:\windows\system32\perfh007.dat + 2009-08-04 09:51 . 2012-06-14 00:26 657910 c:\windows\system32\perfh007.dat + 2009-07-14 02:36 . 2012-06-14 00:26 107466 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2012-05-14 10:27 107466 c:\windows\system32\perfc009.dat - 2009-08-04 09:51 . 2012-05-14 10:27 131250 c:\windows\system32\perfc007.dat + 2009-08-04 09:51 . 2012-06-14 00:26 131250 c:\windows\system32\perfc007.dat - 2012-04-11 21:45 . 2012-02-28 06:45 818688 c:\windows\system32\jscript.dll + 2012-06-14 00:10 . 2012-05-18 01:55 818688 c:\windows\system32\jscript.dll + 2012-06-14 00:10 . 2012-05-18 01:55 173056 c:\windows\system32\ieUnatt.exe - 2011-09-27 16:12 . 2011-09-27 16:12 173056 c:\windows\system32\ieUnatt.exe - 2012-04-11 21:45 . 2012-02-28 06:39 248320 c:\windows\system32\ieui.dll + 2012-06-14 00:10 . 2012-05-18 01:47 248320 c:\windows\system32\ieui.dll + 2009-07-14 04:45 . 2012-06-14 04:36 412896 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 04:45 . 2012-05-12 13:18 412896 c:\windows\system32\FNTCACHE.DAT - 2012-03-14 12:33 . 2012-02-17 04:58 210944 c:\windows\system32\drivers\rdpwd.sys + 2012-06-13 21:01 . 2012-04-28 03:55 210944 c:\windows\system32\drivers\rdpwd.sys + 2012-06-13 21:01 . 2012-04-24 05:37 184320 c:\windows\system32\cryptsvc.dll + 2012-06-13 21:01 . 2012-04-24 05:37 140288 c:\windows\system32\cryptnet.dll + 2009-07-14 05:01 . 2012-06-14 13:08 389632 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat - 2009-07-14 05:01 . 2012-06-12 07:02 389632 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2012-04-21 08:15 . 2012-04-21 08:15 616024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll + 2012-04-21 08:15 . 2012-04-21 08:15 296520 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\SetupUi.dll + 2012-04-21 08:15 . 2012-04-21 08:15 810576 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\SetupEngine.dll + 2012-06-13 21:01 . 2012-04-23 22:33 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll - 2012-04-11 10:17 . 2012-01-26 23:31 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll + 2012-04-21 08:15 . 2012-04-21 08:15 616024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll - 2012-04-11 10:17 . 2012-01-26 23:33 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2012-06-13 21:01 . 2012-04-23 22:35 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll - 2012-05-11 15:47 . 2012-05-11 15:47 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll + 2012-06-14 00:26 . 2012-06-14 00:26 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2012-05-11 15:47 . 2012-05-11 15:47 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-06-14 00:26 . 2012-06-14 00:26 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll - 2012-05-11 15:47 . 2012-05-11 15:47 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll + 2012-06-14 00:26 . 2012-06-14 00:26 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2012-05-11 15:47 . 2012-05-11 15:47 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-06-14 00:26 . 2012-06-14 00:26 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-06-14 00:26 . 2012-06-14 00:26 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2012-05-11 15:47 . 2012-05-11 15:47 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2012-05-11 15:47 . 2012-05-11 15:47 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll + 2012-06-14 00:26 . 2012-06-14 00:26 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll + 2012-06-14 00:26 . 2012-06-14 00:26 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2012-05-11 15:47 . 2012-05-11 15:47 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2012-06-14 00:26 . 2012-06-14 00:26 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll - 2012-05-11 15:47 . 2012-05-11 15:47 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-06-14 00:26 . 2012-06-14 00:26 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2012-05-11 15:47 . 2012-05-11 15:47 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2012-05-11 15:47 . 2012-05-11 15:47 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-06-14 00:26 . 2012-06-14 00:26 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-06-14 00:26 . 2012-06-14 00:26 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2012-05-11 15:47 . 2012-05-11 15:47 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2012-06-14 00:26 . 2012-06-14 00:26 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2012-05-11 15:47 . 2012-05-11 15:47 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2012-05-11 15:47 . 2012-05-11 15:47 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2012-06-14 00:26 . 2012-06-14 00:26 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2012-06-14 00:26 . 2012-06-14 00:26 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll - 2012-05-11 15:47 . 2012-05-11 15:47 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2012-06-14 00:26 . 2012-06-14 00:26 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll - 2012-05-11 15:47 . 2012-05-11 15:47 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll - 2012-05-11 15:47 . 2012-05-11 15:47 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2012-06-14 00:26 . 2012-06-14 00:26 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2012-06-14 00:26 . 2012-06-14 00:26 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2012-05-11 15:47 . 2012-05-11 15:47 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2012-05-11 15:47 . 2012-05-11 15:47 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2012-06-14 00:26 . 2012-06-14 00:26 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll - 2012-05-11 15:47 . 2012-05-11 15:47 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-06-14 00:26 . 2012-06-14 00:26 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll - 2012-05-11 15:47 . 2012-05-11 15:47 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-06-14 00:26 . 2012-06-14 00:26 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll - 2012-05-11 15:47 . 2012-05-11 15:47 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2012-06-14 00:26 . 2012-06-14 00:26 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2012-06-14 00:26 . 2012-06-14 00:26 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2012-05-11 15:47 . 2012-05-11 15:47 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll + 2012-06-14 00:26 . 2012-06-14 00:26 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-14 00:26 . 2012-06-14 00:26 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2012-05-11 15:47 . 2012-05-11 15:47 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2012-05-11 15:47 . 2012-05-11 15:47 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2012-06-14 00:26 . 2012-06-14 00:26 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2012-05-11 15:47 . 2012-05-11 15:47 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll + 2012-06-14 00:26 . 2012-06-14 00:26 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll + 2012-06-14 00:26 . 2012-06-14 00:26 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2012-05-11 15:47 . 2012-05-11 15:47 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2012-06-14 00:26 . 2012-06-14 00:26 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2012-05-11 15:47 . 2012-05-11 15:47 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2012-05-11 15:47 . 2012-05-11 15:47 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-06-14 00:26 . 2012-06-14 00:26 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-06-14 00:26 . 2012-06-14 00:26 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll - 2012-05-11 15:47 . 2012-05-11 15:47 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll - 2012-05-11 15:47 . 2012-05-11 15:47 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2012-06-14 00:26 . 2012-06-14 00:26 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2012-05-11 15:47 . 2012-05-11 15:47 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll + 2012-06-14 00:26 . 2012-06-14 00:26 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll + 2012-06-14 00:26 . 2012-06-14 00:26 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2012-05-11 15:47 . 2012-05-11 15:47 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2012-05-11 15:47 . 2012-05-11 15:47 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll + 2012-06-14 00:26 . 2012-06-14 00:26 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll + 2012-06-14 00:26 . 2012-06-14 00:26 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll - 2012-05-11 15:47 . 2012-05-11 15:47 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-06-14 00:26 . 2012-06-14 00:26 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2012-05-11 15:47 . 2012-05-11 15:47 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-06-14 00:26 . 2012-06-14 00:26 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2012-05-11 15:47 . 2012-05-11 15:47 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2012-05-11 15:47 . 2012-05-11 15:47 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2012-06-14 00:26 . 2012-06-14 00:26 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll - 2012-05-11 15:47 . 2012-05-11 15:47 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2012-06-14 00:26 . 2012-06-14 00:26 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2012-06-14 00:26 . 2012-06-14 00:26 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2012-05-11 15:47 . 2012-05-11 15:47 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2012-05-11 15:47 . 2012-05-11 15:47 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-06-14 00:26 . 2012-06-14 00:26 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-06-14 00:26 . 2012-06-14 00:26 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2012-05-11 15:47 . 2012-05-11 15:47 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2012-06-14 00:26 . 2012-06-14 00:26 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2012-05-11 15:47 . 2012-05-11 15:47 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2012-05-11 15:47 . 2012-05-11 15:47 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-06-14 00:26 . 2012-06-14 00:26 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2012-05-11 15:47 . 2012-05-11 15:47 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2012-06-14 00:26 . 2012-06-14 00:26 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2012-05-11 15:47 . 2012-05-11 15:47 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-06-14 00:26 . 2012-06-14 00:26 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-06-14 00:26 . 2012-06-14 00:26 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2012-05-11 15:47 . 2012-05-11 15:47 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2012-05-11 15:47 . 2012-05-11 15:47 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-06-14 00:26 . 2012-06-14 00:26 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-06-14 00:26 . 2012-06-14 00:26 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-11 15:47 . 2012-05-11 15:47 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-11 15:47 . 2012-05-11 15:47 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 00:26 . 2012-06-14 00:26 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 00:26 . 2012-06-14 00:26 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-11 15:47 . 2012-05-11 15:47 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-06-14 00:26 . 2012-06-14 00:26 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2012-05-11 15:47 . 2012-05-11 15:47 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-14 00:26 . 2012-06-14 00:26 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-05-11 15:47 . 2012-05-11 15:47 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-05-11 15:47 . 2012-05-11 15:47 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-06-14 00:26 . 2012-06-14 00:26 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-11 15:47 . 2012-05-11 15:47 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 00:26 . 2012-06-14 00:26 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 00:26 . 2012-06-14 00:26 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-11 15:47 . 2012-05-11 15:47 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-11 15:47 . 2012-05-11 15:47 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-14 00:26 . 2012-06-14 00:26 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2011-07-12 13:38 . 2012-06-14 00:28 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2011-07-12 13:38 . 2012-05-11 15:49 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe + 2011-07-12 13:38 . 2012-06-14 00:28 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe - 2011-07-12 13:38 . 2012-05-11 15:49 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2011-07-12 13:38 . 2012-06-14 00:28 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe - 2011-07-12 13:38 . 2012-05-11 15:49 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe + 2011-07-12 13:38 . 2012-06-14 00:28 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2011-07-12 13:38 . 2012-05-11 15:49 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe + 2011-07-12 13:38 . 2012-06-14 00:28 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe - 2011-07-12 13:38 . 2012-05-11 15:49 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe - 2011-07-12 13:38 . 2012-05-11 15:49 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe + 2011-07-12 13:38 . 2012-06-14 00:28 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2011-07-12 13:38 . 2012-05-11 15:49 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2011-07-12 13:38 . 2012-06-14 00:28 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2012-06-14 04:52 . 2012-06-14 04:52 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\c4564b6f0ec8623659f2edc7220876eb\WindowsFormsIntegration.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\a1383cbbd5b372a87763ded2afc30564\System.ServiceProcess.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\ad4ff8851f9ef0ad1b452db413cb452d\System.Messaging.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\dacedea4949e0ef126614b59a2e9aaaa\System.Configuration.Install.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\f13cb72a7fb4434170f0568e962b7206\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-14 00:24 . 2012-06-14 00:24 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\68dfec73586045bb6600646c351ab3f8\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-14 05:00 . 2012-06-14 05:00 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\7bcf47c2be31563166bdd942f79e4dac\WindowsFormsIntegration.ni.dll + 2012-06-14 05:00 . 2012-06-14 05:00 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\26e0457a9776a0e9f23e3986686d90a5\System.ServiceProcess.ni.dll + 2012-06-14 05:00 . 2012-06-14 05:00 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\8139b51a694cd96549471a0310052f1f\System.Messaging.ni.dll + 2012-06-14 00:22 . 2012-06-14 00:22 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c4493c0955117520511e05314ad2a766\System.Configuration.Install.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\10854fe9e0f278063616523291e40f8a\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\f4d304fcbfda323997083a1f88b83719\WindowsFormsIntegration.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\681410f842337dccc72eb059738c3ced\TaskScheduler.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\72b4992e45d232251a273a59eb3333d5\System.Web.Routing.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\b905eb57b631a30c60caa4d68c186963\System.Web.Entity.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\e412dfbf1aa49bbe345a02a4d23104f5\System.Web.Entity.Design.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\815769f953ebe3f84439d522c97317b8\System.Web.DynamicData.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\c8144ee08dccdac183527e53c86aa901\System.Web.Abstractions.ni.dll + 2012-06-14 04:41 . 2012-06-14 04:41 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\f71d2f65d0f149c75ac7a569dbcc8500\System.ServiceProcess.ni.dll + 2012-06-14 04:46 . 2012-06-14 04:46 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\d5d612f7d372f500e3062e3814e79d75\System.Messaging.ni.dll + 2012-06-14 04:41 . 2012-06-14 04:41 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\fbc02e9f5a14bb93082ebc88bc577413\System.Drawing.Design.ni.dll + 2012-06-14 04:41 . 2012-06-14 04:41 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\a88ca70ab9641b8236149bc5dd8d1564\System.Configuration.Install.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\2f1bad2fb963482a02443d5e7fece2b6\napsnap.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\bb4947f0ecc925a7bcfd129b6eec8f9b\napinit.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\67240ddde494b9cc05cd732ccd099668\MMCFxCommon.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e29cbd30a31d3c8dae19eb17f70c4ec4\Microsoft.MediaCenter.iTv.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\409dae089f2e041343cff71f822cd505\Microsoft.MediaCenter.ITVVM.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 798720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\803188573fb19785a94284e097c48a67\Microsoft.ManagementConsole.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\4ae6ccc32dafb4e3765b9db05585bd48\mcplayerinterop.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\b0db345fd62a84c98fd8b0bf3c72e8bb\mcGlidHostObj.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\bc5df15ee827e248dd6f819874a85718\EventViewer.ni.dll + 2012-06-14 04:46 . 2012-06-14 04:46 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\08c9aa18b306aa47ddc0ae4a63b05d04\ehExtHost.ni.exe + 2012-06-14 04:53 . 2012-06-14 04:53 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\e2b3d2e7b78af024ebc4c4289c7ed8ea\WindowsLiveLocal.WriterPlugin.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cf3ac030160f8cd7212f3d0a60726694\WindowsLive.Writer.BrowserControl.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\be9c158d5464baf90d1c6af5aba48dff\WindowsLive.Writer.Controls.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ad774e50512e9ef6d3e7bc2e8e950d10\WindowsLive.Writer.Interop.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 258560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\94a2c58bf2f88825d46c658cdb0a5579\WindowsLive.Writer.Mshtml.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9290ae82f605a80ec6158d71469d933c\WindowsLive.Writer.HtmlEditor.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5adf7630511c56e98aaa2787f921e579\WindowsLive.Writer.SpellChecker.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\58a8bbb31cf515e104f90627e72a0612\WindowsLive.Writer.BlogClient.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\52f47ed4b75756b94d5d78f2701466c0\WindowsLive.Writer.Extensibility.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3d81fd9bffc16d446523a81b8a3d22ed\WindowsLive.Writer.Passport.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2991582523cd18017123d45f2db75d9f\WindowsLive.Writer.Localization.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\10e3c14d03b4fd888f3fe1237d31b2fc\WindowsLive.Writer.FileDestinations.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\5ac52c21a1bd440c1953f9624d16db91\WindowsLive.Client.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\f2f8201dd3453250dfd9ed1afce630a0\WindowsFormsIntegration.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\f3e052584df9c614407da662dd3c3df3\TaskScheduler.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\06e4119a0a3484bb0ca667a16145ce74\System.Web.Routing.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4f13c2c06fb97f6659473f02802b377b\System.Web.Extensions.Design.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\bc239944bca7cc6b6ddb473259183c7d\System.Web.Entity.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\3701488fb9e601ebe963db25b784d684\System.Web.Entity.Design.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a09cc9877f51f16a4610b702155e8b70\System.Web.DynamicData.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c6aad1edcc51862ceb26b6b65dad1490\System.Web.Abstractions.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\69ca4a43ba14b66689715ad62aed70e6\System.ServiceProcess.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\2b4d6976393bf5643a4ef2d8dffdf75b\System.Messaging.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\912a0776c2bfd35ff76bd0b8ba977ed4\System.Drawing.Design.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\498d2033c60fe5b777cf923b71b25972\System.Configuration.Install.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\acfafa161ea232928cb02b01c50acf1c\napsnap.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\0abec246c5ca6ec4858bfd3ab84da0ec\napinit.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\1e03b7c2539c5376f0665a4aba04efbd\MMCFxCommon.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\622b582866fca37f113bd97ae4c6d1f6\Microsoft.ManagementConsole.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\02577b78c6ed2f9bda301de888dccad8\EventViewer.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\a6b8eb80cfbdd927b2fa4ecb69fc0209\ehExtHost32.ni.exe + 2012-06-13 21:01 . 2012-04-23 22:35 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2012-04-11 10:17 . 2012-01-26 23:33 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2009-08-04 09:49 . 2009-08-04 09:49 544768 c:\windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.Design.Resources.dll + 2012-06-13 21:01 . 2010-11-12 23:26 544768 c:\windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.Design.Resources.dll + 2012-06-14 00:10 . 2012-05-17 22:35 1129472 c:\windows\SysWOW64\wininet.dll + 2012-06-14 00:10 . 2012-05-17 22:36 1103872 c:\windows\SysWOW64\urlmon.dll + 2012-06-13 21:01 . 2012-05-04 10:03 3913072 c:\windows\SysWOW64\ntoskrnl.exe - 2012-05-11 07:11 . 2012-03-31 04:39 3913072 c:\windows\SysWOW64\ntoskrnl.exe - 2012-05-11 07:11 . 2012-03-31 04:39 3968368 c:\windows\SysWOW64\ntkrnlpa.exe + 2012-06-13 21:01 . 2012-05-04 10:03 3968368 c:\windows\SysWOW64\ntkrnlpa.exe + 2012-06-13 21:01 . 2012-04-07 11:26 2342400 c:\windows\SysWOW64\msi.dll + 2012-06-14 00:10 . 2012-05-17 22:45 1800192 c:\windows\SysWOW64\jscript9.dll + 2012-06-14 00:10 . 2012-05-17 22:27 1793024 c:\windows\SysWOW64\iertutil.dll + 2012-06-14 00:10 . 2012-05-17 22:48 9737728 c:\windows\SysWOW64\ieframe.dll + 2012-06-13 21:01 . 2012-04-24 04:36 1158656 c:\windows\SysWOW64\crypt32.dll + 2012-06-14 00:10 . 2012-05-18 01:59 1392128 c:\windows\system32\wininet.dll + 2012-06-13 21:01 . 2012-05-15 01:32 3146752 c:\windows\system32\win32k.sys + 2012-06-14 00:10 . 2012-05-18 01:59 1346048 c:\windows\system32\urlmon.dll - 2012-05-11 07:11 . 2012-03-31 06:05 5559664 c:\windows\system32\ntoskrnl.exe + 2012-06-13 21:01 . 2012-05-04 11:06 5559664 c:\windows\system32\ntoskrnl.exe + 2012-06-13 21:01 . 2012-04-07 12:31 3216384 c:\windows\system32\msi.dll + 2012-06-14 00:10 . 2012-05-18 02:06 2311680 c:\windows\system32\jscript9.dll + 2012-06-14 00:10 . 2012-05-18 01:54 2144768 c:\windows\system32\iertutil.dll + 2012-06-13 21:01 . 2012-04-24 05:37 1462272 c:\windows\system32\crypt32.dll - 2009-07-14 04:45 . 2012-06-09 10:54 7112398 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2009-07-14 04:45 . 2012-06-14 04:38 7112398 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2012-03-15 06:31 . 2012-03-15 06:31 5029672 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll - 2012-05-11 07:11 . 2012-01-04 03:34 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll + 2012-06-13 21:01 . 2012-03-21 22:30 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll - 2011-06-26 14:24 . 2010-11-05 01:56 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll + 2012-06-13 21:01 . 2012-03-21 22:30 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll + 2012-03-15 06:31 . 2012-03-15 06:31 5029672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll - 2012-05-11 07:11 . 2012-01-04 02:51 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2012-06-13 21:01 . 2012-03-21 22:32 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2011-06-26 14:24 . 2010-11-05 01:58 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2012-06-13 21:01 . 2012-03-21 22:32 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2012-06-14 00:26 . 2012-06-14 00:26 1372432 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2012-05-11 15:47 . 2012-05-11 15:47 1372432 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2012-05-11 15:47 . 2012-05-11 15:47 3512584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll + 2012-06-14 00:26 . 2012-06-14 00:26 3512584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - 2012-05-11 15:47 . 2012-05-11 15:47 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-06-14 00:26 . 2012-06-14 00:26 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-06-14 00:26 . 2012-06-14 00:26 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2012-05-11 15:47 . 2012-05-11 15:47 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2012-06-14 00:26 . 2012-06-14 00:26 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2012-06-14 00:26 . 2012-06-14 00:26 6100328 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2012-05-11 15:47 . 2012-05-11 15:47 6100328 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2012-05-11 15:47 . 2012-05-11 15:47 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2012-06-14 00:26 . 2012-06-14 00:26 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll - 2012-05-11 15:47 . 2012-05-11 15:47 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll + 2012-06-14 00:26 . 2012-06-14 00:26 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll + 2012-06-14 00:26 . 2012-06-14 00:26 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2012-05-11 15:47 . 2012-05-11 15:47 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2012-05-11 15:47 . 2012-05-11 15:47 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2012-06-14 00:26 . 2012-06-14 00:26 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2012-06-14 00:26 . 2012-06-14 00:26 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2012-05-11 15:47 . 2012-05-11 15:47 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2012-05-11 15:47 . 2012-05-11 15:47 6432552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-06-14 00:26 . 2012-06-14 00:26 6432552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-06-14 00:26 . 2012-06-14 00:26 3142488 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-11 15:47 . 2012-05-11 15:47 3142488 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-06-14 00:26 . 2012-06-14 00:26 3827488 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-05-11 15:47 . 2012-05-11 15:47 3827488 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-05-11 15:47 . 2012-05-11 15:47 4971792 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-14 00:26 . 2012-06-14 00:26 4971792 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2012-05-11 15:47 . 2012-05-11 15:47 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-06-14 00:26 . 2012-06-14 00:26 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-05-11 15:47 . 2012-05-11 15:47 3000152 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-06-14 00:26 . 2012-06-14 00:26 3000152 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-11 15:47 . 2012-05-11 15:47 3792160 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-14 00:26 . 2012-06-14 00:26 3792160 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-05-11 15:47 . 2012-05-11 15:47 5202192 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-14 00:26 . 2012-06-14 00:26 5202192 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-14 00:26 . 2012-06-14 00:26 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-05-11 15:47 . 2012-05-11 15:47 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-05-30 05:17 . 2012-05-30 05:17 5010432 c:\windows\Installer\20b1b74.msp + 2012-04-22 20:46 . 2012-04-22 20:46 1187328 c:\windows\Installer\20b1b5e.msp + 2012-03-15 12:26 . 2012-03-15 12:26 4212736 c:\windows\Installer\20b1b52.msp + 2011-07-12 13:38 . 2012-06-14 00:28 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - 2011-07-12 13:38 . 2012-05-11 15:49 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe + 2011-07-12 13:38 . 2012-06-14 00:28 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe - 2011-07-12 13:38 . 2012-05-11 15:49 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2012-06-14 04:49 . 2012-06-14 04:49 5271552 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\678bdc101a7d25218abb246c8aab67ac\WindowsBase.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 5645824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\1ce6784662d85a27506db278bc353ebc\System.Windows.Forms.DataVisualization.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 1473024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\7f82564245d7996dc109bcbec9d6244a\System.Printing.ni.dll + 2012-06-14 04:51 . 2012-06-14 04:51 2305024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\fefdae5d4c7da723d5e5508b205ffae5\System.Drawing.ni.dll + 2012-06-14 00:24 . 2012-06-14 00:24 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\f543d69ae6021b900587ed2c79d9907d\System.Deployment.ni.dll + 2012-06-14 04:51 . 2012-06-14 04:51 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\98cf3845c3a58240209be9b7e006048f\System.Deployment.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 5060096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\d8a4b269cd6a80495c6356560ba8b794\System.Activities.Presentation.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 4238848 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\77a162a5f862ff29dc7b61dea4bae2d5\ReachFramework.ni.dll + 2012-06-14 00:24 . 2012-06-14 00:24 2063360 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\bc25373d6bb8f7c34f3fe142a540bda6\PresentationUI.ni.dll + 2012-06-14 04:51 . 2012-06-14 04:51 2063360 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\520c8a3a3f3829ba1cde21533db21dfe\PresentationUI.ni.dll + 2012-06-14 00:24 . 2012-06-14 00:24 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\f45fa565298b80a3a1c4d52dad3b320b\Microsoft.VisualBasic.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 1843712 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\c0f9d426be9d74e3ffcbd13d710696e3\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-14 00:24 . 2012-06-14 00:24 1843712 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\88b93fe71d389f05a20010ca1d1590c7\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\1260503039bd495b265b93f585d84c06\Microsoft.VisualBasic.ni.dll + 2012-06-14 00:27 . 2012-06-14 00:27 3881984 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\a6e37a05b8d0cedbc5c3ea266ae3fc31\WindowsBase.ni.dll + 2012-06-14 05:00 . 2012-06-14 05:00 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\829d4be472dbddd2ae1a9fea2c8d6bf6\System.Windows.Forms.DataVisualization.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 1065984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\1de4c4983c531d798efda3f4c53d7e29\System.Printing.ni.dll + 2012-06-14 00:27 . 2012-06-14 00:27 1666048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\4230ed1c7990e4ee8352baf67a2a85fa\System.Drawing.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\c3a359956b43117a6b58c60988a3cd30\System.Deployment.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 3764224 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\e31fd225473d7482578793723647efe2\System.Activities.Presentation.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 2910720 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\61165404f814e02ab3be9e26ac076a13\ReachFramework.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 1646592 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\b2e4670d4731b73a33ef26f83438ef8f\PresentationUI.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 1139712 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\eed9d02519528318d89a9d746c30409a\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\b081ccaa9baa765a4c08fe1cc5ad1090\Microsoft.VisualBasic.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\70cc5e8a5a3372fe0b104c1b20392cd2\System.WorkflowServices.ni.dll + 2012-06-14 04:41 . 2012-06-14 04:41 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\aa638ba79250284eb4af4adaa4a4117b\System.Workflow.Runtime.ni.dll + 2012-06-14 04:41 . 2012-06-14 04:41 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\996dc2af3b9e5c111130935f298908c6\System.Workflow.ComponentModel.ni.dll + 2012-06-14 04:41 . 2012-06-14 04:41 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\178797db84abae2eeaed835bd28ca52c\System.Workflow.Activities.ni.dll + 2012-06-14 04:40 . 2012-06-14 04:40 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\a32734087cd0db5607d5744ca63235d7\System.Web.Services.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\af7689e8cbec5d2755497be23c30e293\System.Web.Mobile.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 3044352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\768ea257d75839979b4efb2d49d653f6\System.Web.Extensions.ni.dll + 2012-06-14 04:49 . 2012-06-14 04:49 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\2c47bc5d426a7cf9ffef1425eda08184\System.Web.Extensions.Design.ni.dll + 2012-06-14 04:39 . 2012-06-14 04:39 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\b964519964d302b4977e1380d8d15f1a\System.Printing.ni.dll + 2012-06-14 04:37 . 2012-06-14 04:37 2318848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\222eb8aa336953a6b0216db2b0c4770d\System.Drawing.ni.dll + 2012-06-14 04:37 . 2012-06-14 04:37 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\6e4e9b07f376d445df1718c0011fa99b\System.Deployment.ni.dll + 2012-06-14 04:39 . 2012-06-14 04:39 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\1f88a3693c8ddd527a130aff49dc58b3\ReachFramework.ni.dll + 2012-06-14 04:39 . 2012-06-14 04:39 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\b91c32fab08ba62d8c7681cc596895be\PresentationUI.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\ac1ba76ed19d668ce53a74593f040453\Narrator.ni.exe + 2012-06-14 04:48 . 2012-06-14 04:48 2327552 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\df2557ab1b8e4389d846e13dc82eba57\MMCEx.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\61812970c4743b686a67f28687e1dcb6\MIGUIControls.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\1586ee919f86130df9771cf9b8d95d3a\Microsoft.VisualBasic.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\ca7e936eed0de2436d87b2601ee3a20a\Microsoft.PowerShell.Editor.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6caa366471176a065a96d77e8ba01eeb\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3040e2de07177c0a6a66a49de61fdc59\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-06-14 04:46 . 2012-06-14 04:46 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b2afc0af3d89ae00e973b4e6e9db382c\Microsoft.MediaCenter.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\73bfbdccdc1b0ae87f70a0ec594fee3c\Microsoft.MediaCenter.Bml.ni.dll + 2012-06-14 04:46 . 2012-06-14 04:46 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\653e1ee01f10d658d52ca42e17e74283\Microsoft.MediaCenter.UI.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\dac69844e6333484159a4cf544190906\Microsoft.Ink.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\4b362e9e25c33e371f06403edec8849a\Microsoft.Build.Tasks.ni.dll + 2012-06-14 04:48 . 2012-06-14 04:48 2682880 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\33730d136a34d2f4e56a0322f49ee9b6\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-14 04:46 . 2012-06-14 04:46 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\cc4844e7242c1e35d145bf2439f944c5\mcstore.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bfedb02130601d4032ac327ff8ed25ea\WindowsLive.Writer.CoreServices.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 6394368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3f0363c3e9ba9d11e9fabe712c2159d3\WindowsLive.Writer.PostEditor.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0e801ee472c800fc7805b344d4d1876e\WindowsLive.Writer.ApplicationFramework.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\e3e5aa45736b95804bf6bb7eca08a57b\System.WorkflowServices.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\5832334164c5f9a9eb2f9ef59bd651f7\System.Workflow.Runtime.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 4516352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\cfb739be21092d5b8f7b4fde529e6aaa\System.Workflow.ComponentModel.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 2994688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\a815fffab98375c1919df68b5b292725\System.Workflow.Activities.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\761fd1afc17f11bf6d49c3a7d16465ca\System.Web.Services.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4a90802e36dee6e10d9bf54832cbf549\System.Web.Mobile.ni.dll + 2012-06-14 04:59 . 2012-06-14 04:59 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c45efc7ec92c1da8e67eb597559ec39c\System.Web.Extensions.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\991dbe40be5b114ed705bb5b48e6b330\System.Printing.ni.dll + 2012-06-14 04:42 . 2012-06-14 04:42 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll + 2012-06-14 04:42 . 2012-06-14 04:42 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3421b96c2885b8e4137a376ff3d95fa5\System.Deployment.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\87f73de6e080d37be93adfc7d5c31d7a\ReachFramework.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\163517c8a195fb48f7ef6ee17c585bdb\PresentationUI.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\17add09c98fa34255142d42697db53df\Narrator.ni.exe + 2012-06-14 04:53 . 2012-06-14 04:53 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\21abde8efab609732b2ade3f05234e79\MMCEx.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\0e7da0df83f0619e3b0e0a7d7ee05fa3\MIGUIControls.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\99ae5f32cd1dc3618659bc3c77f2b2a9\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\77b5496d214dd5034294b058c0bb0e8d\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\72765e5fab12761eb6d3f58180fa34d7\Microsoft.PowerShell.Editor.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\8ce1d10f94b40f054017865757552f2d\Microsoft.MediaCenter.UI.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\7fab1ec8f5ed6a55a8a73b2c590bd7cd\Microsoft.MediaCenter.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\4d381048e3b9c0914c0f72c6aa0a599d\Microsoft.Ink.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\60809ea00dd10bbe703406d794da6976\Microsoft.Build.Tasks.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\1d2250044b1ecff755e26ed12f6d27cb\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-14 04:53 . 2012-06-14 04:53 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\3a4e56a8d1075cf0af0619c383b3e592\mcstore.ni.dll - 2012-05-11 07:11 . 2012-01-04 02:51 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-06-13 21:01 . 2012-03-21 22:32 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2011-06-26 14:24 . 2010-11-05 01:58 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-06-13 21:01 . 2012-03-21 22:32 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-06-14 00:10 . 2012-05-17 23:11 12314624 c:\windows\SysWOW64\mshtml.dll + 2009-07-14 02:34 . 2012-06-14 04:34 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat + 2012-06-14 00:10 . 2012-05-18 02:47 17807360 c:\windows\system32\mshtml.dll + 2010-12-09 11:37 . 2012-06-14 00:19 58957832 c:\windows\system32\MRT.exe + 2012-06-14 00:10 . 2012-05-18 02:16 10924032 c:\windows\system32\ieframe.dll + 2011-09-29 16:11 . 2012-06-14 13:08 31120084 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-333037292-1054110904-1588077299-1001-12288.dat + 2012-06-14 00:25 . 2012-06-14 00:25 17355264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\fc2b700d86c545244aa0e9bacdef50d6\System.Windows.Forms.ni.dll + 2012-06-14 04:52 . 2012-06-14 04:52 17355264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\a47854234c2535cb8bba1629d308ee00\System.Windows.Forms.ni.dll + 2012-06-14 04:51 . 2012-06-14 04:51 24435712 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\3830426cdbde67e7349bdde1471afbc5\PresentationFramework.ni.dll + 2012-06-14 04:50 . 2012-06-14 04:50 16015360 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\9eda2661ce2157307cd647a731c2d351\PresentationCore.ni.dll + 2012-06-14 00:27 . 2012-06-14 00:27 13198336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\00a4922fbf869a79c043b665035516b6\System.Windows.Forms.ni.dll + 2012-06-14 00:28 . 2012-06-14 00:28 18019840 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\d239f585ee55f833dbe21e897e1265ac\PresentationFramework.ni.dll + 2012-06-14 00:27 . 2012-06-14 00:27 11522048 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b7de318e9fd1ef519ca6c1f3b5dba8e0\PresentationCore.ni.dll + 2012-06-14 04:38 . 2012-06-14 04:38 17383424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\dc5bb74eefdbf954cdfb70dd534d5564\System.Windows.Forms.ni.dll + 2012-06-14 04:40 . 2012-06-14 04:40 15270912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\95f38e7485bbe2b73b6055c45196fedd\System.Web.ni.dll + 2012-06-14 04:41 . 2012-06-14 04:41 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\582144c0ee317038621aebc626187b56\System.Design.ni.dll + 2012-06-14 04:39 . 2012-06-14 04:39 19198464 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\47054c4d5b7e522c21a9d57797410302\PresentationFramework.ni.dll + 2012-06-14 04:37 . 2012-06-14 04:37 16543232 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\3a9d13514a8c4c710fa5ce8e9b5393fe\PresentationCore.ni.dll + 2012-06-14 04:47 . 2012-06-14 04:47 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\0c1f96a4136efe532bbb8eb91d3de300\ehshell.ni.dll + 2012-06-14 04:42 . 2012-06-14 04:42 12436480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll + 2012-06-14 04:43 . 2012-06-14 04:43 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c144f89b1f8f292d6940a1b2f8ffbec\System.Design.ni.dll + 2012-06-14 04:42 . 2012-06-14 04:42 14340608 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll + 2012-06-14 04:42 . 2012-06-14 04:42 12237824 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll . -- Snapshot auf jetziges Datum zurückgesetzt -- . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Bernhard\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Bernhard\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\Bernhard\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-09-26 3077528] "KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-12-27 937360] "KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-12-27 21392] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X] "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-02-04 7350912] "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-01-05 170624] "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016] "EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320] "KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-12-27 3508624] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-05-08 348624] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-8-31 156952] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "EnableLUA"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . R0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x] R2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 lxecCATSCustConnectService;lxecCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [2010-04-14 45736] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-17 257696] R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x] R3 cmnsusbser;Mobile Connector USB Device for Legacy Serial Communication LCT2053s;c:\windows\system32\DRIVERS\cmnsusbser.sys [x] R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [x] R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [x] R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x] R3 massfilter_hs;USB Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter_hs.sys [x] R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-06 113120] R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [x] R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x] R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x] R4 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048] R4 GtDetectSc;GtDetectSc;c:\program files\Option\Option WWAN Driver 5.0.32.0 Installer\GtDetectSc.exe [2009-05-04 809984] R4 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-31 135664] R4 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-31 135664] R4 TGCM_ImportWiFiSvc;TGCM_ImportWiFiSvc;c:\program files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [2010-09-29 200624] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928] S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-04-05 361984] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-08 86224] S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888] S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416] S2 lxec_device;lxec_device;c:\windows\system32\lxeccoms.exe [2010-04-14 1052328] S2 NWHelper;Novatel Wireless Device Helper ;c:\program files (x86)\Novatel Wireless\Drivers\NWHelper.exe [2009-12-04 111904] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x] S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Update-Service-Installer-Service REG_MULTI_SZ Update-Service-Installer-Service Update-Service REG_MULTI_SZ Update-Service . Inhalt des "geplante Tasks" Ordners . 2012-06-14 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-17 08:52] . 2012-06-14 c:\windows\Tasks\RegClean Pro_DEFAULT.job - c:\program files (x86)\RegClean Pro\RegCleanPro.exe [2012-05-11 12:59] . 2012-05-11 c:\windows\Tasks\RegClean Pro_UPDATES.job - c:\program files (x86)\RegClean Pro\RegCleanPro.exe [2012-05-11 12:59] . 2012-06-14 c:\windows\Tasks\SpeedUpMyPC.job - c:\program files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe [2012-05-11 12:27] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Bernhard\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Bernhard\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Bernhard\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\Bernhard\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ETDWare"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU] "AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-01-18 324608] "lxecmon.exe"="c:\program files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe" [2011-01-24 770728] "EzPrint"="c:\program files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe" [2011-01-24 148280] "Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360] . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://de.ask.com/?l=dis&o=14597 mLocal Page = c:\windows\SysWOW64\blank.htm IE: Free YouTube Download - c:\users\Bernhard\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm IE: Free YouTube to MP3 Converter - c:\users\Bernhard\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 Trusted Zone: imdb.com\secure TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - c:\users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\5oll6geo.Standard-Benutzer\ FF - prefs.js: browser.startup.homepage - google.de . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}] @Denied: (A 2) (Everyone) @="IFlashBroker3" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe d:\program files (x86)\Cisco Systems\VPN Client\cvpnd.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe c:\program files\ASUS\NB Probe\SPM\spmgr.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe c:\windows\AsScrPro.exe c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe . ************************************************************************** . Zeit der Fertigstellung: 2012-06-14 15:16:25 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2012-06-14 13:16 ComboFix2.txt 2012-06-12 17:31 ComboFix3.txt 2012-06-12 07:23 . Vor Suchlauf: 17 Verzeichnis(se), 31.573.024.768 Bytes frei Nach Suchlauf: 18 Verzeichnis(se), 31.335.657.472 Bytes frei . - - End Of File - - F131CC47B2478736871D8B8648AF7E49 |
14.06.2012, 14:57 | #17 |
/// Malwareteam | TR/ATRAPS.Gen und TR/PSW.Kykymber.ceig in SysWOW64 Sieht ganz gut aus - kontrollieren wir alles nochmal!
__________________Schritt 1: MBAM vollständig Downloade Dir bitte Malwarebytes
Schritt 2: ESET ESET Online Scanner
__________________ |
14.06.2012, 22:12 | #18 |
| TR/ATRAPS.Gen und TR/PSW.Kykymber.ceig in SysWOW64 mbam:
__________________Code:
ATTFilter Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Datenbank Version: v2012.06.14.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Bernhard :: BERNHARD-PC [Administrator] 14.06.2012 16:47:28 mbam-log-2012-06-14 (16-47-28).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 486296 Laufzeit: 1 Stunde(n), 4 Minute(n), 31 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe Win32/SpeedUpMyPC application C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spnotifier.exe Win32/SpeedUpMyPC application C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sp_move_serial.exe Win32/SpeedUpMyPC application C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sp_ubm.exe Win32/SpeedUpMyPC application C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sump.exe Win32/SpeedUpMyPC application C:\Users\Bernhard\AppData\Roaming\Uniblue\SpeedUpMyPC\_temp\ub.exe Win32/SpeedUpMyPC application |
15.06.2012, 06:43 | #19 | |
/// Malwareteam | TR/ATRAPS.Gen und TR/PSW.Kykymber.ceig in SysWOW64Zitat:
__________________ Kein Asylrecht für Trojaner! Proud Member of UNITE Hinweis: Ich bin nur werktags erreichbar! Anfragen über PM werden ignoriert! Du bist zufrieden mit uns? Dann unterstütze das Trojaner-Board! |
18.06.2012, 08:36 | #20 |
/// Malwareteam | TR/ATRAPS.Gen und TR/PSW.Kykymber.ceig in SysWOW64 Hallo, benötigst Du noch weiterhin Hilfe ? Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten. Das Verschwinden der Symptome bedeutet nicht, dass dein System schon sauber ist
__________________ Kein Asylrecht für Trojaner! Proud Member of UNITE Hinweis: Ich bin nur werktags erreichbar! Anfragen über PM werden ignoriert! Du bist zufrieden mit uns? Dann unterstütze das Trojaner-Board! |
Themen zu TR/ATRAPS.Gen und TR/PSW.Kykymber.ceig in SysWOW64 |
.com, acrobat update, ad-aware, alternate, antivir, audacity, avira, bho, converter, dateisystem, device driver, ebanking, error, firefox, flash player, geld, google, heuristiks/extra, heuristiks/shuriken, hijack, hijackthis, home, install.exe, jdownloader, langsam, league of legends, logfile, microsoft office word, mp3, neu aufsetzen, office 2007, pando media booster, plug-in, pup.toolbardownloader, realtek, regclean, regclean pro, scan, searchscopes, security, senden, software, svchost.exe, system neu, usb 2.0, windows |