ComboFix 10-11-23.04 - Admin 24.11.2010 14:46:22.3.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1251.7.1049.18.767.450 [GMT 3:00] Running from: c:\documents and settings\Admin\Рабочий стол\ComboFix.exe Command switches used :: c:\documents and settings\Admin\Рабочий стол\CFScript.txt FW: Symantec Endpoint Protection *disabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\Common Files\b006b9b3 . ((((((((((((((((((((((((( Files Created from 2010-10-24 to 2010-11-24 ))))))))))))))))))))))))))))))) . 2010-11-24 11:30 . 2010-11-24 11:30 -------- d-----w- c:\windows\system32\KB905474 2010-11-24 11:12 . 2010-11-24 11:12 -------- d-----w- c:\program files\MSXML 4.0 2010-11-24 10:27 . 2010-11-24 10:33 -------- d-----w- c:\windows\ie8updates 2010-11-24 10:19 . 2010-11-24 11:28 -------- d--h--w- c:\windows\$hf_mig$ 2010-11-24 09:59 . 2010-06-14 07:43 1172480 -c----w- c:\windows\system32\dllcache\msxml3.dll 2010-11-24 09:59 . 2009-11-27 17:13 17920 -c----w- c:\windows\system32\dllcache\msyuv.dll 2010-11-24 09:58 . 2009-11-27 16:09 48128 -c----w- c:\windows\system32\dllcache\iyuv_32.dll 2010-11-24 09:58 . 2009-11-27 16:09 8704 -c----w- c:\windows\system32\dllcache\tsbyuv.dll 2010-11-24 09:58 . 2010-07-27 06:30 8479744 -c----w- c:\windows\system32\dllcache\shell32.dll 2010-11-24 09:56 . 2010-09-10 05:51 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll 2010-11-24 09:56 . 2010-09-10 05:51 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll 2010-11-24 09:56 . 2010-09-10 05:51 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll 2010-11-24 09:56 . 2010-09-10 05:51 1986560 -c----w- c:\windows\system32\dllcache\iertutil.dll 2010-11-24 09:56 . 2010-09-10 05:51 916480 -c----w- c:\windows\system32\dllcache\wininet.dll 2010-11-24 09:56 . 2010-09-10 05:51 1210880 -c----w- c:\windows\system32\dllcache\urlmon.dll 2010-11-24 09:56 . 2010-09-10 05:51 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll 2010-11-24 09:56 . 2010-09-10 05:51 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll 2010-11-24 09:55 . 2010-09-10 05:51 11080192 -c----w- c:\windows\system32\dllcache\ieframe.dll 2010-11-24 08:05 . 2009-12-08 09:25 474112 -c----w- c:\windows\system32\dllcache\shlwapi.dll 2010-11-24 08:04 . 2010-07-16 11:58 221184 -c----w- c:\windows\system32\dllcache\wordpad.exe 2010-11-24 08:03 . 2010-02-05 18:27 1293312 -c----w- c:\windows\system32\dllcache\quartz.dll 2010-11-24 07:57 . 2010-04-28 05:19 2148352 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe 2010-11-24 07:57 . 2010-04-28 05:19 2191872 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe 2010-11-24 07:57 . 2010-04-28 05:19 2026496 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe 2010-11-24 07:28 . 2010-01-13 14:01 86528 -c----w- c:\windows\system32\dllcache\cabview.dll 2010-11-23 16:43 . 2010-11-23 16:43 11706 ----a-w- C:\cc_20101123_194337.reg 2010-11-23 16:38 . 2010-11-23 16:38 5655040 ----a-w- C:\knopka.com 2010-11-23 16:26 . 2010-03-19 07:18 171344 ----a-w- C:\KK.exe 2010-11-23 14:32 . 2010-11-23 15:26 -------- d-----w- c:\documents and settings\Admin\DoctorWeb 2010-11-23 08:06 . 2010-11-23 08:31 -------- d-----w- c:\documents and settings\Admin\Application Data\VSO 2010-11-23 07:58 . 2010-11-23 07:58 -------- d-----w- c:\program files\VSO 2010-11-22 14:23 . 2010-11-23 07:19 -------- d-----w- c:\windows\Folder32 2010-11-08 08:41 . 2010-11-08 08:41 -------- d-----w- c:\program files\Common Files\Java 2010-11-08 08:40 . 2010-09-15 01:50 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll 2010-11-08 08:40 . 2010-09-15 01:50 472808 ----a-w- c:\windows\system32\deployJava1.dll 2010-11-03 13:19 . 2010-11-03 13:19 -------- d-----w- c:\documents and settings\All Users\Application Data\regid.1986-12.com.adobe . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-11-23 16:26 . 2010-11-23 16:26 164289 ----a-w- C:\kk.zip 2010-10-06 16:07 . 2010-09-14 06:37 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys 2010-09-16 06:40 . 2010-09-16 06:40 29708 ----a-w- C:\cc_20100916_104004.reg 2010-09-14 23:29 . 2010-04-04 10:41 73728 ----a-w- c:\windows\system32\javacpl.cpl 2010-09-14 06:38 . 2010-09-14 06:38 53248 ----a-r- c:\documents and settings\Admin\Application Data\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe 2010-09-10 05:51 . 2009-04-24 20:00 916480 ----a-w- c:\windows\system32\wininet.dll 2010-09-10 05:51 . 2009-04-24 19:59 1469440 ----a-w- c:\windows\system32\inetcpl.cpl 2010-09-10 05:51 . 2009-04-24 19:57 43520 ----a-w- c:\windows\system32\licmgr10.dll 2010-09-01 07:57 . 2009-04-24 19:52 1862016 ----a-w- c:\windows\system32\win32k.sys 2010-08-27 08:03 . 2008-04-15 13:00 119808 ----a-w- c:\windows\system32\t2embed.dll . ------- Sigcheck ------- [-] 2009-04-24 . 6A104BA98D99D53AB0C91825CE659FC6 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys [-] 2009-04-24 . 23B7D3F3F5EC8FEEA75EC381C71CBD5E . 579072 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll [-] 2009-04-24 . A7830A9F166C9CE4F18CA22076F1077C . 1721344 . . [6.00.2900.5512] . . c:\windows\explorer.exe [-] 2009-04-24 . 8F51D3D08E9FFF9113EFDFA7A7511F2C . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll [-] 2009-04-24 . EFCC265C7C50677C7C9E0260981182C6 . 30208 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe . ((((((((((((((((((((((((((((( SnapShot@2010-11-23_15.49.36 ))))))))))))))))))))))))))))))))))))))))) . + 2009-07-11 16:41 . 2009-07-11 16:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll + 2010-11-24 11:53 . 2010-11-24 11:53 16384 c:\windows\temp\Perflib_Perfdata_5ec.dat + 2008-11-14 19:07 . 2009-08-06 16:24 44768 c:\windows\system32\wups2.dll + 2010-04-04 10:33 . 2009-08-06 16:24 35552 c:\windows\system32\wups.dll + 2010-04-04 10:33 . 2009-08-06 16:24 53472 c:\windows\system32\wuauclt.exe + 2008-04-15 13:00 . 2009-06-25 08:42 54272 c:\windows\system32\wdigest.dll + 2009-04-24 19:52 . 2010-06-21 14:46 46080 c:\windows\system32\tzchange.exe + 2008-04-15 13:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe + 2010-11-24 10:19 . 2007-07-27 20:11 16760 c:\windows\system32\spmsg.dll + 2010-11-23 16:07 . 2009-08-06 16:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll + 2010-11-23 16:07 . 2009-08-06 16:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll - 2009-04-24 19:52 . 2009-04-24 19:52 56832 c:\windows\system32\secur32.dll + 2009-04-24 19:52 . 2009-06-25 08:42 56832 c:\windows\system32\secur32.dll + 2008-04-15 13:00 . 2009-10-12 13:40 79872 c:\windows\system32\raschap.dll - 2008-04-15 13:00 . 2008-04-15 13:00 79872 c:\windows\system32\raschap.dll - 2008-04-15 13:00 . 2010-11-23 07:45 77534 c:\windows\system32\perfc019.dat + 2008-04-15 13:00 . 2010-11-24 10:41 77534 c:\windows\system32\perfc019.dat - 2008-04-15 13:00 . 2010-11-23 07:45 64372 c:\windows\system32\perfc009.dat + 2008-04-15 13:00 . 2010-11-24 10:41 64372 c:\windows\system32\perfc009.dat + 2008-04-14 21:40 . 2009-11-27 17:13 17920 c:\windows\system32\msyuv.dll + 2008-04-15 13:00 . 2009-11-27 16:09 28672 c:\windows\system32\msvidc32.dll + 2008-04-15 13:00 . 2009-11-27 16:09 11264 c:\windows\system32\msrle32.dll - 2008-04-15 13:00 . 2008-04-15 13:00 11264 c:\windows\system32\msrle32.dll + 2009-04-24 19:57 . 2010-09-10 05:51 66560 c:\windows\system32\mshtmled.dll - 2009-04-24 19:57 . 2009-04-24 19:57 66560 c:\windows\system32\mshtmled.dll + 2010-04-04 10:31 . 2010-09-10 05:51 55296 c:\windows\system32\msfeedsbs.dll - 2010-04-04 10:31 . 2009-03-08 00:31 55296 c:\windows\system32\msfeedsbs.dll + 2008-04-15 13:00 . 2009-09-04 21:04 58880 c:\windows\system32\msasn1.dll - 2009-04-24 19:57 . 2009-04-24 19:57 25600 c:\windows\system32\jsproxy.dll + 2009-04-24 19:57 . 2010-09-10 05:51 25600 c:\windows\system32\jsproxy.dll + 2008-04-14 21:40 . 2009-11-27 16:09 48128 c:\windows\system32\iyuv_32.dll + 2008-04-15 13:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll - 2008-04-15 13:00 . 2008-04-15 13:00 80384 c:\windows\system32\iccvid.dll + 2008-04-15 13:00 . 2009-10-15 16:33 81920 c:\windows\system32\fontsub.dll + 2008-04-15 13:00 . 2009-06-24 10:28 92928 c:\windows\system32\drivers\ksecdd.sys + 2010-04-04 10:33 . 2009-08-06 16:24 35552 c:\windows\system32\dllcache\wups.dll + 2008-04-15 13:00 . 2009-06-25 08:42 54272 c:\windows\system32\dllcache\wdigest.dll + 2008-04-15 13:00 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe + 2009-04-24 19:52 . 2009-06-25 08:42 56832 c:\windows\system32\dllcache\secur32.dll - 2009-04-24 19:52 . 2009-04-24 19:52 56832 c:\windows\system32\dllcache\secur32.dll - 2008-04-15 13:00 . 2008-04-15 13:00 79872 c:\windows\system32\dllcache\raschap.dll + 2008-04-15 13:00 . 2009-10-12 13:40 79872 c:\windows\system32\dllcache\raschap.dll + 2008-04-15 13:00 . 2009-11-27 16:09 28672 c:\windows\system32\dllcache\msvidc32.dll + 2008-04-15 13:00 . 2009-11-27 16:09 11264 c:\windows\system32\dllcache\msrle32.dll - 2008-04-15 13:00 . 2008-04-15 13:00 11264 c:\windows\system32\dllcache\msrle32.dll + 2009-04-24 19:57 . 2010-09-10 05:51 66560 c:\windows\system32\dllcache\mshtmled.dll - 2009-04-24 19:57 . 2009-04-24 19:57 66560 c:\windows\system32\dllcache\mshtmled.dll + 2008-04-15 13:00 . 2009-09-04 21:04 58880 c:\windows\system32\dllcache\msasn1.dll + 2009-04-24 19:57 . 2010-09-10 05:51 43520 c:\windows\system32\dllcache\licmgr10.dll + 2008-04-15 13:00 . 2009-06-24 10:28 92928 c:\windows\system32\dllcache\ksecdd.sys + 2009-04-24 19:57 . 2010-09-10 05:51 25600 c:\windows\system32\dllcache\jsproxy.dll - 2009-04-24 19:57 . 2009-04-24 19:57 25600 c:\windows\system32\dllcache\jsproxy.dll + 2008-04-15 13:00 . 2009-10-15 16:33 81920 c:\windows\system32\dllcache\fontsub.dll + 2008-04-15 13:00 . 2009-12-14 07:10 33280 c:\windows\system32\dllcache\csrsrv.dll + 2009-04-24 19:51 . 2009-08-06 16:24 96480 c:\windows\system32\dllcache\cdm.dll + 2008-04-15 13:00 . 2009-11-27 16:09 85504 c:\windows\system32\dllcache\avifil32.dll - 2008-04-15 13:00 . 2008-04-15 13:00 58880 c:\windows\system32\dllcache\atl.dll + 2008-04-15 13:00 . 2009-07-17 19:03 58880 c:\windows\system32\dllcache\atl.dll + 2008-04-15 13:00 . 2010-03-05 14:39 65536 c:\windows\system32\dllcache\asycfilt.dll + 2008-04-15 13:00 . 2009-12-14 07:10 33280 c:\windows\system32\csrsrv.dll + 2009-04-24 19:51 . 2009-08-06 16:24 96480 c:\windows\system32\cdm.dll + 2009-04-24 19:59 . 2010-01-13 14:01 86528 c:\windows\system32\cabview.dll + 2008-04-15 13:00 . 2009-11-27 16:09 85504 c:\windows\system32\avifil32.dll - 2008-04-15 13:00 . 2008-04-15 13:00 58880 c:\windows\system32\atl.dll + 2008-04-15 13:00 . 2009-07-17 19:03 58880 c:\windows\system32\atl.dll + 2008-04-15 13:00 . 2010-03-05 14:39 65536 c:\windows\system32\asycfilt.dll + 2009-06-24 16:56 . 2009-06-24 16:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe + 2010-09-23 12:55 . 2010-09-23 12:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll - 2007-04-13 17:58 . 2007-04-13 17:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2010-09-22 23:26 . 2010-09-22 23:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2010-09-22 23:26 . 2010-09-22 23:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2007-04-13 17:57 . 2007-04-13 17:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2007-04-13 17:57 . 2007-04-13 17:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2010-09-22 23:26 . 2010-09-22 23:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll - 2007-04-13 18:30 . 2007-04-13 18:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2010-09-23 00:17 . 2010-09-23 00:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2003-02-20 17:19 . 2003-02-20 17:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2010-09-23 00:17 . 2010-09-23 00:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2010-04-04 12:21 . 2010-11-24 11:27 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2010-04-04 12:21 . 2010-04-04 12:27 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2010-04-04 12:21 . 2010-04-04 12:27 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2010-04-04 12:21 . 2010-11-24 11:27 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2010-04-04 12:21 . 2010-11-24 11:27 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe - 2010-04-04 12:21 . 2010-04-04 12:27 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2009-04-02 11:23 . 2009-04-02 11:23 10104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\XLCALL32.DLL + 2006-07-24 06:50 . 2006-07-24 06:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\VBAME.DLL + 2006-07-24 06:50 . 2006-07-24 06:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSADDNDR.DLL + 2006-10-26 17:13 . 2006-10-26 17:13 72472 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XL12CNVP.DLL + 2010-04-04 12:19 . 2010-04-04 12:19 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WORDPOL.DLL + 2006-10-26 18:58 . 2006-10-26 18:58 33080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VPREVIEW.EXE + 2010-04-04 12:19 . 2010-04-04 12:19 12080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBIDEPOL.DLL + 2010-04-04 12:18 . 2010-04-04 12:18 64288 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBIDEPIA.DLL + 2006-10-26 15:59 . 2006-10-26 15:59 15672 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SMARTTAGINSTALL.EXE + 2006-10-26 15:49 . 2006-10-26 15:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SETLANG.EXE + 2006-10-26 16:55 . 2006-10-26 16:55 55056 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SCANOST.EXE + 2006-10-26 16:55 . 2006-10-26 16:55 76576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RM.DLL + 2006-10-26 16:12 . 2006-10-26 16:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REFIEBAR.DLL + 2006-10-26 16:55 . 2006-10-26 16:55 39208 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RECALL.DLL + 2010-04-04 12:19 . 2010-04-04 12:19 12112 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPTPOL.DLL + 2006-10-26 16:55 . 2006-10-26 16:55 53048 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLVBA.DLL + 2006-10-27 11:16 . 2006-10-27 11:16 46864 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLRPC.DLL + 2006-10-26 15:59 . 2006-10-26 15:59 18760 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OPHPROXY.DLL + 2006-10-26 15:59 . 2006-10-26 15:59 16728 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OMUOPTINPS.DLL + 2006-10-26 16:00 . 2006-10-26 16:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OISCTRL.DLL + 2006-10-27 11:11 . 2006-10-27 11:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFRHD.DLL + 2010-04-04 12:19 . 2010-04-04 12:19 11544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFICEPL.DLL + 2006-10-26 16:12 . 2006-10-26 16:12 16192 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NPOFF12.DLL + 2010-04-04 12:19 . 2010-04-04 12:19 12104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTAGPOL.DLL + 2010-04-04 12:18 . 2010-04-04 12:18 20280 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTAGPIA.DLL + 2006-10-26 15:59 . 2006-10-26 15:59 43832 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSSH.DLL + 2006-10-27 11:26 . 2006-10-27 11:26 35152 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOSTYLE.DLL + 2006-10-26 15:52 . 2006-10-26 15:52 66368 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOMSE.DLL + 2006-10-26 16:12 . 2006-10-26 16:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOHTMED.EXE + 2006-10-27 11:01 . 2006-10-27 11:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOHEV.DLL + 2006-10-26 15:59 . 2006-10-26 15:59 19768 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSMH.DLL + 2006-10-26 15:52 . 2006-10-26 15:52 48424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSE7.EXE + 2006-10-26 16:12 . 2006-10-26 16:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\METCONV.DLL + 2010-04-04 12:19 . 2010-04-04 12:19 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GRAPHPOL.DLL + 2010-04-04 12:18 . 2010-04-04 12:18 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXCELPOL.DLL + 2006-10-26 16:12 . 2006-10-26 16:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\AUTHZAX.DLL + 2010-11-24 11:15 . 2009-03-20 08:35 12288 c:\windows\ie8updates\KB2360131-IE8\xpshims.dll + 2010-11-24 11:15 . 2009-04-24 19:57 66560 c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll + 2010-11-24 11:15 . 2009-03-08 00:31 55296 c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll + 2010-11-24 11:15 . 2009-04-24 19:57 43008 c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll + 2010-11-24 11:15 . 2009-04-24 19:57 25600 c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll + 2010-11-24 09:59 . 2009-11-27 17:13 17920 c:\windows\Driver Cache\i386\msyuv.dll + 2010-11-24 09:58 . 2009-11-27 16:09 48128 c:\windows\Driver Cache\i386\iyuv_32.dll + 2010-11-24 10:28 . 2010-11-24 10:28 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_4189cf13\System.Drawing.Design.dll + 2010-11-24 10:27 . 2010-11-24 10:27 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_66fe1a99\CustomMarshalers.dll + 2010-11-24 11:06 . 2010-11-24 11:06 81920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e299fd71b4c71854673c47f85b4cf180\Microsoft.Build.Framework.ni.dll + 2010-11-24 11:06 . 2010-11-24 11:06 15360 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\662febc2f309e92a880682f527f4e426\dfsvc.ni.exe + 2010-11-24 11:05 . 2010-11-24 11:05 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\1a67452bf4558b2574698b6008e7af74\Accessibility.ni.dll + 2010-11-24 10:39 . 2010-11-24 10:39 90112 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2010-04-04 10:39 . 2010-04-04 10:39 90112 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2010-11-24 10:40 . 2010-11-24 10:40 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2010-04-04 10:39 . 2010-04-04 10:39 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2010-11-24 10:40 . 2010-11-24 10:40 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2010-04-04 10:39 . 2010-04-04 10:39 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2010-11-24 10:40 . 2010-11-24 10:40 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2010-04-04 10:39 . 2010-04-04 10:39 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2010-04-04 10:39 . 2010-04-04 10:39 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2010-11-24 10:40 . 2010-11-24 10:40 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2010-11-24 10:40 . 2010-11-24 10:40 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2010-04-04 10:39 . 2010-04-04 10:39 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2010-11-24 10:40 . 2010-11-24 10:40 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll - 2010-04-04 10:39 . 2010-04-04 10:39 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll - 2010-04-04 10:39 . 2010-04-04 10:39 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2010-11-24 10:40 . 2010-11-24 10:40 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2010-04-04 10:39 . 2010-04-04 10:39 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2010-11-24 10:40 . 2010-11-24 10:40 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2010-04-04 10:39 . 2010-04-04 10:39 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2010-11-24 10:40 . 2010-11-24 10:40 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2010-04-04 10:39 . 2010-04-04 10:39 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2010-11-24 10:40 . 2010-11-24 10:40 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2010-11-24 10:40 . 2010-11-24 10:40 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2010-04-04 10:39 . 2010-04-04 10:39 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2010-11-24 10:40 . 2010-11-24 10:40 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2010-04-04 10:39 . 2010-04-04 10:39 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2010-11-24 10:27 . 2010-11-24 10:27 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2010-11-24 10:59 . 2010-11-24 10:59 10576 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll + 2010-11-24 10:59 . 2010-11-24 10:59 11112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll + 2010-11-24 11:00 . 2010-11-24 11:00 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll + 2010-11-24 10:58 . 2010-11-24 10:58 11136 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll + 2010-11-24 11:01 . 2010-11-24 11:01 11152 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll + 2010-11-24 10:58 . 2010-11-24 10:58 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll + 2010-11-24 11:00 . 2010-11-24 11:00 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll + 2010-11-24 10:59 . 2010-11-24 10:59 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2010-11-24 10:58 . 2010-11-24 10:58 19320 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll - 2010-04-04 10:39 . 2010-04-04 10:39 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2010-11-24 10:40 . 2010-11-24 10:40 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2009-04-15 04:32 . 2010-08-13 15:44 5120 c:\windows\system32\xpsp4res.dll + 2001-10-19 21:06 . 2009-11-27 16:09 8704 c:\windows\system32\tsbyuv.dll + 2010-11-24 09:58 . 2009-11-27 16:09 8704 c:\windows\Driver Cache\i386\tsbyuv.dll - 2010-04-04 10:39 . 2010-04-04 10:39 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2010-11-24 10:40 . 2010-11-24 10:40 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2010-11-24 10:39 . 2010-11-24 10:39 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2010-04-04 10:39 . 2010-04-04 10:39 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2010-11-24 10:40 . 2010-11-24 10:40 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2010-04-04 10:39 . 2010-04-04 10:39 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2010-04-04 10:39 . 2010-04-04 10:39 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2010-11-24 10:40 . 2010-11-24 10:40 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2010-11-24 10:40 . 2010-11-24 10:40 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll - 2010-04-04 10:39 . 2010-04-04 10:39 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2010-11-24 10:40 . 2010-11-24 10:40 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll - 2010-04-04 10:39 . 2010-04-04 10:39 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2010-04-04 10:33 . 2009-08-06 16:24 209632 c:\windows\system32\wuweb.dll + 2010-04-04 10:33 . 2009-08-06 16:24 327896 c:\windows\system32\wucltui.dll + 2010-04-04 10:33 . 2009-08-06 16:23 575704 c:\windows\system32\wuapi.dll + 2009-04-24 19:58 . 2009-04-01 20:02 604160 c:\windows\system32\wmspdmod.dll + 2009-04-24 19:58 . 2009-07-13 20:43 286208 c:\windows\system32\wmpdxm.dll - 2009-04-24 19:52 . 2009-04-24 19:52 134144 c:\windows\system32\wkssvc.dll + 2009-04-24 19:52 . 2009-06-10 06:17 134144 c:\windows\system32\wkssvc.dll + 2008-04-15 13:00 . 2009-12-24 07:04 177664 c:\windows\system32\wintrust.dll - 2008-04-15 13:00 . 2008-04-15 13:00 293376 c:\windows\system32\winsrv.dll + 2008-04-15 13:00 . 2010-06-18 17:47 293376 c:\windows\system32\winsrv.dll + 2009-04-24 19:58 . 2010-03-10 06:17 420352 c:\windows\system32\vbscript.dll - 2009-04-24 19:58 . 2009-04-24 19:58 420352 c:\windows\system32\vbscript.dll - 2008-04-15 13:00 . 2008-04-15 13:00 406016 c:\windows\system32\usp10.dll + 2008-04-15 13:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll - 2009-04-24 19:52 . 2009-04-24 19:52 247326 c:\windows\system32\strmdll.dll + 2009-04-24 19:52 . 2009-08-26 08:03 247326 c:\windows\system32\strmdll.dll + 2009-04-24 20:00 . 2009-12-08 09:25 474112 c:\windows\system32\shlwapi.dll + 2009-04-24 19:52 . 2010-06-30 12:24 149504 c:\windows\system32\schannel.dll + 2008-04-15 13:00 . 2010-08-16 08:45 590848 c:\windows\system32\rpcrt4.dll + 2008-04-15 13:00 . 2009-10-12 13:40 150016 c:\windows\system32\rastls.dll - 2008-04-15 13:00 . 2010-11-23 07:45 451468 c:\windows\system32\perfh019.dat + 2008-04-15 13:00 . 2010-11-24 10:41 451468 c:\windows\system32\perfh019.dat + 2008-04-15 13:00 . 2010-11-24 10:41 409232 c:\windows\system32\perfh009.dat - 2008-04-15 13:00 . 2010-11-23 07:45 409232 c:\windows\system32\perfh009.dat + 2009-04-24 19:59 . 2010-09-10 05:51 206848 c:\windows\system32\occache.dll - 2008-04-15 13:00 . 2008-04-15 13:00 270848 c:\windows\system32\oakley.dll + 2008-04-15 13:00 . 2009-10-13 10:34 270848 c:\windows\system32\oakley.dll + 2010-04-04 10:31 . 2009-08-06 16:23 215920 c:\windows\system32\muweb.dll + 2010-04-04 10:31 . 2009-08-06 16:23 274288 c:\windows\system32\mucltui.dll + 2008-04-15 13:00 . 2009-08-05 09:01 204800 c:\windows\system32\mswebdvd.dll + 2009-04-24 19:51 . 2009-09-11 14:15 136704 c:\windows\system32\msv1_0.dll + 2009-04-24 19:57 . 2010-09-10 05:51 611840 c:\windows\system32\mstime.dll - 2009-04-24 19:57 . 2009-04-24 19:57 611840 c:\windows\system32\mstime.dll + 2009-03-19 15:51 . 2010-09-10 05:51 602112 c:\windows\system32\msfeeds.dll + 2009-11-05 19:17 . 2009-11-05 19:17 297808 c:\windows\system32\mscoree.dll + 2009-04-24 19:51 . 2009-06-26 12:12 732160 c:\windows\system32\lsasrv.dll + 2009-04-24 19:51 . 2009-05-07 15:16 347136 c:\windows\system32\localspl.dll + 2008-04-15 13:00 . 2009-06-25 08:42 301568 c:\windows\system32\kerberos.dll + 2010-11-24 11:30 . 2009-03-10 19:18 454536 c:\windows\system32\KB905474\wgasetup.exe + 2009-04-24 19:57 . 2009-06-22 06:48 726528 c:\windows\system32\jscript.dll - 2009-04-24 19:57 . 2009-04-24 19:57 726528 c:\windows\system32\jscript.dll - 2010-04-04 10:32 . 2009-04-24 19:51 691712 c:\windows\system32\inetcomm.dll + 2010-04-04 10:32 . 2010-01-29 14:54 691712 c:\windows\system32\inetcomm.dll + 2009-04-24 19:57 . 2010-09-10 05:51 184320 c:\windows\system32\iepeers.dll + 2009-04-24 19:57 . 2010-09-10 05:51 387584 c:\windows\system32\iedkcs32.dll + 2009-04-24 19:57 . 2010-08-26 12:22 173056 c:\windows\system32\ie4uinit.exe - 2009-04-24 19:57 . 2009-04-24 19:57 173056 c:\windows\system32\ie4uinit.exe - 2010-04-04 14:20 . 2010-10-11 11:58 192976 c:\windows\system32\FNTCACHE.DAT + 2010-04-04 14:20 . 2010-11-24 11:32 192976 c:\windows\system32\FNTCACHE.DAT + 2009-04-24 19:52 . 2010-02-11 11:36 226880 c:\windows\system32\drivers\tcpip6.sys + 2010-04-04 10:33 . 2009-08-06 16:24 209632 c:\windows\system32\dllcache\wuweb.dll + 2010-04-04 10:33 . 2009-08-06 16:24 327896 c:\windows\system32\dllcache\wucltui.dll + 2009-04-24 19:58 . 2009-04-01 20:02 604160 c:\windows\system32\dllcache\wmspdmod.dll + 2009-04-24 19:58 . 2009-07-13 20:43 286208 c:\windows\system32\dllcache\wmpdxm.dll + 2009-04-24 19:52 . 2009-06-10 06:17 134144 c:\windows\system32\dllcache\wkssvc.dll - 2009-04-24 19:52 . 2009-04-24 19:52 134144 c:\windows\system32\dllcache\wkssvc.dll + 2008-04-15 13:00 . 2009-12-24 07:04 177664 c:\windows\system32\dllcache\wintrust.dll + 2008-04-15 13:00 . 2010-06-18 17:47 293376 c:\windows\system32\dllcache\winsrv.dll - 2008-04-15 13:00 . 2008-04-15 13:00 293376 c:\windows\system32\dllcache\winsrv.dll - 2009-04-24 19:58 . 2009-04-24 19:58 420352 c:\windows\system32\dllcache\vbscript.dll + 2009-04-24 19:58 . 2010-03-10 06:17 420352 c:\windows\system32\dllcache\vbscript.dll - 2008-04-15 13:00 . 2008-04-15 13:00 406016 c:\windows\system32\dllcache\usp10.dll + 2008-04-15 13:00 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll + 2010-04-04 10:32 . 2009-06-21 21:48 153088 c:\windows\system32\dllcache\triedit.dll - 2010-04-04 10:32 . 2008-04-15 13:00 153088 c:\windows\system32\dllcache\triedit.dll + 2009-04-24 19:52 . 2010-02-11 11:36 226880 c:\windows\system32\dllcache\tcpip6.sys + 2008-04-15 13:00 . 2010-08-27 08:03 119808 c:\windows\system32\dllcache\t2embed.dll - 2009-04-24 19:52 . 2009-04-24 19:52 247326 c:\windows\system32\dllcache\strmdll.dll + 2009-04-24 19:52 . 2009-08-26 08:03 247326 c:\windows\system32\dllcache\strmdll.dll + 2009-04-24 19:52 . 2010-06-30 12:24 149504 c:\windows\system32\dllcache\schannel.dll + 2008-04-15 13:00 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll + 2008-04-15 13:00 . 2009-10-12 13:40 150016 c:\windows\system32\dllcache\rastls.dll + 2010-04-04 10:31 . 2010-09-10 05:51 206848 c:\windows\system32\dllcache\occache.dll + 2008-04-15 13:00 . 2009-10-13 10:34 270848 c:\windows\system32\dllcache\oakley.dll - 2008-04-15 13:00 . 2008-04-15 13:00 270848 c:\windows\system32\dllcache\oakley.dll + 2008-04-15 13:00 . 2009-08-05 09:01 204800 c:\windows\system32\dllcache\mswebdvd.dll + 2009-04-24 19:51 . 2009-09-11 14:15 136704 c:\windows\system32\dllcache\msv1_0.dll - 2009-04-24 19:57 . 2009-04-24 19:57 611840 c:\windows\system32\dllcache\mstime.dll + 2009-04-24 19:57 . 2010-09-10 05:51 611840 c:\windows\system32\dllcache\mstime.dll + 2009-04-24 19:51 . 2009-06-26 12:12 732160 c:\windows\system32\dllcache\lsasrv.dll + 2009-04-24 19:51 . 2009-05-07 15:16 347136 c:\windows\system32\dllcache\localspl.dll + 2008-04-15 13:00 . 2009-06-25 08:42 301568 c:\windows\system32\dllcache\kerberos.dll + 2009-04-24 19:57 . 2009-06-22 06:48 726528 c:\windows\system32\dllcache\jscript.dll - 2009-04-24 19:57 . 2009-04-24 19:57 726528 c:\windows\system32\dllcache\jscript.dll - 2010-04-04 10:32 . 2009-04-24 19:51 691712 c:\windows\system32\dllcache\inetcomm.dll + 2010-04-04 10:32 . 2010-01-29 14:54 691712 c:\windows\system32\dllcache\inetcomm.dll + 2009-04-24 19:57 . 2010-09-10 05:51 184320 c:\windows\system32\dllcache\iepeers.dll + 2009-04-24 19:57 . 2010-09-10 05:51 387584 c:\windows\system32\dllcache\iedkcs32.dll - 2009-04-24 19:57 . 2009-04-24 19:57 173056 c:\windows\system32\dllcache\ie4uinit.exe + 2009-04-24 19:57 . 2010-08-26 12:22 173056 c:\windows\system32\dllcache\ie4uinit.exe + 2010-04-04 10:32 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe - 2010-04-04 10:32 . 2008-04-15 13:00 744448 c:\windows\system32\dllcache\helpsvc.exe + 2008-04-15 13:00 . 2010-02-12 04:29 100864 c:\windows\system32\dllcache\6to4svc.dll + 2008-04-15 13:00 . 2010-02-12 04:29 100864 c:\windows\system32\6to4svc.dll + 2010-04-04 10:32 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe - 2010-04-04 10:32 . 2008-04-15 13:00 744448 c:\windows\pchealth\helpctr\binaries\HelpSvc.exe + 2009-08-07 23:35 . 2009-08-07 23:35 819016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2010-09-22 23:26 . 2010-09-22 23:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2007-04-13 17:58 . 2007-04-13 17:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2007-04-13 17:56 . 2007-04-13 17:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2010-09-22 23:25 . 2010-09-22 23:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2007-04-13 18:30 . 2007-04-13 18:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2010-09-23 00:17 . 2010-09-23 00:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2010-11-24 11:12 . 2010-11-24 11:12 499712 c:\windows\Installer\969f0.msi + 2009-04-04 11:28 . 2009-04-04 11:28 971776 c:\windows\Installer\9699e.msp + 2009-05-26 15:53 . 2009-05-26 15:53 579072 c:\windows\Installer\96819.msp + 2010-11-24 10:33 . 2010-11-24 10:33 195584 c:\windows\Installer\96803.msi + 2010-11-24 10:23 . 2010-11-24 10:23 248832 c:\windows\Installer\96784.msi + 2010-11-24 10:48 . 2010-11-24 10:48 217864 c:\windows\Installer\{90120000-006E-0419-0000-0000000FF1CE}\misc.exe - 2010-04-04 12:29 . 2010-04-04 12:29 217864 c:\windows\Installer\{90120000-006E-0419-0000-0000000FF1CE}\misc.exe - 2010-04-04 12:21 . 2010-04-04 12:27 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe + 2010-04-04 12:21 . 2010-11-24 11:27 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2010-04-04 12:21 . 2010-04-04 12:27 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2010-04-04 12:21 . 2010-11-24 11:27 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2010-04-04 12:21 . 2010-11-24 11:27 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe - 2010-04-04 12:21 . 2010-04-04 12:27 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe + 2010-04-04 12:21 . 2010-11-24 11:27 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2010-04-04 12:21 . 2010-04-04 12:27 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe + 2010-04-04 12:21 . 2010-11-24 11:27 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe - 2010-04-04 12:21 . 2010-04-04 12:27 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe - 2010-04-04 12:21 . 2010-04-04 12:27 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe + 2010-04-04 12:21 . 2010-11-24 11:27 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe + 2010-04-04 12:21 . 2010-11-24 11:27 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe - 2010-04-04 12:21 . 2010-04-04 12:27 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2007-06-07 15:51 . 2007-06-07 15:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\SSGEN.DLL + 2010-11-24 11:01 . 2010-11-24 11:01 350064 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PPTPIA.DLL + 2009-04-03 15:04 . 2009-04-03 15:04 521064 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\POWERPNT.EXE + 2007-06-07 15:51 . 2007-06-07 15:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLFLTR.DLL + 2006-10-26 16:49 . 2006-10-26 16:49 509200 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WRD12CVR.DLL + 2006-10-26 17:07 . 2006-10-26 17:07 368968 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPSLAX.DLL + 2006-10-27 11:16 . 2006-10-27 11:16 138512 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLCTL.DLL + 2006-10-26 16:55 . 2006-10-26 16:55 254776 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OLKFSTUB.DLL + 2006-10-20 04:37 . 2006-10-20 04:37 637744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OGALEGIT.DLL + 2010-04-04 12:18 . 2010-04-04 12:18 416544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFICE.DLL + 2006-10-26 15:55 . 2006-10-26 15:55 145688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTORE.EXE + 2006-10-26 10:47 . 2006-10-26 10:47 727840 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSPROOF6.DLL + 2006-10-26 15:52 . 2006-10-26 15:52 460616 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MODHELP.DLL + 2006-10-26 16:55 . 2006-10-26 16:55 138024 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IMPMAIL.DLL + 2006-10-26 16:00 . 2006-10-26 16:00 178488 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IETAG.DLL + 2010-04-04 12:18 . 2010-04-04 12:18 150320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GRAPHPIA.DLL + 2006-10-26 16:55 . 2006-10-26 16:55 154960 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ENVELOPE.DLL + 2006-10-26 16:55 . 2006-10-26 16:55 116544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EMABLT32.DLL + 2006-10-26 16:12 . 2006-10-26 16:12 106824 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\DSSM.EXE + 2010-11-24 10:33 . 2009-04-24 19:58 420352 c:\windows\ie8updates\KB981332-IE8\vbscript.dll + 2010-11-24 10:33 . 2009-05-26 11:43 391032 c:\windows\ie8updates\KB981332-IE8\spuninst\updspapi.dll + 2010-11-24 10:33 . 2009-05-26 11:43 232824 c:\windows\ie8updates\KB981332-IE8\spuninst\spuninst.exe + 2010-11-24 10:27 . 2008-07-08 13:21 391032 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll + 2010-11-24 10:27 . 2008-07-08 13:21 232824 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe + 2010-11-24 10:27 . 2009-04-24 19:57 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll + 2010-11-24 11:15 . 2010-07-05 13:35 391032 c:\windows\ie8updates\KB2360131-IE8\spuninst\updspapi.dll + 2010-11-24 11:15 . 2010-02-22 14:43 232824 c:\windows\ie8updates\KB2360131-IE8\spuninst\spuninst.exe + 2010-11-24 11:15 . 2009-03-08 00:34 109568 c:\windows\ie8updates\KB2360131-IE8\occache.dll + 2010-11-24 11:15 . 2009-04-24 19:57 611840 c:\windows\ie8updates\KB2360131-IE8\mstime.dll + 2010-11-24 11:15 . 2009-03-19 15:51 594432 c:\windows\ie8updates\KB2360131-IE8\msfeeds.dll + 2010-11-24 11:15 . 2009-03-20 08:34 246784 c:\windows\ie8updates\KB2360131-IE8\ieproxy.dll + 2010-11-24 11:15 . 2009-04-24 19:57 183808 c:\windows\ie8updates\KB2360131-IE8\iepeers.dll + 2010-11-24 11:15 . 2009-03-20 08:34 742912 c:\windows\ie8updates\KB2360131-IE8\iedvtool.dll + 2010-11-24 11:15 . 2009-04-24 19:57 391536 c:\windows\ie8updates\KB2360131-IE8\iedkcs32.dll + 2010-11-24 11:15 . 2009-04-24 19:57 173056 c:\windows\ie8updates\KB2360131-IE8\ie4uinit.exe + 2010-11-24 10:28 . 2010-11-24 10:28 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_1220fd42\System.Drawing.dll + 2010-11-24 10:28 . 2010-11-24 10:28 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_3025d18c\System.Drawing.Design.dll + 2010-11-24 10:28 . 2010-11-24 10:28 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_389bee90\CustomMarshalers.dll + 2010-11-24 11:13 . 2010-11-24 11:13 237568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6b8f2e778eba3931057217c2512b201c\System.Web.RegularExpressions.ni.dll + 2010-11-24 11:09 . 2010-11-24 11:09 684032 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4bdd3ce8337c4619dfb09de5ab3f9b62\System.Transactions.ni.dll + 2010-11-24 11:09 . 2010-11-24 11:09 233472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\47d862e0dc37c830cc3397decf6c0590\System.ServiceProcess.ni.dll + 2010-11-24 11:09 . 2010-11-24 11:09 733184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\428a3be3d5be01f129e0effdc455d831\System.Security.ni.dll + 2010-11-24 11:08 . 2010-11-24 11:08 294912 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\ff85d9d54701c8cde7b513ff808fd5e3\System.EnterpriseServices.Wrapper.dll + 2010-11-24 11:08 . 2010-11-24 11:08 659456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\ff85d9d54701c8cde7b513ff808fd5e3\System.EnterpriseServices.ni.dll + 2010-11-24 10:57 . 2010-11-24 10:57 229376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\4593151ab44d4f61e4cafaf9e77a8d25\System.Drawing.Design.ni.dll + 2010-11-24 11:08 . 2010-11-24 11:08 512000 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\135aa2f31c01565700d44313b925a205\System.DirectoryServices.Protocols.ni.dll + 2010-11-24 11:07 . 2010-11-24 11:07 167936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\ab1dd1079764acac4cbe55d6555f4ff7\Microsoft.Build.Utilities.ni.dll + 2010-11-24 11:06 . 2010-11-24 11:06 876544 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9e2334dbe9e76dd6fc2bde86c9b515b9\Microsoft.Build.Engine.ni.dll + 2010-11-24 11:06 . 2010-11-24 11:06 237568 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\58ec7ce15fd463d65d3e45db4e0613cf\CustomMarshalers.ni.dll + 2010-11-24 11:06 . 2010-11-24 11:06 884736 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\2a66ea6b955eabdb437c6cfcac78c45e\AspNetMMCExt.ni.dll + 2010-11-24 10:39 . 2010-11-24 10:39 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2010-04-04 10:39 . 2010-04-04 10:39 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2010-11-24 10:39 . 2010-11-24 10:39 884736 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2010-04-04 10:39 . 2010-04-04 10:39 884736 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2010-11-24 10:39 . 2010-11-24 10:39 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2010-04-04 10:39 . 2010-04-04 10:39 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2010-04-04 10:39 . 2010-04-04 10:39 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2010-11-24 10:39 . 2010-11-24 10:39 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2010-11-24 10:40 . 2010-11-24 10:40 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2010-04-04 10:39 . 2010-04-04 10:39 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2010-11-24 10:40 . 2010-11-24 10:40 299008 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2010-04-04 10:39 . 2010-04-04 10:39 299008 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2010-11-24 10:40 . 2010-11-24 10:40 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2010-04-04 10:39 . 2010-04-04 10:39 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2010-04-04 10:39 . 2010-04-04 10:39 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2010-11-24 10:40 . 2010-11-24 10:40 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2010-04-04 10:39 . 2010-04-04 10:39 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2010-11-24 10:39 . 2010-11-24 10:39 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2010-11-24 10:40 . 2010-11-24 10:40 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2010-04-04 10:39 . 2010-04-04 10:39 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2010-04-04 10:39 . 2010-04-04 10:39 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2010-11-24 10:40 . 2010-11-24 10:40 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2010-11-24 10:39 . 2010-11-24 10:39 933888 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2010-04-04 10:39 . 2010-04-04 10:39 933888 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2010-04-04 10:39 . 2010-04-04 10:39 741376 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2010-11-24 10:39 . 2010-11-24 10:39 741376 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2010-04-04 10:39 . 2010-04-04 10:39 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2010-11-24 10:40 . 2010-11-24 10:40 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2010-11-24 10:40 . 2010-11-24 10:40 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2010-04-04 10:39 . 2010-04-04 10:39 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2010-11-24 10:40 . 2010-11-24 10:40 671744 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2010-04-04 10:39 . 2010-04-04 10:39 671744 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2010-04-04 10:39 . 2010-04-04 10:39 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2010-11-24 10:40 . 2010-11-24 10:40 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2010-04-04 10:39 . 2010-04-04 10:39 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2010-11-24 10:40 . 2010-11-24 10:40 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2010-04-04 10:39 . 2010-04-04 10:39 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2010-11-24 10:40 . 2010-11-24 10:40 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2010-04-04 10:39 . 2010-04-04 10:39 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2010-11-24 10:40 . 2010-11-24 10:40 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2010-04-04 10:39 . 2010-04-04 10:39 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2010-11-24 10:40 . 2010-11-24 10:40 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2010-11-24 10:39 . 2010-11-24 10:39 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2010-04-04 10:39 . 2010-04-04 10:39 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2010-11-24 10:40 . 2010-11-24 10:40 261120 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2010-04-04 10:39 . 2010-04-04 10:39 261120 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2010-11-24 10:40 . 2010-11-24 10:40 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2010-04-04 10:39 . 2010-04-04 10:39 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2010-11-24 10:40 . 2010-11-24 10:40 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2010-04-04 10:39 . 2010-04-04 10:39 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2010-11-24 10:40 . 2010-11-24 10:40 483840 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2010-04-04 10:39 . 2010-04-04 10:39 483840 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2010-11-24 10:58 . 2010-11-24 10:58 423784 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL + 2010-11-24 11:00 . 2010-11-24 11:00 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll + 2010-11-24 11:09 . 2010-11-24 11:09 350064 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll + 2010-11-24 10:58 . 2010-11-24 10:58 149352 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll + 2009-07-20 19:14 . 2009-07-20 19:14 1393480 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.30.2107.0_x-ww_bd5ca85e\msxml4.dll + 2010-04-04 10:33 . 2009-08-06 16:23 1929952 c:\windows\system32\wuaueng.dll + 2009-04-24 19:58 . 2010-04-06 01:52 2462720 c:\windows\system32\WMVCore.dll + 2009-04-24 20:00 . 2010-09-10 05:51 1210880 c:\windows\system32\urlmon.dll + 2009-04-24 20:00 . 2010-07-27 06:30 8479744 c:\windows\system32\shell32.dll - 2008-04-15 13:00 . 2008-04-15 13:00 1438208 c:\windows\system32\query.dll + 2008-04-15 13:00 . 2009-07-17 16:17 1438208 c:\windows\system32\query.dll + 2009-04-24 19:59 . 2010-02-05 18:27 1293312 c:\windows\system32\quartz.dll + 2008-04-15 13:00 . 2010-07-16 12:00 1287680 c:\windows\system32\ole32.dll + 2009-04-24 19:51 . 2010-04-28 05:19 2191872 c:\windows\system32\ntoskrnl.exe + 2009-02-09 15:18 . 2010-04-28 20:19 2068736 c:\windows\system32\ntkrnlpa.exe + 2009-07-20 19:16 . 2009-07-20 19:16 1393480 c:\windows\system32\msxml4.dll + 2009-04-24 19:59 . 2010-06-14 07:43 1172480 c:\windows\system32\msxml3.dll + 2010-04-04 10:30 . 2009-06-10 06:21 2066432 c:\windows\system32\mstscax.dll + 2009-04-24 19:59 . 2010-09-10 05:51 5957120 c:\windows\system32\mshtml.dll + 2010-11-24 11:30 . 2009-03-10 19:26 1440128 c:\windows\system32\KB905474\wganotifypackageinner.exe + 2009-03-19 15:50 . 2010-09-10 05:51 1986560 c:\windows\system32\iertutil.dll + 2009-08-17 20:33 . 2009-08-17 20:33 1193832 c:\windows\system32\FM20.DLL + 2010-04-04 10:33 . 2009-08-06 16:23 1929952 c:\windows\system32\dllcache\wuaueng.dll + 2009-04-24 19:58 . 2010-04-06 01:52 2462720 c:\windows\system32\dllcache\WMVCore.dll + 2009-04-24 19:52 . 2010-09-01 07:57 1862016 c:\windows\system32\dllcache\win32k.sys + 2008-04-15 13:00 . 2009-07-17 16:17 1438208 c:\windows\system32\dllcache\query.dll - 2008-04-15 13:00 . 2008-04-15 13:00 1438208 c:\windows\system32\dllcache\query.dll + 2008-04-15 13:00 . 2010-07-16 12:00 1287680 c:\windows\system32\dllcache\ole32.dll + 2010-04-28 20:19 . 2010-04-28 20:19 2068736 c:\windows\system32\dllcache\ntkrnlpa.exe + 2009-06-10 06:21 . 2009-06-10 06:21 2066432 c:\windows\system32\dllcache\mstscax.dll + 2010-04-04 10:32 . 2010-01-29 14:54 1315328 c:\windows\system32\dllcache\msoe.dll + 2010-04-04 10:31 . 2010-09-10 05:51 5957120 c:\windows\system32\dllcache\mshtml.dll - 2010-04-04 10:33 . 2008-04-15 13:00 3558912 c:\windows\system32\dllcache\moviemk.exe + 2010-04-04 10:33 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe + 2009-08-07 23:35 . 2009-08-07 23:35 5849920 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2009-08-07 23:35 . 2009-08-07 23:35 4345856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2007-04-13 18:35 . 2007-04-13 18:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2010-09-23 12:55 . 2010-09-23 12:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll - 2007-04-13 18:35 . 2007-04-13 18:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll + 2010-09-23 12:55 . 2010-09-23 12:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll + 2010-09-22 23:26 . 2010-09-22 23:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll - 2007-04-13 17:57 . 2007-04-13 17:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll - 2007-04-13 17:57 . 2007-04-13 17:57 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll + 2010-09-22 23:25 . 2010-09-22 23:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - 2007-04-13 17:50 . 2007-04-13 17:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2010-09-23 12:55 . 2010-09-23 12:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2010-02-20 22:03 . 2010-02-20 22:03 4472832 c:\windows\Installer\96a4c.msp + 2010-04-24 14:08 . 2010-04-24 14:08 9129984 c:\windows\Installer\96a36.msp + 2009-02-25 16:08 . 2009-02-25 16:08 8311808 c:\windows\Installer\96a1e.msp + 2009-08-05 04:49 . 2009-08-05 04:49 3457024 c:\windows\Installer\96a08.msp + 2010-03-24 15:54 . 2010-03-24 15:54 3126272 c:\windows\Installer\969e7.msp + 2010-03-24 15:54 . 2010-03-24 15:54 2516992 c:\windows\Installer\969e6.msp + 2009-07-27 01:31 . 2009-07-27 01:31 3738624 c:\windows\Installer\969ce.msp + 2010-04-24 14:07 . 2010-04-24 14:07 4667392 c:\windows\Installer\969b7.msp + 2009-04-04 12:57 . 2009-04-04 12:57 3320320 c:\windows\Installer\96997.msp + 2009-04-04 14:10 . 2009-04-04 14:10 9926144 c:\windows\Installer\9698f.msp + 2010-05-20 16:57 . 2010-05-20 16:57 4989952 c:\windows\Installer\96844.msp + 2010-05-20 16:57 . 2010-05-20 16:57 5907456 c:\windows\Installer\96843.msp + 2009-08-09 20:32 . 2009-08-09 20:32 5288960 c:\windows\Installer\9683a.msp + 2009-10-16 04:08 . 2009-10-16 04:08 2237952 c:\windows\Installer\96830.msp + 2010-04-24 14:05 . 2010-04-24 14:05 4199424 c:\windows\Installer\967fa.msp + 2009-08-18 10:08 . 2009-08-18 10:08 1373696 c:\windows\Installer\967e4.msp + 2010-04-24 14:10 . 2010-04-24 14:10 8486400 c:\windows\Installer\967b4.msp + 2010-07-10 17:14 . 2010-07-10 17:14 2850816 c:\windows\Installer\9679c.msp - 2010-04-04 12:21 . 2010-04-04 12:27 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe + 2010-04-04 12:21 . 2010-11-24 11:27 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - 2010-04-04 12:21 . 2010-04-04 12:27 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2010-04-04 12:21 . 2010-11-24 11:27 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2008-11-21 00:12 . 2008-11-21 00:12 3750256 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\VVIEWER.DLL + 2008-10-25 06:35 . 2008-10-25 06:35 1847160 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\VVIEWDWG.DLL + 2009-04-03 15:04 . 2009-04-03 15:04 8468840 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PPCORE.DLL + 2009-02-05 08:36 . 2009-02-05 08:36 1640800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OGL.DLL + 2009-03-06 01:26 . 2009-03-06 01:26 5291376 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\IPEDITOR.DLL + 2006-10-26 10:47 . 2006-10-26 10:47 1512304 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NLSD0000.DLL + 2010-04-04 12:18 . 2010-04-04 12:18 1276720 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXCELPIA.DLL + 2010-11-24 11:15 . 2009-04-24 20:00 1039872 c:\windows\ie8updates\KB2360131-IE8\wininet.dll + 2010-11-24 11:15 . 2009-04-24 20:00 1219584 c:\windows\ie8updates\KB2360131-IE8\urlmon.dll + 2010-11-24 11:15 . 2009-03-08 00:41 5937152 c:\windows\ie8updates\KB2360131-IE8\mshtml.dll + 2010-11-24 11:15 . 2009-03-19 15:50 1985024 c:\windows\ie8updates\KB2360131-IE8\iertutil.dll + 2010-11-24 07:57 . 2010-04-28 05:19 2191872 c:\windows\Driver Cache\i386\ntoskrnl.exe + 2010-11-24 07:57 . 2010-04-28 05:19 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe + 2010-04-28 20:19 . 2010-04-28 20:19 2068736 c:\windows\Driver Cache\i386\ntkrnlpa.exe + 2010-11-24 07:57 . 2010-04-28 05:19 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe + 2010-11-24 10:27 . 2010-11-24 10:27 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_a5b21c16\System.dll + 2010-11-24 10:28 . 2010-11-24 10:28 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_2aa0e033\System.dll + 2010-11-24 10:28 . 2010-11-24 10:28 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_7a63f44a\System.Xml.dll + 2010-11-24 10:29 . 2010-11-24 10:29 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_2a3126d2\System.Xml.dll + 2010-11-24 10:28 . 2010-11-24 10:28 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_4da12836\System.Windows.Forms.dll + 2010-11-24 10:29 . 2010-11-24 10:29 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_38e7b0ac\System.Windows.Forms.dll + 2010-11-24 10:29 . 2010-11-24 10:29 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_f90e902b\System.Drawing.dll + 2010-11-24 10:28 . 2010-11-24 10:28 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_c96112ae\System.Design.dll + 2010-11-24 10:29 . 2010-11-24 10:29 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_c0cd5f45\System.Design.dll + 2010-11-24 10:28 . 2010-11-24 10:28 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_eb3624ba\mscorlib.dll + 2010-11-24 10:29 . 2010-11-24 10:29 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_6c9f9be9\mscorlib.dll + 2010-11-24 10:49 . 2010-11-24 10:49 8310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System\ccfeb59f4a9b75909eb2d1121232a769\System.ni.dll + 2010-11-24 11:03 . 2010-11-24 11:03 5771264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\717cce3690d643df19d6a4117283048e\System.Xml.ni.dll + 2010-11-24 11:14 . 2010-11-24 11:14 1986560 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\aa319d767042e97c692041f76f123f2f\System.Web.Services.ni.dll + 2010-11-24 11:13 . 2010-11-24 11:13 2342912 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\b7092e8403b56e3913488855e45a35ff\System.Web.Mobile.ni.dll + 2010-11-24 10:56 . 2010-11-24 10:56 1667072 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e58e83951091f2616344c5d2a6787660\System.Drawing.ni.dll + 2010-11-24 11:08 . 2010-11-24 11:08 1224704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\e96695c65a4104ee4687f3e5f0581d34\System.DirectoryServices.ni.dll + 2010-11-24 11:08 . 2010-11-24 11:08 1798144 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\f0a1895c7d475f156ed4cdd9f0bd2797\System.Deployment.ni.dll + 2010-11-24 10:51 . 2010-11-24 10:51 7102464 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\b39a611d2b2fc659d5472dd76b24d3b2\System.Data.ni.dll + 2010-11-24 11:08 . 2010-11-24 11:08 1011712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e2de26078a8c3d29dbfcf408e23aa2b1\System.Configuration.ni.dll + 2010-11-24 11:08 . 2010-11-24 11:08 1740800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\ed0cdc51d89bb41a9ab760ca3cf52bf9\Microsoft.VisualBasic.ni.dll + 2010-11-24 11:06 . 2010-11-24 11:07 1695744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\b846f5c1b90e4222e79a420d92062f79\Microsoft.Build.Tasks.ni.dll + 2010-11-24 10:39 . 2010-11-24 10:39 3076096 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll - 2010-04-04 10:39 . 2010-04-04 10:39 3076096 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2010-11-24 10:39 . 2010-11-24 10:39 2068480 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2010-04-04 10:39 . 2010-04-04 10:39 2068480 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2010-11-24 10:40 . 2010-11-24 10:40 5013504 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2010-04-04 10:39 . 2010-04-04 10:39 5013504 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2010-11-24 10:40 . 2010-11-24 10:40 5070848 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2010-04-04 10:40 . 2010-04-04 10:40 5070848 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2010-04-04 10:39 . 2010-04-04 10:39 5431296 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2010-11-24 10:39 . 2010-11-24 10:39 5431296 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2010-11-24 10:40 . 2010-11-24 10:40 3036160 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2010-04-04 10:39 . 2010-04-04 10:39 3036160 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2010-11-24 10:39 . 2010-11-24 10:39 4345856 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2010-04-04 10:37 . 2010-04-04 10:37 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2010-11-24 10:27 . 2010-11-24 10:27 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll - 2010-04-04 10:37 . 2010-04-04 10:37 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2010-11-24 10:27 . 2010-11-24 10:27 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2010-11-24 11:00 . 2010-11-24 11:00 1279848 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll + 2009-04-24 19:58 . 2010-08-25 20:36 10841088 c:\windows\system32\wmp.dll + 2010-11-24 11:18 . 2010-11-02 13:47 35758536 c:\windows\system32\MRT.exe + 2009-03-19 15:50 . 2010-09-10 05:51 11080192 c:\windows\system32\ieframe.dll + 2009-04-24 19:58 . 2010-08-25 20:36 10841088 c:\windows\system32\dllcache\wmp.dll + 2010-09-24 11:08 . 2010-09-24 11:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp + 2010-04-24 14:09 . 2010-04-24 14:09 11750912 c:\windows\Installer\96a63.msp + 2009-04-04 14:09 . 2009-04-04 14:09 10874880 c:\windows\Installer\96984.msp + 2009-04-04 11:24 . 2009-04-04 11:24 20215296 c:\windows\Installer\9686a.msp + 2009-04-04 11:23 . 2009-04-04 11:23 14061568 c:\windows\Installer\9685a.msp + 2010-11-24 10:26 . 2010-11-24 10:26 17518080 c:\windows\Installer\967ce.msp + 2010-05-20 16:58 . 2010-05-20 16:58 12114432 c:\windows\Installer\9677d.msp + 2010-07-10 17:06 . 2010-07-10 17:06 10120192 c:\windows\Installer\96741.msp + 2009-04-03 15:46 . 2009-04-03 15:46 17314688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSO.DLL + 2009-04-03 15:11 . 2009-04-03 15:11 18330984 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\EXCEL.EXE + 2010-11-24 11:15 . 2009-03-19 15:50 11063808 c:\windows\ie8updates\KB2360131-IE8\ieframe.dll + 2010-11-24 11:00 . 2010-11-24 11:00 13193216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9d25b8eabd8203e4d0490363140c4526\System.Windows.Forms.ni.dll + 2010-11-24 11:12 . 2010-11-24 11:12 12517376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\16a34a274ee877b4cf03d1a1bb57eb82\System.Web.ni.dll + 2010-11-24 10:56 . 2010-11-24 10:56 10936320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\2aab58cae4d998cf867f483302e94c27\System.Design.ni.dll + 2010-11-24 10:44 . 2010-11-24 10:45 11436032 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\fee8c8ba9b84a7832274adcbfc9d5ca4\mscorlib.ni.dll + 2009-04-04 14:08 . 2009-04-04 14:08 343058432 c:\windows\Installer\96979.msp . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{91397D20-1446-11D4-8AF4-0040CA1127B6}"= "c:\program files\Yandex\YandexBarIE\yndbar.dll" [2010-02-16 8944968] [HKEY_CLASSES_ROOT\clsid\{91397d20-1446-11d4-8af4-0040ca1127b6}] [HKEY_CLASSES_ROOT\Yandex.Toolbar.1] [HKEY_CLASSES_ROOT\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}] [HKEY_CLASSES_ROOT\Yandex.Toolbar] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{91397D20-1446-11D4-8AF4-0040CA1127B6}"= "c:\program files\Yandex\YandexBarIE\yndbar.dll" [2010-02-16 8944968] [HKEY_CLASSES_ROOT\clsid\{91397d20-1446-11d4-8af4-0040ca1127b6}] [HKEY_CLASSES_ROOT\Yandex.Toolbar.1] [HKEY_CLASSES_ROOT\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}] [HKEY_CLASSES_ROOT\Yandex.Toolbar] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536] "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-06-26 1311312] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2009-04-24 30208] "VistaIcon"="c:\program files\VistaDriveIcon\VistaDrv.exe" [2008-01-02 132096] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "IE8_01"="shell32" [X] "ZZZZ2_FirstLogonSetting"="advpack.dll" [2009-04-24 128512] "IE8_02"="advpack.dll" [2009-04-24 128512] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMConfigurePrograms"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMConfigurePrograms"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn] 2010-05-06 09:29 64592 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0] 2010-09-22 14:11 640440 ----a-w- c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher] 2010-09-23 00:42 38840 ----a-w- c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2010-09-20 19:07 932288 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2010-09-23 00:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10] 2010-01-18 09:12 941320 ----a-w- c:\program files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] 2010-07-21 11:53 141608 ----a-w- c:\program files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2010-08-10 01:15 421888 ----a-w- c:\program files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBAntiVirus.exe] 2008-06-09 22:06 1257984 ----a-w- c:\program files\USBAntiVirus\USBAntiVirus.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VistaIcon] 2008-01-02 10:52 132096 ----a-w- c:\program files\VistaDriveIcon\VistaDrv.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "FirewallOverride"=dword:00000001 "UpdatesOverride"=dword:00000001 "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\IEPro\\MiniDM.exe"= R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [04.04.2010 13:41 721904] R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [14.09.2010 9:36 10448] . Contents of the 'Scheduled Tasks' folder 2010-09-15 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 07:50] 2010-11-24 c:\windows\Tasks\WGASetup.job - c:\windows\system32\KB905474\wgasetup.exe [2010-11-24 19:18] . . ------- Supplementary Scan ------- . uStart Page = about:blank uInternet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch uInternet Settings,ProxyOverride = *.local IE: &Экспорт в Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000 IE: Добавить к существующему PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html IE: Добавить содержимое по ссылке в существующий файл PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Преобразовать в Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html IE: Преобразовать содержимое по ссылке в PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html TCP: {E8189956-835C-4965-BAB4-D49AA400B7A5} = 83.220.35.98,83.220.43.42 FF - ProfilePath - c:\documents and settings\Admin\Application Data\Mozilla\Firefox\Profiles\byk96i7h.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.ru/ . - - - - ORPHANS REMOVED - - - - Toolbar-ITBar7Position - (no file) ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-11-24 15:02 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-1715567821-1767777339-1606980848-500\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (Administrator) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,64,79,fe,b2,e8,51,e5,4d,a0,32,29,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,52,54,69,8b,ba,bd,3a,48,a7,db,4b,\ "6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,52,54,69,8b,ba,bd,3a,48,a7,db,4b,\ . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(752) c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll c:\windows\system32\cscui.dll - - - - - - - > 'explorer.exe'(1488) c:\windows\system32\SHDOCVW.dll c:\windows\system32\WININET.dll c:\windows\system32\COMRes.dll c:\windows\System32\cscui.dll c:\windows\system32\msi.dll c:\windows\system32\wpdshserviceobj.dll c:\windows\system32\webcheck.dll c:\windows\system32\portabledevicetypes.dll c:\windows\system32\portabledeviceapi.dll c:\windows\system32\NETSHELL.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\Bonjour\mDNSResponder.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\SOUNDMAN.EXE c:\program files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE . ************************************************************************** . Completion time: 2010-11-24 15:07:34 - machine was rebooted ComboFix-quarantined-files.txt 2010-11-24 12:07 ComboFix2.txt 2010-11-24 09:57 ComboFix3.txt 2010-11-23 16:00 Pre-Run: 7 053 402 112 байт свободно Post-Run: 7 044 501 504 байт свободно - - End Of File - - 04D4E13627B660E529998009B26F621E