Seite 1 von 2 12 LetzteLetzte
Ergebnis 1 bis 10 von 19

Thema: Erratic PC issues

  1. #1
    Forenbenutzer
    Registriert seit
    21.04.2008
    Beiträge
    76

    Erratic PC issues

    Hi There,
    Last few days my PC has behaved erratically. Sometimes program shortcuts won't work, needing a restart (several times a day). Also a pop-up from my Tivo Desktop server stating inadequate system resources.
    It may or may not be worth noting I installed a new ADSL2+ modem yesterday. Internet connection has also been erratic, needing to switch off/on modem and/or restart PC.
    Any help would be greatly appreciated. I have been greatly assisted here over the years and am a previous donater.
    Thanks in advance
    Garmac.

    Code:
    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 7:16:38 PM, on 5/21/2011
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal
    
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\OptusNet DSL Internet\DSC.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\WINDOWS\VM305_STI.EXE
    C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
    C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
    C:\Program Files\DivX\DivX Update\DivXUpdate.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Freecorder\FLVSrvc.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
    C:\Program Files\TiVo\Desktop\TranscodingService.exe
    C:\Program Files\TiVo\Desktop\TiVoNotify.exe
    C:\Program Files\TiVo\Desktop\TiVoServer.exe
    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
    C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\LG Soft India\forteManager\bin\Monitor.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
    C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
    C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe
    C:\Program Files\Trend Micro\BM\TMBMSRV.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\msiexec.exe
    C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe
    
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
    O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
    O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Desktop Service Centre] C:\Program Files\OptusNet DSL Internet\DSC.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
    O4 - HKLM\..\Run: [DACSMiniApp] C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files\Freecorder\FLVSrvc.exe" /run
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
    O4 - HKCU\..\Run: [TranscodingService] "C:\Program Files\TiVo\Desktop\TranscodingService.exe" /auto
    O4 - HKCU\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify
    O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry /auto:TivoServer
    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe"
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - Startup: Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe
    O4 - Global Startup: forteManager.lnk = ?
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Security Activity Dashboard Service - Unknown owner - C:\Program Files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe (file missing)
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
    O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
    O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
    O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
    
    --
    End of file - 13581 bytes

  2. #2
    Forenbenutzer
    Registriert seit
    21.04.2008
    Beiträge
    76

    Re: Erratic PC issues

    Additional info.

    I am able to connect my laptop via ethernet to this PC and still gain access to internet whilst PC not working properly. So I am guessing the internet connectiion itself isnt a problem, just the PC itself.

    Hopefully this info confuses you less, lol.

  3. #3
    Moderator (global) Team-Mitglied Avatar von Jintan
    Registriert seit
    25.11.2006
    Beiträge
    6.369

    Re: Erratic PC issues

    Hello garmac,

    No infection showing here, or anything that might suggest problems. Let's get a more detailed look.

    Changing the modem shouldn't have effected too much, expect perhaps some Trend firewall or similar network function is blocking things.


    To make sure you have an accurate view of files there, make sure you can View Hidden Files. Also uncheck "Hide Extensions for Known File Types"



    To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs. Here are some antivirus disable tips if needed.

    ------------------

    Click here and download OldTimer's OTL to your desktop, then click that to open the scan display. At the top click "Scan All Users", then click "Run Scan". Make no other changes at this time.

    When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are also saved in the same location as OTL.exe. Post the contents of those back here please.

    -----------

    Click here and download the installer for Gmer to your desktop, then click that file to run Gmer.


    Once the opening scan finishes, click on Scan (again, before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan).

    When completed, click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.

    Note - If Gmer shows it has located infection once it's opening scan completes, do not click the Scan button. We don't want hidden malware settings to cause any problems. Instead, just click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.

    -----------

    Download aswMBR ( 511KB ) to your desktop.
    • Double click the aswMBR.exe icon to run it
    • Click the Scan button to start the scan
    • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
    Lebe den Tag!

    Jintan - Die Marke, bei der alles stimmt!

  4. #4
    Forenbenutzer
    Registriert seit
    21.04.2008
    Beiträge
    76

    Re: Erratic PC issues

    extras txt
    Code:
    OTL Extras logfile created on: 5/22/2011 9:11:28 AM - Run 1
    OTL by OldTimer - Version 3.2.22.3     Folder = C:\Documents and Settings\Owner\Desktop
    Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
    Internet Explorer (Version = 8.0.6001.18702)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
     
    2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 53.00% Memory free
    4.00 Gb Paging File | 3.00 Gb Available in Paging File | 79.00% Paging File free
    Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
    Drive C: | 149.05 Gb Total Space | 98.79 Gb Free Space | 66.28% Space Free | Partition Type: NTFS
    Drive F: | 931.51 Gb Total Space | 732.38 Gb Free Space | 78.62% Space Free | Partition Type: NTFS
     
    Computer Name: GKPC | User Name: Owner | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
     
    ========== Extra Registry (SafeList) ==========
     
     
    ========== File Associations ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
    .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
     
    [HKEY_USERS\S-1-5-21-299502267-2052111302-839522115-1003\SOFTWARE\Classes\<extension>]
    .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
     
    ========== Shell Spawning ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
    exefile [open] -- "%1" %*
    InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
    Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
     
    ========== Security Center Settings ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "FirstRunDisabled" = 1
    "AntiVirusDisableNotify" = 0
    "FirewallDisableNotify" = 0
    "UpdatesDisableNotify" = 0
    "AntiVirusOverride" = 0
    "FirewallOverride" = 0
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
    "DisableMonitoring" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
    "DisableMonitoring" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
    "DisableMonitoring" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
    "DisableMonitoring" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
     
    ========== System Restore Settings ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
    "DisableSR" = 0
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
    "Start" = 0
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
    "Start" = 2
     
    ========== Firewall Settings ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
    "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
    "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
    "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
    "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "EnableFirewall" = 1
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
    "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
    "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
    "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
    "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
    "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
    "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
    "5353:UDP" = 5353:UDP:LocalSubNet:Enabled:mDNS-SD/Bonjour
    "7288:TCP" = 7288:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7288
    "7289:TCP" = 7289:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7289
    "7290:TCP" = 7290:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7290
    "7291:TCP" = 7291:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7291
    "7292:TCP" = 7292:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7292
    "7293:TCP" = 7293:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7293
    "7294:TCP" = 7294:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7294
    "7295:TCP" = 7295:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7295
    "7296:TCP" = 7296:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7296
    "7297:TCP" = 7297:TCP:LocalSubNet:Enabled:TiVo HME Host: Port 7297
     
    ========== Authorized Applications List ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Development Company, L.P.)
    "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Development Company, L.P.)
    "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Development Company, L.P.)
    "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Development Company, L.P.)
    "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
    "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Development Company, L.P.)
    "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- (Hewlett-Packard)
    "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
    "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Development Company, L.P.)
    "C:\Program Files\LimeWire\LimeWire.exe" = C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
    "C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe" = C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:*:Enabled:Sony Ericsson Media Manager 1.2 -- (Sony Creative Software Inc.)
    "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" = C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe:LocalSubNet:Enabled:TiVo Transfer Service -- (TiVo Inc.)
    "C:\Program Files\TiVo\Desktop\TiVoServer.exe" = C:\Program Files\TiVo\Desktop\TiVoServer.exe:LocalSubNet:Enabled:TiVo Server Service -- (TiVo Inc.)
    "C:\Program Files\TiVo\Desktop\TiVoDesktop.exe" = C:\Program Files\TiVo\Desktop\TiVoDesktop.exe:LocalSubNet:Enabled:TiVo Desktop User Interface -- (TiVo Inc.)
    "C:\Program Files\TiVo\Desktop\curl.exe" = C:\Program Files\TiVo\Desktop\curl.exe:LocalSubNet:Enabled:TiVo Curl Service -- ()
     
     
    ========== HKEY_LOCAL_MACHINE Uninstall List ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{0609D0AF-1382-42BE-81DB-CF30F8B0F6E2}" = Serif PhotoPlus 6.0
    "{0A65A3BD-54B5-4d0d-B084-7688507813F5}" = SlideShow
    "{0C973594-7DDF-4BD0-84ED-3517F7622037}" = PC Connectivity Solution
    "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
    "{15C0AF59-4877-49B6-B8C6-A61CE54515F5}" = cp_OnlineProjectsConfig
    "{1CB92574-96F2-467B-B793-5CEB35C40C29}" = Image Resizer Powertoy for Windows XP
    "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
    "{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
    "{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
    "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
    "{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress
    "{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 23
    "{2F58D60D-2BFD-4467-9B4D-64E7355C329D}" = Sonic_PrimoSDK
    "{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 6.009.00
    "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
    "{33BF0960-DBA3-4187-B6CC-C969FCFA2D25}" = SkinsHP1
    "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
    "{363790D2-DA98-41DD-9C9F-69FA36B169DE}" = PanoStandAlone
    "{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
    "{3D39E775-DDDA-4327-B747-0BDC5F191331}" = Nokia PC Suite
    "{41E776A5-9B12-416D-9A12-B4F7B044EBED}" = CP_Package_Basic1
    "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
    "{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm
    "{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
    "{4E839090-3B68-436A-B3CF-A2A08C38DD26}" = TiVo Desktop 2.7
    "{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
    "{52D02A2B-03D2-4E34-A358-DC5D951FD296}" = Nokia Connectivity Cable Driver
    "{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
    "{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder
    "{57B2281D-A34A-4a48-8C68-169B8873659D}" = c4100_Help
    "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
    "{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
    "{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg
    "{6696D9A4-28A8-4F5A-8E9A-2E8974C8C39C}" = RandMap
    "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
    "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
    "{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
    "{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox
    "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
    "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
    "{6B3CA80E-6AC0-4725-BABF-9B0FEF880CB3}" = Power Tab Editor 1.7
    "{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
    "{718D791F-F4E8-4aa7-98A6-15FDED17BDD0}" = Trend Micro Internet Security Pro
    "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
    "{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
    "{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
    "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    "{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
    "{7C03270C-4FAB-4F5C-B10D-52FEDA190790}" = DocumentViewerQFolder
    "{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
    "{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
    "{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
    "{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}" = Bonjour
    "{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}" = DocProc
    "{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Graphics Media Accelerator Driver
    "{8AAB4176-A747-493A-A42C-B63CFADFD8E3}" = NVIDIA PhysX
    "{8AD824A5-1CCC-4BB7-82C9-E6FB25CC0479}" = VIMICRO USB PC Camera V
    "{8CD0B297-122D-4718-9CE1-B72E796F7B21}" = Sony Ericsson Media Manager 1.2
    "{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}" = Unload
    "{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
    "{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (English) 12
    "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
    "{90120000-0015-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
    "{90120000-0016-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
    "{90120000-0018-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
    "{90120000-0019-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
    "{90120000-001A-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
    "{90120000-001B-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
    "{90120000-001F-0409-0000-0000000FF1CE}_ULTIMATER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
    "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
    "{90120000-001F-040C-0000-0000000FF1CE}_ULTIMATER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
    "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
    "{90120000-001F-0C0A-0000-0000000FF1CE}_ULTIMATER_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
    "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
    "{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
    "{90120000-0044-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
    "{90120000-006E-0409-0000-0000000FF1CE}_ULTIMATER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
    "{90120000-00A1-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
    "{90120000-00BA-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
    "{90120000-0114-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
    "{90120000-0115-0409-0000-0000000FF1CE}_ULTIMATER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
    "{90120000-0117-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{91120000-002E-0000-0000-0000000FF1CE}" = Microsoft Office Ultimate 2007
    "{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
    "{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
    "{9422C8EA-B0C6-4197-B8FC-DC797658CA00}" = Windows Live Sign-in Assistant
    "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{974667E0-DEE8-CC3B-41CA-D7E7090D16C6}" = Brigade Kids
    "{983338D4-D972-4C58-AA6D-B81445070451}" = The Digital Arts and Crafts Studio
    "{996512CF-F35B-48DE-9291-557FA5316967}" = ScannerCopy
    "{9D2B0322-44AE-460E-9283-4D2D7A9205AE}" = Trend Micro Internet Security Pro
    "{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
    "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
    "{A29800BA-0BF1-4E63-9F31-DF05A87F4104}" = InstantShareDevices
    "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
    "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
    "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
    "{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.4
    "{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
    "{B2157760-AA3C-4E2E-BFE6-D20BC52495D9}" = cp_PosterPrintConfig
    "{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
    "{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
    "{B6286A44-7505-471A-A72B-04EC2DB2F442}" = CueTour
    "{B69CFE29-FD03-4E0A-87A7-6ED97F98E5B3}" = CP_Panorama1Config
    "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
    "{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}" = HP Photosmart, Officejet and Deskjet 7.0.A
    "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
    "{C1C6767D-B395-43CB-BF99-051B58B86DA6}" = PhotoGallery
    "{C559CCD6-E2B8-4C7B-9791-AB68F382F9C2}" = DirectShow Dump
    "{C5F1D23A-5282-467D-B0DA-B0D6F661D587}" = SAGEM F@st 1201
    "{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter
    "{C871525F-7116-4d26-BA6D-215F59B6F88B}" = C4100
    "{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
    "{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
    "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
    "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
    "{DA2D4D11-1811-4A24-B719-BF9F048C6106}" = Windows XP Creativity Fun Packs - Windows Movie Maker 2
    "{DA6FAB8D-E87A-4E8E-A3D3-B7B9F479C725}" = forteManager
    "{DBC20735-34E6-4E97-A9E5-2066B66B243D}" = TrayApp
    "{E1B80DEE-A795-4258-8445-074C06AE3AB8}" = MarketResearch
    "{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
    "{EC4455AB-F155-4CC1-A4C5-88F3777F9886}" = Apple Mobile Device Support
    "{ED2C557E-9C18-41FF-B58E-A05EEF0B3B5F}" = CP_CalendarTemplates1
    "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
    "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
    "{F157460F-720E-482f-8625-AD7843891E5F}" = InstantShareDevicesMFC
    "{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan
    "{F5C63795-2708-4D15-BF18-5ABBFF7DFFC8}" = iTunes
    "{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA
    "{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations
    "{FB4F9000-04FC-11E0-85D2-001AA037B01E}" = Google Earth Plug-in
    "{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA
    "{FE7E1DD7-EBCE-4696-ADE2-22BDBF2372DA}" = DocumentViewer
    "504244733D18C8F63FF584AEB290E3904E791693" = Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
    "9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Windows Driver Package - Nokia Modem  (05/22/2008 7.00.0.1)
    "Adobe AIR" = Adobe AIR
    "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
    "Adobe Shockwave Player" = Adobe Shockwave Player 11.5
    "Amazon Kindle For PC" = Amazon Kindle For PC
    "Audacity_is1" = Audacity 1.2.6
    "AVS Audio Editor_is1" = AVS Audio Editor version 4.2
    "AVS Update Manager_is1" = AVS Update Manager 1.0
    "AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
    "bitRipper" = bitRipper
    "C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Windows Driver Package - Nokia Modem  (05/22/2008 3.8)
    "CAL" = Canon Camera Access Library
    "CalorieKing Nutrition and Exercise Manager - Australian Edition" = CalorieKing Nutrition and Exercise Manager - Australian Edition (remove only)
    "CameraWindowDC" = Canon Utilities CameraWindow DC
    "CameraWindowDVC5" = Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
    "CameraWindowDVC6" = Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
    "CameraWindowLauncher" = Canon Utilities CameraWindow
    "Canon G.726 WMP-Decoder" = Canon G.726 WMP-Decoder
    "com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
    "CSCLIB" = Canon Camera Support Core Library
    "DivX Setup.divx.com" = DivX Setup
    "DVD Shrink_is1" = DVD Shrink 3.2
    "E8A6D621B6D3FC5D43C68C549D959DE76EEF5D84" = Windows Driver Package - Nokia Modem  (06/01/2009 4.1)
    "EfntSSDSL" = Siemens Subscriber Networks SpeedStream DSL
    "EOS Utility" = Canon Utilities EOS Utility
    "F779F5541ABD99C95C03B0FD5E3C058B22DA0FF7" = Windows Driver Package - Nokia Modem  (06/01/2009 7.01.0.3)
    "Freecorder4.12" = Freecorder 4
    "HP Document Viewer" = HP Document Viewer 7.0
    "HP Imaging Device Functions" = HP Imaging Device Functions 7.0
    "HP Photo & Imaging" = HP Photosmart Premier Software 6.5
    "HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0
    "HPExtendedCapabilities" = HP Customer Participation Program 7.0
    "HPOCR" = OCR Software by I.R.I.S 7.0
    "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
    "ie7" = Windows Internet Explorer 7
    "ie8" = Windows Internet Explorer 8
    "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
    "Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
    "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
    "MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX
    "Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10)
    "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
    "MyCamera" = Canon Utilities MyCamera
    "MyCameraDC" = Canon Utilities MyCamera DC
    "NeroMultiInstaller!UninstallKey" = Nero Suite
    "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
    "Nokia PC Suite" = Nokia PC Suite
    "NVIDIA Drivers" = NVIDIA Drivers
    "OptusNet DSL" = OptusNet DSL
    "PhotoStitch" = Canon Utilities PhotoStitch
    "RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX
    "RemoteCaptureTask" = Canon Utilities RemoteCapture Task for ZoomBrowser EX
    "save2pc Light_is1" = save2pc Light 4.02
    "SUPER ©" = SUPER © Version 2008.bld.33 (Sep 2, 2008)
    "Synaesthete_is1" = Synaesthete (v1.0)
    "Thomas Special Delivery" = Thomas Special Delivery (remove only)
    "TiVo Desktop 2.7" = TiVo Desktop 2.7
    "Tweak UI 2.10" = Tweak UI
    "ULTIMATER" = Microsoft Office Ultimate 2007
    "Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
    "Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
    "Windows Media Format Runtime" = Windows Media Format 11 runtime
    "Windows Media Player" = Windows Media Player 11
    "Windows XP Service Pack" = Windows XP Service Pack 3
    "WinGimp-2.0_is1" = GIMP 2.6.4
    "WinLiveSuite_Wave3" = Windows Live Essentials
    "WMFDist11" = Windows Media Format 11 runtime
    "wmp11" = Windows Media Player 11
    "Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5
    "Xvid_is1" = Xvid 1.2.1 final uninstall
    "ZoomBrowser EX" = Canon Utilities ZoomBrowser EX
    "ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility
     
    ========== HKEY_USERS Uninstall List ==========
     
    [HKEY_USERS\S-1-5-21-299502267-2052111302-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "Google Chrome" = Google Chrome
    "iTunes Agent 1.3" = iTunes Agent 1.3
     
    ========== Last 10 Event Log Errors ==========
     
    [ Application Events ]
    Error - 12/1/2010 7:59:08 PM | Computer Name = GKPC | Source = Application Error | ID = 1000
    Description = Faulting application dsc.exe, version 1.0.0.1, faulting module dsc.exe,
     version 1.0.0.1, fault address 0x0005d5a3.
     
    Error - 12/4/2010 6:04:32 PM | Computer Name = GKPC | Source = Application Hang | ID = 1002
    Description = Hanging application msimn.exe, version 6.0.2900.5512, hang module 
    hungapp, version 0.0.0.0, hang address 0x00000000.
     
    Error - 12/4/2010 7:54:55 PM | Computer Name = GKPC | Source = Application Hang | ID = 1002
    Description = Hanging application msimn.exe, version 6.0.2900.5512, hang module 
    hungapp, version 0.0.0.0, hang address 0x00000000.
     
    Error - 12/8/2010 12:45:08 AM | Computer Name = GKPC | Source = WindowsLiveMessenger | ID = 15728647
    Description = 
     
    Error - 12/8/2010 12:45:09 AM | Computer Name = GKPC | Source = WindowsLiveMessenger | ID = 15728647
    Description = 
     
    Error - 12/16/2010 3:24:02 AM | Computer Name = GKPC | Source = Application Hang | ID = 1002
    Description = Hanging application msimn.exe, version 6.0.2900.5512, hang module 
    hungapp, version 0.0.0.0, hang address 0x00000000.
     
    Error - 12/16/2010 3:55:22 AM | Computer Name = GKPC | Source = Application Error | ID = 1000
    Description = Faulting application pteditor.exe, version 1.7.0.80, faulting module
     pteditor.exe, version 1.7.0.80, fault address 0x0000fe0a.
     
    Error - 12/16/2010 12:21:48 PM | Computer Name = GKPC | Source = WindowsLiveMessenger | ID = 15728647
    Description = 
     
    Error - 12/24/2010 2:20:16 PM | Computer Name = GKPC | Source = Application Error | ID = 1000
    Description = Faulting application dsc.exe, version 1.0.0.1, faulting module dsc.exe,
     version 1.0.0.1, fault address 0x0005d5a3.
     
    Error - 12/31/2010 7:12:24 AM | Computer Name = GKPC | Source = Application Hang | ID = 1002
    Description = Hanging application wmplayer.exe, version 11.0.5721.5145, hang module
     hungapp, version 0.0.0.0, hang address 0x00000000.
     
    [ OSession Events ]
    Error - 8/16/2010 10:49:46 PM | Computer Name = GKPC | Source = Microsoft Office 12 Sessions | ID = 7001
    Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application 
    Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session 
    lasted 4261 seconds with 2400 seconds of active time.  This session ended with a
     crash.
     
    [ System Events ]
    Error - 10/9/2008 9:23:30 AM | Computer Name = GKPC | Source = SideBySide | ID = 16842811
    Description = Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC.  Reference
     error message: The referenced assembly is not installed on your system.  .
     
    Error - 10/9/2008 9:23:30 AM | Computer Name = GKPC | Source = SideBySide | ID = 16842811
    Description = Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL.
    Reference
     error message: The operation completed successfully.  .
     
    Error - 10/9/2008 12:24:21 PM | Computer Name = GKPC | Source = SideBySide | ID = 16842784
    Description = Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last
     Error was The referenced assembly is not installed on your system.  
     
    Error - 10/9/2008 12:24:21 PM | Computer Name = GKPC | Source = SideBySide | ID = 16842811
    Description = Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC.  Reference
     error message: The referenced assembly is not installed on your system.  .
     
    Error - 10/9/2008 12:24:21 PM | Computer Name = GKPC | Source = SideBySide | ID = 16842811
    Description = Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL.
    Reference
     error message: The operation completed successfully.  .
     
    Error - 10/9/2008 12:24:21 PM | Computer Name = GKPC | Source = SideBySide | ID = 16842784
    Description = Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last
     Error was The referenced assembly is not installed on your system.  
     
    Error - 10/9/2008 12:24:21 PM | Computer Name = GKPC | Source = SideBySide | ID = 16842811
    Description = Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC.  Reference
     error message: The referenced assembly is not installed on your system.  .
     
    Error - 10/9/2008 12:24:21 PM | Computer Name = GKPC | Source = SideBySide | ID = 16842811
    Description = Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL.
    Reference
     error message: The operation completed successfully.  .
     
    Error - 10/9/2008 3:25:11 PM | Computer Name = GKPC | Source = SideBySide | ID = 16842784
    Description = Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last
     Error was The referenced assembly is not installed on your system.  
     
    Error - 9/25/2020 12:22:53 AM | Computer Name = GKPC | Source = Dhcp | ID = 1000
    Description = Your computer has lost the lease to its IP address 192.168.1.100 on
     the  Network Card with network address 001D7DCFB50D.
     
     
    < End of report >


    otl.txt
    Code:
    OTL logfile created on: 5/22/2011 9:11:28 AM - Run 1
    OTL by OldTimer - Version 3.2.22.3     Folder = C:\Documents and Settings\Owner\Desktop
    Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
    Internet Explorer (Version = 8.0.6001.18702)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
     
    2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 53.00% Memory free
    4.00 Gb Paging File | 3.00 Gb Available in Paging File | 79.00% Paging File free
    Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
    Drive C: | 149.05 Gb Total Space | 98.79 Gb Free Space | 66.28% Space Free | Partition Type: NTFS
    Drive F: | 931.51 Gb Total Space | 732.38 Gb Free Space | 78.62% Space Free | Partition Type: NTFS
     
    Computer Name: GKPC | User Name: Owner | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
     
    ========== Processes (SafeList) ==========
     
    PRC - [2011/05/22 09:04:35 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe
    PRC - [2011/03/24 18:11:25 | 000,167,936 | ---- | M] (Applian Technologies, Inc.) -- C:\Program Files\Freecorder\FLVSrvc.exe
    PRC - [2011/02/15 11:32:52 | 001,230,704 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
    PRC - [2010/11/09 02:40:56 | 000,715,440 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
    PRC - [2010/09/15 08:59:44 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
    PRC - [2010/08/31 16:34:55 | 000,689,416 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
    PRC - [2010/08/31 16:34:55 | 000,497,008 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
    PRC - [2010/08/31 16:34:54 | 000,492,808 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe
    PRC - [2010/08/31 16:34:54 | 000,345,352 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe
    PRC - [2010/07/13 09:38:17 | 002,919,831 | ---- | M] (OptusNet) -- C:\Program Files\OptusNet DSL Internet\DSC.exe
    PRC - [2010/01/26 17:40:32 | 001,020,248 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
    PRC - [2010/01/04 19:59:46 | 000,083,280 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe
    PRC - [2009/09/24 13:41:58 | 000,434,176 | ---- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
    PRC - [2009/06/25 15:12:42 | 001,414,144 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
    PRC - [2009/06/02 10:10:08 | 000,637,952 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    PRC - [2009/05/28 13:45:00 | 000,132,096 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
    PRC - [2009/04/30 11:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
    PRC - [2009/03/30 10:11:14 | 000,120,320 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
    PRC - [2009/01/27 16:21:32 | 002,143,232 | ---- | M] (TiVo Inc.) -- C:\Program Files\TiVo\Desktop\TiVoServer.exe
    PRC - [2009/01/27 16:18:12 | 000,425,472 | ---- | M] (TiVo Inc.) -- C:\Program Files\TiVo\Desktop\TiVoNotify.exe
    PRC - [2009/01/27 16:05:46 | 000,315,392 | ---- | M] (TiVo Inc.) -- C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
    PRC - [2009/01/27 16:03:54 | 000,520,192 | ---- | M] (TiVo Inc.) -- C:\Program Files\TiVo\Desktop\TranscodingService.exe
    PRC - [2008/04/14 10:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
    PRC - [2008/03/27 10:44:02 | 001,126,400 | ---- | M] () -- C:\Program Files\LG Soft India\forteManager\bin\Monitor.exe
    PRC - [2008/03/13 11:05:06 | 000,128,256 | ---- | M] (Mattel Inc.) -- C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe
    PRC - [2007/08/09 17:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
    PRC - [2007/01/31 13:55:42 | 000,096,370 | ---- | M] (Canon Inc.) -- C:\Program Files\Canon\CAL\CALMAIN.exe
    PRC - [2006/02/10 07:56:12 | 000,479,232 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    PRC - [2005/08/05 14:15:04 | 000,061,440 | ---- | M] (Vimicro) -- C:\WINDOWS\VM305_STI.exe
     
     
    ========== Modules (SafeList) ==========
     
    MOD - [2011/05/22 09:04:35 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe
    MOD - [2011/05/22 08:56:20 | 000,018,432 | ---- | M] (Applian Technologies, Inc.) -- C:\Documents and Settings\Owner\Local Settings\Application Data\FLVService\lib\FLVSrvLib.dll
    MOD - [2011/01/11 04:27:10 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcr80.dll
    MOD - [2011/01/10 21:21:34 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_7837863c\ATL80.dll
    MOD - [2010/08/31 16:35:02 | 000,128,264 | ---- | M] () -- C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEHook.dll
    MOD - [2010/08/24 02:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
    MOD - [2007/11/07 02:19:32 | 000,655,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
     
     
    ========== Win32 Services (SafeList) ==========
     
    SRV - File not found [Auto | Stopped] --  -- (Security Activity Dashboard Service)
    SRV - File not found [Disabled | Stopped] --  -- (HidServ)
    SRV - [2010/11/09 02:40:56 | 000,715,440 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe -- (SfCtlCom)
    SRV - [2010/08/31 16:34:55 | 000,689,416 | ---- | M] (Trend Micro Inc.) [On_Demand | Running] -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe -- (TmProxy)
    SRV - [2010/08/31 16:34:55 | 000,497,008 | ---- | M] (Trend Micro Inc.) [On_Demand | Running] -- C:\Program Files\Trend Micro\Internet Security\TmPfw.exe -- (TmPfw)
    SRV - [2010/08/31 16:34:54 | 000,345,352 | ---- | M] (Trend Micro Inc.) [On_Demand | Running] -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe -- (TMBMServer)
    SRV - [2009/06/02 10:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
    SRV - [2009/04/30 11:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service)
    SRV - [2007/08/09 17:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
    SRV - [2007/01/31 13:55:42 | 000,096,370 | ---- | M] (Canon Inc.) [Auto | Running] -- C:\Program Files\Canon\CAL\CALMAIN.exe -- (CCALib8)
     
     
    ========== Driver Services (SafeList) ==========
     
    DRV - [2012/08/06 10:54:23 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
    DRV - [2010/08/31 16:35:07 | 000,339,984 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TM_CFW.sys -- (tmcfw)
    DRV - [2010/08/31 16:35:07 | 000,089,872 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tmtdi.sys -- (tmtdi)
    DRV - [2010/07/31 03:29:10 | 000,249,424 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmxpflt.sys -- (tmxpflt)
    DRV - [2010/07/31 03:29:00 | 000,036,432 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmpreflt.sys -- (tmpreflt)
    DRV - [2010/07/31 03:06:08 | 001,331,512 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vsapint.sys -- (vsapint)
    DRV - [2010/07/20 04:03:10 | 000,059,472 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tmactmon.sys -- (tmactmon)
    DRV - [2010/07/20 04:03:00 | 000,051,792 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tmevtmgr.sys -- (tmevtmgr)
    DRV - [2010/07/20 04:02:54 | 000,163,408 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm)
    DRV - [2009/02/09 08:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
    DRV - [2009/02/09 08:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
    DRV - [2009/02/09 08:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
    DRV - [2009/02/09 08:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
    DRV - [2008/11/04 11:45:46 | 000,109,736 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM)
    DRV - [2008/11/04 11:45:46 | 000,108,200 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM)
    DRV - [2008/11/04 11:45:46 | 000,104,616 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex)
    DRV - [2008/11/04 11:45:44 | 000,114,472 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm)
    DRV - [2008/11/04 11:45:44 | 000,086,696 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM)
    DRV - [2008/11/04 11:45:44 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS)
    DRV - [2008/11/04 11:45:44 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl)
    DRV - [2008/08/26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
    DRV - [2008/03/27 10:42:46 | 000,014,336 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\LG Soft India\forteManager\bin\I2CDriver.sys -- (LGDDCDevice)
    DRV - [2008/03/27 10:42:46 | 000,013,312 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\LG Soft India\forteManager\bin\PII2CDriver.sys -- (LGII2CDevice)
    DRV - [2008/02/14 19:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
    DRV - [2008/01/09 11:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
    DRV - [2008/01/04 00:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
    DRV - [2006/05/08 12:24:24 | 000,391,688 | R--- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbVM305.sys -- (ZSMC0305)
     
     
    ========== Standard Registry (SafeList) ==========
     
     
    ========== Internet Explorer ==========
     
     
     
    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
     
    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
     
     
     
    IE - HKU\S-1-5-21-299502267-2052111302-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.au/
    IE - HKU\S-1-5-21-299502267-2052111302-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    IE - HKU\S-1-5-21-299502267-2052111302-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
     
    ========== FireFox ==========
     
    FF - prefs.js..browser.search.update: false
    FF - prefs.js..browser.startup.homepage: "http://www.google.com.au"
    FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
    FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
    FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
    FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
    FF - prefs.js..extensions.enabledItems: {1392b8d2-5c05-419f-a8f6-b9f15a596612}:3.3.3.2
    FF - prefs.js..keyword.URL: "http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZUfox000&fl=0&ptb=kqakC5FHzpHfdfOssADV1A&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=kwd&searchfor="
     
    FF - HKLM\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009/10/02 14:59:29 | 000,000,000 | ---D | M]
    FF - HKLM\software\mozilla\Firefox\extensions\\{22181a4d-af90-4ca3-a569-faed9118d6bc}: C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\FirefoxExtension [2011/03/19 19:17:16 | 000,000,000 | ---D | M]
    FF - HKLM\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011/03/11 10:32:02 | 000,000,000 | ---D | M]
    FF - HKLM\software\mozilla\Firefox\extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011/03/11 10:32:02 | 000,000,000 | ---D | M]
    FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/12/03 16:20:55 | 000,000,000 | ---D | M]
    FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/28 13:01:33 | 000,000,000 | ---D | M]
     
    [2009/03/12 10:07:57 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Extensions
    [2009/03/12 10:07:57 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Extensions\mozswing@mozswing.org
    [2011/04/16 08:33:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\extensions
    [2011/04/15 09:17:45 | 000,000,000 | ---D | M] (Freecorder Community Toolbar) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
    [2009/08/26 06:04:13 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
    [2009/06/12 16:12:42 | 000,000,000 | ---D | M] (MidnightFox) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\extensions\{66871bd1-5ba2-4739-b485-2a15f5969bd8}
    [2009/12/03 13:16:15 | 000,000,000 | ---D | M] (CyberShadow's Bejeweled Blitz 3 Cheat) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\extensions\bejeweledblitz3cheat@thecybershadow.net
    [2011/04/15 09:17:45 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\extensions\engine@conduit.com
    [2011/04/15 09:17:45 | 000,000,000 | ---D | M] (YouTube Video Download Wizard) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\extensions\ytvdw@pgport.com
    [2009/09/25 22:08:04 | 000,009,941 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\searchplugins\mywebsearch.xml
    [2011/04/16 08:35:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
    [2011/01/20 09:32:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
    [2011/03/11 10:32:02 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 &lt;video&gt;) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\HTML5VIDEO
    [2011/03/11 10:32:02 | 000,000,000 | ---D | M] (DivX HiQ) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\WPA
    [2009/08/04 18:05:08 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
    [2010/11/12 17:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
    [2009/01/29 21:22:47 | 000,001,304 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google-com.xml
     
    O1 HOSTS File: ([2009/08/03 10:07:39 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
    O1 - Hosts: 127.0.0.1       localhost
    O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
    O2 - BHO: (TSToolbarBHO) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
    O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
    O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    O3 - HKLM\..\Toolbar: (Trend Micro Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
    O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
    O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
    O4 - HKLM..\Run: []  File not found
    O4 - HKLM..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE (Vimicro)
    O4 - HKLM..\Run: [DACSMiniApp] C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe (Mattel Inc.)
    O4 - HKLM..\Run: [Desktop Service Centre] C:\Program Files\OptusNet DSL Internet\DSC.exe (OptusNet)
    O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
    O4 - HKLM..\Run: [Freecorder FLV Service] C:\Program Files\Freecorder\FLVSrvc.exe (Applian Technologies, Inc.)
    O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
    O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
    O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
    O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
    O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
    O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
    O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
    O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
    O4 - HKLM..\Run: [UfSeAgnt.exe] C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe (Trend Micro Inc.)
    O4 - HKU\S-1-5-21-299502267-2052111302-839522115-1003..\Run: [Google Update]  File not found
    O4 - HKU\S-1-5-21-299502267-2052111302-839522115-1003..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (Trend Micro Inc.)
    O4 - HKU\S-1-5-21-299502267-2052111302-839522115-1003..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
    O4 - HKU\S-1-5-21-299502267-2052111302-839522115-1003..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe (Sony Ericsson Mobile Communications AB)
    O4 - HKU\S-1-5-21-299502267-2052111302-839522115-1003..\Run: [TivoNotify] C:\Program Files\TiVo\Desktop\TiVoNotify.exe (TiVo Inc.)
    O4 - HKU\S-1-5-21-299502267-2052111302-839522115-1003..\Run: [TivoServer] C:\Program Files\TiVo\Desktop\TiVoServer.exe (TiVo Inc.)
    O4 - HKU\S-1-5-21-299502267-2052111302-839522115-1003..\Run: [TranscodingService] C:\Program Files\TiVo\Desktop\TranscodingService.exe (TiVo Inc.)
    O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\forteManager.lnk = C:\Program Files\LG Soft India\forteManager\bin\Monitor.exe ()
    O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Development Company, L.P.)
    O4 - Startup: C:\Documents and Settings\Owner\Start Menu\Programs\Startup\Adobe Media Player.lnk =  File not found
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
    O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
    O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
    O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
    O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
    O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
    O7 - HKU\S-1-5-21-299502267-2052111302-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-21-299502267-2052111302-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
    O7 - HKU\S-1-5-21-299502267-2052111302-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
    O7 - HKU\S-1-5-21-299502267-2052111302-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab (Facebook Photo Uploader 5 Control)
    O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
    O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.1.1.1 192.168.1.1
    O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    O18 - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
    O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
    O24 - Desktop WallPaper: C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
    O24 - Desktop BackupWallPaper: C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
    O32 - HKLM CDRom: AutoRun - 1
    O32 - AutoRun File - [2008/09/10 16:16:33 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
    O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37 - HKLM\...com [@ = ComFile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*
     
    ========== Files/Folders - Created Within 30 Days ==========
     
    [2012/08/06 20:08:24 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
    [2012/08/06 20:07:36 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
    [2012/08/06 20:07:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
    [2012/08/06 20:07:35 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcommon.dll
    [2012/08/06 20:07:35 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcplui.dll
    [2012/08/06 20:07:34 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spttseng.dll
    [2012/08/06 20:07:33 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapisvr.exe
    [2012/08/06 20:07:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
    [2012/08/06 20:07:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
    [2012/08/06 20:07:32 | 000,000,000 | R--D | C] -- C:\Program Files
    [2012/08/06 20:07:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
    [2012/08/06 20:07:30 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll
    [2012/08/06 20:07:30 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll
    [2012/08/06 20:07:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuq.dll
    [2012/08/06 20:07:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuf.dll
    [2012/08/06 20:07:30 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll
    [2012/08/06 20:07:30 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdazel.dll
    [2012/08/06 20:07:28 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll
    [2012/08/06 20:07:28 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll
    [2012/08/06 20:07:28 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll
    [2012/08/06 20:07:28 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll
    [2012/08/06 20:07:28 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll
    [2012/08/06 20:07:28 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll
    [2012/08/06 20:07:28 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll
    [2012/08/06 20:07:28 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll
    [2012/08/06 20:07:28 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycc.dll
    [2012/08/06 20:07:28 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbduzb.dll
    [2012/08/06 20:07:28 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdur.dll
    [2012/08/06 20:07:28 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtat.dll
    [2012/08/06 20:07:28 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdmon.dll
    [2012/08/06 20:07:28 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkyr.dll
    [2012/08/06 20:07:28 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkaz.dll
    [2012/08/06 20:07:28 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdaze.dll
    [2012/08/06 20:07:27 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll
    [2012/08/06 20:07:27 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll
    [2012/08/06 20:07:27 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll
    [2012/08/06 20:07:27 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll
    [2012/08/06 20:07:27 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru1.dll
    [2012/08/06 20:07:27 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru.dll
    [2012/08/06 20:07:27 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdbu.dll
    [2012/08/06 20:07:27 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdblr.dll
    [2012/08/06 20:07:25 | 000,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll
    [2012/08/06 20:07:25 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhept.dll
    [2012/08/06 20:07:25 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll
    [2012/08/06 20:07:25 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela3.dll
    [2012/08/06 20:07:25 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll
    [2012/08/06 20:07:25 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll
    [2012/08/06 20:07:25 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela2.dll
    [2012/08/06 20:07:25 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgkl.dll
    [2012/08/06 20:07:25 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll
    [2012/08/06 20:07:25 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll
    [2012/08/06 20:07:25 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll
    [2012/08/06 20:07:25 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe319.dll
    [2012/08/06 20:07:25 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe220.dll
    [2012/08/06 20:07:25 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe.dll
    [2012/08/06 20:07:24 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll
    [2012/08/06 20:07:24 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll
    [2012/08/06 20:07:24 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll
    [2012/08/06 20:07:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv1.dll
    [2012/08/06 20:07:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv.dll
    [2012/08/06 20:07:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdest.dll
    [2012/08/06 20:07:24 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll
    [2012/08/06 20:07:24 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll
    [2012/08/06 20:07:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt1.dll
    [2012/08/06 20:07:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt.dll
    [2012/08/06 20:07:22 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll
    [2012/08/06 20:07:22 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll
    [2012/08/06 20:07:22 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl1.dll
    [2012/08/06 20:07:22 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl.dll
    [2012/08/06 20:07:22 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll
    [2012/08/06 20:07:22 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdro.dll
    [2012/08/06 20:07:21 | 000,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll
    [2012/08/06 20:07:21 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz.dll
    [2012/08/06 20:07:21 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll
    [2012/08/06 20:07:21 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll
    [2012/08/06 20:07:21 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll
    [2012/08/06 20:07:21 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll
    [2012/08/06 20:07:21 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll
    [2012/08/06 20:07:21 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll
    [2012/08/06 20:07:21 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
    [2012/08/06 20:07:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycl.dll
    [2012/08/06 20:07:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl.dll
    [2012/08/06 20:07:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu.dll
    [2012/08/06 20:07:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz2.dll
    [2012/08/06 20:07:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz1.dll
    [2012/08/06 20:07:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcr.dll
    [2012/08/06 20:07:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdal.dll
    [2012/08/06 20:07:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll
    [2012/08/06 20:07:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll
    [2012/08/06 20:07:21 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl1.dll
    [2012/08/06 20:07:21 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu1.dll
    [2012/08/06 20:07:19 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll
    [2012/08/06 20:07:19 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll
    [2012/08/06 20:07:19 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll
    [2012/08/06 20:07:19 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll
    [2012/08/06 20:07:19 | 000,085,020 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgsetup.dll
    [2012/08/06 20:07:19 | 000,085,020 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll
    [2012/08/06 20:07:19 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
    [2012/08/06 20:07:19 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll
    [2012/08/06 20:07:19 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
    [2012/08/06 20:07:19 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll
    [2012/08/06 20:07:18 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL
    [2012/08/06 20:07:18 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL
    [2012/08/06 20:07:18 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
    [2012/08/06 20:07:18 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL
    [2012/08/06 20:07:18 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
    [2012/08/06 20:07:18 | 000,009,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL
    [2012/08/06 20:07:18 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
    [2012/08/06 20:07:18 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
    [2012/08/06 20:07:18 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV
    [2012/08/06 20:07:18 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV
    [2012/08/06 20:07:18 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV
    [2012/08/06 20:07:17 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL
    [2012/08/06 20:07:17 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV
    [2012/08/06 20:07:17 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL
    [2012/08/06 20:07:17 | 000,032,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
    [2012/08/06 20:07:17 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV
    [2012/08/06 20:07:17 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV
    [2012/08/06 20:07:17 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE
    [2012/08/06 20:07:17 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\taskman.exe
    [2012/08/06 20:07:17 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL
    [2012/08/06 20:07:17 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV
    [2012/08/06 20:07:17 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV
    [2012/08/06 20:07:17 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK
    [2012/08/06 20:07:16 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\winspool.drv
    [2012/08/06 20:07:16 | 000,068,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
    [2012/08/06 20:07:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll
    [2012/08/06 20:07:14 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll
    [2012/08/06 20:07:08 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    [2012/08/06 20:07:08 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu
    [2012/08/06 20:07:08 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents
    [2012/08/06 20:07:08 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates
    [2012/08/06 20:07:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites
    [2012/08/06 20:07:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop
    [2012/08/06 20:05:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
    [2012/08/06 20:05:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
    [2012/08/06 20:05:13 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
    [2012/08/06 20:05:13 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data
    [2012/08/06 20:04:53 | 000,000,000 | -HSD | C] -- C:\System Volume Information
    [2012/08/06 20:04:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings
    [2012/08/06 19:58:30 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
    [2012/08/06 19:58:30 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
    [2012/08/06 19:58:30 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
    [2012/08/06 19:58:30 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
    [2012/08/06 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
    [2012/08/06 11:08:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\CyberLink PowerDVD
    [2012/08/06 11:08:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\CyberLink
    [2012/08/06 11:08:21 | 000,000,000 | ---D | C] -- C:\Program Files\CyberLink
    [2012/08/06 11:04:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nero
    [2012/08/06 11:04:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Nero
    [2012/08/06 11:03:18 | 000,106,496 | ---- | C] (Pegasus Software) -- C:\WINDOWS\System32\TwnLib20.dll
    [2012/08/06 11:03:14 | 000,471,040 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXRA7.dll
    [2012/08/06 11:03:13 | 001,568,768 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagX7.dll
    [2012/08/06 11:03:13 | 000,476,320 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXpr7.dll
    [2012/08/06 11:03:13 | 000,262,144 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXR7.dll
    [2012/08/06 11:03:12 | 000,155,648 | ---- | C] (Ahead Software Gmbh) -- C:\WINDOWS\System32\NeroCheck.exe
    [2012/08/06 11:03:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead
    [2012/08/06 11:03:06 | 000,000,000 | ---D | C] -- C:\Program Files\Ahead
    [2012/08/06 10:55:31 | 000,466,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\capicom.dll
    [2012/08/06 10:55:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Symantec
    [2012/08/06 10:55:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
    [2012/08/06 10:45:45 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
    [2012/08/06 10:44:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
    [2012/08/06 10:44:03 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
    [2012/08/06 10:42:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cache
    [2012/08/06 10:36:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Realtek
    [2012/08/06 10:36:19 | 000,105,856 | R--- | C] (Realtek Semiconductor Corporation                           ) -- C:\WINDOWS\System32\drivers\Rtenicxp.sys
    [2012/08/06 10:36:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\OPTIONS
    [2012/08/06 10:36:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\InstallShield
    [2012/08/06 10:35:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang
    [2012/08/06 10:35:31 | 000,135,168 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxres.dll
    [2012/08/06 10:34:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM
    [2012/08/06 10:34:04 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
    [2012/08/06 10:34:03 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
    [2012/08/06 10:34:03 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys
    [2012/08/06 10:34:00 | 000,086,016 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SoundMan.exe
    [2012/08/06 10:33:58 | 001,191,936 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlUpd.exe
    [2012/08/06 10:33:58 | 000,282,624 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTSndMgr.cpl
    [2012/08/06 10:33:56 | 009,715,200 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTLCPL.exe
    [2012/08/06 10:33:55 | 004,676,096 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys
    [2012/08/06 10:33:49 | 002,165,760 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\MicCal.exe
    [2012/08/06 10:33:46 | 000,069,632 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\Alcmtr.exe
    [2012/08/06 10:33:45 | 002,808,832 | R--- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\alcwzrd.exe
    [2012/08/06 10:33:44 | 000,299,008 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\ALSndMgr.cpl
    [2012/08/06 10:33:44 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
    [2012/08/06 10:33:44 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
    [2012/08/06 10:33:43 | 000,315,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\HideWin.exe
    [2012/08/06 10:33:42 | 000,520,192 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlExUpd.dll
    [2012/08/06 10:33:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
    [2012/08/06 10:33:19 | 000,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
    [2012/08/06 10:33:06 | 000,061,440 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\iAlmCoIn_v4436.dll
    [2012/08/06 10:33:06 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuTRK.dll
    [2012/08/06 10:33:06 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuTHA.dll
    [2012/08/06 10:33:06 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuSVE.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuRUS.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuPTG.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuPTB.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuPLK.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuNOR.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuNLD.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuKOR.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuJPN.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuITA.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuHUN.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuHEB.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuFRC.dll
    [2012/08/06 10:33:05 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuFRA.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuFIN.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuESP.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuENG.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuELL.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuDEU.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuDAN.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuCSY.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuCHT.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuCHS.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuARB.dll
    [2012/08/06 10:33:04 | 000,040,960 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmuARA.dll
    [2012/08/06 10:33:03 | 000,524,288 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igldev32.dll
    [2012/08/06 10:33:03 | 000,114,688 | R--- | C] (Intel(r) Corporation) -- C:\WINDOWS\System32\ialmudlg.exe
    [2012/08/06 10:33:02 | 002,310,144 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\iglicd32.dll
    [2012/08/06 10:33:02 | 000,155,648 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrell.lrc
    [2012/08/06 10:33:02 | 000,147,456 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrhun.lrc
    [2012/08/06 10:33:02 | 000,139,264 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrtrk.lrc
    [2012/08/06 10:33:02 | 000,049,152 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\ialmrem.dll
    [2012/08/06 10:33:02 | 000,040,960 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxexps.dll
    [2012/08/06 10:33:01 | 000,151,552 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrnld.lrc
    [2012/08/06 10:33:01 | 000,143,360 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrrus.lrc
    [2012/08/06 10:33:01 | 000,143,360 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrptg.lrc
    [2012/08/06 10:33:01 | 000,143,360 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrptb.lrc
    [2012/08/06 10:33:01 | 000,143,360 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrplk.lrc
    [2012/08/06 10:33:01 | 000,139,264 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrsve.lrc
    [2012/08/06 10:33:01 | 000,139,264 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrnor.lrc
    [2012/08/06 10:33:01 | 000,139,264 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrcsy.lrc
    [2012/08/06 10:33:01 | 000,126,976 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrtha.lrc
    [2012/08/06 10:33:01 | 000,098,304 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrkor.lrc
    [2012/08/06 10:33:00 | 000,155,648 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrdeu.lrc
    [2012/08/06 10:33:00 | 000,151,552 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrita.lrc
    [2012/08/06 10:33:00 | 000,151,552 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxresp.lrc
    [2012/08/06 10:33:00 | 000,147,456 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrfra.lrc
    [2012/08/06 10:33:00 | 000,139,264 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrfin.lrc
    [2012/08/06 10:33:00 | 000,139,264 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrdan.lrc
    [2012/08/06 10:33:00 | 000,135,168 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrenu.lrc
    [2012/08/06 10:33:00 | 000,122,880 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrheb.lrc
    [2012/08/06 10:33:00 | 000,098,304 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrjpn.lrc
    [2012/08/06 10:33:00 | 000,081,920 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrcht.lrc
    [2012/08/06 10:32:59 | 000,122,880 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrara.lrc
    [2012/08/06 10:32:59 | 000,081,920 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrchs.lrc
    [2012/08/06 10:32:58 | 001,503,232 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxress.dll
    [2012/08/06 10:32:58 | 000,450,560 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxcfg.exe
    [2012/08/06 10:32:58 | 000,114,688 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxzoom.exe
    [2012/08/06 10:32:58 | 000,086,016 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxdo.dll
    [2012/08/06 10:32:57 | 000,147,456 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxpph.dll
    [2012/08/06 10:32:57 | 000,077,824 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxcpl.cpl
    [2012/08/06 10:32:57 | 000,073,728 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\hccutils.dll
    [2012/08/06 10:32:57 | 000,057,344 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxsrvc.dll
    [2012/08/06 10:32:56 | 000,899,194 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\ialmdd5.dll
    [2012/08/06 10:32:56 | 000,214,746 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\ialmdev5.dll
    [2012/08/06 10:32:56 | 000,119,419 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\ialmdnt5.dll
    [2012/08/06 10:32:55 | 000,036,990 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\ialmrnt5.dll
    [2012/08/06 10:30:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
    [2012/08/06 10:30:53 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
    [2012/08/06 10:30:06 | 000,016,608 | ---- | C] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys
    [2012/08/06 10:26:24 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chsbrkr.dll
    [2012/08/06 10:26:24 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chtbrkr.dll
    [2012/08/06 10:26:23 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msir3jp.lex
    [2012/08/06 10:26:23 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msir3jp.dll
    [2012/08/06 10:26:23 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\korwbrkr.dll
    [2012/08/06 10:26:11 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\c_g18030.dll
    [2012/08/06 10:26:11 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wingb.ime
    [2012/08/06 10:26:11 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime
    [2012/08/06 10:26:10 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll
    [2012/08/06 10:26:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101a.dll
    [2012/08/06 10:26:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll
    [2012/08/06 10:26:08 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll
    [2012/08/06 10:26:08 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll
    [2012/08/06 10:26:07 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe
    [2012/08/06 10:26:07 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe
    [2012/08/06 10:26:04 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe
    [2012/08/06 10:26:04 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll
    [2012/08/06 10:26:04 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll
    [2012/08/06 10:26:03 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll
    [2012/08/06 10:26:03 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll
    [2012/08/06 10:26:03 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnecAT.dll
    [2012/08/06 10:26:03 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll
    [2012/08/06 10:26:03 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnecNT.dll
    [2012/08/06 10:26:03 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll
    [2012/08/06 10:26:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnec95.dll
    [2012/08/06 10:26:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll
    [2012/08/06 10:26:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdibm02.dll
    [2012/08/06 10:26:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\f3ahvoas.dll
    [2012/08/06 10:26:03 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlk41a.dll
    [2012/08/06 10:26:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlk41j.dll
    [2012/08/06 10:26:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdax2.dll
    [2012/08/06 10:26:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd106n.dll
    [2012/08/06 10:26:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101.dll
    [2012/08/06 10:26:02 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll
    [2012/08/06 10:26:02 | 000,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll
    [2012/08/06 10:25:53 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe
    [2012/08/06 10:25:53 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe
    [2012/08/06 10:25:51 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll
    [2012/08/06 10:25:51 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\c_is2022.dll
    [2012/08/06 10:25:50 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe
    [2012/08/06 10:25:50 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll
    [2012/08/06 10:25:50 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime
    [2012/08/06 10:25:50 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cintlgnt.ime
    [2012/08/06 10:25:49 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tintlgnt.ime
    [2012/08/06 10:25:49 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime
    [2012/08/06 10:25:49 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe
    [2012/08/06 10:25:49 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll
    [2012/08/06 10:25:49 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winar30.ime
    [2012/08/06 10:25:49 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime
    [2012/08/06 10:25:49 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\quick.ime
    [2012/08/06 10:25:49 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime
    [2012/08/06 10:25:49 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll
    [2012/08/06 10:25:49 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe
    [2012/08/06 10:25:49 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll
    [2012/08/06 10:25:49 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\miniime.tpl
    [2012/08/06 10:25:49 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll
    [2012/08/06 10:25:48 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\phon.ime
    [2012/08/06 10:25:48 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime
    [2012/08/06 10:25:48 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime
    [2012/08/06 10:25:48 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dayi.ime
    [2012/08/06 10:25:48 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime
    [2012/08/06 10:25:48 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\chajei.ime
    [2012/08/06 10:25:48 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uniime.dll
    [2012/08/06 10:25:48 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll
    [2012/08/06 10:25:48 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winime.ime
    [2012/08/06 10:25:48 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime
    [2012/08/06 10:25:48 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unicdime.ime
    [2012/08/06 10:25:48 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime
    [2012/08/06 10:25:48 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll
    [2012/08/06 10:25:48 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\romanime.ime
    [2012/08/06 10:25:48 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime
    [2012/08/06 10:25:48 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll
    [2012/08/06 10:25:44 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe
    [2012/08/06 10:25:44 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll
    [2012/08/06 10:25:43 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imjp81k.dll
    [2012/08/06 10:25:43 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll
    [2012/08/06 10:25:43 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pintlgnt.ime
    [2012/08/06 10:25:43 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime
    [2012/08/06 10:25:43 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\imjp81.ime
    [2012/08/06 10:25:43 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime
    [2012/08/06 10:25:43 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winzm.ime
    [2012/08/06 10:25:43 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime
    [2012/08/06 10:25:43 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winsp.ime
    [2012/08/06 10:25:43 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime
    [2012/08/06 10:25:43 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winpy.ime
    [2012/08/06 10:25:43 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime
    [2012/08/06 10:25:43 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll
    [2012/08/06 10:25:43 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll
    [2012/08/06 10:25:43 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime
    [2012/08/06 10:25:43 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll
    [2012/08/06 10:25:42 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll
    [2012/08/06 10:25:42 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe
    [2012/08/06 10:25:42 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll
    [2012/08/06 10:25:42 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe
    [2012/08/06 10:25:42 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe
    [2012/08/06 10:25:42 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe
    [2012/08/06 10:25:42 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe
    [2012/08/06 10:25:42 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll
    [2012/08/06 10:25:42 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll
    [2012/08/06 10:25:41 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll
    [2012/08/06 10:25:41 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll
    [2012/08/06 10:25:41 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe
    [2012/08/06 10:25:41 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdjpn.dll
    [2012/08/06 10:25:41 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdjpn.dll
    [2012/08/06 10:25:41 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkor.dll
    [2012/08/06 10:25:41 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkor.dll
    [2012/08/06 10:25:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd106.dll
    [2012/08/06 10:25:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101c.dll
    [2012/08/06 10:25:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101c.dll
    [2012/08/06 10:25:41 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd103.dll
    [2012/08/06 10:25:41 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd103.dll
    [2012/08/06 10:25:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101b.dll
    [2012/08/06 10:25:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101b.dll
    [2012/08/06 10:25:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Identities
    [2012/08/06 10:25:05 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
    [2012/08/06 10:25:03 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\My Documents\My Pictures
    [2012/08/06 10:25:03 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\My Documents\My Music
    [2012/08/06 10:24:50 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Owner\Application Data\Microsoft
    [2012/08/06 10:24:50 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Owner\SendTo
    [2012/08/06 10:24:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\My Documents
    [2012/08/06 10:24:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Favorites
    [2012/08/06 10:24:50 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Owner\Cookies
    [2012/08/06 10:24:50 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\PrintHood
    [2012/08/06 10:24:50 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\NetHood
    [2012/08/06 10:24:50 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\Local Settings
    [2012/08/06 10:24:50 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\Application Data
    [2012/08/06 10:24:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft
    [2012/08/06 10:24:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop
    [2012/08/06 10:24:49 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Start Menu\Programs\Startup
    [2012/08/06 10:24:49 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Start Menu
    [2012/08/06 10:24:49 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Owner\Start Menu\Programs\Accessories
    [2012/08/06 10:24:49 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Owner\Templates
    [2012/08/06 10:24:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
    [2012/08/06 10:24:21 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
    [2012/08/06 10:24:20 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
    [2012/08/06 10:24:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
    [2012/08/06 10:24:01 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
    [2012/08/06 10:24:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
    [2012/08/06 10:22:55 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll
    [2012/08/06 10:22:55 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys
    [2012/08/06 10:22:55 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll
    [2012/08/06 10:22:54 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll
    [2012/08/06 10:22:54 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll
    [2012/08/06 10:22:54 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll
    [2012/08/06 10:22:54 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll
    [2012/08/06 10:22:52 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe
    [2012/08/06 10:22:51 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll
    [2012/08/06 10:22:51 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys
    [2012/08/06 10:22:51 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys
    [2012/08/06 10:22:51 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys
    [2012/08/06 10:22:50 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll
    [2012/08/06 10:22:49 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll
    [2012/08/06 10:22:48 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll
    [2012/08/06 10:22:48 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
    [2012/08/06 10:22:47 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
    [2012/08/06 10:22:46 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll
    [2012/08/06 10:22:46 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll
    [2012/08/06 10:22:46 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll
    [2012/08/06 10:22:46 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll
    [2012/08/06 10:22:46 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll
    [2012/08/06 10:22:46 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll
    [2012/08/06 10:22:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll
    [2012/08/06 10:22:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll
    [2012/08/06 10:22:45 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll
    [2012/08/06 10:22:45 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll
    [2012/08/06 10:22:45 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll
    [2012/08/06 10:22:45 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll
    [2012/08/06 10:22:45 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll
    [2012/08/06 10:22:45 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll
    [2012/08/06 10:22:45 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll
    [2012/08/06 10:22:45 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll
    [2012/08/06 10:22:45 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll
    [2012/08/06 10:22:43 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
    [2012/08/06 10:22:43 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll
    [2012/08/06 10:22:42 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
    [2012/08/06 10:22:42 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
    [2012/08/06 10:22:41 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
    [2012/08/06 10:22:41 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe
    [2012/08/06 10:22:40 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe
    [2012/08/06 10:22:40 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe
    [2012/08/06 10:22:39 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll
    [2012/08/06 10:22:39 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll
    [2012/08/06 10:22:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll
    [2012/08/06 10:22:38 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll
    [2012/08/06 10:22:37 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll
    [2012/08/06 10:22:36 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
    [2012/08/06 10:22:35 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll
    [2012/08/06 10:22:32 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex
    [2012/08/06 10:22:32 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll
    [2012/08/06 10:22:29 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys
    [2012/08/06 10:22:29 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll
    [2012/08/06 10:22:29 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll
    [2012/08/06 10:22:28 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
    [2012/08/06 10:22:28 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll
    [2012/08/06 10:22:26 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll
    [2012/08/06 10:22:26 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll
    [2012/08/06 10:22:26 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll
    [2012/08/06 10:22:26 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll
    [2012/08/06 10:22:26 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll
    [2012/08/06 10:22:26 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll
    [2012/08/06 10:22:26 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll
    [2012/08/06 10:22:26 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll
    [2012/08/06 10:22:26 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll
    [2012/08/06 10:22:25 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll
    [2012/08/06 10:22:25 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll
    [2012/08/06 10:22:25 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll
    [2012/08/06 10:22:25 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll
    [2012/08/06 10:22:25 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll
    [2012/08/06 10:22:25 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll
    [2012/08/06 10:22:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll
    [2012/08/06 10:22:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll
    [2012/08/06 10:22:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll
    [2012/08/06 10:22:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll
    [2012/08/06 10:22:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll
    [2012/08/06 10:22:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll
    [2012/08/06 10:22:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll
    [2012/08/06 10:22:24 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll
    [2012/08/06 10:22:23 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll
    [2012/08/06 10:22:23 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll
    [2012/08/06 10:22:23 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll
    [2012/08/06 10:22:23 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll
    [2012/08/06 10:22:23 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll
    [2012/08/06 10:22:23 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll
    [2012/08/06 10:22:23 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll
    [2012/08/06 10:22:22 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll
    [2012/08/06 10:22:22 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll
    [2012/08/06 10:22:18 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll
    [2012/08/06 10:22:18 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll
    [2012/08/06 10:22:18 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe
    [2012/08/06 10:22:18 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll
    [2012/08/06 10:22:09 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll
    [2012/08/06 10:22:07 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe
    [2012/08/06 10:22:06 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll
    [2012/08/06 10:22:06 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll
    [2012/08/06 10:22:05 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll
    [2012/08/06 10:22:05 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll
    [2012/08/06 10:22:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll
    [2012/08/06 10:22:04 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
    [2012/08/06 10:22:04 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe
    [2012/08/06 10:22:03 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll
    [2012/08/06 10:22:03 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll
    [2012/08/06 10:22:03 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll
    [2012/08/06 10:22:03 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys
    [2012/08/06 10:22:02 | 000,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll
    [2012/08/06 10:21:59 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\convlog.exe
    [2012/08/06 10:21:59 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\controt.dll
    [2012/08/06 10:21:59 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\counters.dll
    [2012/08/06 10:21:59 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe
    [2012/08/06 10:21:57 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll
    [2012/08/06 10:21:56 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll
    [2012/08/06 10:21:56 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe
    [2012/08/06 10:21:56 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe
    [2012/08/06 10:21:56 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe
    [2012/08/06 10:21:56 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe
    [2012/08/06 10:21:55 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
    [2012/08/06 10:21:55 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll
    [2012/08/06 10:21:49 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browscap.dll
    [2012/08/06 10:21:49 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\authfilt.dll
    [2012/08/06 10:21:48 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
    [2012/08/06 10:21:48 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asptxn.dll
    [2012/08/06 10:21:48 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aspperf.dll
    [2012/08/06 10:21:46 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adrot.dll
    [2012/08/06 10:21:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admxprox.dll
    [2012/08/06 10:21:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
    [2012/08/06 10:21:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamregps.dll
    [2012/08/06 10:21:40 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisui.dll
    [2012/08/06 10:21:40 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetsloc.dll
    [2012/08/06 10:21:40 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisreset.exe
    [2012/08/06 10:21:40 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.exe
    [2012/08/06 10:21:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstap.dll
    [2012/08/06 10:21:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsapi2.dll
    [2012/08/06 10:21:36 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certmap.ocx
    [2012/08/06 10:21:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
    [2012/08/06 10:21:32 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
    [2012/08/06 10:21:32 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
    [2012/08/06 10:21:02 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
    [2012/08/06 10:20:29 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
    [2012/08/06 10:20:22 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
    [2012/08/06 10:20:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
    [2012/08/06 10:20:14 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
    [2012/08/06 10:19:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
    [2012/08/06 10:19:34 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helphost.exe
    [2012/08/06 10:19:34 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\notiflag.exe
    [2012/08/06 10:19:34 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brpinfo.dll
    [2012/08/06 10:19:34 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atrace.dll
    [2012/08/06 10:19:34 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll
    [2012/08/06 10:19:34 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hcappres.dll
    [2012/08/06 10:19:26 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srdiag.exe
    [2012/08/06 10:19:25 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll
    [2012/08/06 10:19:25 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmevtmsg.dll
    [2012/08/06 10:19:24 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\acctres.dll
    [2012/08/06 10:19:24 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll
    [2012/08/06 10:19:24 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msinfo32.exe
    [2012/08/06 10:19:24 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wb32.exe
    [2012/08/06 10:19:24 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cb32.exe
    [2012/08/06 10:19:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
    [2012/08/06 10:19:20 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoap1.dll
    [2012/08/06 10:19:20 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwtutor.exe
    [2012/08/06 10:19:20 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwres.dll
    [2012/08/06 10:19:20 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trialoc.dll
    [2012/08/06 10:19:20 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wisc10.dll
    [2012/08/06 10:19:20 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoapr.dll
    [2012/08/06 10:19:20 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe
    [2012/08/06 10:19:20 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll
    [2012/08/06 10:19:20 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icfgnt5.dll
    [2012/08/06 10:19:20 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
    [2012/08/06 10:19:19 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieinfo5.ocx
    [2012/08/06 10:19:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
    [2012/08/06 10:19:16 | 000,759,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\VGX.dll
    [2012/08/06 10:19:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
    [2012/08/06 10:19:15 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpband.dll
    [2012/08/06 10:19:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
    [2012/08/06 10:19:14 | 001,669,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup_wm.exe
    [2012/08/06 10:19:14 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpvis.dll
    [2012/08/06 10:19:14 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpns.dll
    [2012/08/06 10:19:14 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\custsat.dll
    [2012/08/06 10:19:13 | 000,786,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migrate.exe
    [2012/08/06 10:19:13 | 000,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\WINDOWS\System32\dllcache\npdsplay.dll
    [2012/08/06 10:19:13 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npdrmv2.dll
    [2012/08/06 10:19:13 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmplayer.exe
    [2012/08/06 10:19:13 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npwmsdrm.dll
    [2012/08/06 10:19:13 | 000,004,639 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplayer2.exe
    [2012/08/06 10:19:12 | 001,929,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll
    [2012/08/06 10:19:12 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
    [2012/08/06 10:19:12 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll
    [2012/08/06 10:19:12 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
    [2012/08/06 10:19:12 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll
    [2012/08/06 10:19:12 | 000,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl
    [2012/08/06 10:19:12 | 000,209,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll
    [2012/08/06 10:19:12 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll
    [2012/08/06 10:19:12 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe
    [2012/08/06 10:19:12 | 000,053,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe
    [2012/08/06 10:19:12 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
    [2012/08/06 10:19:12 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll
    [2012/08/06 10:19:11 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
    [2012/08/06 10:19:11 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
    [2012/08/06 10:19:11 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
    [2012/08/06 10:19:08 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
    [2012/08/06 10:19:04 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll
    [2012/08/06 10:19:04 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll
    [2012/08/06 10:19:04 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
    [2012/08/06 10:19:04 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll
    [2012/08/06 10:19:01 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltmc.exe
    [2012/08/06 10:19:00 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
    [2012/08/06 10:19:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
    [2012/08/06 10:18:59 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll
    [2012/08/06 10:18:59 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll
    [2012/08/06 10:18:59 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll
    [2012/08/06 10:18:59 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll
    [2012/08/06 10:18:59 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll
    [2012/08/06 10:18:56 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
    [2012/08/06 10:18:56 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
    [2012/08/06 10:18:56 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
    [2012/08/06 10:18:55 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll
    [2012/08/06 10:18:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
    [2012/08/06 10:18:53 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
    [2012/08/06 10:18:52 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll
    [2012/08/06 10:18:52 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
    [2012/08/06 10:18:52 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll
    [2012/08/06 10:18:52 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll
    [2012/08/06 10:18:50 | 000,554,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dao360.dll
    [2012/08/06 10:18:47 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll
    [2012/08/06 10:18:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
    [2012/08/06 10:18:46 | 000,638,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe
    [2012/08/06 10:18:46 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedw.exe
    [2012/08/06 10:18:46 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hmmapi.dll
    [2012/08/06 10:18:46 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
    [2012/08/06 10:18:45 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures
    [2012/08/06 10:18:29 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Games
    [2012/08/06 10:18:20 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
    [2012/08/06 10:18:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
    [2012/08/06 10:18:14 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
    [2012/08/06 10:18:09 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music
    [2012/08/06 10:18:09 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
    [2012/08/06 10:18:09 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services
    [2012/08/06 10:18:04 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
    [2012/08/06 10:18:03 | 001,817,687 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgres.dll
    [2012/08/06 10:18:03 | 000,753,236 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvseres.dll
    [2012/08/06 10:18:03 | 000,082,501 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckg.dll
    [2012/08/06 10:18:03 | 000,048,706 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvse.dll
    [2012/08/06 10:18:03 | 000,042,577 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgzm.exe
    [2012/08/06 10:18:03 | 000,042,575 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrzm.exe
    [2012/08/06 10:18:03 | 000,042,574 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvsezm.exe
    [2012/08/06 10:18:02 | 002,178,131 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlres.dll
    [2012/08/06 10:18:02 | 001,175,635 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzres.dll
    [2012/08/06 10:18:02 | 000,780,885 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrres.dll
    [2012/08/06 10:18:02 | 000,066,113 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvl.dll
    [2012/08/06 10:18:02 | 000,057,409 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtz.dll
    [2012/08/06 10:18:02 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlzm.exe
    [2012/08/06 10:18:02 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzzm.exe
    [2012/08/06 10:18:02 | 000,040,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkr.dll
    [2012/08/06 10:18:02 | 000,004,677 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zeeverm.dll
    [2012/08/06 10:18:01 | 001,039,955 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnresm.dll
    [2012/08/06 10:18:01 | 000,217,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnclim.dll
    [2012/08/06 10:18:01 | 000,113,222 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zoneclim.dll
    [2012/08/06 10:18:01 | 000,041,029 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zcorem.dll
    [2012/08/06 10:18:01 | 000,032,339 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniansi.dll
    [2012/08/06 10:18:01 | 000,013,894 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zonelibm.dll
    [2012/08/06 10:18:00 | 000,036,937 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zclientm.exe
    [2012/08/06 10:18:00 | 000,029,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\znetm.dll
    [2012/08/06 10:18:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
    [2012/08/06 10:18:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\write.exe
    [2012/08/06 10:18:00 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
    [2012/08/06 10:17:50 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
    [2012/08/06 10:17:50 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe
    [2012/08/06 10:17:50 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll
    [2012/08/06 10:17:50 | 000,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\dllcache\htrn_jis.dll
    [2012/08/06 10:17:49 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avtapi.dll
    [2012/08/06 10:17:49 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll
    [2012/08/06 10:17:49 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avwav.dll
    [2012/08/06 10:17:49 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll
    [2012/08/06 10:17:49 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe
    [2012/08/06 10:17:49 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winchat.exe
    [2012/08/06 10:17:49 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avmeter.dll
    [2012/08/06 10:17:49 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll
    [2012/08/06 10:17:41 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
    [2012/08/06 10:17:41 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\getuname.dll
    [2012/08/06 10:17:41 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\calc.exe
    [2012/08/06 10:17:41 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
    [2012/08/06 10:17:41 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\charmap.exe
    [2012/08/06 10:17:41 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
    [2012/08/06 10:17:40 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe
    [2012/08/06 10:17:40 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshearts.exe
    [2012/08/06 10:17:40 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe
    [2012/08/06 10:17:40 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmine.exe
    [2012/08/06 10:17:40 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe
    [2012/08/06 10:17:40 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sol.exe
    [2012/08/06 10:17:40 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe
    [2012/08/06 10:17:40 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\freecell.exe
    [2012/08/06 10:17:39 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
    [2012/08/06 10:17:39 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\regini.exe
    [2012/08/06 10:17:39 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
    [2012/08/06 10:17:39 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qwinsta.exe
    [2012/08/06 10:17:39 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
    [2012/08/06 10:17:39 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsshutdn.exe
    [2012/08/06 10:17:39 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
    [2012/08/06 10:17:39 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qappsrv.exe
    [2012/08/06 10:17:39 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
    [2012/08/06 10:17:39 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tskill.exe
    [2012/08/06 10:17:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
    [2012/08/06 10:17:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwinsta.exe
    [2012/08/06 10:17:39 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
    [2012/08/06 10:17:39 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsdiscon.exe
    [2012/08/06 10:17:39 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
    [2012/08/06 10:17:39 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscon.exe
    [2012/08/06 10:17:39 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
    [2012/08/06 10:17:39 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shadow.exe
    [2012/08/06 10:17:39 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
    [2012/08/06 10:17:39 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\reset.exe
    [2012/08/06 10:17:39 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
    [2012/08/06 10:17:39 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpcfgex.dll
    [2012/08/06 10:17:38 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
    [2012/08/06 10:17:38 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msg.exe
    [2012/08/06 10:17:38 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtsadmin.tlb
    [2012/08/06 10:17:38 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdmodem.dll
    [2012/08/06 10:17:38 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll
    [2012/08/06 10:17:38 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
    [2012/08/06 10:17:38 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logoff.exe
    [2012/08/06 10:17:37 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
    [2012/08/06 10:17:37 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
    [2012/08/06 10:17:37 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
    [2012/08/06 10:17:37 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
    [2012/08/06 10:17:37 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
    [2012/08/06 10:17:37 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll
    [2012/08/06 10:17:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
    [2012/08/06 10:17:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
    [2012/08/06 10:17:36 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmi2xml.dll
    [2012/08/06 10:17:33 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipicmp.dll
    [2012/08/06 10:17:33 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmimsg.dll
    [2012/08/06 10:17:33 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.tlb
    [2012/08/06 10:17:33 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmitimep.dll
    [2012/08/06 10:17:33 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmtr.dll
    [2012/08/06 10:17:33 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmt.exe
    [2012/08/06 10:17:32 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiprov.dll
    [2012/08/06 10:17:32 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\updprov.dll
    [2012/08/06 10:17:32 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmplprov.dll
    [2012/08/06 10:17:32 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trnsprov.dll
    [2012/08/06 10:17:32 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fwdprov.dll
    [2012/08/06 10:17:32 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpcons.dll
    [2012/08/06 10:17:32 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.tlb
    [2012/08/06 10:17:32 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unsecapp.exe
    [2012/08/06 10:17:32 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.dll
    [2012/08/06 10:17:31 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsprov.dll
    [2012/08/06 10:17:23 | 000,000,000 | ---D | C] -- C:\Program Files\MSN
    [2012/08/06 10:17:22 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe
    [2012/08/06 10:17:22 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe
    [2012/08/06 10:17:22 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl
    [2012/08/06 10:17:21 | 000,347,136 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll
    [2012/08/06 10:17:21 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
    [2012/08/06 10:17:21 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe
    [2012/08/06 10:17:21 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplay32.exe
    [2012/08/06 10:17:21 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
    [2012/08/06 10:17:20 | 000,538,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe
    [2012/08/06 10:17:20 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe
    [2012/08/06 10:17:20 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
    [2012/08/06 10:17:19 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll
    [2012/08/06 10:17:19 | 000,407,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstsc.exe
    [2012/08/06 10:17:19 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll
    [2012/08/06 10:17:19 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
    [2012/08/06 10:17:19 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe
    [2012/08/06 10:17:19 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscupgrd.exe
    [2012/08/06 10:17:19 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
    [2012/08/06 10:17:18 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
    [2012/08/06 10:17:18 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll
    [2012/08/06 10:17:18 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
    [2012/08/06 10:17:18 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
    [2012/08/06 10:17:18 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll
    [2012/08/06 10:17:18 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
    [2012/08/06 10:17:18 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll
    [2012/08/06 10:17:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
    [2012/08/06 10:17:17 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
    [2012/08/06 10:17:17 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
    [2012/08/06 10:17:17 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
    [2012/08/06 10:17:17 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
    [2012/08/06 10:17:17 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
    [2012/08/06 10:17:16 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll
    [2012/08/06 10:17:16 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
    [2012/08/06 10:17:16 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
    [2012/08/06 10:17:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
    [2012/08/06 10:17:15 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
    [2012/08/06 10:17:15 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
    [2012/08/06 10:17:15 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
    [2012/08/06 10:17:15 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
    [2012/08/06 10:17:09 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll
    [2012/08/06 10:17:08 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll
    [2012/08/06 10:17:08 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll
    [2012/08/06 10:17:08 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll
    [2012/08/06 10:17:04 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos
    [2012/08/06 10:16:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
    [2011/05/22 09:04:35 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe
    [2011/05/21 19:16:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Start Menu\Programs\HiJackThis
    [2011/05/20 21:27:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SAGEM F@st 1201
    [2011/05/20 21:27:31 | 000,000,000 | ---D | C] -- C:\Program Files\SAGEM
    [2011/05/15 20:47:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Skype Extras
    [2011/05/15 20:47:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Skype
    [2011/05/15 20:47:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
    [2011/05/15 20:08:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\WWJRLFC
    [2011/05/14 17:24:01 | 000,000,000 | ---D | C] -- C:\divx
    [2011/05/07 09:17:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Start Menu\Programs\Amazon
    [2011/05/04 16:53:40 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Owner\Recent
    [2009/11/26 06:16:12 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Documents and Settings\All Users\Application Data\hpe40.dll
    [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
    [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
     
    ========== Files - Modified Within 30 Days ==========
     
    [2012/08/06 11:08:28 | 000,001,684 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\PowerDVD.lnk
    [2012/08/06 11:04:43 | 000,001,239 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk
    [2012/08/06 10:54:23 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys
    [2012/08/06 10:35:37 | 000,940,794 | ---- | M] () -- C:\WINDOWS\System32\LoopyMusic.wav
    [2012/08/06 10:35:37 | 000,146,650 | ---- | M] () -- C:\WINDOWS\System32\BuzzingBee.wav
    [2012/08/06 10:33:43 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\HideWin.exe
    [2012/08/06 10:25:12 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
    [2012/08/06 10:24:04 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
    [2012/08/06 10:23:06 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
    [2012/08/06 10:21:14 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
    [2012/08/06 10:21:02 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
    [2012/08/06 10:18:28 | 000,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
    [2012/08/06 10:16:25 | 000,000,211 | ---- | M] () -- C:\Boot.bak
    [2011/05/22 09:04:35 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe
    [2011/05/22 08:56:42 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
    [2011/05/22 08:56:10 | 000,199,966 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
    [2011/05/22 08:56:07 | 000,000,880 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
    [2011/05/22 08:55:56 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
    [2011/05/22 08:34:30 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
    [2011/05/22 08:18:00 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-299502267-2052111302-839522115-1003UA.job
    [2011/05/21 20:18:00 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-299502267-2052111302-839522115-1003Core.job
    [2011/05/21 19:16:29 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\HiJackThis.lnk
    [2011/05/21 19:15:21 | 001,402,880 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\HiJackThis.msi
    [2011/05/18 19:48:05 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
    [2011/05/15 20:47:18 | 000,001,878 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
    [2011/05/14 19:51:27 | 000,064,370 | -H-- | M] () -- C:\Documents and Settings\Owner\Desktop\ZbThumbnail.info
    [2011/05/14 17:33:45 | 001,982,464 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Video0031.3gp.MPG
    [2011/05/14 17:31:42 | 000,110,080 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [2011/05/14 17:26:08 | 001,851,076 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\liamgoal1.AVI
    [2011/05/14 06:16:14 | 002,818,048 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Video0033.3gp
    [2011/05/14 06:14:46 | 002,768,896 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Video0031.3gp
    [2011/05/13 11:33:28 | 000,005,354 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\gday.gif
    [2011/05/12 16:27:27 | 000,014,302 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\rgg.png
    [2011/05/07 09:17:50 | 000,001,771 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Kindle For PC.lnk
    [2011/05/04 17:31:41 | 001,505,550 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\form3.bmp
    [2011/04/28 13:01:34 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
    [2011/04/22 11:56:48 | 000,000,858 | ---- | M] () -- C:\Documents and Settings\Owner\.recently-used.xbel
    [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
    [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
     
    ========== Files Created - No Company Name ==========
     
    [2012/08/06 20:07:39 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
    [2012/08/06 20:07:38 | 002,002,377 | ---- | C] () -- C:\WINDOWS\iis6.BAK
    [2012/08/06 20:07:36 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
    [2012/08/06 20:07:34 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
    [2012/08/06 20:07:34 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
    [2012/08/06 20:07:34 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
    [2012/08/06 20:07:33 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
    [2012/08/06 20:07:16 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
    [2012/08/06 20:05:28 | 001,042,903 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT
    [2012/08/06 20:05:28 | 000,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
    [2012/08/06 20:05:28 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
    [2012/08/06 20:05:28 | 000,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
    [2012/08/06 20:05:28 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
    [2012/08/06 20:05:28 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
    [2012/08/06 20:05:28 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
    [2012/08/06 20:05:28 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
    [2012/08/06 20:04:52 | 000,303,624 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
    [2012/08/06 20:03:47 | 000,000,281 | RHS- | C] () -- C:\boot.ini
    [2012/08/06 20:03:44 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
    [2012/08/06 11:08:28 | 000,001,684 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\PowerDVD.lnk
    [2012/08/06 11:04:43 | 000,001,239 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk
    [2012/08/06 10:35:37 | 000,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav
    [2012/08/06 10:35:37 | 000,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav
    [2012/08/06 10:34:28 | 000,000,553 | R--- | C] () -- C:\WINDOWS\USetup.iss
    [2012/08/06 10:34:25 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
    [2012/08/06 10:32:57 | 000,058,704 | R--- | C] () -- C:\WINDOWS\System32\igxpxk32.vp
    [2012/08/06 10:32:57 | 000,025,920 | R--- | C] () -- C:\WINDOWS\System32\igxpxs32.vp
    [2012/08/06 10:32:57 | 000,000,929 | R--- | C] () -- C:\WINDOWS\System32\igxpxa32.vp
    [2012/08/06 10:32:56 | 000,524,850 | R--- | C] () -- C:\WINDOWS\System32\igxpxa32.cpa
    [2012/08/06 10:26:24 | 000,001,486 | ---- | C] () -- C:\WINDOWS\System32\noise.kor
    [2012/08/06 10:26:23 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\korwbrkr.lex
    [2012/08/06 10:26:23 | 000,002,060 | ---- | C] () -- C:\WINDOWS\System32\noise.jpn
    [2012/08/06 10:26:18 | 000,146,126 | ---- | C] () -- C:\WINDOWS\System32\array30.tab
    [2012/08/06 10:26:18 | 000,110,566 | ---- | C] () -- C:\WINDOWS\System32\arphr.tbl
    [2012/08/06 10:26:18 | 000,018,600 | ---- | C] () -- C:\WINDOWS\System32\arrayhw.tab
    [2012/08/06 10:26:18 | 000,016,312 | ---- | C] () -- C:\WINDOWS\System32\arptr.tbl
    [2012/08/06 10:26:17 | 000,211,938 | ---- | C] () -- C:\WINDOWS\System32\lcphrase.tbl
    [2012/08/06 10:26:17 | 000,116,285 | ---- | C] () -- C:\WINDOWS\System32\msdayi.tbl
    [2012/08/06 10:26:17 | 000,044,370 | ---- | C] () -- C:\WINDOWS\System32\acode.tbl
    [2012/08/06 10:26:17 | 000,044,370 | ---- | C] () -- C:\WINDOWS\System32\a234.tbl
    [2012/08/06 10:26:17 | 000,043,242 | ---- | C] () -- C:\WINDOWS\System32\phoncode.tbl
    [2012/08/06 10:26:17 | 000,024,114 | ---- | C] () -- C:\WINDOWS\System32\lcptr.tbl
    [2012/08/06 10:26:17 | 000,004,071 | ---- | C] () -- C:\WINDOWS\System32\phon.tbl
    [2012/08/06 10:26:17 | 000,002,714 | ---- | C] () -- C:\WINDOWS\System32\phonptr.tbl
    [2012/08/06 10:26:17 | 000,001,460 | ---- | C] () -- C:\WINDOWS\System32\a15.tbl
    [2012/08/06 10:26:17 | 000,000,700 | ---- | C] () -- C:\WINDOWS\System32\dayiptr.tbl
    [2012/08/06 10:26:17 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\dayiphr.tbl
    [2012/08/06 10:26:12 | 001,564,868 | ---- | C] () -- C:\WINDOWS\System32\WINSP.MB
    [2012/08/06 10:26:12 | 001,223,500 | ---- | C] () -- C:\WINDOWS\System32\WINZM.MB
    [2012/08/06 10:26:11 | 001,783,864 | ---- | C] () -- C:\WINDOWS\System32\WINPY.MB
    [2012/08/06 10:26:08 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
    [2012/08/06 10:26:08 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
    [2012/08/06 10:26:01 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
    [2012/08/06 10:25:49 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
    [2012/08/06 10:25:47 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
    [2012/08/06 10:25:44 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
    [2012/08/06 10:25:42 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
    [2012/08/06 10:25:12 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
    [2012/08/06 10:25:06 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\Owner\Start Menu\Programs\Outlook Express.lnk
    [2012/08/06 10:25:05 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
    [2012/08/06 10:25:05 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\Owner\Start Menu\Programs\Internet Explorer.lnk
    [2012/08/06 10:24:50 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\Owner\Start Menu\Programs\Remote Assistance.lnk
    [2012/08/06 10:24:04 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
    [2012/08/06 10:23:06 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
    [2012/08/06 10:22:27 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
    [2012/08/06 10:21:14 | 000,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
    [2012/08/06 10:21:11 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
    [2012/08/06 10:21:11 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
    [2012/08/06 10:21:10 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
    [2012/08/06 10:20:13 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
    [2012/08/06 10:20:03 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
    [2012/08/06 10:19:32 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
    [2012/08/06 10:19:32 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
    [2012/08/06 10:19:26 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
    [2012/08/06 10:18:29 | 000,000,609 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk
    [2012/08/06 10:18:28 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
    [2012/08/06 10:18:09 | 000,001,986 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk
    [2012/08/06 10:17:43 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
    [2012/08/06 10:17:43 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
    [2012/08/06 10:17:43 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
    [2012/08/06 10:17:43 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
    [2012/08/06 10:17:43 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
    [2012/08/06 10:17:43 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
    [2012/08/06 10:17:43 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp
    [2012/08/06 10:17:43 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
    [2012/08/06 10:17:42 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp
    [2012/08/06 10:17:42 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp
    [2012/08/06 10:17:42 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp
    [2012/08/06 10:17:39 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
    [2012/08/06 10:17:39 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
    [2012/08/06 10:17:38 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
    [2012/08/06 10:17:31 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
    [2011/05/21 19:16:05 | 000,002,447 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\HiJackThis.lnk
    [2011/05/21 19:15:20 | 001,402,880 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\HiJackThis.msi
    [2011/05/15 20:47:18 | 000,001,878 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
    [2011/05/14 17:33:42 | 001,982,464 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Video0031.3gp.MPG
    [2011/05/14 17:26:06 | 001,851,076 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\liamgoal1.AVI
    [2011/05/14 17:06:42 | 002,768,896 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Video0031.3gp
    [2011/05/14 17:05:07 | 002,818,048 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Video0033.3gp
    [2011/05/14 09:01:52 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Owner\CUSTOM.DICCUSTOM.DIC
    [2011/05/13 11:33:27 | 000,005,354 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\gday.gif
    [2011/05/12 16:27:27 | 000,014,302 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\rgg.png
    [2011/05/07 09:17:50 | 000,001,771 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Kindle For PC.lnk
    [2011/05/04 17:31:41 | 001,505,550 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\form3.bmp
    [2011/04/22 11:56:48 | 000,000,858 | ---- | C] () -- C:\Documents and Settings\Owner\.recently-used.xbel
    [2011/03/12 19:52:04 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
    [2009/10/04 13:02:16 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
    [2009/10/04 13:02:16 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
    [2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
    [2009/08/03 15:07:42 | 000,230,768 | ---- | C] () -- C:\WINDOWS\System32\OGAEXEC.exe
    [2009/08/01 13:23:01 | 000,219,648 | ---- | C] () -- C:\WINDOWS\PEV.exe
    [2009/08/01 13:23:01 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
    [2009/08/01 13:23:01 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
    [2009/08/01 13:23:01 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
    [2009/05/14 14:14:25 | 004,410,054 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\ZBWallpaper_1.bmp
    [2009/04/11 10:54:47 | 000,000,008 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\usb.dat
    [2008/12/08 12:50:48 | 003,686,454 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\ZBWallpaper.bmp
    [2008/11/11 11:20:02 | 000,046,456 | R--- | C] () -- C:\WINDOWS\System32\exitwx.exe
    [2008/10/07 08:13:30 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
    [2008/10/07 08:13:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
    [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
    [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
    [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
    [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
    [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
    [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
    [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
    [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
    [2008/09/25 20:41:40 | 000,240,128 | ---- | C] () -- C:\WINDOWS\System32\x.264.exe
    [2008/09/25 20:41:40 | 000,066,560 | ---- | C] () -- C:\WINDOWS\MOTA113.exe
    [2008/09/25 20:41:40 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
    [2008/09/25 20:41:39 | 000,502,784 | ---- | C] () -- C:\WINDOWS\x2.64.exe
    [2008/09/25 20:41:39 | 000,217,073 | ---- | C] () -- C:\WINDOWS\meta4.exe
    [2008/09/19 14:20:02 | 000,110,080 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [2008/09/15 07:59:30 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
    [2008/09/11 14:11:33 | 000,024,576 | ---- | C] () -- C:\WINDOWS\VMPipe.dll
    [2008/09/11 14:07:38 | 000,049,152 | R--- | C] () -- C:\WINDOWS\amcap.exe
    [2008/09/10 19:10:46 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\fusioncache.dat
    [2008/09/10 18:42:02 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
    [2008/09/10 18:35:56 | 000,117,083 | ---- | C] () -- C:\WINDOWS\hpoins11.dat
    [2008/09/10 16:46:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
    [2008/05/16 14:01:00 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
    [2008/05/16 14:01:00 | 001,657,376 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
    [2008/05/16 14:01:00 | 001,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
    [2008/05/16 14:01:00 | 001,346,080 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
    [2008/05/16 14:01:00 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
    [2008/05/16 14:01:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
    [2008/05/16 14:01:00 | 000,449,056 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
    [2008/05/16 14:01:00 | 000,436,768 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
    [2008/05/16 14:01:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
    [2006/05/06 08:16:29 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat
    [2004/08/04 22:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
    [2004/08/04 22:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
    [2004/08/04 22:00:00 | 000,444,358 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
    [2004/08/04 22:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
    [2004/08/04 22:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
    [2004/08/04 22:00:00 | 000,072,108 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
    [2004/08/04 22:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
    [2004/08/04 22:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
    [2004/08/04 22:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
    [2004/08/04 22:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
    [2004/08/04 22:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
    [2004/08/04 22:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
    [2001/07/07 03:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
    
    < End of report >

    more to follow...

  5. #5
    Forenbenutzer
    Registriert seit
    21.04.2008
    Beiträge
    76

    Re: Erratic PC issues

    Gmer result..
    Code:
    GMER 1.0.15.15627 - http://www.gmer.net
    Rootkit scan 2011-05-22 12:43:06
    Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST3160815AS rev.4.AAB
    Running: b7yjsqp1.exe; Driver: C:\DOCUME~1\Owner\LOCALS~1\Temp\pxtdqpob.sys
    
    
    ---- System - GMER 1.0.15 ----
    
    SSDT            89BC3D60                                                                                                     ZwCreateKey
    SSDT            89BC4F00                                                                                                     ZwCreateMutant
    SSDT            89BC3260                                                                                                     ZwCreateProcess
    SSDT            89BC3520                                                                                                     ZwCreateProcessEx
    SSDT            89BC4BC0                                                                                                     ZwCreateThread
    SSDT            89BC42E0                                                                                                     ZwDeleteKey
    SSDT            89BC45A0                                                                                                     ZwDeleteValueKey
    SSDT            89BC4D60                                                                                                     ZwLoadDriver
    SSDT            89BC37E0                                                                                                     ZwOpenProcess
    SSDT            89BC50A0                                                                                                     ZwSetSystemInformation
    SSDT            89BC4020                                                                                                     ZwSetValueKey
    SSDT            89BC3AA0                                                                                                     ZwTerminateProcess
    SSDT            89BC4A20                                                                                                     ZwWriteVirtualMemory
    
    ---- Kernel code sections - GMER 1.0.15 ----
    
    .text           C:\WINDOWS\system32\DRIVERS\nv4_mini.sys                                                                     section is writeable [0xB8F78360, 0x3535DF, 0xE8000020]
    
    ---- User code sections - GMER 1.0.15 ----
    
    .text           C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe[2596] USER32.dll!DefWindowProcA + 11A    7E42C298 7 Bytes  JMP 10031D10 C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\NewUI.dll (New UI/Avanquest Software)
    .text           C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe[2596] USER32.dll!SetWindowRgn + 2BD      7E42E7E5 7 Bytes  JMP 10031C80 C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\NewUI.dll (New UI/Avanquest Software)
    .text           C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe[2596] USER32.dll!SetClipboardData + 19D  7E43113B 7 Bytes  JMP 10031CF0 C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\NewUI.dll (New UI/Avanquest Software)
    
    ---- Devices - GMER 1.0.15 ----
    
    AttachedDevice  \Driver\Tcpip \Device\Ip                                                                                     tmtdi.sys (Trend Micro TDI Driver (i386-fre)/Trend Micro Inc.)
    AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                    tmtdi.sys (Trend Micro TDI Driver (i386-fre)/Trend Micro Inc.)
    AttachedDevice  \Driver\Tcpip \Device\Udp                                                                                    tmtdi.sys (Trend Micro TDI Driver (i386-fre)/Trend Micro Inc.)
    AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                                  tmtdi.sys (Trend Micro TDI Driver (i386-fre)/Trend Micro Inc.)
    
    ---- EOF - GMER 1.0.15 ----

    aswMBR to follow - I keep needing to restart PC so it's one scan at a time then restart

  6. #6
    Forenbenutzer
    Registriert seit
    21.04.2008
    Beiträge
    76

    Re: Erratic PC issues

    aswMBR result...

    Code:
    aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software
    Run date: 2011-05-22 13:08:57
    -----------------------------
    13:08:57.656    OS Version: Windows 5.1.2600 Service Pack 3
    13:08:57.656    Number of processors: 2 586 0x1706
    13:08:57.656    ComputerName: GKPC  UserName: 
    13:08:58.468    Initialize success
    13:09:10.468    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
    13:09:10.468    Disk 0 Vendor: ST3160815AS 4.AAB Size: 152626MB BusType: 3
    13:09:12.500    Disk 0 MBR read successfully
    13:09:12.500    Disk 0 MBR scan
    13:09:12.500    Disk 0 Windows XP default MBR code
    13:09:14.500    Disk 0 scanning sectors +312576705
    13:09:14.531    Disk 0 scanning C:\WINDOWS\system32\drivers
    13:09:21.406    Service scanning
    13:09:22.421    Disk 0 trace - called modules:
    13:09:22.437    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS 
    13:09:22.437    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a824ab8]
    13:09:22.437    3 CLASSPNP.SYS[ba0e8fd7] -> nt!IofCallDriver -> \Device\00000069[0x8a8432d8]
    13:09:22.453    5 ACPI.sys[b9f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x8a84b940]
    13:09:22.453    Scan finished successfully
    13:09:43.234    Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Owner\Desktop\MBR.dat"
    13:09:43.234    The log file has been saved successfully to "C:\Documents and Settings\Owner\Desktop\aswMBR.txt"
    OK Jintan, that's all the scans hopefully I have done them correctly

  7. #7
    Moderator (global) Team-Mitglied Avatar von Jintan
    Registriert seit
    25.11.2006
    Beiträge
    6.369

    Re: Erratic PC issues

    Unusual, but not sure I see malware here. Do you know why these settings are there for your DNS lookup? DNS look up translates things like www.google.com into their Internet requred IP addresses.

    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.1.1.1 192.168.1.1

    However, what I need you to do right off is check your date/time there:

    [2012/08/06 10:22:55 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll

    Good to be ahead on things, but the wrong date/time can cause problems on systems. That may actually be part of your issues there. But let's do an aggressive scan check anyway.


    Be sure to continue to temporarily disable any protective software when running the scan tools we use here.


    Download ComboFix.exe from here to your desktop, then click that to run that scan. Agree to any warnings you might receive.

    Be sure to install the Recovery Console if you are asked to do so. When the scan completes, a text window with your log will open. Please copy and paste that log back here.

    A caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop.

    Allow the scan to run. When completed a text window will appear - please copy/paste the contents back here. This log can also be found at C:\ComboFix.txt.
    Lebe den Tag!

    Jintan - Die Marke, bei der alles stimmt!

  8. #8
    Forenbenutzer
    Registriert seit
    21.04.2008
    Beiträge
    76

    Re: Erratic PC issues

    Hi Jintan.
    I don't know anything about DNS, sorry.
    The time and date is currently correct but there has been 1 or 2 occasions in the last month or 2 when my young son has inadvertently changed the date, I corrected the date once I noticed this, but a day or 2 had have passed before noticing/correcting it.

    Combofix result ...
    Code:
    ComboFix 11-05-21.03 - Owner 05/23/2011  12:21:04.5.2 - x86
    Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.2047.1678 [GMT 10:00]
    Running from: c:\documents and settings\Owner\Desktop\ComboFix.exe
    AV: Trend Micro Internet Security Pro *Disabled/Updated* {7D2296BC-32CC-4519-917E-52E652474AF5}
    FW: Trend Micro Personal Firewall *Disabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}
    .
    .
    (((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\documents and settings\All Users\Application Data\hpe40.dll
    c:\documents and settings\Owner\Application Data\Avquro
    c:\documents and settings\Owner\Application Data\Avquro\lyez.myu
    c:\documents and settings\Owner\Application Data\EurekaLog
    c:\documents and settings\Owner\DesktopEqY5J5_save2pc.exe
    c:\windows\system32\service
    c:\windows\system32\service\07022011_TIS17_SfFniAU.log
    c:\windows\system32\service\08122008_TIS17_SfFniAU.log
    c:\windows\system32\service\09072009_TIS17_SfFniAU.log
    c:\windows\system32\service\10032011_TIS17_SfFniAU.log
    c:\windows\system32\service\10092009_TIS17_SfFniAU.log
    c:\windows\system32\service\11022010_TIS17_SfFniAU.log
    c:\windows\system32\service\16052011_TIS17_SfFniAU.log
    c:\windows\system32\service\17122010_TIS17_SfFniAU.log
    c:\windows\system32\service\20032009_TIS17_SfFniAU.log
    c:\windows\system32\service\23052011_TIS17_SfFniAU.log
    c:\windows\system32\service\24022010_TIS17_SfFniAU.log
    c:\windows\system32\service\31082010_TIS17_SfFniAU.log
    c:\windows\VM305Cap.exe
    .
    .
    (((((((((((((((((((((((((   Files Created from 2011-04-23 to 2011-05-23  )))))))))))))))))))))))))))))))
    .
    .
    2012-08-06 10:07 . 2011-05-20 11:27    --------    d-----r-    C:\Program Files
    2012-08-06 10:04 . 2012-08-06 00:24    --------    d-----w-    C:\Documents and Settings
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-03-04 06:37 . 2004-08-04 12:00    420864    ----a-w-    c:\windows\system32\vbscript.dll
    2011-03-03 13:21 . 2004-08-04 12:00    1857920    ----a-w-    c:\windows\system32\win32k.sys
    2011-02-22 23:06 . 2004-08-04 12:00    916480    ----a-w-    c:\windows\system32\wininet.dll
    2011-02-22 23:06 . 2004-08-04 12:00    43520    ----a-w-    c:\windows\system32\licmgr10.dll
    2011-02-22 23:06 . 2004-08-04 12:00    1469440    ----a-w-    c:\windows\system32\inetcpl.cpl
    2011-02-22 11:41 . 2004-08-04 12:00    385024    ----a-w-    c:\windows\system32\html.iec
    2006-05-03 09:06    163328    --sh--r-    c:\windows\system32\flvDX.dll
    2007-02-21 10:47    31232    --sh--r-    c:\windows\system32\msfDX.dll
    2008-03-16 12:30    216064    --sh--r-    c:\windows\system32\nbDX.dll
    .
    .
    (((((((((((((((((((((((((((((   SnapShot_2009-08-02_00.47.20   )))))))))))))))))))))))))))))))))))))))))
    .
    + 2011-01-10 13:03 . 2011-01-10 13:03    65536              c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_189d6662\vcomp.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    49152              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80KOR.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    49152              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80JPN.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    61440              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80ITA.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    61440              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80FRA.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    61440              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80ESP.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    57344              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80ENU.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    65536              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80DEU.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    45056              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80CHT.dll
    + 2011-01-10 12:32 . 2011-01-10 12:32    40960              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80CHS.dll
    + 2011-01-10 18:05 . 2011-01-10 18:05    57856              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_e87e0bcd\mfcm80u.dll
    + 2011-01-10 18:23 . 2011-01-10 18:23    69632              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_e87e0bcd\mfcm80.dll
    + 2011-01-10 11:21 . 2011-01-10 11:21    97280              c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_7837863c\ATL80.dll
    + 2008-07-29 02:55 . 2008-07-29 02:55    95744              c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
    - 2006-10-26 02:40 . 2006-10-26 02:40    95744              c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
    + 2011-05-23 02:20 . 2011-05-23 02:20    16384              c:\windows\Temp\Perflib_Perfdata_658.dat
    + 2011-05-23 02:20 . 2011-05-23 02:20    16384              c:\windows\Temp\Perflib_Perfdata_200.dat
    + 2007-07-30 09:19 . 2009-08-06 09:24    44768              c:\windows\system32\wups2.dll
    + 2012-08-06 00:19 . 2009-08-06 09:24    35552              c:\windows\system32\wups.dll
    + 2012-08-06 00:19 . 2009-08-06 09:24    53472              c:\windows\system32\wuauclt.exe
    + 2004-08-04 12:00 . 2009-06-25 08:25    54272              c:\windows\system32\wdigest.dll
    + 2008-07-14 11:09 . 2010-11-03 13:12    46080              c:\windows\system32\tzchange.exe
    + 2004-08-04 12:00 . 2009-06-12 12:31    80896              c:\windows\system32\tlntsess.exe
    + 2004-08-04 12:00 . 2009-06-12 12:31    76288              c:\windows\system32\telnet.exe
    + 2004-08-04 12:00 . 2009-10-21 05:38    75776              c:\windows\system32\strmfilt.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    75776              c:\windows\system32\strmfilt.dll
    + 2004-08-04 12:00 . 2010-08-27 05:57    99840              c:\windows\system32\srvsvc.dll
    + 2004-08-04 12:00 . 2010-08-17 13:17    58880              c:\windows\system32\spoolsv.exe
    + 2009-10-02 05:07 . 2008-03-21 03:57    14640              c:\windows\system32\spmsgXP_2k3.dll
    + 2009-09-30 23:13 . 2009-08-06 09:24    44768              c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
    + 2009-09-30 23:13 . 2009-08-06 09:24    35552              c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
    + 2010-04-16 11:12 . 2010-04-16 11:12    48464              c:\windows\system32\sirenacm.dll
    + 2004-08-04 12:00 . 2009-06-25 08:25    56832              c:\windows\system32\secur32.dll
    - 2004-08-04 12:00 . 2009-02-03 19:59    56832              c:\windows\system32\secur32.dll
    + 2009-11-25 20:16 . 2008-04-13 17:45    59520              c:\windows\system32\ReinstallBackups\0021\DriverFiles\i386\usbhub.sys
    + 2009-11-25 20:16 . 2008-04-13 17:45    59520              c:\windows\system32\ReinstallBackups\0020\DriverFiles\i386\usbhub.sys
    + 2009-11-25 20:16 . 2008-04-13 17:45    59520              c:\windows\system32\ReinstallBackups\0019\DriverFiles\i386\usbhub.sys
    + 2009-11-25 20:16 . 2008-04-13 17:45    59520              c:\windows\system32\ReinstallBackups\0018\DriverFiles\i386\usbhub.sys
    + 2009-11-25 20:16 . 2008-04-13 18:45    59520              c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\usbhub.sys
    - 2004-08-04 12:00 . 2008-04-14 00:12    79872              c:\windows\system32\raschap.dll
    + 2004-08-04 12:00 . 2009-10-12 13:38    79872              c:\windows\system32\raschap.dll
    + 2009-01-15 00:26 . 2010-07-12 18:36    68592              c:\windows\system32\pxinsa64.exe
    + 2009-01-15 00:26 . 2010-07-12 18:36    72176              c:\windows\system32\pxhpinst.exe
    + 2009-01-15 00:26 . 2010-07-12 18:36    68080              c:\windows\system32\pxcpya64.exe
    + 2010-03-30 14:16 . 2010-03-30 14:16    99176              c:\windows\system32\PresentationHostProxy.dll
    + 2004-08-04 12:00 . 2011-04-13 07:24    72108              c:\windows\system32\perfc009.dat
    - 2004-08-04 12:00 . 2009-05-01 06:16    72108              c:\windows\system32\perfc009.dat
    + 2008-05-02 00:58 . 2009-02-08 22:37    91136              c:\windows\system32\nmwcdcls.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    49488              c:\windows\system32\netfxperf.dll
    + 2009-11-05 12:17 . 2009-11-05 12:17    11600              c:\windows\system32\mui\0409\mscorees.dll
    + 2004-08-04 00:56 . 2009-11-27 17:11    17920              c:\windows\system32\msyuv.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07    28672              c:\windows\system32\msvidc32.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07    11264              c:\windows\system32\msrle32.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    11264              c:\windows\system32\msrle32.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    66560              c:\windows\system32\mshtmled.dll
    - 2004-08-04 12:00 . 2009-03-07 18:31    66560              c:\windows\system32\mshtmled.dll
    + 2007-08-13 08:54 . 2011-02-22 23:06    55296              c:\windows\system32\msfeedsbs.dll
    - 2007-08-13 08:54 . 2009-07-03 17:09    55296              c:\windows\system32\msfeedsbs.dll
    + 2004-08-04 12:00 . 2009-09-04 21:03    58880              c:\windows\system32\msasn1.dll
    + 2010-04-29 10:10 . 2010-04-29 10:10    98304              c:\windows\system32\Macromed\Shockwave 10\SwOnce.dll
    + 2010-04-29 10:10 . 2010-04-29 10:10    86016              c:\windows\system32\Macromed\Shockwave 10\SwMenuX.dll
    + 2010-04-29 10:10 . 2010-04-29 10:10    77824              c:\windows\system32\Macromed\Shockwave 10\SwInit.exe
    + 2010-04-29 10:10 . 2010-04-29 10:10    24576              c:\windows\system32\Macromed\Shockwave 10\DynaPlayer.dll
    - 2004-08-04 12:00 . 2009-07-03 17:09    25600              c:\windows\system32\jsproxy.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    25600              c:\windows\system32\jsproxy.dll
    + 2004-08-04 00:56 . 2009-11-27 16:07    48128              c:\windows\system32\iyuv_32.dll
    + 2012-08-06 00:18 . 2010-11-18 18:12    81920              c:\windows\system32\isign32.dll
    - 2012-08-06 00:18 . 2008-04-14 00:11    81920              c:\windows\system32\isign32.dll
    + 2004-08-04 12:00 . 2010-06-17 14:03    80384              c:\windows\system32\iccvid.dll
    - 2004-08-04 12:00 . 2008-04-14 00:11    80384              c:\windows\system32\iccvid.dll
    + 2004-08-04 12:00 . 2009-10-21 05:38    25088              c:\windows\system32\httpapi.dll
    + 2004-08-04 12:00 . 2009-10-15 16:28    81920              c:\windows\system32\fontsub.dll
    - 2004-08-04 12:00 . 2009-06-16 14:36    81920              c:\windows\system32\fontsub.dll
    + 2009-11-25 20:16 . 2008-01-09 01:28    27632              c:\windows\system32\DRVSTORE\seehcri_83581F0E1122DD79BF9CC54502EB659FE9A0E57B\i386\seehcri.sys
    + 2009-08-14 07:38 . 2007-04-10 06:14    12424              c:\windows\system32\DRVSTORE\se3esdm2_9764AEB0AF92C101555E353C0F0D3CF5C63F33FA\i386\se3ecmnt.sys
    + 2009-08-14 07:38 . 2007-04-10 06:14    98568              c:\windows\system32\DRVSTORE\se3eobx2_4D2AF8EAA7B19E8748780FA6098D3AACC5D8D9F9\i386\se3eobex.sys
    + 2009-08-14 07:38 . 2007-04-10 06:14    12424              c:\windows\system32\DRVSTORE\se3eobx2_4D2AF8EAA7B19E8748780FA6098D3AACC5D8D9F9\i386\se3ecmnt.sys
    + 2009-08-14 07:38 . 2007-04-10 06:14    15112              c:\windows\system32\DRVSTORE\se3emdm2_B9A80A4AD6A3087EAEC451F69738F8F9B8EAC7FD\i386\se3emdfl.sys
    + 2009-08-14 07:38 . 2007-04-10 06:14    12424              c:\windows\system32\DRVSTORE\se3emdm2_B9A80A4AD6A3087EAEC451F69738F8F9B8EAC7FD\i386\se3ecmnt.sys
    + 2009-08-14 07:38 . 2007-04-10 06:14    12424              c:\windows\system32\DRVSTORE\se3ebus_278301E0E0E3254933BAAF4F06701023D35DABD9\i386\se3ewhnt.sys
    + 2009-08-14 07:38 . 2007-04-10 06:14    83080              c:\windows\system32\DRVSTORE\se3ebus_278301E0E0E3254933BAAF4F06701023D35DABD9\i386\se3ebus.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    12200              c:\windows\system32\DRVSTORE\s916sdm2_21F85660AA82023EA111CC6BDFE4E4EF2EDFED63\i386\s916cmnt.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    12200              c:\windows\system32\DRVSTORE\s916obx2_74455A9D7CF2BC68446FD3455ABFCCDA93FFD087\i386\s916cmnt.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    15016              c:\windows\system32\DRVSTORE\s916mdm2_85F2F98F689E64A6D6F619016E152C56854F40D7\i386\s916mdfl.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    12200              c:\windows\system32\DRVSTORE\s916mdm2_85F2F98F689E64A6D6F619016E152C56854F40D7\i386\s916cmnt.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    12200              c:\windows\system32\DRVSTORE\s916bus_3395190DF2FB782139DB9E18AA83FD42AAB0E78E\i386\s916whnt.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    83496              c:\windows\system32\DRVSTORE\s916bus_3395190DF2FB782139DB9E18AA83FD42AAB0E78E\i386\s916bus.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    12200              c:\windows\system32\DRVSTORE\s1018unic_15B3C7B2776B0BC14A42E11605279A811845AD24\i386\s1018whnt.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    10792              c:\windows\system32\DRVSTORE\s1018unic_15B3C7B2776B0BC14A42E11605279A811845AD24\i386\s1018crnt.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    12200              c:\windows\system32\DRVSTORE\s1018sdm2_C887C5C77A5B3624DA74389604FC784C3DAE5347\i386\s1018cmnt.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    12200              c:\windows\system32\DRVSTORE\s1018obx2_35112A9BD7F14B201F010A8C939D6E2E93F3FDAF\i386\s1018cmnt.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    26024              c:\windows\system32\DRVSTORE\s1018ndis_15B3C7B2776B0BC14A42E11605279A811845AD24\i386\s1018nd5.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    15016              c:\windows\system32\DRVSTORE\s1018mdm2_82223E79B9F45878C55D5EF19AA397205D602999\i386\s1018mdfl.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    12200              c:\windows\system32\DRVSTORE\s1018mdm2_82223E79B9F45878C55D5EF19AA397205D602999\i386\s1018cmnt.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    12200              c:\windows\system32\DRVSTORE\s1018bus_AC6ACF29DF1C2E5ED4858E0DA0048ED9F45BE8DB\i386\s1018whnt.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    86696              c:\windows\system32\DRVSTORE\s1018bus_AC6ACF29DF1C2E5ED4858E0DA0048ED9F45BE8DB\i386\s1018bus.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    12200              c:\windows\system32\DRVSTORE\s0017unic_BB4DCB7C5F0783D4B48E0C375B1725378044DF2F\i386\s0017whnt.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    10792              c:\windows\system32\DRVSTORE\s0017unic_BB4DCB7C5F0783D4B48E0C375B1725378044DF2F\i386\s0017crnt.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    12200              c:\windows\system32\DRVSTORE\s0017sdm2_B9E615C0177324E64608E606C5BACDE21EAA633D\i386\s0017cmnt.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    12200              c:\windows\system32\DRVSTORE\s0017obx2_A3A3D079A0B5800EDAAA5F4412759AA097D63D6C\i386\s0017cmnt.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    26024              c:\windows\system32\DRVSTORE\s0017ndis_BB4DCB7C5F0783D4B48E0C375B1725378044DF2F\i386\s0017nd5.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    15016              c:\windows\system32\DRVSTORE\s0017mdm2_83F2C95A46E46AD749D51DDDADAD3F859682E916\i386\s0017mdfl.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    12200              c:\windows\system32\DRVSTORE\s0017mdm2_83F2C95A46E46AD749D51DDDADAD3F859682E916\i386\s0017cmnt.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    12200              c:\windows\system32\DRVSTORE\s0017bus_E2B55BAC406B9793A79B5AF9A81E5E8E137E6082\i386\s0017whnt.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    86824              c:\windows\system32\DRVSTORE\s0017bus_E2B55BAC406B9793A79B5AF9A81E5E8E137E6082\i386\s0017bus.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    12200              c:\windows\system32\DRVSTORE\s0016unic_9D1BEA0AD7AC1ECEA653A080CB50A95794EB54A6\i386\s0016whnt.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    10792              c:\windows\system32\DRVSTORE\s0016unic_9D1BEA0AD7AC1ECEA653A080CB50A95794EB54A6\i386\s0016crnt.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    12200              c:\windows\system32\DRVSTORE\s0016sdm2_49EC14686E23454842B5DD1E08A12351912F071A\i386\s0016cmnt.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    12200              c:\windows\system32\DRVSTORE\s0016obx2_A8E1C631CA004AB1BE81A3D48D308AF233F680BF\i386\s0016cmnt.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    25512              c:\windows\system32\DRVSTORE\s0016ndis_9D1BEA0AD7AC1ECEA653A080CB50A95794EB54A6\i386\s0016nd5.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    25128              c:\windows\system32\DRVSTORE\s0016ndis_9D1BEA0AD7AC1ECEA653A080CB50A95794EB54A6\i386\s0016nd3.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    15016              c:\windows\system32\DRVSTORE\s0016mdm2_682450892C06910A09004057C74387FB5E35E414\i386\s0016mdfl.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    12200              c:\windows\system32\DRVSTORE\s0016mdm2_682450892C06910A09004057C74387FB5E35E414\i386\s0016cmnt.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    12200              c:\windows\system32\DRVSTORE\s0016bus_CBA53D764D4AE1B85F201CB5EAAA002EFC57DFA2\i386\s0016whnt.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    89256              c:\windows\system32\DRVSTORE\s0016bus_CBA53D764D4AE1B85F201CB5EAAA002EFC57DFA2\i386\s0016bus.sys
    + 2009-10-02 04:58 . 2008-08-26 00:26    18816              c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    22016              c:\windows\system32\DRVSTORE\ccdcmbo_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\ccdcmbo.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    91136              c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdcls.dll
    + 2009-10-02 04:57 . 2009-02-08 22:37    17664              c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\ccdcmb.sys
    + 2009-08-14 07:38 . 2008-01-18 07:16    12200              c:\windows\system32\DRVSTORE\a016sdm2_9FBFF1EEEB0015F5CA2F0634B300C450FF556BA3\i386\a016cmnt.sys
    + 2009-08-14 07:38 . 2008-01-18 07:16    12200              c:\windows\system32\DRVSTORE\a016obx2_3839048F455A46A4FF4033F897B7AAA7BF427B58\i386\a016cmnt.sys
    + 2009-08-14 07:37 . 2008-01-18 07:16    15016              c:\windows\system32\DRVSTORE\a016mdm2_8FC221937B2924C4F9CE55A0CA993E1DEF07D5BB\i386\a016mdfl.sys
    + 2009-08-14 07:37 . 2008-01-18 07:16    12200              c:\windows\system32\DRVSTORE\a016mdm2_8FC221937B2924C4F9CE55A0CA993E1DEF07D5BB\i386\a016cmnt.sys
    + 2009-08-14 07:37 . 2008-01-18 07:16    12200              c:\windows\system32\DRVSTORE\a016bus_DFCCFF5CDE2FABCF26C68FAA7371A787F2CF5BB9\i386\a016whnt.sys
    + 2009-08-14 07:37 . 2008-01-18 07:16    83880              c:\windows\system32\DRVSTORE\a016bus_DFCCFF5CDE2FABCF26C68FAA7371A787F2CF5BB9\i386\a016bus.sys
    + 2006-11-01 21:22 . 2008-03-27 06:27    35040              c:\windows\system32\drivers\wdfldr.sys
    - 2004-08-04 12:00 . 2008-04-13 18:45    59520              c:\windows\system32\drivers\usbhub.sys
    + 2004-08-04 12:00 . 2008-04-13 17:45    59520              c:\windows\system32\drivers\usbhub.sys
    + 2010-08-31 06:35 . 2010-08-31 06:35    89872              c:\windows\system32\drivers\tmtdi.sys
    + 2010-08-31 06:35 . 2010-07-30 17:29    36432              c:\windows\system32\drivers\tmpreflt.sys
    + 2010-08-31 06:48 . 2010-07-19 18:03    51792              c:\windows\system32\drivers\tmevtmgr.sys
    + 2010-08-31 06:48 . 2010-07-19 18:03    59472              c:\windows\system32\drivers\tmactmon.sys
    + 2009-11-25 20:16 . 2008-01-09 01:28    27632              c:\windows\system32\drivers\seehcri.sys
    + 2009-08-14 07:35 . 2008-11-04 01:45    12200              c:\windows\system32\drivers\s1018whnt.sys
    + 2009-08-14 07:35 . 2008-11-04 01:45    12200              c:\windows\system32\drivers\s1018wh.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    26024              c:\windows\system32\drivers\s1018nd5.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    15016              c:\windows\system32\drivers\s1018mdfl.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    10792              c:\windows\system32\drivers\s1018cr.sys
    + 2009-08-14 07:36 . 2008-11-04 01:45    12200              c:\windows\system32\drivers\s1018cmnt.sys
    + 2009-08-14 07:36 . 2008-11-04 01:45    12200              c:\windows\system32\drivers\s1018cm.sys
    + 2009-08-14 07:35 . 2008-11-04 01:45    86696              c:\windows\system32\drivers\s1018bus.sys
    + 2005-08-18 17:00 . 2010-07-12 18:36    45648              c:\windows\system32\drivers\pxhelp20.sys
    + 2008-09-22 08:20 . 2008-08-26 00:26    18816              c:\windows\system32\drivers\pccsmcfd.sys
    + 2004-08-04 12:00 . 2010-11-02 15:17    40960              c:\windows\system32\drivers\ndproxy.sys
    + 2009-08-02 21:57 . 2009-07-13 03:36    38160              c:\windows\system32\drivers\mbamswissarmy.sys
    + 2009-08-02 21:57 . 2009-07-13 03:36    19096              c:\windows\system32\drivers\mbam.sys
    + 2004-08-04 12:00 . 2009-06-24 11:18    92928              c:\windows\system32\drivers\ksecdd.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    22016              c:\windows\system32\drivers\ccdcmbo.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    17664              c:\windows\system32\drivers\ccdcmb.sys
    + 2010-11-12 00:44 . 2010-11-12 00:44    94208              c:\windows\system32\dpl100.dll
    - 2004-08-04 12:00 . 2008-04-14 00:11    45568              c:\windows\system32\dnsrslvr.dll
    + 2004-08-04 12:00 . 2009-04-20 17:17    45568              c:\windows\system32\dnsrslvr.dll
    - 2009-06-11 18:38 . 2009-07-03 17:09    12800              c:\windows\system32\dllcache\xpshims.dll
    + 2009-06-11 18:38 . 2011-02-22 23:06    12800              c:\windows\system32\dllcache\xpshims.dll
    + 2012-08-06 00:19 . 2009-08-06 09:24    35552              c:\windows\system32\dllcache\wups.dll
    + 2012-08-06 00:19 . 2009-08-06 09:24    53472              c:\windows\system32\dllcache\wuauclt.exe
    + 2009-06-25 08:25 . 2009-06-25 08:25    54272              c:\windows\system32\dllcache\wdigest.dll
    + 2010-12-15 20:24 . 2010-10-11 14:59    45568              c:\windows\system32\dllcache\wab.exe
    + 2004-08-04 12:00 . 2008-04-13 17:45    59520              c:\windows\system32\dllcache\usbhub.sys
    + 2009-06-12 12:31 . 2009-06-12 12:31    80896              c:\windows\system32\dllcache\tlntsess.exe
    + 2009-06-12 12:31 . 2009-06-12 12:31    76288              c:\windows\system32\dllcache\telnet.exe
    + 2009-10-21 05:38 . 2009-10-21 05:38    75776              c:\windows\system32\dllcache\strmfilt.dll
    + 2010-08-27 05:57 . 2010-08-27 05:57    99840              c:\windows\system32\dllcache\srvsvc.dll
    + 2010-08-17 13:17 . 2010-08-17 13:17    58880              c:\windows\system32\dllcache\spoolsv.exe
    + 2009-02-03 19:59 . 2009-06-25 08:25    56832              c:\windows\system32\dllcache\secur32.dll
    - 2009-02-03 19:59 . 2009-02-03 19:59    56832              c:\windows\system32\dllcache\secur32.dll
    + 2009-10-12 13:38 . 2009-10-12 13:38    79872              c:\windows\system32\dllcache\raschap.dll
    + 2010-12-15 20:26 . 2010-11-02 15:17    40960              c:\windows\system32\dllcache\ndproxy.sys
    + 2009-11-27 17:11 . 2009-11-27 17:11    17920              c:\windows\system32\dllcache\msyuv.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07    28672              c:\windows\system32\dllcache\msvidc32.dll
    + 2009-11-27 16:07 . 2009-11-27 16:07    11264              c:\windows\system32\dllcache\msrle32.dll
    - 2004-08-04 12:00 . 2009-03-07 18:31    66560              c:\windows\system32\dllcache\mshtmled.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    66560              c:\windows\system32\dllcache\mshtmled.dll
    - 2008-09-10 21:26 . 2009-07-03 17:09    55296              c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-09-10 21:26 . 2011-02-22 23:06    55296              c:\windows\system32\dllcache\msfeedsbs.dll
    + 2009-09-04 21:03 . 2009-09-04 21:03    58880              c:\windows\system32\dllcache\msasn1.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    43520              c:\windows\system32\dllcache\licmgr10.dll
    + 2009-06-24 11:18 . 2009-06-24 11:18    92928              c:\windows\system32\dllcache\ksecdd.sys
    + 2004-08-04 12:00 . 2011-02-22 23:06    25600              c:\windows\system32\dllcache\jsproxy.dll
    - 2004-08-04 12:00 . 2009-07-03 17:09    25600              c:\windows\system32\dllcache\jsproxy.dll
    + 2009-11-27 16:07 . 2009-11-27 16:07    48128              c:\windows\system32\dllcache\iyuv_32.dll
    + 2010-11-18 18:12 . 2010-11-18 18:12    81920              c:\windows\system32\dllcache\isign32.dll
    + 2009-10-21 05:38 . 2009-10-21 05:38    25088              c:\windows\system32\dllcache\httpapi.dll
    + 2009-06-16 14:36 . 2009-10-15 16:28    81920              c:\windows\system32\dllcache\fontsub.dll
    - 2009-06-16 14:36 . 2009-06-16 14:36    81920              c:\windows\system32\dllcache\fontsub.dll
    + 2009-04-20 17:17 . 2009-04-20 17:17    45568              c:\windows\system32\dllcache\dnsrslvr.dll
    + 2009-12-14 07:08 . 2010-12-09 14:30    33280              c:\windows\system32\dllcache\csrsrv.dll
    + 2004-08-04 12:00 . 2009-08-06 09:24    96480              c:\windows\system32\dllcache\cdm.dll
    + 2009-08-01 03:34 . 2008-10-16 03:09    51224              c:\windows\system32\dllcache\cache\wuauclt.exe
    + 2009-08-01 03:34 . 2008-04-14 00:12    82432              c:\windows\system32\dllcache\cache\ws2_32.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    26112              c:\windows\system32\dllcache\cache\userinit.exe
    + 2009-08-01 03:34 . 2008-04-14 00:12    14336              c:\windows\system32\dllcache\cache\svchost.exe
    + 2009-08-01 03:34 . 2008-04-14 00:12    57856              c:\windows\system32\dllcache\cache\spoolsv.exe
    + 2009-08-01 03:34 . 2008-04-14 00:12    88576              c:\windows\system32\dllcache\cache\rasauto.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    17408              c:\windows\system32\dllcache\cache\powrprof.dll
    + 2009-08-01 03:34 . 2008-04-14 00:11    33792              c:\windows\system32\dllcache\cache\msgsvc.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    13312              c:\windows\system32\dllcache\cache\lsass.exe
    + 2009-08-01 03:34 . 2008-04-14 00:11    22016              c:\windows\system32\dllcache\cache\lpk.dll
    + 2009-08-01 03:34 . 2008-04-13 18:39    24576              c:\windows\system32\dllcache\cache\kbdclass.sys
    + 2009-08-01 03:34 . 2008-04-13 18:53    36608              c:\windows\system32\dllcache\cache\ip6fw.sys
    + 2009-08-01 03:34 . 2008-04-14 00:12    15360              c:\windows\system32\dllcache\cache\ctfmon.exe
    + 2009-08-01 03:34 . 2004-08-04 12:00    11648              c:\windows\system32\dllcache\cache\acpiec.sys
    + 2010-01-13 14:01 . 2010-01-13 14:01    86016              c:\windows\system32\dllcache\cabview.dll
    + 2009-06-10 14:13 . 2009-11-27 16:07    84992              c:\windows\system32\dllcache\avifil32.dll
    + 2009-07-17 19:01 . 2009-07-17 19:01    58880              c:\windows\system32\dllcache\atl.dll
    + 2010-03-05 14:37 . 2010-03-05 14:37    65536              c:\windows\system32\dllcache\asycfilt.dll
    + 2004-08-04 12:00 . 2010-12-09 14:30    33280              c:\windows\system32\csrsrv.dll
    + 2004-08-04 12:00 . 2009-08-06 09:24    96480              c:\windows\system32\cdm.dll
    + 2004-08-04 12:00 . 2010-01-13 14:01    86016              c:\windows\system32\cabview.dll
    - 2004-08-04 12:00 . 2008-04-14 00:11    84992              c:\windows\system32\avifil32.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07    84992              c:\windows\system32\avifil32.dll
    - 2004-08-04 12:00 . 2008-04-14 00:11    58880              c:\windows\system32\atl.dll
    + 2004-08-04 12:00 . 2009-07-17 19:01    58880              c:\windows\system32\atl.dll
    + 2004-08-04 12:00 . 2010-03-05 14:37    65536              c:\windows\system32\asycfilt.dll
    + 2010-04-24 23:07 . 2010-06-24 21:54    87702              c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
    + 2010-05-05 14:05 . 2010-05-05 14:05    94208              c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11    79488              c:\windows\system32\Adobe\Shockwave 11\gtapi.dll
    + 2010-05-05 14:38 . 2010-05-05 14:38    65816              c:\windows\system32\Adobe\Director\SWDNLD.EXE
    - 2008-07-29 09:16 . 2008-07-29 09:16    32768              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2010-04-07 13:48 . 2010-04-07 13:48    32768              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13648              c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2010-09-21 22:43 . 2010-09-21 22:43    30544              c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2009-06-24 08:56 . 2009-06-24 08:56    73728              c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
    + 2010-09-23 04:55 . 2010-09-23 04:55    81920              c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    + 2010-09-22 15:26 . 2010-09-22 15:26    77824              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    - 2007-04-13 10:58 . 2007-04-13 10:58    77824              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    + 2010-09-22 15:26 . 2010-09-22 15:26    86016              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    - 2007-04-13 10:57 . 2007-04-13 10:57    86016              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    - 2007-04-13 10:57 . 2007-04-13 10:57    81920              c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2010-09-22 15:26 . 2010-09-22 15:26    81920              c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2010-09-22 16:17 . 2010-09-22 16:17    32768              c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2007-04-13 11:30 . 2007-04-13 11:30    32768              c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    + 2010-09-22 16:17 . 2010-09-22 16:17    24576              c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    - 2003-02-20 09:19 . 2003-02-20 09:19    24576              c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13648              c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13648              c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13648              c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13648              c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13664              c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13688              c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13664              c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13696              c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13656              c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13656              c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13656              c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13672              c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    13664              c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    86864              c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    - 2008-11-11 01:17 . 2008-11-11 01:17    24576              c:\windows\Installer\nlsdl.dll
    + 2008-11-11 01:17 . 2010-08-31 06:34    24576              c:\windows\Installer\nlsdl.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    57856              c:\windows\Installer\mfcm80u.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    57856              c:\windows\Installer\mfcm80u.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    69632              c:\windows\Installer\mfcm80.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    69632              c:\windows\Installer\mfcm80.dll
    + 2009-11-11 20:34 . 2009-11-11 20:34    49664              c:\windows\Installer\ea3777.msi
    - 2008-09-10 23:32 . 2008-11-11 01:17    96256              c:\windows\Installer\atl80.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    96256              c:\windows\Installer\atl80.dll
    + 2010-07-23 00:14 . 2010-07-23 00:14    40448              c:\windows\Installer\63f27.msi
    + 2011-04-24 12:28 . 2011-04-24 12:28    21504              c:\windows\Installer\39b040fe.msi
    + 2011-02-05 03:24 . 2011-02-05 03:24    22016              c:\windows\Installer\142b6760.msi
    + 2011-02-05 03:23 . 2011-02-05 03:23    27136              c:\windows\Installer\142b672f.msi
    + 2011-02-05 03:22 . 2011-02-05 03:22    83456              c:\windows\Installer\142b6715.msi
    + 2011-02-05 03:22 . 2011-02-05 03:22    58880              c:\windows\Installer\142b670a.msi
    + 2010-11-19 05:40 . 2010-11-19 05:40    28160              c:\windows\Installer\1290a4.msi
    + 2010-12-24 07:24 . 2010-12-24 07:24    25214              c:\windows\Installer\{FB4F9000-04FC-11E0-85D2-001AA037B01E}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
    + 2010-12-24 07:24 . 2010-12-24 07:24    25214              c:\windows\Installer\{FB4F9000-04FC-11E0-85D2-001AA037B01E}\ARPPRODUCTICON.exe
    + 2009-11-11 20:33 . 2009-11-11 20:33    62304              c:\windows\Installer\{F6BD194C-4190-4D73-B1B1-C48C99921BFE}\IconWlc.exe
    + 2009-11-25 16:00 . 2009-11-25 16:00    32768              c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
    + 2011-02-05 03:23 . 2011-02-05 03:23    61272              c:\windows\Installer\{E6158D07-2637-4ECF-B576-37C489669174}\IconWlc.exe
    + 2011-02-05 03:24 . 2011-02-05 03:24    80395              c:\windows\Installer\{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}\MsblIco.Exe
    + 2009-11-11 20:33 . 2009-11-11 20:33    80395              c:\windows\Installer\{A85FD55B-891B-4314-97A5-EA96C0BD80B5}\MsblIco.Exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    35088              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\oisicon.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    35088              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\oisicon.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    18704              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\mspicons.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    18704              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\mspicons.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    20240              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\cagicon.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    20240              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\cagicon.exe
    + 2010-06-04 17:01 . 2011-04-21 17:01    49152              c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2011-02-05 03:24 . 2011-02-05 03:24    58945              c:\windows\Installer\{6412CECE-8172-4BE5-935B-6CECACD2CA87}\wlmail.exe
    + 2009-10-02 04:59 . 2009-10-02 04:59    15086              c:\windows\Installer\{3D39E775-DDDA-4327-B747-0BDC5F191331}\ARPPRODUCTICON.exe
    + 2009-10-02 04:58 . 2009-10-02 04:58    10134              c:\windows\Installer\{0C973594-7DDF-4BD0-84ED-3517F7622037}\ARPPRODUCTICON.exe
    + 2010-09-22 17:47 . 2010-09-22 17:47    35760              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\reader_sl.exe
    + 2010-09-22 16:03 . 2010-09-22 16:03    99776              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\eula.exe
    + 2010-09-22 15:52 . 2010-09-22 15:52    27048              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\acrotextextractor.exe
    + 2010-09-22 07:12 . 2010-09-22 07:12    15800              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32Info.exe
    + 2008-10-24 22:18 . 2008-10-24 22:18    72568              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ONFILTER.DLL
    + 2008-10-24 22:18 . 2008-10-24 22:18    98696              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ONENOTEM.EXE
    + 2006-10-26 11:58 . 2006-10-26 11:58    33080              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.4518\VPREVIEW.EXE
    + 2010-06-09 17:15 . 2010-02-25 06:24    12800              c:\windows\ie8updates\KB982381-IE8\xpshims.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    55296              c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    25600              c:\windows\ie8updates\KB982381-IE8\jsproxy.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    12800              c:\windows\ie8updates\KB980182-IE8\xpshims.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    55296              c:\windows\ie8updates\KB980182-IE8\msfeedsbs.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    25600              c:\windows\ie8updates\KB980182-IE8\jsproxy.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    12800              c:\windows\ie8updates\KB978207-IE8\xpshims.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    55296              c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    25600              c:\windows\ie8updates\KB978207-IE8\jsproxy.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    12800              c:\windows\ie8updates\KB976325-IE8\xpshims.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    55296              c:\windows\ie8updates\KB976325-IE8\msfeedsbs.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    25600              c:\windows\ie8updates\KB976325-IE8\jsproxy.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    12800              c:\windows\ie8updates\KB974455-IE8\xpshims.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    55296              c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    25600              c:\windows\ie8updates\KB974455-IE8\jsproxy.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    12800              c:\windows\ie8updates\KB2497640-IE8\xpshims.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    66560              c:\windows\ie8updates\KB2497640-IE8\mshtmled.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    55296              c:\windows\ie8updates\KB2497640-IE8\msfeedsbs.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    43520              c:\windows\ie8updates\KB2497640-IE8\licmgr10.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    25600              c:\windows\ie8updates\KB2497640-IE8\jsproxy.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    12800              c:\windows\ie8updates\KB2482017-IE8\xpshims.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    66560              c:\windows\ie8updates\KB2482017-IE8\mshtmled.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    55296              c:\windows\ie8updates\KB2482017-IE8\msfeedsbs.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    43520              c:\windows\ie8updates\KB2482017-IE8\licmgr10.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    25600              c:\windows\ie8updates\KB2482017-IE8\jsproxy.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    12800              c:\windows\ie8updates\KB2416400-IE8\xpshims.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    66560              c:\windows\ie8updates\KB2416400-IE8\mshtmled.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    55296              c:\windows\ie8updates\KB2416400-IE8\msfeedsbs.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    43520              c:\windows\ie8updates\KB2416400-IE8\licmgr10.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    25600              c:\windows\ie8updates\KB2416400-IE8\jsproxy.dll
    + 2010-10-14 02:01 . 2010-06-24 12:22    12800              c:\windows\ie8updates\KB2360131-IE8\xpshims.dll
    + 2010-10-14 02:01 . 2009-03-07 18:31    66560              c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll
    + 2010-10-14 02:01 . 2010-06-24 12:21    55296              c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll
    + 2010-10-14 02:01 . 2009-03-07 18:34    43008              c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll
    + 2010-10-14 02:01 . 2010-06-24 12:21    25600              c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    12800              c:\windows\ie8updates\KB2183461-IE8\xpshims.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    55296              c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    25600              c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll
    + 2009-11-27 17:11 . 2009-11-27 17:11    17920              c:\windows\Driver Cache\i386\msyuv.dll
    + 2009-11-27 16:07 . 2009-11-27 16:07    48128              c:\windows\Driver Cache\i386\iyuv_32.dll
    + 2010-10-14 03:29 . 2010-10-14 03:29    90112              c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_1052d48d\System.Drawing.Design.dll
    + 2010-10-14 03:29 . 2010-10-14 03:29    61440              c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_0e50e2f9\CustomMarshalers.dll
    + 2011-04-13 07:27 . 2011-04-13 07:27    60928              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\368187bcb570d202a019fc7c53b1df4c\UIAutomationProvider.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    37888              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\3f621b90371e67197bd4d0b86aa6f21d\System.Windows.Presentation.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    36864              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\577b049541803541e6b00e2c36c00852\System.Web.DynamicData.Design.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    94208              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\636ed65b7e5481320e3010b78a5e6cfa\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    82944              c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f83b1e8dd8c90490c8d924826c8b107d\System.AddIn.Contract.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    44032              c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\71dcc547ae50add5362ad99644336b29\stdole.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    29184              c:\windows\assembly\NativeImages_v2.0.50727_32\SFMARKETLib\12a24a8508dce1f0323b588380d28098\SFMARKETLib.ni.dll
    + 2011-04-13 07:25 . 2011-04-13 07:25    47104              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2740ba673b1040f1995f13c6044da64c\PresentationFontCache.ni.exe
    + 2011-04-13 07:25 . 2011-04-13 07:25    39424              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\8514e7de63d46b6f8232ef70d93a1650\PresentationCFFRasterizer.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    55296              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\108426b4dc654100c9a99bfa71f69886\Microsoft.Vsa.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    15872              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\61ae638a8173b053fc3e6dde41df25a3\Microsoft.VisualC.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    74752              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\8905268997c77a27c7f9c54aeba37f24\Microsoft.Build.Framework.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    65024              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\11bb8ef375848eb1c074da1afd5cecdc\Microsoft.Build.Framework.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    60928              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.QTOControlL#\d7835d1a6f1687cb255835caec0d363c\Interop.QTOControlLib.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    77312              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.PortableDev#\a51b2e43cde921baa7c20a4a2f2609b6\Interop.PortableDeviceApiLib.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    76800              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.PortableDev#\2b9deab591473876d244bd4f688b93a8\Interop.PortableDeviceTypesLib.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    35328              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.CDDBUICONTR#\a964da94cdff827c00faae23d92f6773\Interop.CDDBUICONTROLLibSMS.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    72192              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.CDDBLINKLib#\a4c3562b6589f1bea59f03d1ed8ecb60\Interop.CDDBLINKLibSMS.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    31744              c:\windows\assembly\NativeImages_v2.0.50727_32\Interfaces\35922e17a6caee58f7b3c9e615e92922\Interfaces.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    14336              c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\6d74b9308a1517bfe959e597c3dd2427\dfsvc.ni.exe
    + 2011-04-13 07:45 . 2011-04-13 07:45    59904              c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.QTOContro#\dee3516f61d7efb3b2590b02146abbd3\AxInterop.QTOControlLib.ni.dll
    + 2011-04-13 07:43 . 2011-04-13 07:43    25600              c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\fdf7f1404f4a5c7f5a0463d8e7a442e4\Accessibility.ni.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    77824              c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    77824              c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2009-05-01 05:43 . 2009-05-01 05:43    32768              c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2010-06-09 17:08 . 2010-06-09 17:08    32768              c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    81920              c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    81920              c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    81920              c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    81920              c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    32768              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    32768              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    12800              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    12800              c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    28672              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    28672              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    77824              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    77824              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    36864              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    36864              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    77824              c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    77824              c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    13312              c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    13312              c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    10752              c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    10752              c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    72192              c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    72192              c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    69120              c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    69120              c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2010-10-14 01:54 . 2010-10-14 01:54    81920              c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-10-02 05:07 . 2006-11-01 21:22    32224              c:\windows\$NtUninstallWdf01007$\wdfldr.sys
    + 2010-08-12 17:01 . 2008-04-14 00:11    80384              c:\windows\$NtUninstallKB982665$\iccvid.dll
    + 2010-05-26 17:00 . 2010-01-23 08:11    46080              c:\windows\$NtUninstallKB981793$\tzchange.exe
    + 2010-05-26 17:00 . 2010-04-22 22:21    16896              c:\windows\$NtUninstallKB981793$\spuninst\tzchange.dll
    + 2010-06-09 17:11 . 2008-04-14 00:11    65024              c:\windows\$NtUninstallKB979482$\asycfilt.dll
    + 2010-04-14 17:00 . 2008-04-14 00:11    84480              c:\windows\$NtUninstallKB979309$\cabview.dll
    + 2010-02-24 09:53 . 2009-10-28 15:07    46080              c:\windows\$NtUninstallKB979306$\tzchange.exe
    + 2010-02-24 09:53 . 2010-01-23 10:40    16896              c:\windows\$NtUninstallKB979306$\spuninst\tzchange.dll
    + 2010-02-10 07:47 . 2008-04-14 00:11    32256              c:\windows\$NtUninstallKB978037$\csrsrv.dll
    + 2010-02-10 07:46 . 2004-08-04 12:00    25600              c:\windows\$NtUninstallKB977914$\msvidc32.dll
    + 2010-02-10 07:46 . 2008-04-14 00:12    11264              c:\windows\$NtUninstallKB977914$\msrle32.dll
    + 2010-02-10 07:46 . 2008-04-14 00:11    47616              c:\windows\$NtUninstallKB977914$\iyuv_32.dll
    + 2010-02-10 07:46 . 2009-06-10 14:13    84992              c:\windows\$NtUninstallKB977914$\avifil32.dll
    + 2009-11-25 16:01 . 2009-07-14 11:03    46080              c:\windows\$NtUninstallKB976098-v2$\tzchange.exe
    + 2009-11-25 16:01 . 2009-10-29 02:03    16896              c:\windows\$NtUninstallKB976098-v2$\spuninst\tzchange.dll
    + 2010-02-10 07:47 . 2008-04-14 00:12    16896              c:\windows\$NtUninstallKB975560$\msyuv.dll
    + 2009-10-16 16:04 . 2008-04-14 00:11    57344              c:\windows\$NtUninstallKB974571$\msasn1.dll
    + 2009-12-10 09:50 . 2008-04-14 00:12    79872              c:\windows\$NtUninstallKB974318$\raschap.dll
    + 2009-08-13 17:03 . 2008-04-14 00:11    58880              c:\windows\$NtUninstallKB973507$\atl.dll
    + 2010-01-13 06:37 . 2009-06-16 14:36    81920              c:\windows\$NtUninstallKB972270$\fontsub.dll
    + 2009-08-13 17:04 . 2008-04-14 00:11    84992              c:\windows\$NtUninstallKB971557$\avifil32.dll
    + 2009-08-26 17:00 . 2008-04-14 00:12    60416              c:\windows\$NtUninstallKB970653-v3$\tzchange.exe
    + 2009-08-26 17:00 . 2009-07-16 04:14    14336              c:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll
    + 2009-12-10 09:50 . 2008-04-14 00:12    75776              c:\windows\$NtUninstallKB970430$\strmfilt.dll
    + 2009-12-10 09:50 . 2008-04-14 00:11    24576              c:\windows\$NtUninstallKB970430$\httpapi.dll
    + 2009-08-25 08:55 . 2008-04-14 00:12    49152              c:\windows\$NtUninstallKB968389$\wdigest.dll
    + 2009-08-25 08:55 . 2009-02-03 19:59    56832              c:\windows\$NtUninstallKB968389$\secur32.dll
    + 2009-08-25 08:55 . 2008-04-13 18:31    92288              c:\windows\$NtUninstallKB968389$\ksecdd.sys
    + 2009-08-13 17:04 . 2008-04-14 00:12    78336              c:\windows\$NtUninstallKB960859$\tlntsess.exe
    + 2009-08-13 17:04 . 2008-04-14 00:12    75776              c:\windows\$NtUninstallKB960859$\telnet.exe
    + 2011-04-13 07:16 . 2008-04-14 00:11    45568              c:\windows\$NtUninstallKB2509553$\dnsrslvr.dll
    + 2011-02-09 03:25 . 2009-12-14 07:08    33280              c:\windows\$NtUninstallKB2476687$\csrsrv.dll
    + 2010-12-16 09:39 . 2010-06-21 14:46    46080              c:\windows\$NtUninstallKB2443685$\tzchange.exe
    + 2010-12-16 09:39 . 2010-11-05 05:57    16896              c:\windows\$NtUninstallKB2443685$\spuninst\tzchange.dll
    + 2010-12-16 09:40 . 2008-04-14 00:11    81920              c:\windows\$NtUninstallKB2443105$\isign32.dll
    + 2010-12-16 09:40 . 2008-04-13 18:57    40576              c:\windows\$NtUninstallKB2440591$\ndproxy.sys
    + 2010-12-16 09:35 . 2008-04-14 00:12    46080              c:\windows\$NtUninstallKB2423089$\wab.exe
    + 2010-09-15 17:05 . 2008-04-14 00:12    57856              c:\windows\$NtUninstallKB2347290$\spoolsv.exe
    + 2010-10-14 02:03 . 2008-04-14 00:12    96768              c:\windows\$NtUninstallKB2345886$\srvsvc.dll
    + 2010-10-14 01:53 . 2010-04-21 13:28    46080              c:\windows\$NtUninstallKB2158563$\tzchange.exe
    + 2010-10-14 01:53 . 2010-06-23 00:54    16896              c:\windows\$NtUninstallKB2158563$\spuninst\tzchange.dll
    + 2010-09-15 17:04 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB982802\update\spcustom.dll
    + 2010-09-15 17:04 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB982802\spmsg.dll
    + 2010-08-12 17:01 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB982665\update\spcustom.dll
    + 2010-08-12 17:01 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB982665\spmsg.dll
    + 2010-06-17 14:02 . 2010-06-17 14:02    80384              c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll
    + 2010-06-09 17:15 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB982381-IE8\update\spcustom.dll
    + 2010-06-09 17:15 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB982381-IE8\spmsg.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    12800              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\xpshims.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    55296              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeedsbs.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    25600              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\jsproxy.dll
    + 2010-08-12 17:09 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB982214\update\spcustom.dll
    + 2010-08-12 17:09 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB982214\spmsg.dll
    + 2010-10-14 02:03 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB982132\update\spcustom.dll
    + 2010-10-14 02:03 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB982132\spmsg.dll
    + 2010-08-12 17:02 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB981997\update\spcustom.dll
    + 2010-08-12 17:02 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB981997\spmsg.dll
    + 2010-10-14 01:54 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB981957\update\spcustom.dll
    + 2010-10-14 01:54 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB981957\spmsg.dll
    + 2010-08-12 17:09 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB981852\update\spcustom.dll
    + 2010-08-12 08:37 . 2010-06-18 06:28    16896              c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll
    + 2010-08-12 17:09 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB981852\spmsg.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB981332-IE8\update\spcustom.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB981332-IE8\spmsg.dll
    + 2010-09-15 17:04 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB981322\update\spcustom.dll
    + 2010-09-15 17:04 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB981322\spmsg.dll
    + 2010-08-12 17:04 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB980436\update\spcustom.dll
    + 2010-08-12 17:04 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB980436\spmsg.dll
    + 2010-04-15 17:05 . 2009-05-26 09:01    26488              c:\windows\$hf_mig$\KB980232\update\spcustom.dll
    + 2010-04-15 17:05 . 2009-05-26 09:01    17272              c:\windows\$hf_mig$\KB980232\spmsg.dll
    + 2010-06-09 17:21 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB980218\update\spcustom.dll
    + 2010-06-09 17:21 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB980218\spmsg.dll
    + 2010-06-09 17:20 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB980195\update\spcustom.dll
    + 2010-06-09 17:20 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB980195\spmsg.dll
    + 2010-03-31 08:08 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB980182-IE8\update\spcustom.dll
    + 2010-03-31 08:08 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB980182-IE8\spmsg.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    12800              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\xpshims.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    55296              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\msfeedsbs.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    25600              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\jsproxy.dll
    + 2010-10-14 02:02 . 2009-05-26 09:01    26488              c:\windows\$hf_mig$\KB979687\update\spcustom.dll
    + 2010-10-14 02:02 . 2009-05-26 09:01    17272              c:\windows\$hf_mig$\KB979687\spmsg.dll
    + 2010-04-15 17:05 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB979683\update\spcustom.dll
    + 2010-04-15 02:49 . 2010-03-05 14:54    16896              c:\windows\$hf_mig$\KB979683\update\mpsyschk.dll
    + 2010-04-15 17:05 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB979683\spmsg.dll
    + 2010-06-09 17:16 . 2009-05-26 09:01    26488              c:\windows\$hf_mig$\KB979559\update\spcustom.dll
    + 2010-06-09 17:16 . 2009-05-26 09:01    17272              c:\windows\$hf_mig$\KB979559\spmsg.dll
    + 2010-06-09 17:11 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB979482\update\spcustom.dll
    + 2010-06-09 17:11 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB979482\spmsg.dll
    + 2010-03-05 14:52 . 2010-03-05 14:52    65536              c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll
    + 2010-04-14 17:01 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB979309\update\spcustom.dll
    + 2010-04-14 17:01 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB979309\spmsg.dll
    + 2010-01-13 13:48 . 2010-01-13 13:48    86016              c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB978706\update\spcustom.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB978706\spmsg.dll
    + 2010-04-14 17:01 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB978601\update\spcustom.dll
    + 2010-04-14 17:01 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB978601\spmsg.dll
    + 2010-05-12 17:01 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB978542\update\spcustom.dll
    + 2010-05-12 17:01 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB978542\spmsg.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB978338\update\spcustom.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB978338\spmsg.dll
    + 2010-02-10 07:50 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB978262\update\spcustom.dll
    + 2010-02-10 07:50 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB978262\spmsg.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB978251\update\spcustom.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB978251\spmsg.dll
    + 2010-01-22 16:01 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB978207-IE8\update\spcustom.dll
    + 2010-01-22 16:01 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB978207-IE8\spmsg.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    12800              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\xpshims.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    55296              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\msfeedsbs.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    25600              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\jsproxy.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB978037\update\spcustom.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB978037\spmsg.dll
    + 2009-12-14 07:10 . 2009-12-14 07:10    33280              c:\windows\$hf_mig$\KB978037\SP3QFE\csrsrv.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB977914\update\spcustom.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB977914\spmsg.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28    28672              c:\windows\$hf_mig$\KB977914\SP3QFE\msvidc32.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28    11264              c:\windows\$hf_mig$\KB977914\SP3QFE\msrle32.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28    48128              c:\windows\$hf_mig$\KB977914\SP3QFE\iyuv_32.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28    84992              c:\windows\$hf_mig$\KB977914\SP3QFE\avifil32.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB977816\update\spcustom.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB977816\spmsg.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB977165\update\spcustom.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB977165\spmsg.dll
    + 2009-11-04 16:00 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB976749-IE8\update\spcustom.dll
    + 2009-11-04 16:00 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB976749-IE8\spmsg.dll
    + 2010-02-24 09:54 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB976662-IE8\update\spcustom.dll
    + 2010-02-24 09:54 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB976662-IE8\spmsg.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB976325-IE8\update\spcustom.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB976325-IE8\spmsg.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    12800              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\xpshims.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    55296              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\msfeedsbs.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    25600              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\jsproxy.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB975713\update\spcustom.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB975713\spmsg.dll
    + 2010-06-09 17:09 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB975562\update\spcustom.dll
    + 2010-06-09 17:09 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB975562\spmsg.dll
    + 2010-03-10 16:04 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB975561\update\spcustom.dll
    + 2010-03-10 16:04 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB975561\spmsg.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB975560\update\spcustom.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB975560\spmsg.dll
    + 2009-11-27 17:23 . 2009-11-27 17:23    17920              c:\windows\$hf_mig$\KB975560\SP3QFE\msyuv.dll
    + 2009-10-16 16:00 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB975467\update\spcustom.dll
    + 2009-10-16 16:00 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB975467\spmsg.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB975025\update\spcustom.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB975025\spmsg.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB974571\update\spcustom.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB974571\spmsg.dll
    + 2009-09-04 20:57 . 2009-09-04 20:57    58880              c:\windows\$hf_mig$\KB974571\SP3QFE\msasn1.dll
    + 2009-10-16 16:07 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB974455-IE8\update\spcustom.dll
    + 2009-10-16 16:07 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB974455-IE8\spmsg.dll
    + 2009-10-16 06:40 . 2009-08-29 08:01    12800              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\xpshims.dll
    + 2009-10-16 06:41 . 2009-08-29 08:01    55296              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\msfeedsbs.dll
    + 2009-10-16 06:41 . 2009-08-29 08:01    25600              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\jsproxy.dll
    + 2009-12-10 09:48 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB974392\update\spcustom.dll
    + 2009-12-10 09:48 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB974392\spmsg.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB974318\update\spcustom.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB974318\spmsg.dll
    + 2009-10-12 13:28 . 2009-10-12 13:28    79872              c:\windows\$hf_mig$\KB974318\SP3QFE\raschap.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB974112\update\spcustom.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB974112\spmsg.dll
    + 2009-12-10 09:49 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB973904\update\spcustom.dll
    + 2009-12-10 09:49 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB973904\spmsg.dll
    + 2009-08-13 17:03 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB973869\update\spcustom.dll
    + 2009-08-13 17:03 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB973869\spmsg.dll
    + 2009-08-13 17:00 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB973815\update\spcustom.dll
    + 2009-08-13 17:00 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB973815\spmsg.dll
    + 2009-11-25 16:01 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB973687\update\spcustom.dll
    + 2009-11-25 16:01 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB973687\spmsg.dll
    + 2009-10-16 16:01 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB973525\update\spcustom.dll
    + 2009-10-16 16:01 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB973525\spmsg.dll
    + 2009-08-13 17:03 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB973507\update\spcustom.dll
    + 2009-08-13 17:03 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB973507\spmsg.dll
    + 2009-07-17 19:25 . 2009-07-17 19:25    58880              c:\windows\$hf_mig$\KB973507\SP3QFE\atl.dll
    + 2009-08-13 17:03 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB973354\update\spcustom.dll
    + 2009-08-13 17:03 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB973354\spmsg.dll
    + 2010-01-13 06:37 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB972270\update\spcustom.dll
    + 2010-01-13 06:37 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB972270\spmsg.dll
    + 2010-01-13 00:35 . 2009-10-15 16:39    81920              c:\windows\$hf_mig$\KB972270\SP3QFE\fontsub.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB971961-IE8\update\spcustom.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB971961-IE8\spmsg.dll
    + 2009-12-10 09:48 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB971737\update\spcustom.dll
    + 2009-12-10 09:48 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB971737\spmsg.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB971657\update\spcustom.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB971657\spmsg.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB971557\update\spcustom.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB971557\spmsg.dll
    + 2009-06-10 14:01 . 2009-06-10 14:01    84992              c:\windows\$hf_mig$\KB971557\SP3QFE\avifil32.dll
    + 2009-10-16 16:01 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB971486\update\spcustom.dll
    + 2009-10-16 16:01 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB971486\spmsg.dll
    + 2010-02-10 07:49 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB971468\update\spcustom.dll
    + 2010-02-10 07:49 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB971468\spmsg.dll
    + 2011-02-25 22:43 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB971029\update\spcustom.dll
    + 2011-02-25 22:43 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB971029\spmsg.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB970430\update\spcustom.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB970430\spmsg.dll
    + 2009-10-21 05:40 . 2009-10-21 05:40    75776              c:\windows\$hf_mig$\KB970430\SP3QFE\strmfilt.dll
    + 2009-10-21 05:40 . 2009-10-21 05:40    25088              c:\windows\$hf_mig$\KB970430\SP3QFE\httpapi.dll
    + 2009-11-11 09:56 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB969947\update\spcustom.dll
    + 2009-11-11 09:56 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB969947\spmsg.dll
    + 2009-10-16 16:05 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB969059\update\spcustom.dll
    + 2009-10-16 16:05 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB969059\spmsg.dll
    + 2009-08-25 08:55 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB968389\update\spcustom.dll
    + 2009-08-25 08:55 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB968389\spmsg.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41    54272              c:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41    56832              c:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll
    + 2009-06-24 10:28 . 2009-06-24 10:28    92928              c:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys
    + 2009-11-12 16:01 . 2007-11-30 12:39    26488              c:\windows\$hf_mig$\KB961503\update\spcustom.dll
    + 2009-11-12 16:01 . 2007-11-30 12:39    17272              c:\windows\$hf_mig$\KB961503\spmsg.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB960859\update\spcustom.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB960859\spmsg.dll
    + 2009-06-12 12:03 . 2009-06-12 12:03    80896              c:\windows\$hf_mig$\KB960859\SP3QFE\tlntsess.exe
    + 2009-06-12 12:03 . 2009-06-12 12:03    76288              c:\windows\$hf_mig$\KB960859\SP3QFE\telnet.exe
    + 2009-09-09 17:01 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB956844\update\spcustom.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB956844\spmsg.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    26488              c:\windows\$hf_mig$\KB956744\update\spcustom.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    17272              c:\windows\$hf_mig$\KB956744\spmsg.dll
    + 2010-01-13 06:38 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB955759\update\spcustom.dll
    + 2010-01-13 06:38 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB955759\spmsg.dll
    + 2011-03-24 11:02 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2524375\update\spcustom.dll
    + 2011-03-24 11:02 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2524375\spmsg.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2511455\update\spcustom.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2511455\spmsg.dll
    + 2011-04-13 07:16 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2510531-IE8\update\spcustom.dll
    + 2011-04-13 07:16 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2510531-IE8\spmsg.dll
    + 2011-04-13 07:16 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2509553\update\spcustom.dll
    + 2011-04-13 07:16 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2509553\spmsg.dll
    + 2009-04-20 17:06 . 2009-04-20 17:06    45568              c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsrslvr.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2508429\update\spcustom.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2508429\spmsg.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2508272\update\spcustom.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2508272\spmsg.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2507618\update\spcustom.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2507618\spmsg.dll
    + 2011-04-13 07:26 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2506223\update\spcustom.dll
    + 2011-04-13 07:26 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2506223\spmsg.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2506212\update\spcustom.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2506212\spmsg.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2503658\update\spcustom.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2503658\spmsg.dll
    + 2011-04-13 07:25 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2497640-IE8\update\spcustom.dll
    + 2011-04-13 07:25 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2497640-IE8\spmsg.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    12800              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\xpshims.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    66560              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mshtmled.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    55296              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\msfeedsbs.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    43520              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\licmgr10.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    25600              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\jsproxy.dll
    + 2011-04-13 07:26 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2485663\update\spcustom.dll
    + 2011-04-13 07:26 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2485663\spmsg.dll
    + 2011-02-09 03:29 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2485376\update\spcustom.dll
    + 2011-02-09 03:29 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2485376\spmsg.dll
    + 2011-02-09 03:28 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2483185\update\spcustom.dll
    + 2011-02-09 03:28 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2483185\spmsg.dll
    + 2011-02-09 03:25 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2482017-IE8\update\spcustom.dll
    + 2011-02-09 03:25 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2482017-IE8\spmsg.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    12800              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\xpshims.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    66560              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtmled.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    55296              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\msfeedsbs.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    43520              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\licmgr10.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    25600              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\jsproxy.dll
    + 2011-03-09 16:03 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2481109\update\spcustom.dll
    + 2011-03-09 16:03 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2481109\spmsg.dll
    + 2011-02-02 07:57 . 2011-02-02 07:57    53248              c:\windows\$hf_mig$\KB2481109\SP3QFE\tsgqec.dll
    + 2011-03-09 16:07 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2479943\update\spcustom.dll
    + 2011-03-09 16:07 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2479943\spmsg.dll
    + 2011-02-09 03:28 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2479628\update\spcustom.dll
    + 2011-02-09 03:28 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2479628\spmsg.dll
    + 2011-02-09 03:29 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2478971\update\spcustom.dll
    + 2011-02-09 03:29 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2478971\spmsg.dll
    + 2011-02-09 03:24 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2478960\update\spcustom.dll
    + 2011-02-09 03:24 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2478960\spmsg.dll
    + 2011-02-09 03:25 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2476687\update\spcustom.dll
    + 2011-02-09 03:25 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2476687\spmsg.dll
    + 2010-12-09 14:29 . 2010-12-09 14:29    33280              c:\windows\$hf_mig$\KB2476687\SP3QFE\csrsrv.dll
    + 2010-12-16 09:38 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2467659\update\spcustom.dll
    + 2010-12-16 09:38 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2467659\spmsg.dll
    + 2010-12-16 09:40 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2443105\update\spcustom.dll
    + 2010-12-16 09:40 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2443105\spmsg.dll
    + 2010-11-18 18:12 . 2010-11-18 18:12    81920              c:\windows\$hf_mig$\KB2443105\SP3QFE\isign32.dll
    + 2010-12-16 09:40 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB2440591\update\spcustom.dll
    + 2010-12-16 09:40 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB2440591\spmsg.dll
    + 2010-12-15 20:26 . 2010-11-03 05:55    40960              c:\windows\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys
    + 2010-12-16 09:38 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB2436673\update\spcustom.dll
    + 2010-12-16 09:38 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB2436673\spmsg.dll
    + 2010-12-16 09:35 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2423089\update\spcustom.dll
    + 2010-12-16 09:35 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2423089\spmsg.dll
    + 2010-12-15 20:24 . 2010-10-11 14:55    45568              c:\windows\$hf_mig$\KB2423089\SP3QFE\wab.exe
    + 2011-01-12 07:44 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2419632\update\spcustom.dll
    + 2011-01-12 07:44 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2419632\spmsg.dll
    + 2010-12-16 09:40 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2416400-IE8\update\spcustom.dll
    + 2010-12-16 09:40 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2416400-IE8\spmsg.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    12800              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\xpshims.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    66560              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtmled.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    55296              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeedsbs.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    43520              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\licmgr10.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    25600              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\jsproxy.dll
    + 2011-02-09 03:24 . 2010-07-05 13:15    26488              c:\windows\$hf_mig$\KB2393802\update\spcustom.dll
    + 2011-02-08 20:20 . 2010-12-09 15:15    16896              c:\windows\$hf_mig$\KB2393802\update\mpsyschk.dll
    + 2011-02-09 03:24 . 2010-07-05 13:15    17272              c:\windows\$hf_mig$\KB2393802\spmsg.dll
    + 2010-10-14 02:04 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2387149\update\spcustom.dll
    + 2010-10-14 02:04 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2387149\spmsg.dll
    + 2010-10-14 01:52 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2360937\update\spcustom.dll
    + 2010-10-14 01:52 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2360937\spmsg.dll
    + 2010-10-14 02:01 . 2009-05-26 09:01    26488              c:\windows\$hf_mig$\KB2360131-IE8\update\spcustom.dll
    + 2010-10-14 02:01 . 2009-05-26 09:01    17272              c:\windows\$hf_mig$\KB2360131-IE8\spmsg.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    12800              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\xpshims.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    66560              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtmled.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    55296              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeedsbs.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    43520              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\licmgr10.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    25600              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\jsproxy.dll
    + 2010-09-15 17:05 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
    + 2010-09-15 17:05 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB2347290\spmsg.dll
    + 2010-08-17 13:19 . 2010-08-17 13:19    58880              c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
    + 2010-10-14 02:03 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2345886\update\spcustom.dll
    + 2010-10-14 02:03 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2345886\spmsg.dll
    + 2010-08-27 06:05 . 2010-08-27 06:05    99840              c:\windows\$hf_mig$\KB2345886\SP3QFE\srvsvc.dll
    + 2010-12-16 09:41 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB2296199\update\spcustom.dll
    + 2010-12-16 09:41 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB2296199\spmsg.dll
    + 2010-08-03 17:01 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2286198\update\spcustom.dll
    + 2010-08-03 17:01 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2286198\spmsg.dll
    + 2010-10-14 02:03 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2279986\update\spcustom.dll
    + 2010-10-14 02:03 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2279986\spmsg.dll
    + 2010-09-15 17:06 . 2009-05-26 09:01    26488              c:\windows\$hf_mig$\KB2259922\update\spcustom.dll
    + 2010-09-15 17:06 . 2009-05-26 09:01    17272              c:\windows\$hf_mig$\KB2259922\spmsg.dll
    + 2010-07-14 17:05 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB2229593\update\spcustom.dll
    + 2010-07-14 17:05 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB2229593\spmsg.dll
    + 2010-08-12 17:04 . 2009-05-26 09:01    26488              c:\windows\$hf_mig$\KB2183461-IE8\update\spcustom.dll
    + 2010-08-12 17:04 . 2009-05-26 09:01    17272              c:\windows\$hf_mig$\KB2183461-IE8\spmsg.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    12800              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\xpshims.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    55296              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeedsbs.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    25600              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\jsproxy.dll
    + 2010-08-12 17:04 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2160329\update\spcustom.dll
    + 2010-08-12 17:04 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2160329\spmsg.dll
    + 2010-09-15 17:01 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
    + 2010-09-15 17:01 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2141007\spmsg.dll
    + 2010-09-15 17:05 . 2010-02-22 14:23    26488              c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
    + 2010-09-15 17:05 . 2010-02-22 14:23    17272              c:\windows\$hf_mig$\KB2121546\spmsg.dll
    + 2010-08-12 17:09 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB2115168\update\spcustom.dll
    + 2010-08-12 17:09 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB2115168\spmsg.dll
    + 2010-08-12 17:08 . 2009-05-26 11:40    26488              c:\windows\$hf_mig$\KB2079403\update\spcustom.dll
    + 2010-08-12 17:08 . 2009-05-26 11:40    17272              c:\windows\$hf_mig$\KB2079403\spmsg.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    8192              c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    8192              c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2009-04-30 04:09 . 2011-02-17 12:32    5120              c:\windows\system32\xpsp4res.dll
    + 2001-08-17 22:36 . 2009-11-27 16:07    8704              c:\windows\system32\tsbyuv.dll
    + 2009-11-25 20:16 . 2001-08-17 03:03    4736              c:\windows\system32\ReinstallBackups\0021\DriverFiles\i386\usbd.sys
    + 2009-11-25 20:16 . 2001-08-17 03:03    4736              c:\windows\system32\ReinstallBackups\0020\DriverFiles\i386\usbd.sys
    + 2009-11-25 20:16 . 2001-08-17 03:03    4736              c:\windows\system32\ReinstallBackups\0019\DriverFiles\i386\usbd.sys
    + 2009-11-25 20:16 . 2001-08-17 03:03    4736              c:\windows\system32\ReinstallBackups\0018\DriverFiles\i386\usbd.sys
    + 2009-11-25 20:16 . 2004-08-04 12:00    4736              c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\usbd.sys
    + 2009-10-02 04:57 . 2009-03-19 04:48    8320              c:\windows\system32\DRVSTORE\nmwcdnsuc_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdnsuc.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    7808              c:\windows\system32\DRVSTORE\ccdcmbm_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\usbser_lowerflt.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    7808              c:\windows\system32\DRVSTORE\ccdcmbcj_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\usbser_lowerfltj.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    7808              c:\windows\system32\drivers\usbser_lowerfltj.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    7808              c:\windows\system32\drivers\usbser_lowerflt.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00    4736              c:\windows\system32\drivers\usbd.sys
    + 2004-08-04 12:00 . 2001-08-17 03:03    4736              c:\windows\system32\drivers\usbd.sys
    + 2004-08-04 12:00 . 2001-08-17 03:03    4736              c:\windows\system32\dllcache\usbd.sys
    + 2001-08-17 22:36 . 2009-11-27 16:07    8704              c:\windows\system32\dllcache\tsbyuv.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    5120              c:\windows\system32\dllcache\cache\sfc.dll
    + 2009-08-01 03:34 . 2004-08-04 12:00    2944              c:\windows\system32\dllcache\cache\null.sys
    + 2009-08-01 03:34 . 2004-08-04 12:00    4224              c:\windows\system32\dllcache\cache\beep.sys
    + 2010-05-05 14:07 . 2010-05-05 14:07    9216              c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
    + 2010-11-04 08:40 . 2010-11-04 08:40    3310              c:\windows\Installer\{6B3CA80E-6AC0-4725-BABF-9B0FEF880CB3}\_16496df1.exe
    + 2009-10-02 04:57 . 2009-10-02 04:57    3262              c:\windows\Installer\{52D02A2B-03D2-4E34-A358-DC5D951FD296}\ARPPRODUCTICON.exe
    + 2009-11-27 16:07 . 2009-11-27 16:07    8704              c:\windows\Driver Cache\i386\tsbyuv.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    7168              c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    7168              c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    5632              c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    5632              c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    6656              c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    6656              c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    8192              c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    8192              c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2010-09-15 17:04 . 2008-05-03 11:55    2560              c:\windows\$NtUninstallKB982802$\xpsp4res.dll
    + 2010-02-10 07:46 . 2001-08-17 11:36    8192              c:\windows\$NtUninstallKB977914$\tsbyuv.dll
    + 2011-04-13 07:19 . 2010-08-26 12:52    5120              c:\windows\$NtUninstallKB2508429$\xpsp4res.dll
    + 2010-10-14 01:52 . 2010-07-22 05:57    5120              c:\windows\$NtUninstallKB2360937$\xpsp4res.dll
    + 2010-10-14 02:03 . 2010-08-13 12:53    5120              c:\windows\$NtUninstallKB2345886$\xpsp4res.dll
    + 2010-07-22 05:57 . 2010-07-22 05:57    5120              c:\windows\$hf_mig$\KB982802\SP3QFE\xpsp4res.dll
    + 2010-07-12 12:53 . 2010-07-12 12:53    5120              c:\windows\$hf_mig$\KB979687\SP3QFE\xpsp4res.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28    8704              c:\windows\$hf_mig$\KB977914\SP3QFE\tsbyuv.dll
    + 2011-02-17 12:32 . 2011-02-17 12:32    5120              c:\windows\$hf_mig$\KB2508429\SP3QFE\xpsp4res.dll
    + 2010-10-14 01:44 . 2010-08-13 12:53    5120              c:\windows\$hf_mig$\KB2360937\SP3QFE\xpsp4res.dll
    + 2010-08-26 12:52 . 2010-08-26 12:52    5120              c:\windows\$hf_mig$\KB2345886\SP3QFE\xpsp4res.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    113664              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    113664              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    258048              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    258048              c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2011-01-10 18:27 . 2011-01-10 18:27    632656              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcr80.dll
    + 2011-01-10 18:24 . 2011-01-10 18:24    554832              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcp80.dll
    + 2011-01-10 18:08 . 2011-01-10 18:08    479232              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcm80.dll
    + 2009-07-11 14:12 . 2009-07-11 14:12    632656              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
    + 2009-07-11 14:09 . 2009-07-11 14:09    554832              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
    + 2009-07-11 14:08 . 2009-07-11 14:08    479232              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
    + 2009-10-04 03:02 . 2008-12-04 11:46    180224              c:\windows\system32\xvidvfw.dll
    + 2009-10-04 03:02 . 2008-12-04 11:42    815104              c:\windows\system32\xvidcore.dll
    + 2012-08-06 00:19 . 2009-08-06 09:24    209632              c:\windows\system32\wuweb.dll
    + 2012-08-06 00:19 . 2009-08-06 09:24    327896              c:\windows\system32\wucltui.dll
    + 2012-08-06 00:19 . 2009-08-06 09:23    575704              c:\windows\system32\wuapi.dll
    + 2004-08-04 12:00 . 2009-04-01 12:02    604160              c:\windows\system32\wmspdmod.dll
    + 2004-08-04 12:00 . 2009-07-13 13:43    286208              c:\windows\system32\wmpdxm.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    132096              c:\windows\system32\wkssvc.dll
    + 2004-08-04 12:00 . 2009-06-10 06:14    132096              c:\windows\system32\wkssvc.dll
    + 2004-08-04 12:00 . 2009-12-24 06:59    177664              c:\windows\system32\wintrust.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    293376              c:\windows\system32\winsrv.dll
    + 2004-08-04 12:00 . 2010-06-18 17:45    293376              c:\windows\system32\winsrv.dll
    + 2004-08-04 12:00 . 2009-08-25 09:17    354816              c:\windows\system32\winhttp.dll
    + 2005-08-11 15:00 . 2010-07-12 18:36    100848              c:\windows\system32\VXBLOCK.dll
    + 2004-08-04 12:00 . 2010-04-16 15:36    406016              c:\windows\system32\usp10.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    406016              c:\windows\system32\usp10.dll
    + 2004-08-04 12:00 . 2010-08-27 08:02    119808              c:\windows\system32\t2embed.dll
    - 2004-08-04 12:00 . 2009-06-16 14:36    119808              c:\windows\system32\t2embed.dll
    + 2004-08-04 12:00 . 2009-08-26 08:00    247326              c:\windows\system32\strmdll.dll
    - 2004-08-04 12:00 . 2008-10-03 10:02    247326              c:\windows\system32\strmdll.dll
    + 2004-08-04 12:00 . 2009-07-27 23:17    135168              c:\windows\system32\shsvcs.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    135168              c:\windows\system32\shsvcs.dll
    + 2004-08-04 12:00 . 2009-12-08 09:23    474112              c:\windows\system32\shlwapi.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    474112              c:\windows\system32\shlwapi.dll
    + 2004-08-04 12:00 . 2011-01-21 14:44    439296              c:\windows\system32\shimgvw.dll
    + 2004-08-04 12:00 . 2010-06-30 12:31    149504              c:\windows\system32\schannel.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    270848              c:\windows\system32\sbe.dll
    + 2004-08-04 12:00 . 2011-02-09 13:53    270848              c:\windows\system32\sbe.dll
    + 2004-08-04 12:00 . 2010-08-16 08:45    590848              c:\windows\system32\rpcrt4.dll
    + 2004-08-04 12:00 . 2009-10-12 13:38    149504              c:\windows\system32\rastls.dll
    + 2005-09-29 05:02 . 2010-07-12 18:36    440816              c:\windows\system32\PxWave.dll
    + 2005-09-29 05:02 . 2010-07-12 18:36    219632              c:\windows\system32\PxMas.dll
    + 2009-01-15 00:26 . 2010-07-12 18:36    126448              c:\windows\system32\pxinsi64.exe
    + 2005-09-27 15:01 . 2010-07-12 18:36    567792              c:\windows\system32\pxdrv.dll
    + 2009-01-15 00:26 . 2010-07-12 18:36    123888              c:\windows\system32\pxcpyi64.exe
    + 2009-01-15 00:26 . 2010-07-12 18:36    133616              c:\windows\system32\pxafs.dll
    + 2005-09-29 05:04 . 2010-07-12 18:36    698864              c:\windows\system32\Px.dll
    + 2010-03-30 14:10 . 2010-03-30 14:10    295264              c:\windows\system32\PresentationHost.exe
    - 2004-08-04 12:00 . 2009-05-01 06:16    444358              c:\windows\system32\perfh009.dat
    + 2004-08-04 12:00 . 2011-04-13 07:24    444358              c:\windows\system32\perfh009.dat
    + 2009-08-03 05:07 . 2009-08-03 05:07    230768              c:\windows\system32\OGAEXEC.exe
    + 2009-08-03 05:07 . 2009-08-03 05:07    403816              c:\windows\system32\OGACheckControl.dll
    + 2009-08-03 05:07 . 2009-08-03 05:07    322928              c:\windows\system32\OGAAddin.dll
    + 2004-08-04 12:00 . 2010-11-09 14:52    249856              c:\windows\system32\odbc32.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    249856              c:\windows\system32\odbc32.dll
    - 2004-08-04 12:00 . 2009-07-03 17:09    206848              c:\windows\system32\occache.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    206848              c:\windows\system32\occache.dll
    + 2004-08-04 12:00 . 2009-10-13 10:30    270336              c:\windows\system32\oakley.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    270336              c:\windows\system32\oakley.dll
    + 2004-08-04 12:00 . 2010-12-09 15:15    718336              c:\windows\system32\ntdll.dll
    - 2008-09-22 08:20 . 2008-05-06 21:38    659968              c:\windows\system32\nmwcdcocls.dll
    + 2009-10-02 04:57 . 2009-02-08 22:37    659968              c:\windows\system32\nmwcdcocls.dll
    + 2008-11-02 16:37 . 2009-08-06 09:23    215920              c:\windows\system32\muweb.dll
    + 2008-11-02 16:37 . 2009-08-06 09:23    274288              c:\windows\system32\mucltui.dll
    + 2004-08-04 12:00 . 2008-06-20 16:02    245248              c:\windows\system32\mswsock.dll
    - 2004-08-04 12:00 . 2008-06-20 17:46    245248              c:\windows\system32\mswsock.dll
    + 2004-08-04 12:00 . 2009-08-05 09:01    204800              c:\windows\system32\mswebdvd.dll
    + 2006-07-11 08:35 . 2006-07-11 08:35    348160              c:\windows\system32\MsVcR71.dll
    - 2003-02-21 04:42 . 2003-02-21 04:42    348160              c:\windows\system32\msvcr71.dll
    + 2006-07-11 08:35 . 2006-07-11 08:35    503808              c:\windows\system32\MsVcP71.dll
    + 2004-08-04 12:00 . 2009-09-11 14:18    136192              c:\windows\system32\msv1_0.dll
    + 2012-08-06 00:17 . 2011-01-27 11:57    677888              c:\windows\system32\mstsc.exe
    - 2012-08-06 00:17 . 2008-04-14 00:12    677888              c:\windows\system32\mstsc.exe
    - 2004-08-04 12:00 . 2009-03-07 18:32    611840              c:\windows\system32\mstime.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    611840              c:\windows\system32\mstime.dll
    - 2012-08-06 00:17 . 2008-04-14 00:12    343040              c:\windows\system32\mspaint.exe
    + 2012-08-06 00:17 . 2009-12-16 18:43    343040              c:\windows\system32\mspaint.exe
    + 2007-08-13 08:54 . 2011-02-22 23:06    602112              c:\windows\system32\msfeeds.dll
    + 2009-11-06 15:07 . 2009-11-06 15:07    297808              c:\windows\system32\mscoree.dll
    - 2006-10-18 10:47 . 2006-10-18 10:47    317440              c:\windows\system32\MP4SDECD.dll
    + 2006-10-18 10:47 . 2010-03-30 02:24    317440              c:\windows\system32\mp4sdecd.dll
    + 2004-08-04 12:00 . 2011-02-08 13:33    974848              c:\windows\system32\mfc42u.dll
    + 2004-08-04 12:00 . 2011-02-08 13:33    978944              c:\windows\system32\mfc42.dll
    + 2004-08-04 12:00 . 2010-09-18 06:53    953856              c:\windows\system32\mfc40u.dll
    + 2004-08-04 12:00 . 2010-09-18 06:53    954368              c:\windows\system32\mfc40.dll
    + 2010-04-29 10:10 . 2010-04-29 10:10    180224              c:\windows\system32\Macromed\Shockwave 10\Proj.dll
    + 2010-04-29 10:10 . 2010-04-29 10:10    475136              c:\windows\system32\Macromed\Shockwave 10\PluginPing.dll
    + 2010-04-29 10:10 . 2010-04-29 10:10    339968              c:\windows\system32\Macromed\Shockwave 10\Plugin.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11    606208              c:\windows\system32\Macromed\Shockwave 10\iml32X.dll
    + 2010-04-29 10:10 . 2010-04-29 10:10    753152              c:\windows\system32\Macromed\Shockwave 10\gi.dll
    + 2010-04-29 10:10 . 2010-04-29 10:10    471040              c:\windows\system32\Macromed\Shockwave 10\Control.dll
    + 2011-05-07 04:51 . 2011-05-07 04:51    235168              c:\windows\system32\Macromed\Flash\FlashUtil10p_Plugin.exe
    + 2004-08-04 12:00 . 2010-12-20 17:26    730112              c:\windows\system32\lsasrv.dll
    + 2004-08-04 12:00 . 2010-12-22 12:34    301568              c:\windows\system32\kerberos.dll
    + 2004-08-04 12:00 . 2011-03-04 06:37    726528              c:\windows\system32\jscript.dll
    - 2004-08-04 12:00 . 2009-03-07 18:33    726528              c:\windows\system32\jscript.dll
    + 2011-01-19 23:32 . 2010-11-12 07:53    157472              c:\windows\system32\javaws.exe
    + 2011-01-19 23:32 . 2010-11-12 07:53    145184              c:\windows\system32\javaw.exe
    + 2011-01-19 23:32 . 2010-11-12 07:53    145184              c:\windows\system32\java.exe
    + 2012-08-06 00:18 . 2011-03-07 05:33    692736              c:\windows\system32\inetcomm.dll
    - 2004-08-04 12:00 . 2009-07-03 17:09    184320              c:\windows\system32\iepeers.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    184320              c:\windows\system32\iepeers.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    387584              c:\windows\system32\iedkcs32.dll
    + 2004-08-04 12:00 . 2011-02-18 11:49    173568              c:\windows\system32\ie4uinit.exe
    + 2012-08-06 10:04 . 2011-04-13 07:38    303624              c:\windows\system32\FNTCACHE.DAT
    + 2004-08-04 12:00 . 2011-02-09 13:53    186880              c:\windows\system32\encdec.dll
    - 2004-08-04 12:00 . 2008-04-14 00:11    186880              c:\windows\system32\encdec.dll
    + 2009-08-14 07:38 . 2007-04-10 06:14    100360              c:\windows\system32\DRVSTORE\se3esdm2_9764AEB0AF92C101555E353C0F0D3CF5C63F33FA\i386\se3emgmt.sys
    + 2009-08-14 07:38 . 2007-04-10 06:14    108552              c:\windows\system32\DRVSTORE\se3emdm2_B9A80A4AD6A3087EAEC451F69738F8F9B8EAC7FD\i386\se3emdm.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    103976              c:\windows\system32\DRVSTORE\s916sdm2_21F85660AA82023EA111CC6BDFE4E4EF2EDFED63\i386\s916mgmt.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    100008              c:\windows\system32\DRVSTORE\s916obx2_74455A9D7CF2BC68446FD3455ABFCCDA93FFD087\i386\s916obex.sys
    + 2009-08-14 07:38 . 2007-11-02 03:47    109992              c:\windows\system32\DRVSTORE\s916mdm2_85F2F98F689E64A6D6F619016E152C56854F40D7\i386\s916mdm.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    109736              c:\windows\system32\DRVSTORE\s1018unic_15B3C7B2776B0BC14A42E11605279A811845AD24\i386\s1018unic.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    108200              c:\windows\system32\DRVSTORE\s1018sdm2_C887C5C77A5B3624DA74389604FC784C3DAE5347\i386\s1018mgmt.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    104616              c:\windows\system32\DRVSTORE\s1018obx2_35112A9BD7F14B201F010A8C939D6E2E93F3FDAF\i386\s1018obex.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    114472              c:\windows\system32\DRVSTORE\s1018mdm2_82223E79B9F45878C55D5EF19AA397205D602999\i386\s1018mdm.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    109736              c:\windows\system32\DRVSTORE\s0017unic_BB4DCB7C5F0783D4B48E0C375B1725378044DF2F\i386\s0017unic.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    108328              c:\windows\system32\DRVSTORE\s0017sdm2_B9E615C0177324E64608E606C5BACDE21EAA633D\i386\s0017mgmt.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    104616              c:\windows\system32\DRVSTORE\s0017obx2_A3A3D079A0B5800EDAAA5F4412759AA097D63D6C\i386\s0017obex.sys
    + 2009-08-14 07:38 . 2008-10-21 01:22    114600              c:\windows\system32\DRVSTORE\s0017mdm2_83F2C95A46E46AD749D51DDDADAD3F859682E916\i386\s0017mdm.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    115752              c:\windows\system32\DRVSTORE\s0016unic_9D1BEA0AD7AC1ECEA653A080CB50A95794EB54A6\i386\s0016unic.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    114216              c:\windows\system32\DRVSTORE\s0016sdm2_49EC14686E23454842B5DD1E08A12351912F071A\i386\s0016mgmt.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    110632              c:\windows\system32\DRVSTORE\s0016obx2_A8E1C631CA004AB1BE81A3D48D308AF233F680BF\i386\s0016obex.sys
    + 2009-08-14 07:38 . 2008-05-16 03:33    120744              c:\windows\system32\DRVSTORE\s0016mdm2_682450892C06910A09004057C74387FB5E35E414\i386\s0016mdm.sys
    + 2009-10-02 04:58 . 2009-05-11 03:30    547840              c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\PCCSWpdDriver.dll
    + 2009-10-02 04:57 . 2009-03-19 04:48    136704              c:\windows\system32\DRVSTORE\nmwcdnsu_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdnsu.sys
    + 2009-10-02 04:57 . 2009-02-08 22:37    659968              c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdcocls.dll
    + 2009-08-14 07:38 . 2008-01-18 07:16    104488              c:\windows\system32\DRVSTORE\a016sdm2_9FBFF1EEEB0015F5CA2F0634B300C450FF556BA3\i386\a016mgmt.sys
    + 2009-08-14 07:38 . 2008-01-18 07:16    100648              c:\windows\system32\DRVSTORE\a016obx2_3839048F455A46A4FF4033F897B7AAA7BF427B58\i386\a016obex.sys
    + 2009-08-14 07:37 . 2008-01-18 07:16    110504              c:\windows\system32\DRVSTORE\a016mdm2_8FC221937B2924C4F9CE55A0CA993E1DEF07D5BB\i386\a016mdm.sys
    + 2006-11-01 21:22 . 2008-03-27 06:27    503008              c:\windows\system32\drivers\wdf01000.sys
    + 2010-08-31 06:35 . 2010-07-30 17:29    249424              c:\windows\system32\drivers\tmxpflt.sys
    + 2010-08-31 06:48 . 2010-07-19 18:02    163408              c:\windows\system32\drivers\tmcomm.sys
    + 2010-08-31 06:35 . 2010-08-31 06:35    339984              c:\windows\system32\drivers\TM_CFW.sys
    + 2004-08-04 12:00 . 2010-02-11 12:02    226880              c:\windows\system32\drivers\tcpip6.sys
    + 2004-08-04 12:00 . 2011-02-17 13:18    357888              c:\windows\system32\drivers\srv.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    109736              c:\windows\system32\drivers\s1018unic.sys
    + 2009-08-14 07:36 . 2008-11-04 01:45    104616              c:\windows\system32\drivers\s1018obex.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    108200              c:\windows\system32\drivers\s1018mgmt.sys
    + 2009-08-14 07:38 . 2008-11-04 01:45    114472              c:\windows\system32\drivers\s1018mdm.sys
    + 2004-08-04 12:00 . 2011-02-17 13:18    455936              c:\windows\system32\drivers\mrxsmb.sys
    + 2004-08-04 12:00 . 2009-10-20 16:20    265728              c:\windows\system32\drivers\http.sys
    - 2004-08-04 12:00 . 2008-08-14 10:04    138496              c:\windows\system32\drivers\afd.sys
    + 2004-08-04 12:00 . 2008-10-16 14:43    138496              c:\windows\system32\drivers\afd.sys
    + 2004-08-04 12:00 . 2011-03-03 06:55    149504              c:\windows\system32\dnsapi.dll
    + 2012-08-06 00:19 . 2009-08-06 09:24    209632              c:\windows\system32\dllcache\wuweb.dll
    + 2012-08-06 00:19 . 2009-08-06 09:24    327896              c:\windows\system32\dllcache\wucltui.dll
    + 2012-08-06 00:19 . 2009-08-06 09:23    575704              c:\windows\system32\dllcache\wuapi.dll
    + 2009-04-30 04:09 . 2010-07-12 12:55    218112              c:\windows\system32\dllcache\wordpad.exe
    + 2004-08-04 12:00 . 2009-04-01 12:02    604160              c:\windows\system32\dllcache\wmspdmod.dll
    + 2004-08-04 12:00 . 2009-07-13 13:43    286208              c:\windows\system32\dllcache\wmpdxm.dll
    + 2009-06-10 06:14 . 2009-06-10 06:14    132096              c:\windows\system32\dllcache\wkssvc.dll
    + 2009-12-24 06:59 . 2009-12-24 06:59    177664              c:\windows\system32\dllcache\wintrust.dll
    + 2010-06-18 17:45 . 2010-06-18 17:45    293376              c:\windows\system32\dllcache\winsrv.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    916480              c:\windows\system32\dllcache\wininet.dll
    + 2008-12-16 12:30 . 2009-08-25 09:17    354816              c:\windows\system32\dllcache\winhttp.dll
    + 2008-05-09 10:53 . 2011-03-04 06:37    420864              c:\windows\system32\dllcache\vbscript.dll
    + 2010-04-16 15:36 . 2010-04-16 15:36    406016              c:\windows\system32\dllcache\usp10.dll
    + 2009-09-09 07:49 . 2009-06-21 21:44    153088              c:\windows\system32\dllcache\triedit.dll
    + 2008-06-20 11:08 . 2010-02-11 12:02    226880              c:\windows\system32\dllcache\tcpip6.sys
    - 2009-06-16 14:36 . 2009-06-16 14:36    119808              c:\windows\system32\dllcache\t2embed.dll
    + 2009-06-16 14:36 . 2010-08-27 08:02    119808              c:\windows\system32\dllcache\t2embed.dll
    + 2004-08-04 12:00 . 2009-08-26 08:00    247326              c:\windows\system32\dllcache\strmdll.dll
    - 2004-08-04 12:00 . 2008-10-03 10:02    247326              c:\windows\system32\dllcache\strmdll.dll
    + 2008-10-28 07:59 . 2011-02-17 13:18    357888              c:\windows\system32\dllcache\srv.sys
    + 2009-07-27 23:17 . 2009-07-27 23:17    135168              c:\windows\system32\dllcache\shsvcs.dll
    - 2009-01-07 08:20 . 2009-01-07 08:20    474112              c:\windows\system32\dllcache\shlwapi.dll
    + 2009-01-07 08:20 . 2009-12-08 09:23    474112              c:\windows\system32\dllcache\shlwapi.dll
    + 2011-01-21 14:44 . 2011-01-21 14:44    439296              c:\windows\system32\dllcache\shimgvw.dll
    + 2008-12-05 06:54 . 2010-06-30 12:31    149504              c:\windows\system32\dllcache\schannel.dll
    + 2011-02-09 13:53 . 2011-02-09 13:53    270848              c:\windows\system32\dllcache\sbe.dll
    + 2009-04-15 14:51 . 2010-08-16 08:45    590848              c:\windows\system32\dllcache\rpcrt4.dll
    + 2009-10-12 13:38 . 2009-10-12 13:38    149504              c:\windows\system32\dllcache\rastls.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52    249856              c:\windows\system32\dllcache\odbc32.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    206848              c:\windows\system32\dllcache\occache.dll
    - 2004-08-04 12:00 . 2009-07-03 17:09    206848              c:\windows\system32\dllcache\occache.dll
    + 2009-10-13 10:30 . 2009-10-13 10:30    270336              c:\windows\system32\dllcache\oakley.dll
    + 2009-04-30 04:10 . 2010-12-09 15:15    718336              c:\windows\system32\dllcache\ntdll.dll
    + 2008-06-20 17:46 . 2008-06-20 16:02    245248              c:\windows\system32\dllcache\mswsock.dll
    - 2008-06-20 17:46 . 2008-06-20 17:46    245248              c:\windows\system32\dllcache\mswsock.dll
    + 2009-08-05 09:01 . 2009-08-05 09:01    204800              c:\windows\system32\dllcache\mswebdvd.dll
    + 2009-06-25 08:25 . 2009-09-11 14:18    136192              c:\windows\system32\dllcache\msv1_0.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    611840              c:\windows\system32\dllcache\mstime.dll
    - 2004-08-04 12:00 . 2009-03-07 18:32    611840              c:\windows\system32\dllcache\mstime.dll
    + 2009-12-16 18:43 . 2009-12-16 18:43    343040              c:\windows\system32\dllcache\mspaint.exe
    + 2010-11-09 14:52 . 2010-11-09 14:52    102400              c:\windows\system32\dllcache\msjro.dll
    + 2008-09-10 21:26 . 2011-02-22 23:06    602112              c:\windows\system32\dllcache\msfeeds.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52    200704              c:\windows\system32\dllcache\msadox.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52    180224              c:\windows\system32\dllcache\msadomd.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52    536576              c:\windows\system32\dllcache\msado15.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52    143360              c:\windows\system32\dllcache\msadco.dll
    + 2008-11-18 09:56 . 2011-02-17 13:18    455936              c:\windows\system32\dllcache\mrxsmb.sys
    + 2010-03-30 02:24 . 2010-03-30 02:24    317440              c:\windows\system32\dllcache\mp4sdecd.dll
    + 2004-08-04 12:00 . 2011-02-08 13:33    974848              c:\windows\system32\dllcache\mfc42u.dll
    + 2010-10-14 01:47 . 2011-02-08 13:33    978944              c:\windows\system32\dllcache\mfc42.dll
    + 2010-10-14 01:47 . 2010-09-18 06:53    953856              c:\windows\system32\dllcache\mfc40u.dll
    + 2004-08-04 12:00 . 2010-09-18 06:53    954368              c:\windows\system32\dllcache\mfc40.dll
    + 2009-04-30 04:10 . 2010-12-20 17:26    730112              c:\windows\system32\dllcache\lsasrv.dll
    + 2011-01-27 11:57 . 2011-01-27 11:57    677888              c:\windows\system32\dllcache\lhmstsc.exe
    + 2009-06-25 08:25 . 2010-12-22 12:34    301568              c:\windows\system32\dllcache\kerberos.dll
    + 2008-05-09 10:53 . 2011-03-04 06:37    726528              c:\windows\system32\dllcache\jscript.dll
    - 2008-05-09 10:53 . 2009-03-07 18:33    726528              c:\windows\system32\dllcache\jscript.dll
    + 2008-09-10 09:21 . 2011-03-07 05:33    692736              c:\windows\system32\dllcache\inetcomm.dll
    + 2009-06-11 18:38 . 2011-02-22 23:06    247808              c:\windows\system32\dllcache\ieproxy.dll
    - 2004-08-04 12:00 . 2009-07-03 17:09    184320              c:\windows\system32\dllcache\iepeers.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    184320              c:\windows\system32\dllcache\iepeers.dll
    + 2010-06-09 09:22 . 2011-02-22 23:06    743424              c:\windows\system32\dllcache\iedvtool.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    387584              c:\windows\system32\dllcache\iedkcs32.dll
    + 2004-08-04 12:00 . 2011-02-18 11:49    173568              c:\windows\system32\dllcache\ie4uinit.exe
    + 2009-10-20 16:20 . 2009-10-20 16:20    265728              c:\windows\system32\dllcache\http.sys
    + 2010-07-14 09:09 . 2010-06-14 14:31    744448              c:\windows\system32\dllcache\helpsvc.exe
    + 2011-02-09 13:53 . 2011-02-09 13:53    186880              c:\windows\system32\dllcache\encdec.dll
    + 2008-06-20 17:46 . 2011-03-03 06:55    149504              c:\windows\system32\dllcache\dnsapi.dll
    + 2010-10-14 01:47 . 2010-08-23 16:12    617472              c:\windows\system32\dllcache\comctl32.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    507904              c:\windows\system32\dllcache\cache\winlogon.exe
    + 2009-08-01 03:34 . 2009-07-03 17:09    915456              c:\windows\system32\dllcache\cache\wininet.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    578560              c:\windows\system32\dllcache\cache\user32.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    295424              c:\windows\system32\dllcache\cache\termsrv.dll
    + 2009-08-01 03:34 . 2008-06-20 11:51    361600              c:\windows\system32\dllcache\cache\tcpip.sys
    + 2009-08-01 03:34 . 2008-04-14 00:12    171008              c:\windows\system32\dllcache\cache\srsvc.dll
    + 2009-08-01 03:34 . 2009-02-06 11:11    110592              c:\windows\system32\dllcache\cache\services.exe
    + 2009-08-01 03:34 . 2009-02-09 12:10    401408              c:\windows\system32\dllcache\cache\rpcss.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    435200              c:\windows\system32\dllcache\cache\ntmssvc.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    407040              c:\windows\system32\dllcache\cache\netlogon.dll
    + 2009-08-01 03:34 . 2008-04-13 19:20    182656              c:\windows\system32\dllcache\cache\ndis.sys
    + 2009-08-01 03:34 . 2008-04-14 00:11    927504              c:\windows\system32\dllcache\cache\mfc40u.dll
    + 2009-08-01 03:34 . 2009-03-21 14:06    989696              c:\windows\system32\dllcache\cache\kernel32.dll
    + 2009-08-01 03:34 . 2008-04-14 00:11    110080              c:\windows\system32\dllcache\cache\imm32.dll
    + 2009-08-01 03:34 . 2008-04-14 00:11    792064              c:\windows\system32\dllcache\cache\comres.dll
    + 2009-08-01 03:34 . 2008-04-14 00:11    617472              c:\windows\system32\dllcache\cache\comctl32.dll
    + 2009-08-01 03:34 . 2008-04-14 00:11    167936              c:\windows\system32\dllcache\cache\appmgmts.dll
    + 2009-08-01 03:34 . 2008-04-13 16:39    142592              c:\windows\system32\dllcache\cache\aec.sys
    + 2010-04-20 05:30 . 2011-02-15 12:56    290432              c:\windows\system32\dllcache\atmfd.dll
    - 2008-06-20 11:40 . 2008-08-14 10:04    138496              c:\windows\system32\dllcache\afd.sys
    + 2008-06-20 11:40 . 2008-10-16 14:43    138496              c:\windows\system32\dllcache\afd.sys
    + 2010-01-12 22:41 . 2009-11-21 15:51    471552              c:\windows\system32\dllcache\aclayers.dll
    + 2010-02-12 04:33 . 2010-02-12 04:33    100864              c:\windows\system32\dllcache\6to4svc.dll
    + 2010-02-19 19:27 . 2010-02-19 19:27    843776              c:\windows\system32\divx_xx16.dll
    + 2010-02-19 19:27 . 2010-02-19 19:27    839680              c:\windows\system32\divx_xx11.dll
    + 2010-02-19 19:27 . 2010-02-19 19:27    856064              c:\windows\system32\divx_xx0c.dll
    + 2010-02-19 19:27 . 2010-02-19 19:27    847872              c:\windows\system32\divx_xx0a.dll
    + 2010-02-19 19:27 . 2010-02-19 19:27    856064              c:\windows\system32\divx_xx07.dll
    + 2010-02-19 19:27 . 2010-02-19 19:27    720384              c:\windows\system32\DivX.dll
    + 2011-01-19 23:32 . 2010-11-12 07:53    472808              c:\windows\system32\deployJava1.dll
    - 2004-08-04 12:00 . 2008-04-14 00:11    617472              c:\windows\system32\comctl32.dll
    + 2004-08-04 12:00 . 2010-08-23 16:12    617472              c:\windows\system32\comctl32.dll
    + 2004-08-04 12:00 . 2011-02-15 12:56    290432              c:\windows\system32\atmfd.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11    136568              c:\windows\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
    + 2010-05-05 14:05 . 2010-05-05 14:05    114688              c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
    + 2010-05-05 14:36 . 2010-05-05 14:36    467224              c:\windows\system32\Adobe\Shockwave 11\SwHelper_1157609.exe
    + 2010-04-01 12:59 . 2010-04-01 12:59    459032              c:\windows\system32\Adobe\Shockwave 11\SwHelper_1156606.exe
    + 2010-05-05 14:08 . 2010-05-05 14:08    446464              c:\windows\system32\Adobe\Shockwave 11\Proj.dll
    + 2010-05-05 14:06 . 2010-05-05 14:06    372736              c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11    753152              c:\windows\system32\Adobe\Shockwave 11\gi.dll
    + 2010-05-05 14:05 . 2010-05-05 14:05    503808              c:\windows\system32\Adobe\Shockwave 11\Control.dll
    + 2010-05-05 14:37 . 2010-05-05 14:37    213272              c:\windows\system32\Adobe\Director\SwDir.dll
    + 2010-05-05 14:07 . 2010-05-05 14:07    131072              c:\windows\system32\Adobe\Director\np32dsw.dll
    + 2004-08-04 12:00 . 2010-02-12 04:33    100864              c:\windows\system32\6to4svc.dll
    - 2012-08-06 00:19 . 2008-04-14 00:12    744448              c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    + 2012-08-06 00:19 . 2010-06-14 14:31    744448              c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    + 2010-03-30 14:16 . 2010-03-30 14:16    130408              c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2010-04-07 13:48 . 2010-04-07 13:48    970752              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    + 2010-04-07 13:48 . 2010-04-07 13:48    110592              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    - 2008-07-29 09:16 . 2008-07-29 09:16    110592              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2010-09-21 22:43 . 2010-09-21 22:43    435024              c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    - 2008-07-25 01:17 . 2008-07-25 01:17    258048              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2010-02-09 02:22 . 2010-02-09 02:22    258048              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2011-01-17 18:39 . 2011-01-17 18:39    388936              c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-01-17 18:39 . 2011-01-17 18:39    363856              c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2011-01-17 18:39 . 2011-01-17 18:39    989016              c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2010-09-22 15:26 . 2010-09-22 15:26    102400              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    - 2007-04-13 10:58 . 2007-04-13 10:58    102400              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    + 2010-09-22 15:25 . 2010-09-22 15:25    315392              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    - 2007-04-13 10:56 . 2007-04-13 10:56    315392              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2010-09-22 16:17 . 2010-09-22 16:17    258048              c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    - 2007-04-13 11:30 . 2007-04-13 11:30    258048              c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    + 2008-09-10 23:32 . 2010-08-31 06:35    126208              c:\windows\Installer\TmDbg32.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    126208              c:\windows\Installer\TmDbg32.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    626688              c:\windows\Installer\msvcr80.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    626688              c:\windows\Installer\msvcr80.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    548864              c:\windows\Installer\msvcp80.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    548864              c:\windows\Installer\msvcp80.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    479232              c:\windows\Installer\msvcm80.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    479232              c:\windows\Installer\msvcm80.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    159168              c:\windows\Installer\libexpat.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    159168              c:\windows\Installer\libexpat.dll
    + 2009-11-11 20:33 . 2009-11-11 20:33    155648              c:\windows\Installer\ea3719.msi
    + 2009-11-11 20:33 . 2009-11-11 20:33    202752              c:\windows\Installer\ea36fe.msi
    + 2009-11-11 20:32 . 2009-11-11 20:32    107008              c:\windows\Installer\ea36e6.msi
    + 2009-11-11 20:32 . 2009-11-11 20:32    301056              c:\windows\Installer\ea36e0.msi
    + 2009-08-28 00:04 . 2009-08-28 00:04    119296              c:\windows\Installer\d8b51a5.msi
    + 2010-08-04 05:13 . 2010-08-04 05:13    686080              c:\windows\Installer\be38b41.msp
    + 2011-04-13 07:27 . 2011-04-13 07:27    459264              c:\windows\Installer\bc2606e.msi
    + 2010-07-22 14:03 . 2010-07-22 14:03    338432              c:\windows\Installer\8bf5e12e.msp
    + 2011-03-11 00:30 . 2011-03-11 00:30    169472              c:\windows\Installer\6e378c3.msi
    + 2011-04-08 07:52 . 2011-04-08 07:52    326656              c:\windows\Installer\66b16566.msi
    + 2010-11-04 08:40 . 2010-11-04 08:40    101376              c:\windows\Installer\4f635a35.msi
    + 2009-10-02 04:59 . 2009-10-02 04:59    850432              c:\windows\Installer\3e21213.msi
    + 2009-10-02 04:58 . 2009-10-02 04:58    549888              c:\windows\Installer\3e21162.msi
    + 2009-10-02 04:57 . 2009-10-02 04:57    331264              c:\windows\Installer\3e2112b.msi
    + 2011-05-15 10:47 . 2011-05-15 10:47    689152              c:\windows\Installer\34242.msi
    + 2010-12-24 07:24 . 2010-12-24 07:24    840192              c:\windows\Installer\274b1ac6.msi
    + 2011-01-19 23:32 . 2011-01-19 23:32    180224              c:\windows\Installer\26ceca83.msi
    + 2009-03-20 01:48 . 2009-03-20 01:48    183808              c:\windows\Installer\21abee2e.msp
    + 2009-11-25 16:00 . 2009-11-25 16:00    429568              c:\windows\Installer\1be910a0.msi
    + 2009-10-06 09:08 . 2009-10-06 09:08    816640              c:\windows\Installer\157c219a.msi
    + 2009-09-07 07:01 . 2009-09-07 07:01    836096              c:\windows\Installer\148b3a02.msi
    + 2011-02-05 03:24 . 2011-02-05 03:24    735744              c:\windows\Installer\142b678f.msi
    + 2011-02-05 03:24 . 2011-02-05 03:24    429056              c:\windows\Installer\142b6757.msi
    + 2011-02-05 03:23 . 2011-02-05 03:23    149504              c:\windows\Installer\142b6722.msi
    + 2010-02-24 14:14 . 2010-02-24 14:14    543232              c:\windows\Installer\1238257e.msp
    + 2010-09-23 10:02 . 2010-09-23 10:02    798208              c:\windows\Installer\121dd76.msp
    - 2009-03-31 02:09 . 2009-07-15 17:03    888080              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\wordicon.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    888080              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\wordicon.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    272648              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\pubs.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    272648              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\pubs.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    922384              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\pptico.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    922384              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\pptico.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    845584              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\outicon.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    845584              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\outicon.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    217864              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\misc.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    217864              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\misc.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    184080              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\joticon.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    184080              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\joticon.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    159504              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\inficon.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    159504              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\inficon.exe
    + 2009-10-06 09:08 . 2009-10-06 09:08    102400              c:\windows\Installer\{818ABC3C-635C-4651-8183-D0E9640B7DD1}\NewShortcut1_47F36D92E58E456DB73C3382737E4C42.exe
    + 2011-05-15 10:47 . 2011-05-15 10:47    371272              c:\windows\Installer\{5335DADB-34BA-4AE8-A519-648D78498846}\SkypeIcon.exe
    + 2010-09-22 07:10 . 2010-09-22 07:10    103864              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\nppdf32.dll
    + 2010-09-10 07:17 . 2010-09-10 07:17    684032              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\JP2KLib.dll
    + 2010-09-22 09:41 . 2010-09-22 09:41    542168              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AdobeCollabSync.exe
    + 2010-09-22 17:47 . 2010-09-22 17:47    349616              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32.exe
    + 2010-09-22 07:04 . 2010-09-22 07:04    660912              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroPDF.dll
    + 2010-09-22 08:39 . 2010-09-22 08:39    280024              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\acrobroker.exe
    + 2010-09-22 07:50 . 2010-09-22 07:50    251296              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\a3dutility.exe
    + 2009-03-05 16:37 . 2009-03-05 16:37    501640              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\SOA.DLL
    + 2009-03-05 18:26 . 2009-03-05 18:26    770464              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\REGFORM.EXE
    + 2008-10-24 21:52 . 2008-10-24 21:52    664968              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ONBTTNOL.DLL
    + 2008-10-24 21:52 . 2008-10-24 21:52    604056              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ONBTTNIE.DLL
    + 2008-11-03 18:13 . 2008-11-03 18:13    118128              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSCONV97.DLL
    + 2009-05-01 05:56 . 2009-05-01 05:56    118176              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\IPOMINT.DLL
    + 2008-10-24 23:27 . 2008-10-24 23:27    177040              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\IPOLK.DLL
    + 2009-02-13 20:04 . 2009-02-13 20:04    625520              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\GROOVEWEBSERVICES.DLL
    + 2009-02-12 05:19 . 2009-02-12 05:19    688512              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\GROOVEWEBPLATFORMSERVICES.DLL
    + 2009-03-05 18:33 . 2009-03-05 18:33    961888              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\GROOVEUTIL.DLL
    + 2009-02-13 20:03 . 2009-02-13 20:03    337264              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\GROOVE.EXE
    + 2008-10-25 20:26 . 2008-10-25 20:26    162680              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACCWIZ.DLL
    + 2010-06-09 17:15 . 2010-02-25 06:24    916480              c:\windows\ie8updates\KB982381-IE8\wininet.dll
    + 2010-06-09 17:15 . 2010-02-22 14:23    382840              c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll
    + 2010-06-09 17:15 . 2008-07-08 13:02    231288              c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe
    + 2010-06-09 17:15 . 2010-02-25 06:24    206848              c:\windows\ie8updates\KB982381-IE8\occache.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    611840              c:\windows\ie8updates\KB982381-IE8\mstime.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    594432              c:\windows\ie8updates\KB982381-IE8\msfeeds.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    247808              c:\windows\ie8updates\KB982381-IE8\ieproxy.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    184320              c:\windows\ie8updates\KB982381-IE8\iepeers.dll
    + 2010-06-09 17:15 . 2009-03-07 18:35    742912              c:\windows\ie8updates\KB982381-IE8\iedvtool.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    387584              c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll
    + 2010-06-09 17:15 . 2010-02-24 09:54    173056              c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe
    + 2010-04-15 17:02 . 2009-03-07 18:33    420352              c:\windows\ie8updates\KB981332-IE8\vbscript.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    382840              c:\windows\ie8updates\KB981332-IE8\spuninst\updspapi.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    231288              c:\windows\ie8updates\KB981332-IE8\spuninst\spuninst.exe
    + 2010-03-31 08:08 . 2009-12-21 19:14    916480              c:\windows\ie8updates\KB980182-IE8\wininet.dll
    + 2010-03-31 08:08 . 2009-05-26 11:40    382840              c:\windows\ie8updates\KB980182-IE8\spuninst\updspapi.dll
    + 2010-03-31 08:08 . 2009-05-26 11:40    231288              c:\windows\ie8updates\KB980182-IE8\spuninst\spuninst.exe
    + 2010-03-31 08:08 . 2009-12-21 19:14    206848              c:\windows\ie8updates\KB980182-IE8\occache.dll
    + 2010-03-31 08:08 . 2009-03-07 18:32    611840              c:\windows\ie8updates\KB980182-IE8\mstime.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    594432              c:\windows\ie8updates\KB980182-IE8\msfeeds.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    246272              c:\windows\ie8updates\KB980182-IE8\ieproxy.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    184320              c:\windows\ie8updates\KB980182-IE8\iepeers.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    387584              c:\windows\ie8updates\KB980182-IE8\iedkcs32.dll
    + 2010-03-31 08:08 . 2009-12-21 13:19    173056              c:\windows\ie8updates\KB980182-IE8\ie4uinit.exe
    + 2010-01-22 16:01 . 2009-10-29 07:45    916480              c:\windows\ie8updates\KB978207-IE8\wininet.dll
    + 2010-01-22 16:01 . 2009-05-26 11:40    382840              c:\windows\ie8updates\KB978207-IE8\spuninst\updspapi.dll
    + 2010-01-22 16:01 . 2008-07-08 13:02    231288              c:\windows\ie8updates\KB978207-IE8\spuninst\spuninst.exe
    + 2010-01-22 16:01 . 2009-10-29 07:45    206848              c:\windows\ie8updates\KB978207-IE8\occache.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    594432              c:\windows\ie8updates\KB978207-IE8\msfeeds.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    246272              c:\windows\ie8updates\KB978207-IE8\ieproxy.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    184320              c:\windows\ie8updates\KB978207-IE8\iepeers.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    387584              c:\windows\ie8updates\KB978207-IE8\iedkcs32.dll
    + 2010-01-22 16:01 . 2009-10-28 14:40    173056              c:\windows\ie8updates\KB978207-IE8\ie4uinit.exe
    + 2009-11-04 16:00 . 2008-07-08 13:02    382840              c:\windows\ie8updates\KB976749-IE8\spuninst\updspapi.dll
    + 2009-11-04 16:00 . 2008-07-08 13:02    231288              c:\windows\ie8updates\KB976749-IE8\spuninst\spuninst.exe
    + 2010-02-24 09:54 . 2008-07-08 13:02    382840              c:\windows\ie8updates\KB976662-IE8\spuninst\updspapi.dll
    + 2010-02-24 09:54 . 2008-07-08 13:02    231288              c:\windows\ie8updates\KB976662-IE8\spuninst\spuninst.exe
    + 2010-02-24 09:54 . 2009-06-22 06:44    726528              c:\windows\ie8updates\KB976662-IE8\jscript.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    916480              c:\windows\ie8updates\KB976325-IE8\wininet.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    382840              c:\windows\ie8updates\KB976325-IE8\spuninst\updspapi.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    231288              c:\windows\ie8updates\KB976325-IE8\spuninst\spuninst.exe
    + 2009-12-10 09:49 . 2009-08-29 08:08    206848              c:\windows\ie8updates\KB976325-IE8\occache.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    594432              c:\windows\ie8updates\KB976325-IE8\msfeeds.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    246272              c:\windows\ie8updates\KB976325-IE8\ieproxy.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    184320              c:\windows\ie8updates\KB976325-IE8\iepeers.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    387584              c:\windows\ie8updates\KB976325-IE8\iedkcs32.dll
    + 2009-12-10 09:49 . 2009-08-28 10:35    173056              c:\windows\ie8updates\KB976325-IE8\ie4uinit.exe
    + 2009-10-16 16:07 . 2009-07-03 17:09    915456              c:\windows\ie8updates\KB974455-IE8\wininet.dll
    + 2009-10-16 16:07 . 2009-05-26 11:40    382840              c:\windows\ie8updates\KB974455-IE8\spuninst\updspapi.dll
    + 2009-10-16 16:07 . 2008-07-08 13:02    231288              c:\windows\ie8updates\KB974455-IE8\spuninst\spuninst.exe
    + 2009-10-16 16:07 . 2009-07-03 17:09    206848              c:\windows\ie8updates\KB974455-IE8\occache.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    594432              c:\windows\ie8updates\KB974455-IE8\msfeeds.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    246272              c:\windows\ie8updates\KB974455-IE8\ieproxy.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    184320              c:\windows\ie8updates\KB974455-IE8\iepeers.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    386048              c:\windows\ie8updates\KB974455-IE8\iedkcs32.dll
    + 2009-10-16 16:07 . 2009-07-03 11:01    173056              c:\windows\ie8updates\KB974455-IE8\ie4uinit.exe
    + 2009-09-09 17:01 . 2008-07-08 13:02    382840              c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    231288              c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
    + 2009-09-09 17:01 . 2009-03-07 18:33    726528              c:\windows\ie8updates\KB971961-IE8\jscript.dll
    + 2011-04-13 07:16 . 2010-03-10 06:15    420352              c:\windows\ie8updates\KB2510531-IE8\vbscript.dll
    + 2011-04-13 07:16 . 2010-07-05 13:16    382840              c:\windows\ie8updates\KB2510531-IE8\spuninst\updspapi.dll
    + 2011-04-13 07:16 . 2010-07-05 13:15    231288              c:\windows\ie8updates\KB2510531-IE8\spuninst\spuninst.exe
    + 2011-04-13 07:16 . 2009-12-09 05:53    726528              c:\windows\ie8updates\KB2510531-IE8\jscript.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    916480              c:\windows\ie8updates\KB2497640-IE8\wininet.dll
    + 2011-04-13 07:25 . 2010-07-05 13:16    382840              c:\windows\ie8updates\KB2497640-IE8\spuninst\updspapi.dll
    + 2011-04-13 07:25 . 2010-07-05 13:15    231288              c:\windows\ie8updates\KB2497640-IE8\spuninst\spuninst.exe
    + 2011-04-13 07:25 . 2010-12-20 23:59    206848              c:\windows\ie8updates\KB2497640-IE8\occache.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    611840              c:\windows\ie8updates\KB2497640-IE8\mstime.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    602112              c:\windows\ie8updates\KB2497640-IE8\msfeeds.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    247808              c:\windows\ie8updates\KB2497640-IE8\ieproxy.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    184320              c:\windows\ie8updates\KB2497640-IE8\iepeers.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    743424              c:\windows\ie8updates\KB2497640-IE8\iedvtool.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    387584              c:\windows\ie8updates\KB2497640-IE8\iedkcs32.dll
    + 2011-04-13 07:25 . 2010-12-20 12:55    173568              c:\windows\ie8updates\KB2497640-IE8\ie4uinit.exe
    + 2011-02-09 03:25 . 2010-11-06 00:26    916480              c:\windows\ie8updates\KB2482017-IE8\wininet.dll
    + 2011-02-09 03:25 . 2010-07-05 13:16    382840              c:\windows\ie8updates\KB2482017-IE8\spuninst\updspapi.dll
    + 2011-02-09 03:25 . 2010-07-05 13:15    231288              c:\windows\ie8updates\KB2482017-IE8\spuninst\spuninst.exe
    + 2011-02-09 03:25 . 2010-11-06 00:26    206848              c:\windows\ie8updates\KB2482017-IE8\occache.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    611840              c:\windows\ie8updates\KB2482017-IE8\mstime.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    602112              c:\windows\ie8updates\KB2482017-IE8\msfeeds.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    247808              c:\windows\ie8updates\KB2482017-IE8\ieproxy.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    184320              c:\windows\ie8updates\KB2482017-IE8\iepeers.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    743424              c:\windows\ie8updates\KB2482017-IE8\iedvtool.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    387584              c:\windows\ie8updates\KB2482017-IE8\iedkcs32.dll
    + 2011-02-09 03:25 . 2010-11-03 12:26    173568              c:\windows\ie8updates\KB2482017-IE8\ie4uinit.exe
    + 2010-12-16 09:40 . 2010-09-10 05:58    916480              c:\windows\ie8updates\KB2416400-IE8\wininet.dll
    + 2010-12-16 09:40 . 2010-07-05 13:16    382840              c:\windows\ie8updates\KB2416400-IE8\spuninst\updspapi.dll
    + 2010-12-16 09:40 . 2010-02-22 14:23    231288              c:\windows\ie8updates\KB2416400-IE8\spuninst\spuninst.exe
    + 2010-12-16 09:40 . 2010-09-10 05:58    206848              c:\windows\ie8updates\KB2416400-IE8\occache.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    611840              c:\windows\ie8updates\KB2416400-IE8\mstime.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    602112              c:\windows\ie8updates\KB2416400-IE8\msfeeds.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    247808              c:\windows\ie8updates\KB2416400-IE8\ieproxy.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    184320              c:\windows\ie8updates\KB2416400-IE8\iepeers.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    743424              c:\windows\ie8updates\KB2416400-IE8\iedvtool.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    387584              c:\windows\ie8updates\KB2416400-IE8\iedkcs32.dll
    + 2010-12-16 09:40 . 2010-08-26 12:22    173056              c:\windows\ie8updates\KB2416400-IE8\ie4uinit.exe
    + 2010-10-14 02:01 . 2010-06-24 12:22    916480              c:\windows\ie8updates\KB2360131-IE8\wininet.dll
    + 2010-10-14 02:01 . 2010-07-05 13:16    382840              c:\windows\ie8updates\KB2360131-IE8\spuninst\updspapi.dll
    + 2010-10-14 02:01 . 2009-05-26 09:01    231288              c:\windows\ie8updates\KB2360131-IE8\spuninst\spuninst.exe
    + 2010-10-14 02:01 . 2010-06-24 12:22    206848              c:\windows\ie8updates\KB2360131-IE8\occache.dll
    + 2010-10-14 02:01 . 2010-06-24 12:22    611840              c:\windows\ie8updates\KB2360131-IE8\mstime.dll
    + 2010-10-14 02:01 . 2010-06-24 12:21    599040              c:\windows\ie8updates\KB2360131-IE8\msfeeds.dll
    + 2010-10-14 02:01 . 2010-06-24 12:21    247808              c:\windows\ie8updates\KB2360131-IE8\ieproxy.dll
    + 2010-10-14 02:01 . 2010-06-24 12:21    184320              c:\windows\ie8updates\KB2360131-IE8\iepeers.dll
    + 2010-10-14 02:01 . 2010-06-24 12:21    743424              c:\windows\ie8updates\KB2360131-IE8\iedvtool.dll
    + 2010-10-14 02:01 . 2010-06-24 12:21    387584              c:\windows\ie8updates\KB2360131-IE8\iedkcs32.dll
    + 2010-10-14 02:01 . 2010-06-23 12:08    173056              c:\windows\ie8updates\KB2360131-IE8\ie4uinit.exe
    + 2010-08-12 17:04 . 2010-05-06 10:41    916480              c:\windows\ie8updates\KB2183461-IE8\wininet.dll
    + 2010-08-12 17:04 . 2010-02-22 14:23    382840              c:\windows\ie8updates\KB2183461-IE8\spuninst\updspapi.dll
    + 2010-08-12 17:04 . 2009-05-26 09:01    231288              c:\windows\ie8updates\KB2183461-IE8\spuninst\spuninst.exe
    + 2010-08-12 17:04 . 2010-05-06 10:41    206848              c:\windows\ie8updates\KB2183461-IE8\occache.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    611840              c:\windows\ie8updates\KB2183461-IE8\mstime.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    599040              c:\windows\ie8updates\KB2183461-IE8\msfeeds.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    247808              c:\windows\ie8updates\KB2183461-IE8\ieproxy.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    184320              c:\windows\ie8updates\KB2183461-IE8\iepeers.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    743424              c:\windows\ie8updates\KB2183461-IE8\iedvtool.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    387584              c:\windows\ie8updates\KB2183461-IE8\iedkcs32.dll
    + 2010-08-12 17:04 . 2010-05-05 13:30    173056              c:\windows\ie8updates\KB2183461-IE8\ie4uinit.exe
    + 2011-04-14 23:13 . 2011-04-14 23:13    473600              c:\windows\Freecorder\uninstall.exe
    + 2008-11-18 09:56 . 2011-02-17 13:18    455936              c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2009-10-20 16:20 . 2009-10-20 16:20    265728              c:\windows\Driver Cache\i386\http.sys
    + 2010-10-14 03:30 . 2010-10-14 03:30    835584              c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_490744ec\System.Drawing.dll
    + 2010-10-14 03:31 . 2010-10-14 03:31    192512              c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_b6ef2ae8\System.Drawing.Design.dll
    + 2010-10-14 03:31 . 2010-10-14 03:31    118784              c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_3ab3094e\CustomMarshalers.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    321536              c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\95de80b860252231b46014f58226e473\WsatConfig.ni.exe
    + 2011-04-13 07:27 . 2011-04-13 07:27    240128              c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\715710f5a31a494ed5c0ec0874dafe3e\WindowsFormsIntegration.ni.dll
    + 2011-04-13 07:27 . 2011-04-13 07:27    187904              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\017be0e6c5f1810f15a696157cd5e2c2\UIAutomationTypes.ni.dll
    + 2011-04-13 07:27 . 2011-04-13 07:27    447488              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\bec5b0a93df12eb26c02c877a4eae678\UIAutomationClient.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    400896              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\3d8f787002439f4942c33f376cfd8555\System.Xml.Linq.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    129536              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\4b746fea8062a10ccc6e5331914e7dad\System.Web.Routing.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    202240              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\103956fdb019bce8a173fe9cb9da3e02\System.Web.RegularExpressions.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    859648              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c0a156fbf46ad272ac262e45eaa998f4\System.Web.Extensions.Design.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    328704              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\e3651e13567ce4e3fa7bb2fbab737d9a\System.Web.Entity.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    301056              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\834d7769f39e4d937eda1ad3707d4716\System.Web.Entity.Design.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    547328              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\032c96c6206b53bca122d1fbaf5f8ca2\System.Web.DynamicData.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    141312              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6ce0e4fb33afcfcce43c427e82b987db\System.Web.Abstractions.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    627200              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\990d96810a21e0fa95f916ffc66f3a94\System.Transactions.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    212992              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\e0d56c0582316e9ecb4c18186e37217c\System.ServiceProcess.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    679936              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\9e91cca51a5ed6fb13b67558109d2726\System.Security.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    311296              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\fa6a58394a1f162eecce4cd8af0875c3\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    771584              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\1d03df7f7548613e8beab2cc21e57910\System.Runtime.Remoting.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    621056              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\6194eb4bc1e0133d0183d086b747f512\System.Net.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    998400              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\042658de519bb1e22ec5925092061892\System.Management.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    330752              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\d6ae8171ae6fd4fe83add34e6d70e5b5\System.Management.Instrumentation.ni.dll
    + 2011-04-13 07:43 . 2011-04-13 07:43    381440              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\abd5a61d39e474f12b30ccbbe6277667\System.IO.Log.ni.dll
    + 2011-04-13 07:43 . 2011-04-13 07:43    212992              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\12c4dba6d4ff0278d208c283d9ed7670\System.IdentityModel.Selectors.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    280064              c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\ff5c7a52497d892f3a3206384d46b5e7\System.EnterpriseServices.Wrapper.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    627712              c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\ff5c7a52497d892f3a3206384d46b5e7\System.EnterpriseServices.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    208384              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\e6b7128278d8c0e8382a5685f5b196c6\System.Drawing.Design.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    881152              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8ef56bf47fc2fc4204e0fcc1f32bab01\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    455680              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\447d7b4a7d0add13f8d2086088bcc41c\System.DirectoryServices.Protocols.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    354816              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ce2afe8854ee9cdc834b6f392348c882\System.Data.Services.Design.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    939008              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\03d4658290e300e437e745ef4a613b59\System.Data.Services.Client.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    756736              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\7ce21a2855bb7731de4dab797e69f3f6\System.Data.Entity.Design.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    135680              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\ea57694aea47c05853516c9bb2ad54b4\System.Data.DataSetExtensions.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    971264              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\3d6b4509225efde2a4e3db77205f8a51\System.Configuration.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    141312              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\f312bb844670ebc7458fec9e6b2568b3\System.Configuration.Install.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    633856              c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\afd9595f07a8c68b26e81cf995957f56\System.AddIn.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    366080              c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\3a42b2fbafe93d7b9395e328bea35afa\SMSvcHost.ni.exe
    + 2011-04-13 07:45 . 2011-04-13 07:45    256000              c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\97ff96d3fc8d0b10ea294f320acf821e\SMDiagnostics.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    320512              c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\28ed0e9efd938b05b4f53e0d90046701\ServiceModelReg.ni.exe
    + 2011-04-13 07:25 . 2011-04-13 07:25    368128              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ffe13679e6b3e36e5cb6c47f8c4faf9c\PresentationFramework.Aero.ni.dll
    + 2011-04-13 07:25 . 2011-04-13 07:25    224768              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\dbb40299379f2009c140ddadb04231b4\PresentationFramework.Classic.ni.dll
    + 2011-04-13 07:25 . 2011-04-13 07:25    258048              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a34cd33cec1bdfebe4a3910bceb8723b\PresentationFramework.Royale.ni.dll
    + 2011-04-13 07:25 . 2011-04-13 07:25    539648              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\689bb394bcb437ed085c22a43aba30c6\PresentationFramework.Luna.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    600576              c:\windows\assembly\NativeImages_v2.0.50727_32\PerstNET\8a6d4c988f63317cdcd56c8c0b9ba217\PerstNET.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    133632              c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5670e74887ef1025c6a8c056ffe86b38\MSBuild.ni.exe
    + 2011-04-13 07:45 . 2011-04-13 07:45    386560              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\653732002ebf5c68f69150a60e145e6a\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    175104              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\cc62770393640302bd4d7e442b1e49a4\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    144384              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\352bff1ee71ce114e225f849038dc48d\Microsoft.Build.Utilities.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    839680              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\7345f4d2d7157bf49de4158e8f2b6847\Microsoft.Build.Engine.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    222720              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\d7dba901ddd410ca1a0156d0f2a27533\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    264192              c:\windows\assembly\NativeImages_v2.0.50727_32\MediaManager.Utils\44aa36d64a144dc62d99589d4f0eaea9\MediaManager.Utils.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    261120              c:\windows\assembly\NativeImages_v2.0.50727_32\MediaManager.Splash#\27f880795d2a1f1797cb4970a5cfe335\MediaManager.SplashScreen.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    950272              c:\windows\assembly\NativeImages_v2.0.50727_32\MediaManager.GUI\eec0bfec082e34178305dd055c8ef39b\MediaManager.GUI.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    856576              c:\windows\assembly\NativeImages_v2.0.50727_32\Lucene.Net\ef6803b18827135fbe2fabc85e2cb457\Lucene.Net.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    657920              c:\windows\assembly\NativeImages_v2.0.50727_32\log4net\c4feaaeef7d9d6018e581253bf320aa4\log4net.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    812032              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WMPLib\cd6acc4c74469524b11e7e502fb2d81d\Interop.WMPLib.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    311808              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.SHDocVw\23c553404be00a348d41d7c404ab93f9\Interop.SHDocVw.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    204288              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.QTOLibrary\867e13f3a97602a7ad5ab7b56c089f24\Interop.QTOLibrary.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    100864              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.IWshRuntime#\ad5eb94a058475f43a974ea01e0188e1\Interop.IWshRuntimeLibrary.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    374784              c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.CDDBCONTROL#\708c0e75cfdc49ba11adaf03f79894fa\Interop.CDDBCONTROLLibSMS.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    210432              c:\windows\assembly\NativeImages_v2.0.50727_32\GCPlayer\168b921f65caaedc29d200b4f8a0c6f7\GCPlayer.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    220672              c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\010552e529d130ce914765b0801e2367\CustomMarshalers.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    410112              c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\6861f639b13967e9b014b44bbb7c5d4c\ComSvcConfig.ni.exe
    + 2011-04-13 07:45 . 2011-04-13 07:45    151552              c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.WMPLib\45a2ea30a4061a76c92bc4a2326b58d3\AxInterop.WMPLib.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    114176              c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.SHDocVw\dcf42afa80c45b644321eb0e1ef59ffe\AxInterop.SHDocVw.ni.dll
    + 2011-04-13 07:43 . 2011-04-13 07:43    842240              c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\800da7dec567fadf3392091e9f01ecb9\AspNetMMCExt.ni.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    839680              c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    839680              c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    835584              c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    835584              c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    114688              c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    114688              c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    258048              c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    258048              c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-06-09 17:08 . 2010-06-09 17:08    970752              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    131072              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    131072              c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    303104              c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    303104              c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    258048              c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    258048              c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    372736              c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    372736              c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2010-06-09 17:08 . 2010-06-09 17:08    438272              c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    626688              c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    626688              c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    401408              c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    401408              c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    188416              c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    188416              c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    970752              c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    970752              c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    745472              c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    745472              c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    425984              c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    425984              c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    110592              c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    110592              c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2009-05-01 05:43 . 2009-05-01 05:43    110592              c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    + 2010-06-09 17:08 . 2010-06-09 17:08    110592              c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    659456              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    659456              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    372736              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    372736              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    110592              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    110592              c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    749568              c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    749568              c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    655360              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    655360              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    348160              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    348160              c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    507904              c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    507904              c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    261632              c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    261632              c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    113664              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    113664              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    258048              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    258048              c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    486400              c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    486400              c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2009-12-10 09:49 . 2009-12-10 09:49    117144              c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
    + 2004-08-04 12:00 . 2009-11-21 15:51    471552              c:\windows\AppPatch\aclayers.dll
    + 2009-10-02 05:07 . 2006-11-01 21:22    492000              c:\windows\$NtUninstallWdf01007$\wdf01000.sys
    + 2009-10-02 05:07 . 2008-03-21 03:57    379184              c:\windows\$NtUninstallWdf01007$\spuninst\updspapi.dll
    + 2009-10-02 05:07 . 2008-03-21 03:57    221488              c:\windows\$NtUninstallWdf01007$\spuninst\spuninst.exe
    + 2010-09-15 17:04 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll
    + 2010-09-15 17:04 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe
    + 2010-09-15 17:04 . 2009-04-15 14:51    585216              c:\windows\$NtUninstallKB982802$\rpcrt4.dll
    + 2010-08-12 17:01 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB982665$\spuninst\updspapi.dll
    + 2010-08-12 17:01 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB982665$\spuninst\spuninst.exe
    + 2010-08-12 17:09 . 2009-12-31 16:50    353792              c:\windows\$NtUninstallKB982214$\srv.sys
    + 2010-08-12 17:09 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB982214$\spuninst\updspapi.dll
    + 2010-08-12 17:09 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB982214$\spuninst\spuninst.exe
    + 2010-10-14 02:03 . 2009-10-15 16:28    119808              c:\windows\$NtUninstallKB982132$\t2embed.dll
    + 2010-10-14 02:03 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB982132$\spuninst\updspapi.dll
    + 2010-10-14 02:03 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB982132$\spuninst\spuninst.exe
    + 2010-08-12 17:02 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB981997$\spuninst\updspapi.dll
    + 2010-08-12 17:02 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB981997$\spuninst\spuninst.exe
    + 2010-10-14 01:54 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB981957$\spuninst\updspapi.dll
    + 2010-10-14 01:54 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB981957$\spuninst\spuninst.exe
    + 2010-08-12 17:09 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB981852$\spuninst\updspapi.dll
    + 2010-08-12 17:09 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB981852$\spuninst\spuninst.exe
    + 2010-05-26 17:00 . 2009-05-26 09:01    382840              c:\windows\$NtUninstallKB981793$\spuninst\updspapi.dll
    + 2010-05-26 17:00 . 2009-05-26 09:01    231288              c:\windows\$NtUninstallKB981793$\spuninst\spuninst.exe
    + 2010-09-15 17:04 . 2008-04-14 00:12    406016              c:\windows\$NtUninstallKB981322$\usp10.dll
    + 2010-09-15 17:04 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll
    + 2010-09-15 17:04 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe
    + 2010-08-12 17:04 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB980436$\spuninst\updspapi.dll
    + 2010-08-12 17:04 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB980436$\spuninst\spuninst.exe
    + 2010-08-12 17:04 . 2009-06-25 08:25    147456              c:\windows\$NtUninstallKB980436$\schannel.dll
    + 2010-04-15 17:05 . 2009-05-26 09:01    382840              c:\windows\$NtUninstallKB980232$\spuninst\updspapi.dll
    + 2010-04-15 17:05 . 2009-05-26 09:01    231288              c:\windows\$NtUninstallKB980232$\spuninst\spuninst.exe
    + 2010-04-15 17:05 . 2009-12-04 18:22    455424              c:\windows\$NtUninstallKB980232$\mrxsmb.sys
    + 2010-06-09 17:21 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB980218$\spuninst\updspapi.dll
    + 2010-06-09 17:21 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB980218$\spuninst\spuninst.exe
    + 2010-06-09 17:21 . 2008-04-14 00:09    285696              c:\windows\$NtUninstallKB980218$\atmfd.dll
    + 2010-06-09 17:20 . 2008-07-08 13:02    382840              c:\windows\$NtUninstallKB980195$\spuninst\updspapi.dll
    + 2010-06-09 17:20 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB980195$\spuninst\spuninst.exe
    + 2010-10-14 02:02 . 2008-04-21 12:08    215552              c:\windows\$NtUninstallKB979687$\wordpad.exe
    + 2010-10-14 02:02 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB979687$\spuninst\updspapi.dll
    + 2010-10-14 02:02 . 2009-05-26 09:01    231288              c:\windows\$NtUninstallKB979687$\spuninst\spuninst.exe
    + 2010-04-15 17:05 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB979683$\spuninst\updspapi.dll
    + 2010-04-15 17:05 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB979683$\spuninst\spuninst.exe
    + 2010-06-09 17:16 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB979559$\spuninst\updspapi.dll
    + 2010-06-09 17:16 . 2009-05-26 09:01    231288              c:\windows\$NtUninstallKB979559$\spuninst\spuninst.exe
    + 2010-06-09 17:11 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB979482$\spuninst\updspapi.dll
    + 2010-06-09 17:11 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB979482$\spuninst\spuninst.exe
    + 2010-04-14 17:01 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB979309$\spuninst\updspapi.dll
    + 2010-04-14 17:01 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB979309$\spuninst\spuninst.exe
    + 2010-02-24 09:53 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB979306$\spuninst\updspapi.dll
    + 2010-02-24 09:53 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB979306$\spuninst\spuninst.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB978706$\spuninst\updspapi.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB978706$\spuninst\spuninst.exe
    + 2010-02-10 07:46 . 2008-04-14 00:12    343040              c:\windows\$NtUninstallKB978706$\mspaint.exe
    + 2010-06-09 17:11 . 2007-07-27 13:11    382840              c:\windows\$NtUninstallKB978695_WM9$\spuninst\updspapi.dll
    + 2010-06-09 17:11 . 2007-07-27 13:11    231288              c:\windows\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe
    + 2010-04-14 17:01 . 2008-04-14 00:12    176640              c:\windows\$NtUninstallKB978601$\wintrust.dll
    + 2010-04-14 17:01 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB978601$\spuninst\updspapi.dll
    + 2010-04-14 17:01 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB978601$\spuninst\spuninst.exe
    + 2010-05-12 17:01 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB978542$\spuninst\updspapi.dll
    + 2010-05-12 17:01 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB978542$\spuninst\spuninst.exe
    + 2010-05-12 17:01 . 2008-04-11 19:04    691712              c:\windows\$NtUninstallKB978542$\inetcomm.dll
    + 2010-04-15 17:02 . 2008-06-20 11:08    225856              c:\windows\$NtUninstallKB978338$\tcpip6.sys
    + 2010-04-15 17:02 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB978338$\spuninst\updspapi.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB978338$\spuninst\spuninst.exe
    + 2010-04-15 17:02 . 2008-04-14 00:11    100352              c:\windows\$NtUninstallKB978338$\6to4svc.dll
    + 2010-02-10 07:50 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB978262$\spuninst\updspapi.dll
    + 2010-02-10 07:50 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB978262$\spuninst\spuninst.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB978251$\spuninst\updspapi.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB978251$\spuninst\spuninst.exe
    + 2010-02-10 07:47 . 2008-10-24 11:21    455296              c:\windows\$NtUninstallKB978251$\mrxsmb.sys
    + 2010-02-10 07:47 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB978037$\spuninst\updspapi.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB978037$\spuninst\spuninst.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB977914$\spuninst\updspapi.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB977914$\spuninst\spuninst.exe
    + 2010-04-15 17:02 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB977816$\spuninst\updspapi.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB977816$\spuninst\spuninst.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB977165$\spuninst\updspapi.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB977165$\spuninst\spuninst.exe
    + 2009-11-25 16:01 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB976098-v2$\spuninst\updspapi.dll
    + 2009-11-25 16:01 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB976098-v2$\spuninst\spuninst.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB975713$\spuninst\updspapi.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB975713$\spuninst\spuninst.exe
    + 2010-02-10 07:47 . 2008-04-14 00:12    474112              c:\windows\$NtUninstallKB975713$\shlwapi.dll
    + 2010-06-09 17:09 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB975562$\spuninst\updspapi.dll
    + 2010-06-09 17:09 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB975562$\spuninst\spuninst.exe
    + 2010-03-10 16:04 . 2009-05-26 06:10    382840              c:\windows\$NtUninstallKB975561$\spuninst\updspapi.dll
    + 2010-03-10 16:04 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB975561$\spuninst\spuninst.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB975560$\spuninst\updspapi.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB975560$\spuninst\spuninst.exe
    + 2010-09-15 17:06 . 2007-07-27 13:11    382840              c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll
    + 2010-09-15 17:06 . 2007-07-27 13:11    231288              c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe
    + 2010-09-15 17:06 . 2006-10-18 10:47    317440              c:\windows\$NtUninstallKB975558_WM8$\mp4sdecd.dll
    + 2009-10-16 16:00 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB975467$\spuninst\updspapi.dll
    + 2009-10-16 16:00 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB975467$\spuninst\spuninst.exe
    + 2009-10-16 16:00 . 2009-06-25 08:25    136192              c:\windows\$NtUninstallKB975467$\msv1_0.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB975025$\spuninst\updspapi.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB975025$\spuninst\spuninst.exe
    + 2009-10-16 16:04 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB974571$\spuninst\updspapi.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB974571$\spuninst\spuninst.exe
    + 2009-12-10 09:48 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB974392$\spuninst\updspapi.dll
    + 2009-12-10 09:48 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB974392$\spuninst\spuninst.exe
    + 2009-12-10 09:48 . 2008-04-14 00:12    270336              c:\windows\$NtUninstallKB974392$\oakley.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB974318$\spuninst\updspapi.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB974318$\spuninst\spuninst.exe
    + 2009-12-10 09:50 . 2008-04-14 00:12    150016              c:\windows\$NtUninstallKB974318$\rastls.dll
    + 2009-10-16 16:04 . 2008-10-03 10:02    247326              c:\windows\$NtUninstallKB974112$\strmdll.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB974112$\spuninst\updspapi.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB974112$\spuninst\spuninst.exe
    + 2009-12-10 09:49 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB973904$\spuninst\updspapi.dll
    + 2009-12-10 09:49 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB973904$\spuninst\spuninst.exe
    + 2009-08-13 17:03 . 2008-07-08 13:02    382840              c:\windows\$NtUninstallKB973869$\spuninst\updspapi.dll
    + 2009-08-13 17:03 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB973869$\spuninst\spuninst.exe
    + 2009-08-13 17:00 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB973815$\spuninst\updspapi.dll
    + 2009-08-13 17:00 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB973815$\spuninst\spuninst.exe
    + 2009-08-13 17:00 . 2008-04-14 00:12    203776              c:\windows\$NtUninstallKB973815$\mswebdvd.dll
    + 2009-11-25 16:01 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB973687$\spuninst\updspapi.dll
    + 2009-11-25 16:01 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB973687$\spuninst\spuninst.exe
    + 2009-08-13 17:02 . 2006-10-18 10:47    314880              c:\windows\$NtUninstallKB973540_WM9$\wmpdxm.dll
    + 2009-08-13 17:02 . 2007-07-27 00:41    382840              c:\windows\$NtUninstallKB973540_WM9$\spuninst\updspapi.dll
    + 2009-08-13 17:02 . 2007-07-27 00:41    231288              c:\windows\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe
    + 2009-10-16 16:01 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB973525$\spuninst\updspapi.dll
    + 2009-10-16 16:01 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB973525$\spuninst\spuninst.exe
    + 2009-08-13 17:03 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB973507$\spuninst\updspapi.dll
    + 2009-08-13 17:03 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB973507$\spuninst\spuninst.exe
    + 2009-08-13 17:03 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB973354$\spuninst\updspapi.dll
    + 2009-08-13 17:03 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB973354$\spuninst\spuninst.exe
    + 2010-01-13 06:37 . 2009-06-16 14:36    119808              c:\windows\$NtUninstallKB972270$\t2embed.dll
    + 2010-01-13 06:37 . 2008-07-08 13:02    382840              c:\windows\$NtUninstallKB972270$\spuninst\updspapi.dll
    + 2010-01-13 06:37 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB972270$\spuninst\spuninst.exe
    + 2009-12-10 09:48 . 2008-12-16 12:30    354304              c:\windows\$NtUninstallKB971737$\winhttp.dll
    + 2009-12-10 09:48 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB971737$\spuninst\updspapi.dll
    + 2009-12-10 09:48 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB971737$\spuninst\spuninst.exe
    + 2009-08-13 17:04 . 2008-04-14 00:12    132096              c:\windows\$NtUninstallKB971657$\wkssvc.dll
    + 2009-08-13 17:04 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB971657$\spuninst\updspapi.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB971657$\spuninst\spuninst.exe
    + 2009-08-13 17:04 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB971557$\spuninst\updspapi.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB971557$\spuninst\spuninst.exe
    + 2009-10-16 16:01 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB971486$\spuninst\updspapi.dll
    + 2009-10-16 16:01 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB971486$\spuninst\spuninst.exe
    + 2010-02-10 07:49 . 2008-12-11 10:57    333952              c:\windows\$NtUninstallKB971468$\srv.sys
    + 2010-02-10 07:49 . 2008-07-08 13:02    382840              c:\windows\$NtUninstallKB971468$\spuninst\updspapi.dll
    + 2010-02-10 07:49 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB971468$\spuninst\spuninst.exe
    + 2011-02-25 22:43 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB971029$\spuninst\updspapi.dll
    + 2011-02-25 22:43 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB971029$\spuninst\spuninst.exe
    + 2011-02-25 22:43 . 2008-04-14 00:12    135168              c:\windows\$NtUninstallKB971029$\shsvcs.dll
    + 2009-08-26 17:00 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB970653-v3$\spuninst\updspapi.dll
    + 2009-08-26 17:00 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB970653-v3$\spuninst\spuninst.exe
    + 2009-12-10 09:50 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB970430$\spuninst\updspapi.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB970430$\spuninst\spuninst.exe
    + 2009-12-10 09:50 . 2008-04-13 18:53    264832              c:\windows\$NtUninstallKB970430$\http.sys
    + 2009-11-11 09:56 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB969947$\spuninst\updspapi.dll
    + 2009-11-11 09:56 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB969947$\spuninst\spuninst.exe
    + 2009-10-16 16:05 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB969059$\spuninst\updspapi.dll
    + 2009-10-16 16:05 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB969059$\spuninst\spuninst.exe
    + 2009-09-09 17:02 . 2007-07-27 00:41    382840              c:\windows\$NtUninstallKB968816_WM9$\spuninst\updspapi.dll
    + 2009-09-09 17:02 . 2007-07-27 00:41    231288              c:\windows\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe
    + 2009-08-25 08:55 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB968389$\spuninst\updspapi.dll
    + 2009-08-25 08:55 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB968389$\spuninst\spuninst.exe
    + 2009-08-25 08:55 . 2008-12-05 06:54    144896              c:\windows\$NtUninstallKB968389$\schannel.dll
    + 2009-08-25 08:55 . 2008-04-14 00:12    132608              c:\windows\$NtUninstallKB968389$\msv1_0.dll
    + 2009-08-25 08:55 . 2009-02-09 12:10    729088              c:\windows\$NtUninstallKB968389$\lsasrv.dll
    + 2009-08-25 08:55 . 2008-04-14 00:11    299520              c:\windows\$NtUninstallKB968389$\kerberos.dll
    + 2009-11-12 16:01 . 2007-11-30 12:39    382840              c:\windows\$NtUninstallKB961503$\spuninst\updspapi.dll
    + 2009-11-12 16:01 . 2007-11-30 12:39    231288              c:\windows\$NtUninstallKB961503$\spuninst\spuninst.exe
    + 2009-08-13 17:04 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB960859$\spuninst\updspapi.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB960859$\spuninst\spuninst.exe
    + 2009-10-16 16:07 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB958869$\spuninst\updspapi.dll
    + 2009-10-16 16:07 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB958869$\spuninst\spuninst.exe
    + 2009-09-09 17:01 . 2008-04-14 00:12    153088              c:\windows\$NtUninstallKB956844$\triedit.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    382840              c:\windows\$NtUninstallKB956844$\spuninst\updspapi.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB956844$\spuninst\spuninst.exe
    + 2009-08-13 17:04 . 2008-07-08 13:02    382840              c:\windows\$NtUninstallKB956744$\spuninst\updspapi.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    231288              c:\windows\$NtUninstallKB956744$\spuninst\spuninst.exe
    + 2010-01-13 06:38 . 2009-05-26 06:10    382840              c:\windows\$NtUninstallKB955759$\spuninst\updspapi.dll
    + 2010-01-13 06:38 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB955759$\spuninst\spuninst.exe
    + 2010-01-13 06:38 . 2008-04-14 00:11    451072              c:\windows\$NtUninstallKB955759$\aclayers.dll
    + 2009-10-16 16:05 . 2006-10-18 10:47    603648              c:\windows\$NtUninstallKB954155_WM9$\wmspdmod.dll
    + 2009-10-16 16:05 . 2007-07-26 23:41    382840              c:\windows\$NtUninstallKB954155_WM9$\spuninst\updspapi.dll
    + 2009-10-16 16:05 . 2007-07-26 23:41    231288              c:\windows\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe
    + 2011-03-24 11:02 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2524375$\spuninst\updspapi.dll
    + 2011-03-24 11:02 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2524375$\spuninst\spuninst.exe
    + 2011-04-13 07:19 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2511455$\spuninst\updspapi.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2511455$\spuninst\spuninst.exe
    + 2011-04-13 07:19 . 2010-02-24 13:11    455680              c:\windows\$NtUninstallKB2511455$\mrxsmb.sys
    + 2011-04-13 07:16 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2509553$\spuninst\updspapi.dll
    + 2011-04-13 07:16 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2509553$\spuninst\spuninst.exe
    + 2011-04-13 07:16 . 2008-06-20 17:46    245248              c:\windows\$NtUninstallKB2509553$\mswsock.dll
    + 2011-04-13 07:16 . 2008-06-20 17:46    147968              c:\windows\$NtUninstallKB2509553$\dnsapi.dll
    + 2011-04-13 07:16 . 2008-08-14 10:04    138496              c:\windows\$NtUninstallKB2509553$\afd.sys
    + 2011-04-13 07:19 . 2010-08-26 13:39    357248              c:\windows\$NtUninstallKB2508429$\srv.sys
    + 2011-04-13 07:19 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2508429$\spuninst\updspapi.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2508429$\spuninst\spuninst.exe
    + 2011-04-13 07:20 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2508272$\spuninst\updspapi.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2508272$\spuninst\spuninst.exe
    + 2011-04-13 07:20 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2507618$\spuninst\updspapi.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2507618$\spuninst\spuninst.exe
    + 2011-04-13 07:20 . 2011-01-07 14:09    290048              c:\windows\$NtUninstallKB2507618$\atmfd.dll
    + 2011-04-13 07:26 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2506223$\spuninst\updspapi.dll
    + 2011-04-13 07:26 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2506223$\spuninst\spuninst.exe
    + 2011-04-13 07:19 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2506212$\spuninst\updspapi.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2506212$\spuninst\spuninst.exe
    + 2011-04-13 07:19 . 2010-09-18 01:23    974848              c:\windows\$NtUninstallKB2506212$\mfc42u.dll
    + 2011-04-13 07:19 . 2010-09-18 06:53    974848              c:\windows\$NtUninstallKB2506212$\mfc42.dll
    + 2011-04-13 07:20 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2503658$\spuninst\updspapi.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2503658$\spuninst\spuninst.exe
    + 2011-04-13 07:20 . 2010-06-09 07:43    692736              c:\windows\$NtUninstallKB2503658$\inetcomm.dll
    + 2011-04-13 07:26 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2485663$\spuninst\updspapi.dll
    + 2011-04-13 07:26 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2485663$\spuninst\spuninst.exe
    + 2011-02-09 03:29 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2485376$\spuninst\updspapi.dll
    + 2011-02-09 03:29 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2485376$\spuninst\spuninst.exe
    + 2011-02-09 03:29 . 2010-10-28 13:13    290048              c:\windows\$NtUninstallKB2485376$\atmfd.dll
    + 2011-02-09 03:28 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2483185$\spuninst\updspapi.dll
    + 2011-02-09 03:28 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2483185$\spuninst\spuninst.exe
    + 2011-02-09 03:28 . 2008-04-14 00:12    438272              c:\windows\$NtUninstallKB2483185$\shimgvw.dll
    + 2011-03-09 16:03 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2481109$\spuninst\updspapi.dll
    + 2011-03-09 16:03 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2481109$\spuninst\spuninst.exe
    + 2011-03-09 16:03 . 2008-04-14 00:12    677888              c:\windows\$NtUninstallKB2481109$\mstsc.exe
    + 2011-03-09 16:07 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2479943$\spuninst\updspapi.dll
    + 2011-03-09 16:07 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2479943$\spuninst\spuninst.exe
    + 2011-03-09 16:07 . 2008-04-14 00:12    270848              c:\windows\$NtUninstallKB2479943$\sbe.dll
    + 2011-03-09 16:07 . 2008-04-14 00:11    186880              c:\windows\$NtUninstallKB2479943$\encdec.dll
    + 2011-02-09 03:28 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2479628$\spuninst\updspapi.dll
    + 2011-02-09 03:28 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2479628$\spuninst\spuninst.exe
    + 2011-02-09 03:29 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2478971$\spuninst\updspapi.dll
    + 2011-02-09 03:29 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2478971$\spuninst\spuninst.exe
    + 2011-02-09 03:29 . 2009-06-25 08:25    301568              c:\windows\$NtUninstallKB2478971$\kerberos.dll
    + 2011-02-09 03:24 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2478960$\spuninst\updspapi.dll
    + 2011-02-09 03:24 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2478960$\spuninst\spuninst.exe
    + 2011-02-09 03:24 . 2009-06-25 08:25    730112              c:\windows\$NtUninstallKB2478960$\lsasrv.dll
    + 2011-02-09 03:25 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2476687$\spuninst\updspapi.dll
    + 2011-02-09 03:25 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2476687$\spuninst\spuninst.exe
    + 2010-12-16 09:38 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2467659$\spuninst\updspapi.dll
    + 2010-12-16 09:38 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2467659$\spuninst\spuninst.exe
    + 2010-12-16 09:39 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB2443685$\spuninst\updspapi.dll
    + 2010-12-16 09:39 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2443685$\spuninst\spuninst.exe
    + 2010-12-16 09:40 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2443105$\spuninst\updspapi.dll
    + 2010-12-16 09:40 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2443105$\spuninst\spuninst.exe
    + 2010-12-16 09:40 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB2440591$\spuninst\updspapi.dll
    + 2010-12-16 09:40 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2440591$\spuninst\spuninst.exe
    + 2010-12-16 09:38 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB2436673$\spuninst\updspapi.dll
    + 2010-12-16 09:38 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2436673$\spuninst\spuninst.exe
    + 2010-12-16 09:35 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2423089$\spuninst\updspapi.dll
    + 2010-12-16 09:35 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2423089$\spuninst\spuninst.exe
    + 2011-01-12 07:44 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2419632$\spuninst\updspapi.dll
    + 2011-01-12 07:44 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2419632$\spuninst\spuninst.exe
    + 2011-01-12 07:44 . 2008-04-14 00:12    249856              c:\windows\$NtUninstallKB2419632$\odbc32.dll
    + 2011-01-12 07:44 . 2008-04-14 00:12    102400              c:\windows\$NtUninstallKB2419632$\msjro.dll
    + 2011-01-12 07:44 . 2008-04-14 00:11    200704              c:\windows\$NtUninstallKB2419632$\msadox.dll
    + 2011-01-12 07:44 . 2008-04-14 00:11    180224              c:\windows\$NtUninstallKB2419632$\msadomd.dll
    + 2011-01-12 07:44 . 2008-04-14 00:11    536576              c:\windows\$NtUninstallKB2419632$\msado15.dll
    + 2011-01-12 07:44 . 2008-04-14 00:11    143360              c:\windows\$NtUninstallKB2419632$\msadco.dll
    + 2011-04-13 07:24 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB2412687$\spuninst\updspapi.dll
    + 2011-04-13 07:24 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2412687$\spuninst\spuninst.exe
    + 2011-02-09 03:24 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2393802$\spuninst\updspapi.dll
    + 2011-02-09 03:24 . 2010-07-05 13:15    231288              c:\windows\$NtUninstallKB2393802$\spuninst\spuninst.exe
    + 2011-02-09 03:24 . 2009-02-09 12:10    714752              c:\windows\$NtUninstallKB2393802$\ntdll.dll
    + 2010-10-14 02:04 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2387149$\spuninst\updspapi.dll
    + 2010-10-14 02:04 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2387149$\spuninst\spuninst.exe
    + 2010-10-14 02:04 . 2006-10-14 08:13    981760              c:\windows\$NtUninstallKB2387149$\mfc42u.dll
    + 2010-10-14 02:04 . 2008-04-14 00:11    927504              c:\windows\$NtUninstallKB2387149$\mfc40u.dll
    + 2010-10-14 02:04 . 2004-08-04 12:00    924432              c:\windows\$NtUninstallKB2387149$\mfc40.dll
    + 2010-10-14 02:03 . 2007-07-27 12:11    382840              c:\windows\$NtUninstallKB2378111_WM9$\spuninst\updspapi.dll
    + 2010-10-14 02:03 . 2007-07-27 12:11    231288              c:\windows\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe
    + 2010-10-14 01:52 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2360937$\spuninst\updspapi.dll
    + 2010-10-14 01:52 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2360937$\spuninst\spuninst.exe
    + 2010-10-14 01:52 . 2010-07-22 15:49    590848              c:\windows\$NtUninstallKB2360937$\rpcrt4.dll
    + 2010-09-15 17:05 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll
    + 2010-09-15 17:05 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe
    + 2010-10-14 02:03 . 2010-06-21 15:27    354304              c:\windows\$NtUninstallKB2345886$\srv.sys
    + 2010-10-14 02:03 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2345886$\spuninst\updspapi.dll
    + 2010-10-14 02:03 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2345886$\spuninst\spuninst.exe
    + 2010-12-16 09:41 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB2296199$\spuninst\updspapi.dll
    + 2010-12-16 09:41 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2296199$\spuninst\spuninst.exe
    + 2010-12-16 09:41 . 2010-09-01 11:51    285824              c:\windows\$NtUninstallKB2296199$\atmfd.dll
    + 2010-10-14 02:03 . 2009-05-26 09:01    382840              c:\windows\$NtUninstallKB2296011$\spuninst\updspapi.dll
    + 2010-10-14 02:03 . 2009-05-26 09:01    231288              c:\windows\$NtUninstallKB2296011$\spuninst\spuninst.exe
    + 2010-10-14 02:03 . 2008-04-14 00:11    617472              c:\windows\$NtUninstallKB2296011$\comctl32.dll
    + 2010-08-03 17:01 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2286198$\spuninst\updspapi.dll
    + 2010-08-03 17:01 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2286198$\spuninst\spuninst.exe
    + 2010-10-14 02:03 . 2010-07-05 13:16    382840              c:\windows\$NtUninstallKB2279986$\spuninst\updspapi.dll
    + 2010-10-14 02:03 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2279986$\spuninst\spuninst.exe
    + 2010-10-14 02:03 . 2010-04-20 05:30    285696              c:\windows\$NtUninstallKB2279986$\atmfd.dll
    + 2010-09-15 17:06 . 2009-05-26 09:01    382840              c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll
    + 2010-09-15 17:06 . 2009-05-26 09:01    231288              c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe
    + 2010-07-14 17:05 . 2010-02-22 09:53    382840              c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll
    + 2010-07-14 17:05 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe
    + 2010-07-14 17:05 . 2008-04-14 00:12    744448              c:\windows\$NtUninstallKB2229593$\helpsvc.exe
    + 2010-08-12 17:04 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2160329$\spuninst\updspapi.dll
    + 2010-08-12 17:04 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2160329$\spuninst\spuninst.exe
    + 2010-10-14 01:53 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2158563$\spuninst\updspapi.dll
    + 2010-10-14 01:53 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2158563$\spuninst\spuninst.exe
    + 2010-09-15 17:01 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll
    + 2010-09-15 17:01 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe
    + 2010-09-15 17:01 . 2010-01-29 15:01    691712              c:\windows\$NtUninstallKB2141007$\inetcomm.dll
    + 2010-09-15 17:05 . 2008-04-14 00:12    293376              c:\windows\$NtUninstallKB2121546$\winsrv.dll
    + 2010-09-15 17:05 . 2010-02-22 14:23    382840              c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll
    + 2010-09-15 17:05 . 2010-02-22 14:23    231288              c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe
    + 2010-08-12 17:09 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB2115168$\spuninst\updspapi.dll
    + 2010-08-12 17:09 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2115168$\spuninst\spuninst.exe
    + 2010-08-12 17:08 . 2009-05-26 11:40    382840              c:\windows\$NtUninstallKB2079403$\spuninst\updspapi.dll
    + 2010-08-12 17:08 . 2009-05-26 11:40    231288              c:\windows\$NtUninstallKB2079403$\spuninst\spuninst.exe
    + 2010-09-15 17:04 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB982802\update\updspapi.dll
    + 2010-09-15 17:04 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB982802\update\update.exe
    + 2010-09-15 17:04 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB982802\spuninst.exe
    + 2010-07-23 06:13 . 2010-07-23 06:13    590848              c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll
    + 2010-08-12 17:01 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB982665\update\updspapi.dll
    + 2010-08-12 17:01 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB982665\update\update.exe
    + 2010-08-12 17:01 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB982665\spuninst.exe
    + 2010-06-09 17:15 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB982381-IE8\update\updspapi.dll
    + 2010-06-09 17:15 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB982381-IE8\update\update.exe
    + 2010-06-09 17:15 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB982381-IE8\spuninst.exe
    + 2010-06-09 09:22 . 2010-05-06 10:36    919040              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    206848              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\occache.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    611840              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mstime.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    599040              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeeds.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    247808              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ieproxy.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    184320              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iepeers.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    743424              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iedvtool.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    387584              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iedkcs32.dll
    + 2010-06-09 09:22 . 2010-05-05 13:55    173056              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ie4uinit.exe
    + 2010-08-12 17:09 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB982214\update\updspapi.dll
    + 2010-08-12 17:09 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB982214\update\update.exe
    + 2010-08-12 17:09 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB982214\spuninst.exe
    + 2010-08-12 08:37 . 2010-06-21 14:18    354304              c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys
    + 2010-10-14 02:03 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB982132\update\updspapi.dll
    + 2010-10-14 02:03 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB982132\update\update.exe
    + 2010-10-14 02:03 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB982132\spuninst.exe
    + 2010-08-27 08:01 . 2010-08-27 08:01    119808              c:\windows\$hf_mig$\KB982132\SP3QFE\t2embed.dll
    + 2010-08-12 17:02 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB981997\update\updspapi.dll
    + 2010-08-12 17:02 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB981997\update\update.exe
    + 2010-08-12 17:02 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB981997\spuninst.exe
    + 2010-10-14 01:54 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB981957\update\updspapi.dll
    + 2010-10-14 01:54 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB981957\update\update.exe
    + 2010-10-14 01:54 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB981957\spuninst.exe
    + 2010-08-12 17:09 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB981852\update\updspapi.dll
    + 2010-08-12 17:09 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB981852\update\update.exe
    + 2010-08-12 17:09 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB981852\spuninst.exe
    + 2010-04-15 17:02 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB981332-IE8\update\updspapi.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB981332-IE8\update\update.exe
    + 2010-04-15 17:02 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB981332-IE8\spuninst.exe
    + 2010-04-15 02:48 . 2010-03-10 06:18    420352              c:\windows\$hf_mig$\KB981332-IE8\SP3QFE\vbscript.dll
    + 2010-09-15 17:04 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB981322\update\updspapi.dll
    + 2010-09-15 17:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB981322\update\update.exe
    + 2010-09-15 17:04 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB981322\spuninst.exe
    + 2010-04-16 15:29 . 2010-04-16 15:29    406016              c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
    + 2010-08-12 17:04 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB980436\update\updspapi.dll
    + 2010-08-12 17:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB980436\update\update.exe
    + 2010-08-12 17:04 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB980436\spuninst.exe
    + 2010-06-30 12:23 . 2010-06-30 12:23    149504              c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll
    + 2010-04-15 17:05 . 2009-05-26 09:01    382840              c:\windows\$hf_mig$\KB980232\update\updspapi.dll
    + 2010-04-15 17:05 . 2009-05-26 09:01    755576              c:\windows\$hf_mig$\KB980232\update\update.exe
    + 2010-04-15 17:05 . 2009-05-26 09:01    231288              c:\windows\$hf_mig$\KB980232\spuninst.exe
    + 2010-04-15 02:49 . 2010-02-24 11:57    457216              c:\windows\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys
    + 2010-06-09 17:21 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB980218\update\updspapi.dll
    + 2010-06-09 17:21 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB980218\update\update.exe
    + 2010-06-09 17:21 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB980218\spuninst.exe
    + 2010-04-20 05:37 . 2010-04-20 05:37    285824              c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll
    + 2010-06-09 17:20 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB980195\update\updspapi.dll
    + 2010-06-09 17:20 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB980195\update\update.exe
    + 2010-06-09 17:20 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB980195\spuninst.exe
    + 2010-03-31 08:08 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB980182-IE8\update\updspapi.dll
    + 2010-03-31 08:08 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB980182-IE8\update\update.exe
    + 2010-03-31 08:08 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB980182-IE8\spuninst.exe
    + 2010-03-31 03:40 . 2010-02-25 06:19    919040              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    206848              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\occache.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    611840              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mstime.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    594432              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\msfeeds.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    247808              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ieproxy.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    184320              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iepeers.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    387584              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iedkcs32.dll
    + 2010-03-31 03:40 . 2010-02-24 09:34    173056              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ie4uinit.exe
    + 2010-10-14 02:02 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB979687\update\updspapi.dll
    + 2010-10-14 02:02 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB979687\update\update.exe
    + 2010-10-14 02:02 . 2009-05-26 09:01    231288              c:\windows\$hf_mig$\KB979687\spuninst.exe
    + 2010-07-12 13:02 . 2010-07-12 13:02    218112              c:\windows\$hf_mig$\KB979687\SP3QFE\wordpad.exe
    + 2010-04-15 17:05 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB979683\update\updspapi.dll
    + 2010-04-15 17:05 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB979683\update\update.exe
    + 2010-04-15 17:05 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB979683\spuninst.exe
    + 2010-06-09 17:16 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB979559\update\updspapi.dll
    + 2010-06-09 17:16 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB979559\update\update.exe
    + 2010-06-09 17:16 . 2009-05-26 09:01    231288              c:\windows\$hf_mig$\KB979559\spuninst.exe
    + 2010-06-09 17:11 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB979482\update\updspapi.dll
    + 2010-06-09 17:11 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB979482\update\update.exe
    + 2010-06-09 17:11 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB979482\spuninst.exe
    + 2010-04-14 17:01 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB979309\update\updspapi.dll
    + 2010-04-14 17:01 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB979309\update\update.exe
    + 2010-04-14 17:01 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB979309\spuninst.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB978706\update\updspapi.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB978706\update\update.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB978706\spuninst.exe
    + 2009-12-16 18:27 . 2009-12-16 18:27    343040              c:\windows\$hf_mig$\KB978706\SP3QFE\mspaint.exe
    + 2010-04-14 17:01 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB978601\update\updspapi.dll
    + 2010-04-14 17:01 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB978601\update\update.exe
    + 2010-04-14 17:01 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB978601\spuninst.exe
    + 2009-12-24 06:42 . 2009-12-24 06:42    178176              c:\windows\$hf_mig$\KB978601\SP3QFE\wintrust.dll
    + 2010-05-12 17:01 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB978542\update\updspapi.dll
    + 2010-05-12 17:01 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB978542\update\update.exe
    + 2010-05-12 17:01 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB978542\spuninst.exe
    + 2010-01-29 14:53 . 2010-01-29 14:53    691712              c:\windows\$hf_mig$\KB978542\SP3QFE\inetcomm.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB978338\update\updspapi.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB978338\update\update.exe
    + 2010-04-15 17:02 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB978338\spuninst.exe
    + 2010-02-11 11:36 . 2010-02-11 11:36    226880              c:\windows\$hf_mig$\KB978338\SP3QFE\tcpip6.sys
    + 2010-02-12 04:27 . 2010-02-12 04:27    100864              c:\windows\$hf_mig$\KB978338\SP3QFE\6to4svc.dll
    + 2010-02-10 07:50 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB978262\update\updspapi.dll
    + 2010-02-10 07:50 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB978262\update\update.exe
    + 2010-02-10 07:50 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB978262\spuninst.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB978251\update\updspapi.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB978251\update\update.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB978251\spuninst.exe
    + 2010-02-10 06:47 . 2009-12-04 17:25    456832              c:\windows\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys
    + 2010-01-22 16:01 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB978207-IE8\update\updspapi.dll
    + 2010-01-22 16:01 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB978207-IE8\update\update.exe
    + 2010-01-22 16:01 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB978207-IE8\spuninst.exe
    + 2010-01-21 22:47 . 2009-12-21 19:09    916480              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    206848              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\occache.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    594432              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\msfeeds.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    246272              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ieproxy.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    184320              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iepeers.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    387584              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iedkcs32.dll
    + 2010-01-21 22:47 . 2009-12-21 13:22    173056              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ie4uinit.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB978037\update\updspapi.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB978037\update\update.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB978037\spuninst.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB977914\update\updspapi.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB977914\update\update.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB977914\spuninst.exe
    + 2010-04-15 17:02 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB977816\update\updspapi.dll
    + 2010-04-15 17:02 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB977816\update\update.exe
    + 2010-04-15 17:02 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB977816\spuninst.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB977165\update\updspapi.dll
    + 2010-02-10 07:46 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB977165\update\update.exe
    + 2010-02-10 07:46 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB977165\spuninst.exe
    + 2009-11-04 16:00 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB976749-IE8\update\updspapi.dll
    + 2009-11-04 16:00 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB976749-IE8\update\update.exe
    + 2009-11-04 16:00 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB976749-IE8\spuninst.exe
    + 2010-02-24 09:54 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB976662-IE8\update\updspapi.dll
    + 2010-02-24 09:54 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB976662-IE8\update\update.exe
    + 2010-02-24 09:54 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB976662-IE8\spuninst.exe
    + 2010-02-24 05:59 . 2009-12-09 05:51    726528              c:\windows\$hf_mig$\KB976662-IE8\SP3QFE\jscript.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB976325-IE8\update\updspapi.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB976325-IE8\update\update.exe
    + 2009-12-10 09:50 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB976325-IE8\spuninst.exe
    + 2009-12-10 08:45 . 2009-10-29 07:45    916480              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    206848              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\occache.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    594432              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\msfeeds.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    246272              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ieproxy.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    184320              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iepeers.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    387584              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iedkcs32.dll
    + 2009-12-10 08:45 . 2009-10-28 14:10    173056              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ie4uinit.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB975713\update\updspapi.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB975713\update\update.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB975713\spuninst.exe
    + 2009-12-08 09:01 . 2009-12-08 09:01    474112              c:\windows\$hf_mig$\KB975713\SP3QFE\shlwapi.dll
    + 2010-06-09 17:09 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB975562\update\updspapi.dll
    + 2010-06-09 17:09 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB975562\update\update.exe
    + 2010-06-09 17:09 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB975562\spuninst.exe
    + 2010-03-10 16:04 . 2009-05-26 06:10    382840              c:\windows\$hf_mig$\KB975561\update\updspapi.dll
    + 2010-03-10 16:04 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB975561\update\update.exe
    + 2010-03-10 16:04 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB975561\spuninst.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB975560\update\updspapi.dll
    + 2010-02-10 07:47 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB975560\update\update.exe
    + 2010-02-10 07:47 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB975560\spuninst.exe
    + 2009-10-16 16:00 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB975467\update\updspapi.dll
    + 2009-10-16 16:00 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB975467\update\update.exe
    + 2009-10-16 16:00 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB975467\spuninst.exe
    + 2009-09-11 14:13 . 2009-09-11 14:13    136704              c:\windows\$hf_mig$\KB975467\SP3QFE\msv1_0.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB975025\update\updspapi.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB975025\update\update.exe
    + 2009-10-16 16:04 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB975025\spuninst.exe
    + 2009-10-16 16:04 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB974571\update\updspapi.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB974571\update\update.exe
    + 2009-10-16 16:04 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB974571\spuninst.exe
    + 2009-10-16 16:07 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB974455-IE8\update\updspapi.dll
    + 2009-10-16 16:07 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB974455-IE8\update\update.exe
    + 2009-10-16 16:07 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB974455-IE8\spuninst.exe
    + 2009-10-16 06:40 . 2009-08-29 08:01    916480              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll
    + 2009-10-16 06:40 . 2009-08-29 08:01    206848              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\occache.dll
    + 2009-10-16 06:41 . 2009-08-29 08:01    594432              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\msfeeds.dll
    + 2009-10-16 06:40 . 2009-08-29 08:01    246272              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ieproxy.dll
    + 2009-10-16 06:40 . 2009-08-29 08:01    184320              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iepeers.dll
    + 2009-10-16 06:40 . 2009-08-29 08:01    387584              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iedkcs32.dll
    + 2009-10-16 06:40 . 2009-08-28 10:07    173056              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ie4uinit.exe
    + 2009-12-10 09:48 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB974392\update\updspapi.dll
    + 2009-12-10 09:48 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB974392\update\update.exe
    + 2009-12-10 09:48 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB974392\spuninst.exe
    + 2009-10-13 10:38 . 2009-10-13 10:38    270336              c:\windows\$hf_mig$\KB974392\SP3QFE\oakley.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB974318\update\updspapi.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB974318\update\update.exe
    + 2009-12-10 09:50 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB974318\spuninst.exe
    + 2009-10-12 13:28 . 2009-10-12 13:28    150016              c:\windows\$hf_mig$\KB974318\SP3QFE\rastls.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB974112\update\updspapi.dll
    + 2009-10-16 16:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB974112\update\update.exe
    + 2009-10-16 16:04 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB974112\spuninst.exe
    + 2009-08-26 08:03 . 2009-08-26 08:03    247326              c:\windows\$hf_mig$\KB974112\SP3QFE\strmdll.dll
    + 2009-12-10 09:49 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB973904\update\updspapi.dll
    + 2009-12-10 09:49 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB973904\update\update.exe
    + 2009-12-10 09:49 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB973904\spuninst.exe
    + 2009-12-10 08:43 . 2009-07-29 14:01    119648              c:\windows\$hf_mig$\KB973904\SP3QFE\msconv97.dll
    + 2009-08-13 17:03 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB973869\update\updspapi.dll
    + 2009-08-13 17:03 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB973869\update\update.exe
    + 2009-08-13 17:03 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB973869\spuninst.exe
    + 2009-08-13 17:00 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB973815\update\updspapi.dll
    + 2009-08-13 17:00 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB973815\update\update.exe
    + 2009-08-13 17:00 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB973815\spuninst.exe
    + 2009-08-05 08:52 . 2009-08-05 08:52    204800              c:\windows\$hf_mig$\KB973815\SP3QFE\mswebdvd.dll
    + 2009-11-25 16:01 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB973687\update\updspapi.dll
    + 2009-11-25 16:01 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB973687\update\update.exe
    + 2009-11-25 16:01 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB973687\spuninst.exe
    + 2009-10-16 16:01 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB973525\update\updspapi.dll
    + 2009-10-16 16:01 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB973525\update\update.exe
    + 2009-10-16 16:01 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB973525\spuninst.exe
    + 2009-08-13 17:03 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB973507\update\updspapi.dll
    + 2009-08-13 17:03 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB973507\update\update.exe
    + 2009-08-13 17:03 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB973507\spuninst.exe
    + 2009-08-13 17:03 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB973354\update\updspapi.dll
    + 2009-08-13 17:03 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB973354\update\update.exe
    + 2009-08-13 17:03 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB973354\spuninst.exe
    + 2010-01-13 06:37 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB972270\update\updspapi.dll
    + 2010-01-13 06:37 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB972270\update\update.exe
    + 2010-01-13 06:37 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB972270\spuninst.exe
    + 2010-01-13 00:35 . 2009-10-15 16:39    119808              c:\windows\$hf_mig$\KB972270\SP3QFE\t2embed.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB971961-IE8\update\updspapi.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB971961-IE8\update\update.exe
    + 2009-09-09 17:01 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB971961-IE8\spuninst.exe
    + 2009-09-09 07:51 . 2009-06-22 06:47    726528              c:\windows\$hf_mig$\KB971961-IE8\SP3QFE\jscript.dll
    + 2009-12-10 09:48 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB971737\update\updspapi.dll
    + 2009-12-10 09:48 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB971737\update\update.exe
    + 2009-12-10 09:48 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB971737\spuninst.exe
    + 2009-08-25 09:27 . 2009-08-25 09:27    354816              c:\windows\$hf_mig$\KB971737\SP3QFE\winhttp.dll
    + 2009-08-13 17:04 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB971657\update\updspapi.dll
    + 2009-08-13 17:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB971657\update\update.exe
    + 2009-08-13 17:04 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB971657\spuninst.exe
    + 2009-06-10 06:17 . 2009-06-10 06:17    134144              c:\windows\$hf_mig$\KB971657\SP3QFE\wkssvc.dll
    + 2009-08-13 17:04 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB971557\update\updspapi.dll
    + 2009-08-13 17:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB971557\update\update.exe
    + 2009-08-13 17:04 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB971557\spuninst.exe
    + 2009-10-16 16:01 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB971486\update\updspapi.dll
    + 2009-10-16 16:01 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB971486\update\update.exe
    + 2009-10-16 16:01 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB971486\spuninst.exe
    + 2010-02-10 07:49 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB971468\update\updspapi.dll
    + 2010-02-10 07:49 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB971468\update\update.exe
    + 2010-02-10 07:49 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB971468\spuninst.exe
    + 2010-02-10 06:47 . 2010-01-01 07:58    353792              c:\windows\$hf_mig$\KB971468\SP3QFE\srv.sys
    + 2011-02-25 22:43 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB971029\update\updspapi.dll
    + 2011-02-25 22:43 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB971029\update\update.exe
    + 2011-02-25 22:43 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB971029\spuninst.exe
    + 2009-07-27 22:13 . 2009-07-27 22:13    135168              c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB970430\update\updspapi.dll
    + 2009-12-10 09:50 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB970430\update\update.exe
    + 2009-12-10 09:50 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB970430\spuninst.exe
    + 2009-10-20 15:21 . 2009-10-20 15:21    265728              c:\windows\$hf_mig$\KB970430\SP3QFE\http.sys
    + 2009-11-11 09:56 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB969947\update\updspapi.dll
    + 2009-11-11 09:56 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB969947\update\update.exe
    + 2009-11-11 09:56 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB969947\spuninst.exe
    + 2009-10-16 16:05 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB969059\update\updspapi.dll
    + 2009-10-16 16:05 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB969059\update\update.exe
    + 2009-10-16 16:05 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB969059\spuninst.exe
    + 2009-08-25 08:55 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB968389\update\updspapi.dll
    + 2009-08-25 08:55 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB968389\update\update.exe
    + 2009-08-25 08:55 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB968389\spuninst.exe
    + 2009-06-25 08:41 . 2009-06-25 08:41    147456              c:\windows\$hf_mig$\KB968389\SP3QFE\schannel.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41    136704              c:\windows\$hf_mig$\KB968389\SP3QFE\msv1_0.dll
    + 2009-06-26 09:41 . 2009-06-26 09:41    730112              c:\windows\$hf_mig$\KB968389\SP3QFE\lsasrv.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41    301568              c:\windows\$hf_mig$\KB968389\SP3QFE\kerberos.dll
    + 2009-11-12 16:01 . 2007-11-30 12:39    382840              c:\windows\$hf_mig$\KB961503\update\updspapi.dll
    + 2009-11-12 16:01 . 2007-11-30 12:39    755576              c:\windows\$hf_mig$\KB961503\update\update.exe
    + 2009-11-12 16:01 . 2007-11-30 12:39    231288              c:\windows\$hf_mig$\KB961503\spuninst.exe
    + 2009-08-13 17:04 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB960859\update\updspapi.dll
    + 2009-08-13 17:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB960859\update\update.exe
    + 2009-08-13 17:04 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB960859\spuninst.exe
    + 2009-09-09 17:01 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB956844\update\updspapi.dll
    + 2009-09-09 17:01 . 2008-07-08 13:02    755576              c:\windows\$hf_mig$\KB956844\update\update.exe
    + 2009-09-09 17:01 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB956844\spuninst.exe
    + 2009-09-09 07:49 . 2009-06-21 21:49    153088              c:\windows\$hf_mig$\KB956844\SP3QFE\triedit.dll
    + 2009-08-13 17:04 . 2008-07-08 13:02    382840              c:\windows\$hf_mig$\KB956744\update\updspapi.dll
    + 2009-08-13 17:04 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB956744\update\update.exe
    + 2009-08-13 17:04 . 2008-07-08 13:02    231288              c:\windows\$hf_mig$\KB956744\spuninst.exe
    + 2010-01-13 06:38 . 2009-05-26 06:10    382840              c:\windows\$hf_mig$\KB955759\update\updspapi.dll
    + 2010-01-13 06:38 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB955759\update\update.exe
    + 2010-01-13 06:38 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB955759\spuninst.exe
    + 2010-01-12 22:41 . 2009-11-21 15:40    471552              c:\windows\$hf_mig$\KB955759\SP3QFE\aclayers.dll
    + 2011-03-24 11:02 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2524375\update\updspapi.dll
    + 2011-03-24 11:02 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2524375\update\update.exe
    + 2011-03-24 11:02 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2524375\spuninst.exe
    + 2011-04-13 07:19 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2511455\update\updspapi.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2511455\update\update.exe
    + 2011-04-13 07:19 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2511455\spuninst.exe
    + 2011-04-12 19:19 . 2011-02-17 13:19    457472              c:\windows\$hf_mig$\KB2511455\SP3QFE\mrxsmb.sys
    + 2011-04-13 07:16 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2510531-IE8\update\updspapi.dll
    + 2011-04-13 07:16 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2510531-IE8\update\update.exe
    + 2011-04-13 07:16 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2510531-IE8\spuninst.exe
    + 2011-04-12 19:18 . 2011-03-04 06:35    420864              c:\windows\$hf_mig$\KB2510531-IE8\SP3QFE\vbscript.dll
    + 2011-04-12 19:18 . 2011-03-04 06:35    726528              c:\windows\$hf_mig$\KB2510531-IE8\SP3QFE\jscript.dll
    + 2011-04-13 07:16 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2509553\update\updspapi.dll
    + 2011-04-13 07:16 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2509553\update\update.exe
    + 2011-04-13 07:16 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2509553\spuninst.exe
    + 2008-06-20 11:16 . 2008-06-20 11:16    225856              c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys
    + 2008-06-20 11:59 . 2008-06-20 11:59    361600              c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
    + 2008-06-20 17:43 . 2008-06-20 17:43    245248              c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
    + 2011-03-03 06:53 . 2011-03-03 06:53    149504              c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsapi.dll
    + 2008-10-16 15:07 . 2008-10-16 15:07    138496              c:\windows\$hf_mig$\KB2509553\SP3QFE\afd.sys
    + 2011-04-13 07:19 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2508429\update\updspapi.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2508429\update\update.exe
    + 2011-04-13 07:19 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2508429\spuninst.exe
    + 2011-02-17 13:19 . 2011-02-17 13:19    357888              c:\windows\$hf_mig$\KB2508429\SP3QFE\srv.sys
    + 2011-04-13 07:20 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2508272\update\updspapi.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2508272\update\update.exe
    + 2011-04-13 07:20 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2508272\spuninst.exe
    + 2011-04-13 07:20 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2507618\update\updspapi.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2507618\update\update.exe
    + 2011-04-13 07:20 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2507618\spuninst.exe
    + 2011-02-15 13:05 . 2011-02-15 13:05    290432              c:\windows\$hf_mig$\KB2507618\SP3QFE\atmfd.dll
    + 2011-04-13 07:26 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2506223\update\updspapi.dll
    + 2011-04-13 07:26 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2506223\update\update.exe
    + 2011-04-13 07:26 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2506223\spuninst.exe
    + 2011-04-13 07:19 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2506212\update\updspapi.dll
    + 2011-04-13 07:19 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2506212\update\update.exe
    + 2011-04-13 07:19 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2506212\spuninst.exe
    + 2011-02-08 13:32 . 2011-02-08 13:32    974848              c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42u.dll
    + 2011-02-08 13:32 . 2011-02-08 13:32    978944              c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42.dll
    + 2011-04-13 07:20 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2503658\update\updspapi.dll
    + 2011-04-13 07:20 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2503658\update\update.exe
    + 2011-04-13 07:20 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2503658\spuninst.exe
    + 2011-03-07 05:31 . 2011-03-07 05:31    692736              c:\windows\$hf_mig$\KB2503658\SP3QFE\inetcomm.dll
    + 2011-04-13 07:25 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2497640-IE8\update\updspapi.dll
    + 2011-04-13 07:25 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2497640-IE8\update\update.exe
    + 2011-04-13 07:25 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2497640-IE8\spuninst.exe
    + 2011-04-12 19:20 . 2011-02-22 23:27    919552              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    206848              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\occache.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    611840              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mstime.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    602112              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\msfeeds.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    247808              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ieproxy.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    184320              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iepeers.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    743424              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iedvtool.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    387584              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iedkcs32.dll
    + 2011-04-12 19:20 . 2011-02-22 12:08    173568              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ie4uinit.exe
    + 2011-04-13 07:26 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2485663\update\updspapi.dll
    + 2011-04-13 07:26 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2485663\update\update.exe
    + 2011-04-13 07:26 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2485663\spuninst.exe
    + 2011-02-09 03:29 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2485376\update\updspapi.dll
    + 2011-02-09 03:29 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2485376\update\update.exe
    + 2011-02-09 03:29 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2485376\spuninst.exe
    + 2011-01-07 14:09 . 2011-01-07 14:09    290048              c:\windows\$hf_mig$\KB2485376\SP3QFE\atmfd.dll
    + 2011-02-09 03:28 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2483185\update\updspapi.dll
    + 2011-02-09 03:28 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2483185\update\update.exe
    + 2011-02-09 03:28 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2483185\spuninst.exe
    + 2011-01-21 14:42 . 2011-01-21 14:42    439808              c:\windows\$hf_mig$\KB2483185\SP3QFE\shimgvw.dll
    + 2011-02-09 03:25 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2482017-IE8\update\updspapi.dll
    + 2011-02-09 03:25 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2482017-IE8\update\update.exe
    + 2011-02-09 03:25 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2482017-IE8\spuninst.exe
    + 2011-02-08 20:22 . 2010-12-20 23:58    919552              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    206848              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\occache.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    611840              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mstime.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    602112              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\msfeeds.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    247808              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ieproxy.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    184320              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iepeers.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    743424              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iedvtool.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    387584              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iedkcs32.dll
    + 2011-02-08 20:22 . 2010-12-20 12:48    173568              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ie4uinit.exe
    + 2011-03-09 16:03 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2481109\update\updspapi.dll
    + 2011-03-09 16:03 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2481109\update\update.exe
    + 2011-03-09 16:03 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2481109\spuninst.exe
    + 2011-01-27 11:41 . 2011-01-27 11:41    677888              c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstsc.exe
    + 2011-02-02 07:57 . 2011-02-02 07:57    136192              c:\windows\$hf_mig$\KB2481109\SP3QFE\aaclient.dll
    + 2011-03-09 16:07 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2479943\update\updspapi.dll
    + 2011-03-09 16:07 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2479943\update\update.exe
    + 2011-03-09 16:07 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2479943\spuninst.exe
    + 2011-02-09 13:52 . 2011-02-09 13:52    270848              c:\windows\$hf_mig$\KB2479943\SP3QFE\sbe.dll
    + 2011-02-09 13:52 . 2011-02-09 13:52    186880              c:\windows\$hf_mig$\KB2479943\SP3QFE\encdec.dll
    + 2011-02-09 03:28 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2479628\update\updspapi.dll
    + 2011-02-09 03:28 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2479628\update\update.exe
    + 2011-02-09 03:28 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2479628\spuninst.exe
    + 2011-02-09 03:29 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2478971\update\updspapi.dll
    + 2011-02-09 03:29 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2478971\update\update.exe
    + 2011-02-09 03:29 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2478971\spuninst.exe
    + 2010-12-22 12:32 . 2010-12-22 12:32    301568              c:\windows\$hf_mig$\KB2478971\SP3QFE\kerberos.dll
    + 2011-02-09 03:24 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2478960\update\updspapi.dll
    + 2011-02-09 03:24 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2478960\update\update.exe
    + 2011-02-09 03:24 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2478960\spuninst.exe
    + 2010-12-20 17:24 . 2010-12-20 17:24    730112              c:\windows\$hf_mig$\KB2478960\SP3QFE\lsasrv.dll
    + 2011-02-09 03:25 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2476687\update\updspapi.dll
    + 2011-02-09 03:25 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2476687\update\update.exe
    + 2011-02-09 03:25 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2476687\spuninst.exe
    + 2010-12-16 09:38 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2467659\update\updspapi.dll
    + 2010-12-16 09:38 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2467659\update\update.exe
    + 2010-12-16 09:38 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2467659\spuninst.exe
    + 2010-12-16 09:40 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2443105\update\updspapi.dll
    + 2010-12-16 09:40 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2443105\update\update.exe
    + 2010-12-16 09:40 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2443105\spuninst.exe
    + 2010-12-16 09:40 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB2440591\update\updspapi.dll
    + 2010-12-16 09:40 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB2440591\update\update.exe
    + 2010-12-16 09:40 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB2440591\spuninst.exe
    + 2010-12-16 09:38 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB2436673\update\updspapi.dll
    + 2010-12-16 09:38 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB2436673\update\update.exe
    + 2010-12-16 09:38 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB2436673\spuninst.exe
    + 2010-12-16 09:35 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2423089\update\updspapi.dll
    + 2010-12-16 09:35 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2423089\update\update.exe
    + 2010-12-16 09:35 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2423089\spuninst.exe
    + 2011-01-12 07:44 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2419632\update\updspapi.dll
    + 2011-01-12 07:44 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2419632\update\update.exe
    + 2011-01-12 07:44 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2419632\spuninst.exe
    + 2010-11-09 14:50 . 2010-11-09 14:50    253952              c:\windows\$hf_mig$\KB2419632\SP3QFE\odbc32.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50    102400              c:\windows\$hf_mig$\KB2419632\SP3QFE\msjro.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50    200704              c:\windows\$hf_mig$\KB2419632\SP3QFE\msadox.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50    180224              c:\windows\$hf_mig$\KB2419632\SP3QFE\msadomd.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50    565248              c:\windows\$hf_mig$\KB2419632\SP3QFE\msado15.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50    143360              c:\windows\$hf_mig$\KB2419632\SP3QFE\msadco.dll
    + 2010-12-16 09:40 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2416400-IE8\update\updspapi.dll
    + 2010-12-16 09:40 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2416400-IE8\update\update.exe
    + 2010-12-16 09:40 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2416400-IE8\spuninst.exe
    + 2010-12-15 20:27 . 2010-11-06 00:27    919552              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    206848              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\occache.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    611840              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mstime.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    602112              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeeds.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    247808              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieproxy.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    184320              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iepeers.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    743424              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedvtool.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    387584              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedkcs32.dll
    + 2010-12-15 20:27 . 2010-11-03 12:01    173568              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ie4uinit.exe
    + 2011-02-09 03:24 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2393802\update\updspapi.dll
    + 2011-02-09 03:24 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2393802\update\update.exe
    + 2011-02-09 03:24 . 2010-07-05 13:15    231288              c:\windows\$hf_mig$\KB2393802\spuninst.exe
    + 2011-02-08 20:20 . 2010-12-09 15:15    718336              c:\windows\$hf_mig$\KB2393802\SP3QFE\ntdll.dll
    + 2010-10-14 02:04 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2387149\update\updspapi.dll
    + 2010-10-14 02:04 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2387149\update\update.exe
    + 2010-10-14 02:04 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2387149\spuninst.exe
    + 2010-10-14 01:47 . 2010-09-18 07:18    974848              c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42u.dll
    + 2010-10-14 01:47 . 2010-09-18 07:18    974848              c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42.dll
    + 2010-10-14 01:47 . 2010-09-18 07:18    953856              c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
    + 2010-10-14 01:47 . 2010-09-18 07:18    954368              c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40.dll
    + 2010-10-14 01:52 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2360937\update\updspapi.dll
    + 2010-10-14 01:52 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2360937\update\update.exe
    + 2010-10-14 01:52 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2360937\spuninst.exe
    + 2010-10-14 01:44 . 2010-08-16 08:43    590848              c:\windows\$hf_mig$\KB2360937\SP3QFE\rpcrt4.dll
    + 2010-10-14 02:01 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2360131-IE8\update\updspapi.dll
    + 2010-10-14 02:01 . 2009-05-26 09:01    755576              c:\windows\$hf_mig$\KB2360131-IE8\update\update.exe
    + 2010-10-14 02:01 . 2009-05-26 09:01    231288              c:\windows\$hf_mig$\KB2360131-IE8\spuninst.exe
    + 2010-10-14 01:46 . 2010-09-10 05:57    919552              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    206848              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\occache.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    611840              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mstime.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    602112              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeeds.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    247808              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieproxy.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    184320              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iepeers.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    743424              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedvtool.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    387584              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedkcs32.dll
    + 2010-10-14 01:46 . 2010-09-08 15:48    173056              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ie4uinit.exe
    + 2010-09-15 17:05 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
    + 2010-09-15 17:05 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB2347290\update\update.exe
    + 2010-09-15 17:05 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB2347290\spuninst.exe
    + 2010-10-14 02:03 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2345886\update\updspapi.dll
    + 2010-10-14 02:03 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2345886\update\update.exe
    + 2010-10-14 02:03 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2345886\spuninst.exe
    + 2010-08-26 13:37 . 2010-08-26 13:37    357248              c:\windows\$hf_mig$\KB2345886\SP3QFE\srv.sys
    + 2010-12-16 09:41 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB2296199\update\updspapi.dll
    + 2010-12-16 09:41 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB2296199\update\update.exe
    + 2010-12-16 09:41 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB2296199\spuninst.exe
    + 2010-10-28 13:08 . 2010-10-28 13:08    290048              c:\windows\$hf_mig$\KB2296199\SP3QFE\atmfd.dll
    + 2010-08-03 17:01 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2286198\update\updspapi.dll
    + 2010-08-03 17:01 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2286198\update\update.exe
    + 2010-08-03 17:01 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2286198\spuninst.exe
    + 2010-10-14 02:03 . 2010-07-05 13:16    382840              c:\windows\$hf_mig$\KB2279986\update\updspapi.dll
    + 2010-10-14 02:03 . 2010-07-05 13:15    755576              c:\windows\$hf_mig$\KB2279986\update\update.exe
    + 2010-10-14 02:03 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2279986\spuninst.exe
    + 2010-09-01 11:48 . 2010-09-01 11:48    285824              c:\windows\$hf_mig$\KB2279986\SP3QFE\atmfd.dll
    + 2010-09-15 17:06 . 2009-05-26 09:01    382840              c:\windows\$hf_mig$\KB2259922\update\updspapi.dll
    + 2010-09-15 17:06 . 2009-05-26 09:01    755576              c:\windows\$hf_mig$\KB2259922\update\update.exe
    + 2010-09-15 17:06 . 2009-05-26 09:01    231288              c:\windows\$hf_mig$\KB2259922\spuninst.exe
    + 2010-07-14 17:05 . 2010-02-22 09:53    382840              c:\windows\$hf_mig$\KB2229593\update\updspapi.dll
    + 2010-07-14 17:05 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB2229593\update\update.exe
    + 2010-07-14 17:05 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB2229593\spuninst.exe
    + 2010-07-14 09:09 . 2010-06-14 14:38    744448              c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe
    + 2010-08-12 17:04 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2183461-IE8\update\updspapi.dll
    + 2010-08-12 17:04 . 2009-05-26 09:01    755576              c:\windows\$hf_mig$\KB2183461-IE8\update\update.exe
    + 2010-08-12 17:04 . 2009-05-26 09:01    231288              c:\windows\$hf_mig$\KB2183461-IE8\spuninst.exe
    + 2010-08-12 08:36 . 2010-06-24 12:24    919040              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    206848              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\occache.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    611840              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mstime.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    599040              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeeds.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    247808              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieproxy.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    184320              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iepeers.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    743424              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedvtool.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    387584              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedkcs32.dll
    + 2010-08-12 08:36 . 2010-06-23 11:30    173056              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ie4uinit.exe
    + 2010-08-12 17:04 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2160329\update\updspapi.dll
    + 2010-08-12 17:04 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2160329\update\update.exe
    + 2010-08-12 17:04 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2160329\spuninst.exe
    + 2010-09-15 17:01 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
    + 2010-09-15 17:01 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2141007\update\update.exe
    + 2010-09-15 17:01 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2141007\spuninst.exe
    + 2010-06-09 07:41 . 2010-06-09 07:41    692736              c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
    + 2010-09-15 17:05 . 2010-02-22 14:23    382840              c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
    + 2010-09-15 17:05 . 2010-02-22 14:23    755576              c:\windows\$hf_mig$\KB2121546\update\update.exe
    + 2010-09-15 17:05 . 2010-02-22 14:23    231288              c:\windows\$hf_mig$\KB2121546\spuninst.exe
    + 2010-06-18 17:43 . 2010-06-18 17:43    293376              c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
    + 2010-08-12 17:09 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB2115168\update\updspapi.dll
    + 2010-08-12 17:09 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB2115168\update\update.exe
    + 2010-08-12 17:09 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB2115168\spuninst.exe
    + 2010-08-12 17:08 . 2009-05-26 11:40    382840              c:\windows\$hf_mig$\KB2079403\update\updspapi.dll
    + 2010-08-12 17:08 . 2009-05-26 11:40    755576              c:\windows\$hf_mig$\KB2079403\update\update.exe
    + 2010-08-12 17:08 . 2009-05-26 11:40    231288              c:\windows\$hf_mig$\KB2079403\spuninst.exe
    + 2011-04-12 19:20 . 2010-10-23 00:51    1748992              c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll
    + 2009-10-16 06:40 . 2009-08-13 13:55    1748992              c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
    + 2010-10-14 01:47 . 2010-08-23 16:12    1054208              c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
    + 2011-01-10 12:50 . 2011-01-10 12:50    1093120              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_e87e0bcd\mfc80u.dll
    + 2011-01-10 12:50 . 2011-01-10 12:50    1101824              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.5592_x-ww_e87e0bcd\mfc80.dll
    + 2009-07-20 13:03 . 2009-07-20 13:03    1348432              c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
    + 2012-08-06 00:19 . 2009-08-06 09:23    1929952              c:\windows\system32\wuaueng.dll
    + 2004-08-04 12:00 . 2010-04-05 18:52    2462720              c:\windows\system32\WMVCore.dll
    + 2009-10-02 04:57 . 2009-02-08 22:32    1112288              c:\windows\system32\wdfcoinstaller01007.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    1210880              c:\windows\system32\urlmon.dll
    + 2004-08-04 12:00 . 2011-01-21 14:44    8462336              c:\windows\system32\shell32.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12    1435648              c:\windows\system32\query.dll
    + 2004-08-04 12:00 . 2009-07-17 16:22    1435648              c:\windows\system32\query.dll
    + 2004-08-04 12:00 . 2010-02-05 18:27    1291776              c:\windows\system32\quartz.dll
    + 2005-09-29 05:09 . 2010-07-12 18:36    2120176              c:\windows\system32\PxSFS.DLL
    + 2004-08-04 12:00 . 2010-07-16 12:05    1288192              c:\windows\system32\ole32.dll
    + 2004-08-04 12:00 . 2010-12-09 13:42    2148864              c:\windows\system32\ntoskrnl.exe
    + 2004-08-03 22:59 . 2010-12-09 13:07    2027008              c:\windows\system32\ntkrnlpa.exe
    + 2009-05-01 04:25 . 2009-07-30 23:05    1372672              c:\windows\system32\msxml6.dll
    + 2009-07-20 13:05 . 2009-07-20 13:05    1348432              c:\windows\system32\msxml4.dll
    + 2004-08-04 12:00 . 2010-06-14 07:41    1172480              c:\windows\system32\msxml3.dll
    + 2012-08-06 00:17 . 2011-02-02 07:58    2067456              c:\windows\system32\mstscax.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    5962240              c:\windows\system32\mshtml.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11    1490944              c:\windows\system32\Macromed\Shockwave 10\dirapiX.dll
    + 2010-01-27 01:07 . 2011-05-07 04:51    6053536              c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2007-08-13 08:34 . 2011-02-22 23:06    1991680              c:\windows\system32\iertutil.dll
    + 2009-08-17 12:33 . 2009-08-17 12:33    1193832              c:\windows\system32\FM20.DLL
    + 2009-10-02 04:58 . 2009-05-11 02:47    1302600              c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\WUDFUpdate_01007.dll
    + 2009-10-02 04:57 . 2009-02-08 22:32    1112288              c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\wdfcoinstaller01007.dll
    + 2010-08-31 06:35 . 2010-07-30 17:06    1331512              c:\windows\system32\drivers\vsapint.sys
    + 2012-08-06 00:19 . 2009-08-06 09:23    1929952              c:\windows\system32\dllcache\wuaueng.dll
    + 2004-08-04 12:00 . 2010-04-05 18:52    2462720              c:\windows\system32\dllcache\WMVCore.dll
    + 2008-10-28 07:59 . 2011-03-03 13:21    1857920              c:\windows\system32\dllcache\win32k.sys
    + 2004-08-04 12:00 . 2011-02-22 23:06    1210880              c:\windows\system32\dllcache\urlmon.dll
    + 2008-06-17 19:02 . 2011-01-21 14:44    8462336              c:\windows\system32\dllcache\shell32.dll
    + 2009-07-17 16:22 . 2009-07-17 16:22    1435648              c:\windows\system32\dllcache\query.dll
    + 2008-05-07 05:12 . 2010-02-05 18:27    1291776              c:\windows\system32\dllcache\quartz.dll
    + 2010-07-16 12:05 . 2010-07-16 12:05    1288192              c:\windows\system32\dllcache\ole32.dll
    + 2008-10-28 07:59 . 2010-12-09 13:38    2192768              c:\windows\system32\dllcache\ntoskrnl.exe
    + 2008-10-28 07:59 . 2010-12-09 13:07    2027008              c:\windows\system32\dllcache\ntkrpamp.exe
    + 2008-10-28 07:59 . 2010-12-09 13:07    2069376              c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2008-10-28 07:59 . 2010-12-09 13:42    2148864              c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2009-05-01 04:25 . 2009-07-30 23:05    1372672              c:\windows\system32\dllcache\msxml6.dll
    + 2004-08-04 12:00 . 2010-06-14 07:41    1172480              c:\windows\system32\dllcache\msxml3.dll
    + 2012-08-06 00:17 . 2009-06-09 23:19    2066432              c:\windows\system32\dllcache\mstscax.dll
    + 2009-08-13 04:32 . 2010-01-29 15:01    1315328              c:\windows\system32\dllcache\msoe.dll
    + 2004-08-04 12:00 . 2011-02-22 23:06    5962240              c:\windows\system32\dllcache\mshtml.dll
    + 2010-03-10 10:51 . 2010-06-18 13:36    3558912              c:\windows\system32\dllcache\moviemk.exe
    + 2011-02-02 07:58 . 2011-02-02 07:58    2067456              c:\windows\system32\dllcache\lhmstscx.dll
    + 2008-09-10 21:26 . 2011-02-22 23:06    1991680              c:\windows\system32\dllcache\iertutil.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    1614848              c:\windows\system32\dllcache\cache\sfcfiles.dll
    + 2009-08-01 03:34 . 2009-02-06 11:06    2145280              c:\windows\system32\dllcache\cache\ntoskrnl.exe
    + 2009-08-01 03:34 . 2009-02-06 10:32    2023936              c:\windows\system32\dllcache\cache\ntkrnlpa.exe
    + 2009-08-01 03:34 . 2009-07-19 13:18    5937152              c:\windows\system32\dllcache\cache\mshtml.dll
    + 2009-08-01 03:34 . 2008-04-14 00:12    1033728              c:\windows\system32\dllcache\cache\explorer.exe
    + 2009-11-06 15:06 . 2009-11-06 15:06    1130824              c:\windows\system32\dfshim.dll
    + 2010-05-05 13:40 . 2010-05-05 13:40    1011712              c:\windows\system32\Adobe\Shockwave 11\iml32.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11    1975408              c:\windows\system32\Adobe\Shockwave 11\gt.exe
    + 2010-05-05 13:44 . 2010-05-05 13:44    1798144              c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
    + 2010-04-07 13:48 . 2010-04-07 13:48    5967872              c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    + 2010-09-21 22:44 . 2010-09-21 22:44    5242880              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    - 2008-11-24 18:59 . 2008-11-24 18:59    5242880              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2010-03-22 19:32 . 2010-03-22 19:32    3182592              c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2011-01-17 18:39 . 2011-01-17 18:39    5813072              c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2011-01-17 18:39 . 2011-01-17 18:39    4550656              c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2007-04-13 11:35 . 2007-04-13 11:35    1265664              c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2010-09-23 04:55 . 2010-09-23 04:55    1265664              c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2010-09-23 04:55 . 2010-09-23 04:55    1232896              c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    - 2007-04-13 11:35 . 2007-04-13 11:35    1232896              c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    + 2010-09-22 15:26 . 2010-09-22 15:26    2514944              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    - 2007-04-13 10:57 . 2007-04-13 10:57    2514944              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    - 2007-04-13 10:57 . 2007-04-13 10:57    2523136              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    + 2010-09-22 15:25 . 2010-09-22 15:25    2523136              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    + 2010-09-23 04:55 . 2010-09-23 04:55    2142208              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    - 2007-04-13 10:50 . 2007-04-13 10:50    2142208              c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    1093120              c:\windows\Installer\mfc80u.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    1093120              c:\windows\Installer\mfc80u.dll
    - 2008-09-10 23:32 . 2008-11-11 01:17    1101824              c:\windows\Installer\mfc80.dll
    + 2008-09-10 23:32 . 2010-08-31 06:34    1101824              c:\windows\Installer\mfc80.dll
    + 2010-08-19 07:57 . 2010-08-19 07:57    3395584              c:\windows\Installer\be38b2a.msp
    + 2011-03-17 10:05 . 2011-03-17 10:05    4989440              c:\windows\Installer\bc2609b.msp
    + 2011-01-11 07:49 . 2011-01-11 07:49    9003008              c:\windows\Installer\bc26084.msp
    + 2010-11-20 13:32 . 2010-11-20 13:32    4165120              c:\windows\Installer\bc26066.msp
    + 2011-03-17 10:01 . 2011-03-17 10:01    9563648              c:\windows\Installer\bc26042.msp
    + 2011-01-11 07:50 . 2011-01-11 07:50    8177152              c:\windows\Installer\bc2602b.msp
    + 2010-11-20 13:33 . 2010-11-20 13:33    1980928              c:\windows\Installer\bc26014.msp
    + 2011-01-11 06:52 . 2011-01-11 06:52    3360768              c:\windows\Installer\b0f4b4c.msp
    + 2009-12-03 03:15 . 2009-12-03 03:15    5004288              c:\windows\Installer\ae3948ea.msp
    + 2010-11-08 07:14 . 2010-11-08 07:14    3402752              c:\windows\Installer\a2648.msp
    + 2010-05-20 09:57 . 2010-05-20 09:57    4989952              c:\windows\Installer\8f150a9.msp
    + 2010-05-20 09:57 . 2010-05-20 09:57    5907456              c:\windows\Installer\8f150a8.msp
    + 2010-06-11 01:03 . 2010-06-11 01:03    5021184              c:\windows\Installer\8f15088.msp
    + 2010-10-21 07:10 . 2010-10-21 07:10    3995136              c:\windows\Installer\8bf5e16b.msp
    + 2010-11-20 12:35 . 2010-11-20 12:35    3359744              c:\windows\Installer\8bf5e145.msp
    + 2009-10-15 21:08 . 2009-10-15 21:08    2237952              c:\windows\Installer\8af6fb4d.msp
    + 2010-04-09 05:21 . 2010-04-09 05:21    5025792              c:\windows\Installer\8af6fb36.msp
    + 2010-12-16 13:17 . 2010-12-16 13:17    3362304              c:\windows\Installer\8937c405.msp
    + 2010-08-31 06:37 . 2010-08-31 06:37    3204096              c:\windows\Installer\736df.msi
    + 2010-09-16 19:04 . 2010-09-16 19:04    9401856              c:\windows\Installer\6fde90cb.msp
    + 2010-10-21 07:12 . 2010-10-21 07:12    3359744              c:\windows\Installer\6fde90b4.msp
    + 2010-10-07 07:43 . 2010-10-07 07:43    1980416              c:\windows\Installer\6fde909d.msp
    + 2009-08-04 08:05 . 2009-08-04 08:05    1563648              c:\windows\Installer\6d4f6aa.msi
    + 2010-02-20 15:03 . 2010-02-20 15:03    4472832              c:\windows\Installer\516c820.msp
    + 2010-02-20 15:02 . 2010-02-20 15:02    4195840              c:\windows\Installer\516c803.msp
    + 2010-03-11 13:59 . 2010-03-11 13:59    5031424              c:\windows\Installer\516c7ec.msp
    + 2009-11-08 14:25 . 2009-11-08 14:25    1935360              c:\windows\Installer\4d1ce50a.msp
    + 2011-04-14 14:46 . 2011-04-14 14:46    3854848              c:\windows\Installer\4c42bddb.msp
    + 2010-02-04 06:24 . 2010-02-04 06:24    9122304              c:\windows\Installer\4960415d.msp
    + 2010-02-20 14:00 . 2010-02-20 14:00    8480768              c:\windows\Installer\49604146.msp
    + 2010-02-03 13:59 . 2010-02-03 13:59    5031936              c:\windows\Installer\4960412f.msp
    + 2010-01-14 10:26 . 2010-01-14 10:26    5027840              c:\windows\Installer\441799d4.msp
    + 2010-11-01 05:35 . 2010-11-01 05:35    3940864              c:\windows\Installer\3f44bb4a.msi
    + 2011-02-16 02:54 . 2011-02-16 02:54    4992000              c:\windows\Installer\3c2e1094.msp
    + 2011-01-11 06:53 . 2011-01-11 06:53    1763328              c:\windows\Installer\3c2e107d.msp
    + 2009-11-20 12:36 . 2009-11-20 12:36    5002752              c:\windows\Installer\358e9c5e.msp
    + 2009-10-15 20:09 . 2009-10-15 20:09    2518016              c:\windows\Installer\358e9c47.msp
    + 2011-05-15 10:47 . 2011-05-15 10:47    1587200              c:\windows\Installer\3422e.msi
    + 2010-07-26 06:00 . 2010-07-26 06:00    5010944              c:\windows\Installer\2e49979b.msp
    + 2010-07-10 10:14 . 2010-07-10 10:14    2850816              c:\windows\Installer\2e499779.msp
    + 2009-09-02 22:05 . 2009-09-02 22:05    2835968              c:\windows\Installer\2c041664.msi
    + 2009-10-15 20:03 . 2009-10-15 20:03    5003776              c:\windows\Installer\22afa420.msp
    + 2009-08-18 01:58 . 2009-08-18 01:58    8301056              c:\windows\Installer\22afa409.msp
    + 2009-08-18 01:57 . 2009-08-18 01:57    9122304              c:\windows\Installer\22afa3f2.msp
    + 2009-08-04 20:49 . 2009-08-04 20:49    3457024              c:\windows\Installer\2101de9.msp
    + 2009-07-26 17:31 . 2009-07-26 17:31    3738624              c:\windows\Installer\2101dd0.msp
    + 2009-09-17 22:30 . 2009-09-17 22:30    5016576              c:\windows\Installer\2101db9.msp
    + 2009-08-18 02:08 . 2009-08-18 02:08    1373696              c:\windows\Installer\2101d8b.msp
    + 2009-08-18 02:56 . 2009-08-18 02:56    5020672              c:\windows\Installer\20fd4f98.msp
    + 2009-07-26 18:32 . 2009-07-26 18:32    5028352              c:\windows\Installer\1d9cc2c2.msp
    + 2011-05-21 09:16 . 2011-05-21 09:16    1094656              c:\windows\Installer\181183.msi
    + 2009-08-12 10:35 . 2009-08-12 10:35    7243264              c:\windows\Installer\1712df9f.msi
    + 2011-04-29 02:27 . 2011-04-29 02:27    4158464              c:\windows\Installer\1571427a.msp
    + 2011-04-27 19:42 . 2011-04-27 19:42    4990976              c:\windows\Installer\15714263.msp
    + 2010-04-24 07:08 . 2010-04-24 07:08    9129984              c:\windows\Installer\1238262c.msp
    + 2010-03-24 08:54 . 2010-03-24 08:54    3126272              c:\windows\Installer\12382614.msp
    + 2010-03-24 08:54 . 2010-03-24 08:54    2516992              c:\windows\Installer\12382613.msp
    + 2010-04-24 07:07 . 2010-04-24 07:07    4667392              c:\windows\Installer\123825f7.msp
    + 2010-04-24 07:05 . 2010-04-24 07:05    4199424              c:\windows\Installer\123825e0.msp
    + 2010-05-18 13:35 . 2010-05-18 13:35    5023744              c:\windows\Installer\123825c9.msp
    + 2010-04-11 12:17 . 2010-04-11 12:17    2607104              c:\windows\Installer\123825a3.msp
    + 2010-04-11 12:17 . 2010-04-11 12:17    4210688              c:\windows\Installer\123825a2.msp
    + 2010-04-24 07:10 . 2010-04-24 07:10    8486400              c:\windows\Installer\12382571.msp
    + 2010-08-13 07:01 . 2010-08-13 07:01    8993280              c:\windows\Installer\121ddbb.msp
    + 2010-08-13 06:59 . 2010-08-13 06:59    8182272              c:\windows\Installer\121dda4.msp
    + 2010-08-13 07:02 . 2010-08-13 07:02    2545664              c:\windows\Installer\121dd8d.msp
    + 2010-08-13 07:00 . 2010-08-13 07:00    9404928              c:\windows\Installer\121dd6e.msp
    + 2010-09-22 20:39 . 2010-09-22 20:39    4265472              c:\windows\Installer\121dd4b.msp
    + 2010-09-16 19:06 . 2010-09-16 19:06    3355648              c:\windows\Installer\121dd40.msp
    + 2009-03-31 02:09 . 2011-05-11 07:31    1172240              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\xlicons.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    1172240              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\xlicons.exe
    - 2009-03-31 02:09 . 2009-07-15 17:03    1165584              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-03-31 02:09 . 2011-05-11 07:31    1165584              c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\accicons.exe
    + 2010-09-22 07:05 . 2010-09-22 07:05    2405784              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\rt3d.dll
    + 2010-09-15 16:08 . 2010-09-15 16:08    6210560              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\authplay.dll
    + 2010-06-19 06:51 . 2010-06-19 06:51    5713920              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AGM.dll
    + 2008-11-20 17:12 . 2008-11-20 17:12    3750256              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\VVIEWER.DLL
    + 2008-10-24 23:35 . 2008-10-24 23:35    1847160              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\VVIEWDWG.DLL
    + 2008-08-25 12:50 . 2008-08-25 12:50    2585592              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\VBE6.DLL
    + 2008-11-09 16:41 . 2008-11-09 16:41    2014584              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\PPTVIEW.EXE
    + 2009-03-05 18:00 . 2009-03-05 18:00    6596472              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ONMAIN.DLL
    + 2008-11-10 00:49 . 2008-11-10 00:49    1165680              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ONLIBS.DLL
    + 2008-11-24 12:16 . 2008-11-24 12:16    1020776              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ONENOTE.EXE
    + 2009-02-05 01:36 . 2009-02-05 01:36    1640800              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OGL.DLL
    + 2009-03-05 18:26 . 2009-03-05 18:26    5291376              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\IPEDITOR.DLL
    + 2009-03-05 18:26 . 2009-03-05 18:26    5466488              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\IPDESIGN.DLL
    + 2008-11-03 14:40 . 2008-11-03 14:40    1442160              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\INFOPATH.EXE
    + 2009-02-13 20:03 . 2009-02-13 20:03    3070832              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\GROOVEDOCUMENTSHARETOOL.DLL
    + 2008-11-20 13:06 . 2008-11-20 13:06    1194848              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\FM20.DLL
    + 2010-06-09 17:15 . 2010-02-25 06:24    1209344              c:\windows\ie8updates\KB982381-IE8\urlmon.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    5944832              c:\windows\ie8updates\KB982381-IE8\mshtml.dll
    + 2010-06-09 17:15 . 2010-02-25 06:24    1985536              c:\windows\ie8updates\KB982381-IE8\iertutil.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    1208832              c:\windows\ie8updates\KB980182-IE8\urlmon.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    5942784              c:\windows\ie8updates\KB980182-IE8\mshtml.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    1985536              c:\windows\ie8updates\KB980182-IE8\iertutil.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    1208832              c:\windows\ie8updates\KB978207-IE8\urlmon.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    5940736              c:\windows\ie8updates\KB978207-IE8\mshtml.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    1985536              c:\windows\ie8updates\KB978207-IE8\iertutil.dll
    + 2009-11-04 16:00 . 2009-08-29 08:08    5940224              c:\windows\ie8updates\KB976749-IE8\mshtml.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    1208832              c:\windows\ie8updates\KB976325-IE8\urlmon.dll
    + 2009-12-10 09:49 . 2009-10-22 09:19    5939712              c:\windows\ie8updates\KB976325-IE8\mshtml.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    1985536              c:\windows\ie8updates\KB976325-IE8\iertutil.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    1208832              c:\windows\ie8updates\KB974455-IE8\urlmon.dll
    + 2009-10-16 16:07 . 2009-07-19 13:18    5937152              c:\windows\ie8updates\KB974455-IE8\mshtml.dll
    + 2009-10-16 16:07 . 2009-07-03 17:09    1985536              c:\windows\ie8updates\KB974455-IE8\iertutil.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    1210880              c:\windows\ie8updates\KB2497640-IE8\urlmon.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    5961216              c:\windows\ie8updates\KB2497640-IE8\mshtml.dll
    + 2011-04-13 07:25 . 2010-12-20 23:59    1991680              c:\windows\ie8updates\KB2497640-IE8\iertutil.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    1210880              c:\windows\ie8updates\KB2482017-IE8\urlmon.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    5959168              c:\windows\ie8updates\KB2482017-IE8\mshtml.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    1991680              c:\windows\ie8updates\KB2482017-IE8\iertutil.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    1210880              c:\windows\ie8updates\KB2416400-IE8\urlmon.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    5957120              c:\windows\ie8updates\KB2416400-IE8\mshtml.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    1986560              c:\windows\ie8updates\KB2416400-IE8\iertutil.dll
    + 2010-10-14 02:01 . 2010-06-24 12:22    1210368              c:\windows\ie8updates\KB2360131-IE8\urlmon.dll
    + 2010-10-14 02:01 . 2010-06-24 12:22    5951488              c:\windows\ie8updates\KB2360131-IE8\mshtml.dll
    + 2010-10-14 02:01 . 2010-06-24 12:21    1986560              c:\windows\ie8updates\KB2360131-IE8\iertutil.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    1209344              c:\windows\ie8updates\KB2183461-IE8\urlmon.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    5950976              c:\windows\ie8updates\KB2183461-IE8\mshtml.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    1985536              c:\windows\ie8updates\KB2183461-IE8\iertutil.dll
    + 2009-10-06 09:08 . 2009-10-06 09:08    1728512              c:\windows\Hewlett-Packard\Setup Files\HP Software Update\{EC391058-A292-41C5-92C7-95C5A09793B8}\HP Update.msi
    + 2008-10-28 07:59 . 2010-12-09 13:38    2192768              c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-10-28 07:59 . 2010-12-09 13:07    2027008              c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-10-28 07:59 . 2010-12-09 13:07    2069376              c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-10-28 07:59 . 2010-12-09 13:42    2148864              c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2010-10-14 01:54 . 2010-10-14 01:54    1966080              c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_84c96185\System.dll
    + 2010-10-14 03:30 . 2010-10-14 03:30    4792320              c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_36a8cfdf\System.dll
    + 2010-10-14 03:31 . 2010-10-14 03:31    5513216              c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_4eeb55fd\System.Xml.dll
    + 2010-10-14 03:29 . 2010-10-14 03:29    2088960              c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_083bea7a\System.Xml.dll
    + 2010-10-14 03:29 . 2010-10-14 03:29    3018752              c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_7c015105\System.Windows.Forms.dll
    + 2010-10-14 03:31 . 2010-10-14 03:31    7884800              c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_4e7a7d19\System.Windows.Forms.dll
    + 2010-10-14 03:31 . 2010-10-14 03:31    2244608              c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_40e01a33\System.Drawing.dll
    + 2010-10-14 03:30 . 2010-10-14 03:30    1470464              c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_3deed329\System.Design.dll
    + 2010-10-14 03:31 . 2010-10-14 03:31    3395584              c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_150ffa63\System.Design.dll
    + 2010-10-14 03:30 . 2010-10-14 03:30    3391488              c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_4c0ff357\mscorlib.dll
    + 2010-10-14 03:31 . 2010-10-14 03:31    8908800              c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_028aadc3\mscorlib.dll
    + 2011-04-13 07:25 . 2011-04-13 07:25    3325440              c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\76e431fde1b252312b331f7108259fda\WindowsBase.ni.dll
    + 2011-04-13 07:27 . 2011-04-13 07:27    1049600              c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\9e022c95e79f2b6f383a501ad99f08a9\UIAutomationClientsideProviders.ni.dll
    + 2011-04-13 07:24 . 2011-04-13 07:24    7949824              c:\windows\assembly\NativeImages_v2.0.50727_32\System\f02cf6430a9fc77908a74ab6925cb73c\System.ni.dll
    + 2011-04-13 07:27 . 2011-04-13 07:27    5450752              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\b06e49ed8cbe07dbb90e313fa634b27b\System.Xml.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    1356288              c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\6346221cecf631e5c0b754d842aad102\System.WorkflowServices.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    1908224              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\1fbcd203ff8d77d561df8bf806417ab6\System.Workflow.Runtime.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    4514304              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\efbaf3696c44fd7d4b3cd925e0437b36\System.Workflow.ComponentModel.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    2992640              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\52a9bc5dd1fa497af7c7f4600bd8e6d1\System.Workflow.Activities.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    1840640              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f5ebeeb0a8aaba9db15ec3df591339ba\System.Web.Services.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    2209280              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\92d6b75e3b63b528d4069bf4ee01983a\System.Web.Mobile.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    2405376              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\02d53154634c8000382942e0f43ead41\System.Web.Extensions.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    1917952              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\dd128c8e21e7fa14c12b71df9892d046\System.Speech.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    1706496              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8b0bb430bb6af96c18b43e3c54cfafe8\System.ServiceModel.Web.ni.dll
    + 2011-04-13 07:43 . 2011-04-13 07:43    2345472              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\85090bd451617e204ffda625b8d9fc30\System.Runtime.Serialization.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    1035776              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\85a7a7aace114e78fc6c9b219bcd5551\System.Printing.ni.dll
    + 2011-04-13 07:43 . 2011-04-13 07:43    1070080              c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\86c59378e9a43bf101a10ad452a4bb8e\System.IdentityModel.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    1587200              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d912066086a59f09424c7c69f95e2c55\System.Drawing.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    1116672              c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c05d9332116964104c721e97f7ce1058\System.DirectoryServices.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    1801216              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\0118c0c73ea5c77bda7b10b188102ab6\System.Deployment.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    6616576              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\1337829e3df6888464a17aab78bb9b8f\System.Data.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    2510336              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ba3ca7a93e227c32ce7b50d0a7ba935f\System.Data.SqlXml.ni.dll
    + 2011-04-13 07:46 . 2011-04-13 07:46    1328128              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\2de52be5da96059651b5bec800cb4605\System.Data.Services.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    1115136              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\5018d7d39ee99a18c2c17d68837a7a6d\System.Data.OracleClient.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    2516480              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\11f1306e0e311a0d0cbd139fb2fa4c36\System.Data.Linq.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    9924096              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\c91e83e85c030bc914ecc302fa9b2c60\System.Data.Entity.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    2295296              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\684fe21837d3cf3e5935bbd0a7f53141\System.Core.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    1006080              c:\windows\assembly\NativeImages_v2.0.50727_32\Sony.MediaSoftware.#\847f098ee3e284bddb1acfc36bcbb9c6\Sony.MediaSoftware.clrshared.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    2128896              c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\12efddabe6fe35be21246c88ed9bf8ab\ReachFramework.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    1657856              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\257c9327ba9cc5cd87f58de224aa2e0d\PresentationUI.ni.dll
    + 2011-04-13 07:25 . 2011-04-13 07:25    1451008              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b117bf63daa7e587f1bb2d975dccb4af\PresentationBuildTasks.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    1712128              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\269103939243ec6929739c8b9a645c0d\Microsoft.VisualBasic.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    1093120              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\bf7bd26d2828e35156814018939ce4f6\Microsoft.Transactions.Bridge.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    2332160              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\6594c17d7e112b0507b701d5b8a67bba\Microsoft.JScript.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    1620992              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\f5eb1e42ccd0f67f7496b94a31949cd0\Microsoft.Build.Tasks.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    1966080              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\cc7f05675a5cd8014222be1483d6beaf\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-04-13 07:45 . 2011-04-13 07:45    1888768              c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\41cf95aa4ff5765b515d3252abc6353b\Microsoft.Build.Engine.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    1804800              c:\windows\assembly\NativeImages_v2.0.50727_32\MediaManager\6c388f0b4bae106fa8cac253d3f25d36\MediaManager.ni.exe
    + 2011-04-13 07:44 . 2011-04-13 07:44    6767104              c:\windows\assembly\NativeImages_v2.0.50727_32\AppCommon\ce04ebafe3cf0863c3b4ef90bd27778c\AppCommon.ni.dll
    + 2010-06-24 17:03 . 2010-06-24 17:03    1249280              c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    3182592              c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    2048000              c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    2048000              c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    5025792              c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    5025792              c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2009-05-01 05:47 . 2009-05-01 05:47    1277952              c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2010-10-14 02:02 . 2010-10-14 02:02    1277952              c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2010-06-09 17:08 . 2010-06-09 17:08    5967872              c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    5062656              c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    5062656              c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2010-06-24 17:03 . 2010-06-24 17:03    5279744              c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    5242880              c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    5242880              c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    2933248              c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2009-05-01 05:46 . 2009-05-01 05:46    2933248              c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2010-06-24 17:03 . 2010-06-24 17:03    4210688              c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2009-05-01 05:43 . 2009-05-01 05:43    4210688              c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2011-04-13 07:23 . 2011-04-13 07:23    4550656              c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2010-10-14 01:54 . 2010-10-14 01:54    1232896              c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2008-09-18 06:59 . 2008-09-18 06:59    1232896              c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2008-09-18 06:59 . 2008-09-18 06:59    1265664              c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-10-14 01:54 . 2010-10-14 01:54    1265664              c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-08-12 17:02 . 2009-10-23 15:28    3558912              c:\windows\$NtUninstallKB981997$\moviemk.exe
    + 2010-10-14 01:54 . 2010-06-23 13:44    1851904              c:\windows\$NtUninstallKB981957$\win32k.sys
    + 2010-08-12 17:09 . 2010-02-16 14:08    2146304              c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
    + 2010-08-12 17:09 . 2010-02-16 13:25    2024448              c:\windows\$NtUninstallKB981852$\ntkrpamp.exe
    + 2010-08-12 17:09 . 2010-02-16 13:25    2024448              c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
    + 2010-08-12 17:09 . 2010-02-16 14:08    2146304              c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe
    + 2010-10-14 02:02 . 2008-04-14 00:12    1287168              c:\windows\$NtUninstallKB979687$\ole32.dll
    + 2010-04-15 17:05 . 2009-12-08 19:26    2145280              c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
    + 2010-04-15 17:05 . 2009-12-08 18:43    2023936              c:\windows\$NtUninstallKB979683$\ntkrpamp.exe
    + 2010-04-15 17:05 . 2009-12-08 18:43    2023936              c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
    + 2010-04-15 17:05 . 2009-12-08 19:26    2145280              c:\windows\$NtUninstallKB979683$\ntkrnlmp.exe
    + 2010-06-09 17:16 . 2009-08-14 13:21    1850624              c:\windows\$NtUninstallKB979559$\win32k.sys
    + 2010-06-09 17:11 . 2009-05-19 18:56    2458112              c:\windows\$NtUninstallKB978695_WM9$\wmvcore.dll
    + 2010-05-12 17:01 . 2009-07-10 13:27    1315328              c:\windows\$NtUninstallKB978542$\msoe.dll
    + 2010-02-10 07:46 . 2009-08-04 15:13    2145280              c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
    + 2010-02-10 07:46 . 2009-08-04 14:20    2023936              c:\windows\$NtUninstallKB977165$\ntkrpamp.exe
    + 2010-02-10 07:46 . 2009-08-04 14:20    2023936              c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
    + 2010-02-10 07:46 . 2009-08-04 15:13    2145280              c:\windows\$NtUninstallKB977165$\ntkrnlmp.exe
    + 2010-06-09 17:09 . 2009-11-27 17:11    1291776              c:\windows\$NtUninstallKB975562$\quartz.dll
    + 2010-03-10 16:04 . 2008-04-14 00:12    3558912              c:\windows\$NtUninstallKB975561$\moviemk.exe
    + 2010-02-10 07:47 . 2009-06-03 19:09    1291264              c:\windows\$NtUninstallKB975560$\quartz.dll
    + 2009-11-25 16:01 . 2008-09-10 01:14    1307648              c:\windows\$NtUninstallKB973687$\msxml6.dll
    + 2009-11-25 16:01 . 2008-09-04 17:15    1106944              c:\windows\$NtUninstallKB973687$\msxml3.dll
    + 2009-08-13 17:03 . 2008-04-14 00:12    1314816              c:\windows\$NtUninstallKB973354$\msoe.dll
    + 2009-10-16 16:01 . 2009-02-06 11:06    2145280              c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
    + 2009-10-16 16:01 . 2009-02-06 10:32    2023936              c:\windows\$NtUninstallKB971486$\ntkrpamp.exe
    + 2009-10-16 16:01 . 2009-02-06 10:32    2023936              c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
    + 2009-10-16 16:01 . 2009-02-06 11:06    2145280              c:\windows\$NtUninstallKB971486$\ntkrnlmp.exe
    + 2009-11-11 09:56 . 2009-04-17 12:26    1847168              c:\windows\$NtUninstallKB969947$\win32k.sys
    + 2009-10-16 16:05 . 2008-04-14 00:12    1435648              c:\windows\$NtUninstallKB969059$\query.dll
    + 2009-09-09 17:02 . 2008-06-17 18:03    2458112              c:\windows\$NtUninstallKB968816_WM9$\wmvcore.dll
    + 2009-08-13 17:04 . 2008-04-14 00:11    2061824              c:\windows\$NtUninstallKB956744$\mstscax.dll
    + 2011-04-13 07:26 . 2010-12-31 13:10    1854976              c:\windows\$NtUninstallKB2506223$\win32k.sys
    + 2011-02-09 03:28 . 2010-07-27 06:30    8462336              c:\windows\$NtUninstallKB2483185$\shell32.dll
    + 2011-03-09 16:03 . 2009-06-09 23:19    2066432              c:\windows\$NtUninstallKB2481109$\mstscax.dll
    + 2011-02-09 03:28 . 2010-10-26 13:25    1853312              c:\windows\$NtUninstallKB2479628$\win32k.sys
    + 2010-12-16 09:38 . 2010-08-31 13:42    1852800              c:\windows\$NtUninstallKB2436673$\win32k.sys
    + 2011-02-09 03:24 . 2010-04-27 13:59    2146304              c:\windows\$NtUninstallKB2393802$\ntoskrnl.exe
    + 2011-02-09 03:24 . 2010-04-27 13:05    2024448              c:\windows\$NtUninstallKB2393802$\ntkrpamp.exe
    + 2011-02-09 03:24 . 2010-04-27 13:05    2024448              c:\windows\$NtUninstallKB2393802$\ntkrnlpa.exe
    + 2011-02-09 03:24 . 2010-04-27 13:59    2146304              c:\windows\$NtUninstallKB2393802$\ntkrnlmp.exe
    + 2010-10-14 02:04 . 2008-04-14 00:11    1028096              c:\windows\$NtUninstallKB2387149$\mfc42.dll
    + 2010-08-03 17:01 . 2008-06-17 19:02    8461312              c:\windows\$NtUninstallKB2286198$\shell32.dll
    + 2010-08-12 17:04 . 2010-05-02 05:22    1851264              c:\windows\$NtUninstallKB2160329$\win32k.sys
    + 2010-08-12 17:08 . 2009-07-31 04:35    1172480              c:\windows\$NtUninstallKB2079403$\msxml3.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    1209856              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\urlmon.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    5953024              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll
    + 2010-06-09 09:22 . 2010-05-06 10:36    1986048              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iertutil.dll
    + 2010-08-12 08:35 . 2010-06-18 13:43    3558912              c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe
    + 2010-08-31 13:38 . 2010-08-31 13:38    1861888              c:\windows\$hf_mig$\KB981957\SP3QFE\win32k.sys
    + 2010-08-12 08:37 . 2010-04-27 13:50    2190080              c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
    + 2010-08-12 08:37 . 2010-04-27 13:14    2024448              c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe
    + 2010-04-27 21:14 . 2010-04-27 21:14    2066944              c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
    + 2010-08-12 08:37 . 2010-04-27 13:54    2146304              c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe
    + 2010-03-31 03:40 . 2010-02-25 06:19    1209856              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\urlmon.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    5946880              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    1986048              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iertutil.dll
    + 2010-07-16 12:04 . 2010-07-16 12:04    1289216              c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
    + 2010-04-15 02:49 . 2010-02-16 12:52    2190080              c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
    + 2010-04-15 02:49 . 2010-02-16 12:12    2024448              c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrpamp.exe
    + 2010-04-15 02:49 . 2010-02-16 12:12    2066944              c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
    + 2010-04-15 02:49 . 2010-02-16 12:50    2146304              c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlmp.exe
    + 2010-05-02 06:34 . 2010-05-02 06:34    1860352              c:\windows\$hf_mig$\KB979559\SP3QFE\win32k.sys
    + 2010-01-29 14:53 . 2010-01-29 14:53    1315328              c:\windows\$hf_mig$\KB978542\SP3QFE\msoe.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    1209344              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\urlmon.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    5945856              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
    + 2010-01-21 22:47 . 2009-12-21 19:09    1986048              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\iertutil.dll
    + 2009-12-08 12:52 . 2009-12-08 12:52    2189312              c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
    + 2010-02-10 06:46 . 2009-12-08 17:40    2023936              c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrpamp.exe
    + 2009-12-08 12:10 . 2009-12-08 12:10    2066176              c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
    + 2010-02-10 06:46 . 2009-12-08 18:20    2145280              c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlmp.exe
    + 2009-11-04 13:11 . 2009-10-22 09:18    5943296              c:\windows\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    1209344              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\urlmon.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    5944320              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
    + 2009-12-10 08:45 . 2009-10-29 07:45    1986048              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\iertutil.dll
    + 2010-02-05 18:29 . 2010-02-05 18:29    1291776              c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll
    + 2010-03-10 10:51 . 2009-10-23 14:53    3558912              c:\windows\$hf_mig$\KB975561\SP3QFE\moviemk.exe
    + 2009-11-27 17:23 . 2009-11-27 17:23    1291776              c:\windows\$hf_mig$\KB975560\SP3QFE\quartz.dll
    + 2009-10-16 06:40 . 2009-08-29 08:01    1209344              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\urlmon.dll
    + 2009-10-16 06:40 . 2009-08-29 08:01    5942272              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll
    + 2009-10-16 06:40 . 2009-08-29 08:01    1986048              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\iertutil.dll
    + 2009-11-25 11:12 . 2009-07-31 04:24    1447424              c:\windows\$hf_mig$\KB973687\SP3QFE\msxml6.dll
    + 2009-11-25 11:12 . 2009-07-31 04:24    1172480              c:\windows\$hf_mig$\KB973687\SP3QFE\msxml3.dll
    + 2009-07-10 08:54 . 2009-07-10 08:54    1315328              c:\windows\$hf_mig$\KB973354\SP3QFE\msoe.dll
    + 2009-10-16 06:38 . 2009-08-04 13:56    2189312              c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
    + 2009-10-16 06:38 . 2009-08-04 13:17    2023936              c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrpamp.exe
    + 2009-08-04 07:47 . 2009-08-04 07:47    2066176              c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
    + 2009-10-16 06:38 . 2009-08-04 13:54    2145280              c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlmp.exe
    + 2009-07-27 22:13 . 2009-07-27 22:13    8462848              c:\windows\$hf_mig$\KB971029\SP3QFE\shell32.dll
    + 2009-08-14 12:19 . 2009-08-14 12:19    1859712              c:\windows\$hf_mig$\KB969947\SP3QFE\win32k.sys
    + 2009-07-17 16:01 . 2009-07-17 16:01    1435648              c:\windows\$hf_mig$\KB969059\SP3QFE\query.dll
    + 2009-08-13 04:33 . 2009-06-09 15:21    2067968              c:\windows\$hf_mig$\KB956744\SP3QFE\lhmstscx.dll
    + 2011-03-03 13:27 . 2011-03-03 13:27    1866880              c:\windows\$hf_mig$\KB2506223\SP3QFE\win32k.sys
    + 2011-04-12 19:20 . 2011-02-22 23:27    1212928              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\urlmon.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    5964800              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll
    + 2011-04-12 19:20 . 2011-02-22 23:27    1992192              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iertutil.dll
    + 2011-01-21 14:42 . 2011-01-21 14:42    8463360              c:\windows\$hf_mig$\KB2483185\SP3QFE\shell32.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    1211904              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\urlmon.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    5962240              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    1992192              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iertutil.dll
    + 2011-02-02 07:57 . 2011-02-02 07:57    2069504              c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstscx.dll
    + 2010-12-31 13:14 . 2010-12-31 13:14    1864064              c:\windows\$hf_mig$\KB2479628\SP3QFE\win32k.sys
    + 2010-10-26 13:27 . 2010-10-26 13:27    1862272              c:\windows\$hf_mig$\KB2436673\SP3QFE\win32k.sys
    + 2010-12-15 20:27 . 2010-11-06 00:27    1211904              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\urlmon.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    5960704              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll
    + 2010-12-15 20:27 . 2010-11-06 00:27    1992192              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iertutil.dll
    + 2011-02-08 20:20 . 2010-12-09 13:43    2192768              c:\windows\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe
    + 2011-02-08 20:20 . 2010-12-09 13:09    2027008              c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrpamp.exe
    + 2010-12-09 07:39 . 2010-12-09 07:39    2069376              c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe
    + 2011-02-08 20:20 . 2010-12-09 13:47    2148864              c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlmp.exe
    + 2010-10-14 01:46 . 2010-09-10 05:57    1211904              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\urlmon.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    5958656              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll
    + 2010-10-14 01:46 . 2010-09-10 05:57    1987072              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iertutil.dll
    + 2010-07-27 06:28 . 2010-07-27 06:28    8463360              c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    1211904              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\urlmon.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    5954560              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    1987072              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iertutil.dll
    + 2010-06-24 02:14 . 2010-06-24 02:14    1861120              c:\windows\$hf_mig$\KB2160329\SP3QFE\win32k.sys
    + 2010-06-14 07:39 . 2010-06-14 07:39    1172480              c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll
    + 2004-08-04 12:00 . 2010-08-25 12:36    10841088              c:\windows\system32\wmp.dll
    + 2008-09-10 21:26 . 2011-05-11 07:28    42829768              c:\windows\system32\MRT.exe
    + 2007-08-13 08:54 . 2011-02-22 23:06    11080704              c:\windows\system32\ieframe.dll
    + 2004-08-04 12:00 . 2010-08-25 12:36    10841088              c:\windows\system32\dllcache\wmp.dll
    + 2008-09-10 21:26 . 2011-02-22 23:06    11080704              c:\windows\system32\dllcache\ieframe.dll
    + 2010-04-02 09:29 . 2010-04-02 09:29    11413504              c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp
    + 2010-09-24 03:08 . 2010-09-24 03:08    11430400              c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
    + 2009-11-11 20:34 . 2009-11-11 20:34    15706112              c:\windows\Installer\ea377e.msp
    + 2010-07-22 15:04 . 2010-07-22 15:04    11395072              c:\windows\Installer\be38b13.msp
    + 2011-02-11 10:47 . 2011-02-11 10:47    12028928              c:\windows\Installer\bc2604e.msp
    + 2011-02-24 05:15 . 2011-02-24 05:15    11551232              c:\windows\Installer\bc25ffd.msp
    + 2010-05-20 09:58 . 2010-05-20 09:58    12114432              c:\windows\Installer\8f15071.msp
    + 2010-09-02 02:26 . 2010-09-02 02:26    20303872              c:\windows\Installer\8e02828.msp
    + 2010-12-16 09:39 . 2010-12-16 09:39    20304384              c:\windows\Installer\8bf5e151.msp
    + 2010-10-08 11:07 . 2010-10-08 11:07    11559424              c:\windows\Installer\8bf5e117.msp
    + 2010-12-21 02:06 . 2010-12-21 02:06    11570688              c:\windows\Installer\8937c3ee.msp
    + 2011-03-13 01:02 . 2011-03-13 01:02    15139328              c:\windows\Installer\817b206.msp
    + 2010-06-04 17:00 . 2010-06-04 17:00    20242432              c:\windows\Installer\765fa194.msp
    + 2010-03-22 06:03 . 2010-03-22 06:03    11732992              c:\windows\Installer\516c837.msp
    + 2010-03-30 15:23 . 2010-03-30 15:23    15638528              c:\windows\Installer\4d1ce517.msp
    + 2009-11-20 12:46 . 2009-11-20 12:46    11524608              c:\windows\Installer\49604174.msp
    + 2009-11-12 16:00 . 2009-11-12 16:00    15709696              c:\windows\Installer\4224a35.msp
    + 2010-05-19 03:08 . 2010-05-19 03:08    11408896              c:\windows\Installer\2e499784.msp
    + 2010-07-10 10:06 . 2010-07-10 10:06    10120192              c:\windows\Installer\2e499762.msp
    + 2011-02-18 01:55 . 2011-02-18 01:55    20308992              c:\windows\Installer\2dd666e0.msp
    + 2011-04-21 17:00 . 2011-04-21 17:00    20314624              c:\windows\Installer\2b361941.msp
    + 2010-01-20 16:00 . 2010-01-20 16:00    15710720              c:\windows\Installer\254e830e.msp
    + 2009-08-14 09:32 . 2009-08-14 09:32    11110912              c:\windows\Installer\2101df3.msp
    + 2009-08-10 03:09 . 2009-08-10 03:09    17254912              c:\windows\Installer\2101da3.msp
    + 2009-08-18 01:50 . 2009-08-18 01:50    12022272              c:\windows\Installer\2101d74.msp
    + 2011-01-31 10:45 . 2011-01-31 10:45    11135488              c:\windows\Installer\18a870a5.msp
    + 2011-04-22 09:41 . 2011-04-22 09:41    11507712              c:\windows\Installer\15714295.msp
    + 2010-04-02 02:30 . 2010-04-02 02:30    17456640              c:\windows\Installer\12382662.msp
    + 2010-04-24 07:09 . 2010-04-24 07:09    11750912              c:\windows\Installer\12382643.msp
    + 2010-04-11 12:17 . 2010-04-11 12:17    14599680              c:\windows\Installer\123825b2.msp
    + 2010-04-24 07:07 . 2010-04-24 07:07    10118144              c:\windows\Installer\12382596.msp
    + 2010-10-14 01:59 . 2010-10-14 01:59    20303872              c:\windows\Installer\121dd57.msp
    + 2010-09-23 20:08 . 2010-09-23 20:08    17518080              c:\windows\Installer\121dd2a.msp
    + 2010-09-22 16:03 . 2010-09-22 16:03    20460984              c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010\9.4.0\AcroRd32.dll
    + 2009-04-03 08:46 . 2009-04-03 08:46    17314688              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSO.DLL
    + 2009-03-05 16:37 . 2009-03-05 16:37    10222432              c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSACCESS.EXE
    + 2010-06-09 17:15 . 2010-02-25 00:54    11070976              c:\windows\ie8updates\KB982381-IE8\ieframe.dll
    + 2010-03-31 08:08 . 2009-12-21 19:14    11070464              c:\windows\ie8updates\KB980182-IE8\ieframe.dll
    + 2010-01-22 16:01 . 2009-10-29 07:45    11069952              c:\windows\ie8updates\KB978207-IE8\ieframe.dll
    + 2009-12-10 09:49 . 2009-08-29 08:08    11069440              c:\windows\ie8updates\KB976325-IE8\ieframe.dll
    + 2009-10-16 16:07 . 2009-07-19 08:48    11067392              c:\windows\ie8updates\KB974455-IE8\ieframe.dll
    + 2011-04-13 07:25 . 2010-12-20 18:29    11080704              c:\windows\ie8updates\KB2497640-IE8\ieframe.dll
    + 2011-02-09 03:25 . 2010-11-06 00:26    11080704              c:\windows\ie8updates\KB2482017-IE8\ieframe.dll
    + 2010-12-16 09:40 . 2010-09-10 05:58    11080192              c:\windows\ie8updates\KB2416400-IE8\ieframe.dll
    + 2010-10-14 02:01 . 2010-06-24 07:51    11077120              c:\windows\ie8updates\KB2360131-IE8\ieframe.dll
    + 2010-08-12 17:04 . 2010-05-06 10:41    11076096              c:\windows\ie8updates\KB2183461-IE8\ieframe.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    12430848              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ed2bf0d86229128c194a872f70fe15ee\System.Windows.Forms.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    11800576              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\d7b7ee04166212533ae21eaeb584fb0d\System.Web.ni.dll
    + 2011-04-13 07:44 . 2011-04-13 07:44    17403904              c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\b5f24d96334ea08b99350421450d3ba4\System.ServiceModel.ni.dll
    + 2011-04-13 07:26 . 2011-04-13 07:26    10683392              c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\5aeadb9ff9a86f49130de5976a9f1744\System.Design.ni.dll
    + 2011-04-13 07:25 . 2011-04-13 07:25    14328320              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1a5d89d569e2e12842daf4d87c57361a\PresentationFramework.ni.dll
    + 2011-04-13 07:25 . 2011-04-13 07:25    12215808              c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\46c57d845e55232a89e98101075cd455\PresentationCore.ni.dll
    + 2011-04-13 07:24 . 2011-04-13 07:24    11490816              c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62d5f089dd51f18472a7caf1593d9f6b\mscorlib.ni.dll
    + 2009-08-13 17:02 . 2008-11-11 07:34    10838016              c:\windows\$NtUninstallKB973540_WM9$\wmp.dll
    + 2010-10-14 02:03 . 2009-07-13 13:43    10841088              c:\windows\$NtUninstallKB2378111_WM9$\wmp.dll
    + 2010-05-06 06:06 . 2010-05-06 06:06    11078144              c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ieframe.dll
    + 2010-03-31 03:40 . 2010-02-25 06:19    11073024              c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ieframe.dll
    + 2009-12-22 03:09 . 2009-12-22 03:09    11070976              c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\ieframe.dll
    + 2009-10-29 02:15 . 2009-10-29 02:15    11070464              c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\ieframe.dll
    + 2009-08-29 02:31 . 2009-08-29 02:31    11069952              c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\ieframe.dll
    + 2011-02-22 18:57 . 2011-02-22 18:57    11082752              c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ieframe.dll
    + 2011-02-08 20:22 . 2010-12-20 23:58    11082752              c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ieframe.dll
    + 2010-11-05 18:57 . 2010-11-05 18:57    11082752              c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieframe.dll
    + 2010-09-10 00:27 . 2010-09-10 00:27    11082240              c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieframe.dll
    + 2010-08-12 08:36 . 2010-06-24 12:24    11079168              c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieframe.dll
    .
    -- Snapshot reset to current date --
    .
    (((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown 
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2010-04-16 3872080]
    "Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2009-09-24 434176]
    "TranscodingService"="c:\program files\TiVo\Desktop\TranscodingService.exe" [2009-01-27 520192]
    "TivoNotify"="c:\program files\TiVo\Desktop\TiVoNotify.exe" [2009-01-27 425472]
    "TivoServer"="c:\program files\TiVo\Desktop\TiVoServer.exe" [2009-01-27 2143232]
    "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-06-25 1414144]
    "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-04-18 15146376]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
    "MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
    "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
    "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
    "igfxtray"="c:\windows\system32\igfxtray.exe" [2005-11-28 98304]
    "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-11-28 77824]
    "igfxpers"="c:\windows\system32\igfxpers.exe" [2005-11-28 118784]
    "RTHDCPL"="RTHDCPL.EXE" [2008-02-13 16857600]
    "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
    "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 32768]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-14 13680640]
    "nwiz"="nwiz.exe" [2009-01-14 1657376]
    "Desktop Service Centre"="c:\program files\OptusNet DSL Internet\DSC.exe" [2010-07-12 2919831]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
    "BigDog305"="c:\windows\VM305_STI.EXE" [2005-08-05 61440]
    "DACSMiniApp"="c:\program files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe" [2008-03-13 128256]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-14 86016]
    "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-04-17 196608]
    "ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-04-12 69632]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-01-06 290088]
    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
    "UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2010-01-26 1020248]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
    "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-02-15 1230704]
    "Freecorder FLV Service"="c:\program files\Freecorder\FLVSrvc.exe" [2011-03-24 167936]
    .
    c:\documents and settings\Owner\Start Menu\Programs\Startup\
    Adobe Media Player.lnk - c:\program files\Adobe Media Player\Adobe Media Player.exe [N/A]
    .
    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    forteManager.lnk - c:\program files\LG Soft India\forteManager\bin\Monitor.exe [2009-2-13 1126400]
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
    HP Photosmart Premier Fast Start.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2006-2-10 73728]
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus]
    "DisableMonitoring"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall]
    "DisableMonitoring"=dword:00000001
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
    "c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
    .
    R2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [8/31/2010 4:35 PM 36432]
    R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [11/26/2009 6:16 AM 27632]
    R3 tmcfw;Trend Micro Common Firewall Service;c:\windows\system32\drivers\TM_CFW.sys [8/31/2010 4:35 PM 339984]
    R3 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [8/31/2010 4:48 PM 51792]
    R3 TmPfw;Trend Micro Personal Firewall;c:\program files\Trend Micro\Internet Security\TmPfw.exe [8/31/2010 4:48 PM 497008]
    R3 TmProxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [8/31/2010 4:48 PM 689416]
    R3 ZSMC0305;VIMICRO USB PC Camera V;c:\windows\system32\drivers\usbVM305.sys [9/11/2008 2:07 PM 391688]
    S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/24/2010 5:23 PM 136176]
    S2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [11/26/2009 6:16 AM 90112]
    S2 Security Activity Dashboard Service;Security Activity Dashboard Service;c:\program files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe --> c:\program files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe [?]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [12/24/2010 5:23 PM 136176]
    S3 LGDDCDevice;LGDDCDevice;c:\program files\LG Soft India\forteManager\bin\I2CDriver.sys [2/13/2009 9:05 AM 14336]
    S3 LGII2CDevice;LGII2CDevice;c:\program files\LG Soft India\forteManager\bin\PII2CDriver.sys [2/13/2009 9:05 AM 13312]
    S3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\drivers\s1018bus.sys [8/14/2009 5:35 PM 86696]
    S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\drivers\s1018mdfl.sys [8/14/2009 5:38 PM 15016]
    S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\drivers\s1018mdm.sys [8/14/2009 5:38 PM 114472]
    S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1018mgmt.sys [8/14/2009 5:38 PM 108200]
    S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1018nd5.sys [8/14/2009 5:38 PM 26024]
    S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\drivers\s1018obex.sys [8/14/2009 5:36 PM 104616]
    S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1018unic.sys [8/14/2009 5:38 PM 109736]
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-05-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-12-24 09:13]
    .
    2011-05-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-12-24 09:13]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.com.au/
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\bchgoduj.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.au
    FF - prefs.js: keyword.URL - hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZUfox000&fl=0&ptb=kqakC5FHzpHfdfOssADV1A&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=kwd&searchfor=
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
    FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
    FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
    FF - Ext: Freecorder Community Toolbar: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - %profile%\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
    FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
    FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
    FF - Ext: DivX Plus Web Player HTML5 &lt;video&gt;: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files\DivX\DivX Plus Web Player\firefox\html5video
    FF - Ext: DivX HiQ: {6904342A-8307-11DF-A508-4AE2DFD72085} - c:\program files\DivX\DivX Plus Web Player\firefox\wpa
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2011-05-23 12:29
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...  
    .
    scanning hidden autostart entries ... 
    .
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      BigDog305 = c:\windows\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)???????????????????0?????????@?????????????? 
    .
    scanning hidden files ...  
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    Completion time: 2011-05-23  12:31:10
    ComboFix-quarantined-files.txt  2011-05-23 02:31
    ComboFix2.txt  2009-08-03 00:13
    ComboFix3.txt  2009-08-02 21:28
    ComboFix4.txt  2009-08-02 00:51
    ComboFix5.txt  2011-05-23 01:30
    .
    Pre-Run: 105,992,982,528 bytes free
    Post-Run: 106,453,598,208 bytes free
    .
    - - End Of File - - 1A273964131FCB412E01B2BC2D6BD9FB

  9. #9
    Moderator (global) Team-Mitglied Avatar von Jintan
    Registriert seit
    25.11.2006
    Beiträge
    6.369

    Re: Erratic PC issues

    That removed some malware files. Any improvement yet?

    Open Firefox - Tools - Add-ons, and locate/uninstall any of the following that show in it:

    Freecorder4.12/Freecorder Community Toolbar
    Conduit Engine


    Adware, spyware, search hijacking related software.

    ---------------

    Be sure to continue to temporarily disable any protective software when running the scan tools we use here.


    Open and update Malwarebytes.

    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select "Perform quick scan", then click Scan.
    * The scan may take some time to finish,so please be patient.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Make sure that everything is checked, and click Remove Selected.
    * When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
    * The log is automatically saved by Malwarebytes and can be viewed by clicking the Logs tab in Malwarebytes.
    * Copy and Paste the entire report in your next reply. If it calls for a reboot to complete the repairs do that as well then.

    ---------------

    Disable your antivirus program and click here and download the esetsmartinstaller_enu.exe Eset installer. Then click that file to run the scanner.

    If you accept the Terms of Use, check the box and click Start. It will take a couple minutes for the scanner to get ready. When the Computer scan settings display shows, check the following boxes:

    Remove found threats
    Scan unwanted applications


    Next to "Current scan targets: Operating memory, Local drives", click the "Change" word. Make sure you place a check next to all disk drives, including any external drives that are attached (no need to check off the floppy or DVD/CD-Rom drives).

    Then click the Advanced option, the place a check next to the following (if it is not already checked):

    Enable Anti-Stealth technology

    Click Start. This scan may take a while, so please be patient. A log may open when the scan is complete (if not, go to C:\Program Files\EsetOnlineScanner\ and open the file log.txt). Click Edit - Select All then copy/paste that log back here please.

    Post that log and the Malwarebytes log please.
    Lebe den Tag!

    Jintan - Die Marke, bei der alles stimmt!

  10. #10
    Forenbenutzer
    Registriert seit
    21.04.2008
    Beiträge
    76

    Re: Erratic PC issues

    Hi Jintan,
    Yes system seems to be ok at the moment.
    Malwarebytes detetced nothing, result......
    Code:
    Malwarebytes' Anti-Malware 1.50.1.1100
    www.malwarebytes.org
    
    Database version: 6658
    
    Windows 5.1.2600 Service Pack 3
    Internet Explorer 8.0.6001.18702
    
    5/24/2011 10:57:24 AM
    mbam-log-2011-05-24 (10-57-24).txt
    
    Scan type: Quick scan
    Objects scanned: 157046
    Time elapsed: 3 minute(s), 54 second(s)
    
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0
    
    Memory Processes Infected:
    (No malicious items detected)
    
    Memory Modules Infected:
    (No malicious items detected)
    
    Registry Keys Infected:
    (No malicious items detected)
    
    Registry Values Infected:
    (No malicious items detected)
    
    Registry Data Items Infected:
    (No malicious items detected)
    
    Folders Infected:
    (No malicious items detected)
    
    Files Infected:
    (No malicious items detected)
    Eset scan to follow in next post.

Seite 1 von 2 12 LetzteLetzte

Aktive Benutzer

Aktive Benutzer

Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1)

Ähnliche Themen

  1. Windows XP Definitely Got Some Bad Issues
    Von charlies im Forum English-Help
    Antworten: 11
    Letzter Beitrag: 24.12.2010, 02:05
  2. virtual memory issues please help!!
    Von mroels im Forum Archiv
    Antworten: 10
    Letzter Beitrag: 29.04.2008, 19:40
  3. spyware issues
    Von SteWieH im Forum Archiv
    Antworten: 4
    Letzter Beitrag: 30.08.2007, 22:59
  4. Plase help, IE Issues.
    Von Kagerusui im Forum Archiv
    Antworten: 33
    Letzter Beitrag: 15.06.2005, 18:15
  5. Help with Win XP issues
    Von Excelsior22 im Forum Archiv
    Antworten: 8
    Letzter Beitrag: 16.03.2005, 02:53

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •