Malware...

[stefanus]

Yesterday! I was looking at IE News on line. Down in the right hand corner of my screen, a window opened informing me my pc was compromised and wasbeing cleaned up, by what I thought was Micro-Soft Security. It was not, my IE froze, so I went to Firefox, and that was inaccessable also. I then tried to stop the bogus security running, but it would not allow me. I closed down the pc and rebooted. Low and behold, I could not access the internet. I tried to run Antimalware Bytes and Spybot, but neither of them would run. Eventually, mbam started to run and low and behold, this was found. (See log) I deleted the malware but IE and Firefox would still not open. The proxy server address etc had been changed, eventually I found a solution, not via Windows, but with Yahoo, showing how to restore the settings. As per instructions, I reset and shut down my pc till to-day. It now seems to operating fine, but I would realy appreciate it if this is correct. I will add a HJT at the end. There is one item in there, which I do not recollect being there previously. It is this: O1 - Hosts: ::1 localhost
Thank you in advance. (Incidently, with out the help and encouragement from varios people on this site, over the years. I would never have accomplished what I did yesterday. Once again, Thank you...)

Stefanus


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:18:54, on 19/10/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10k_Ac tiveX.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 127.0.0.1:29775
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\s wg.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInsta nce.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [PCDrProfiler] C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe -r
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [bcbmcxat] C:\Users\Steve\AppData\Local\Temp\vdoajwsdo\ijsxpb fyhsn.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - [url]http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab[/url]
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - [url]http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab[/url]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [url]http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[/url]
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll,avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\Windows\System32\YPCSER~1.EXE

--
End of file - 8401 bytes

[stefanus]

Internet Explorer 8.0.6001.18975
Windows 6.0.6002 Service Pack 2

18/10/2010 22:33:25
mbam-log-2010-10-18 (22-33-25).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 291806
Time elapsed: 1 hour(s), 15 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\Steve\Local Settings\Application Data\syssvc.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

[classicsoftware]

Was the Hijackthis log before or after the MBAM log? If it was before, I need a new HJT log. You seem to still be infected.

[stefanus]

The HJT log was to-day: 19/10/2010 @13:18:54hrs and the Mbam was yesterday: 18/10/2010 @22:33:25hrs

[classicsoftware]

The HJT log was to-day: 19/10/2010 @13:18:54hrs and the Mbam was yesterday: 18/10/2010 @22:33:25hrs

Give me a fresh HJT log.

[stefanus]

Herewith, the HJT log as requested.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:42:46, on 20/10/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10k_Ac tiveX.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 127.0.0.1:29775
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\s wg.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInsta nce.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [PCDrProfiler] C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe -r
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [bcbmcxat] C:\Users\Steve\AppData\Local\Temp\vdoajwsdo\ijsxpb fyhsn.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - [url]http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab[/url]
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - [url]http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab[/url]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [url]http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[/url]
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll,avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\Windows\System32\YPCSER~1.EXE

--
End of file - 8281 bytes

[stefanus]

Also the latest Mbam log. As you can see, it was re-infected by the same malware.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4875

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18975

20/10/2010 14:14:31
mbam-log-2010-10-20 (14-14-31).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 295338
Time elapsed: 1 hour(s), 20 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run\bcbmcxat (Trojan.FakeAlert.Gen) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[classicsoftware]

I am aware you are still infected. I will post back later tonight.

[stefanus]

I am aware you are still infected. I will post back later tonight.

Thank you...

[classicsoftware]

Let's try this:

You will need to run Combofix next. Please read the instructions here (http://www.bleepingcomputer.com/combofix/how-to-use-combofix) and post back with:


The combofix log.
A new HJT log
A description of how the system is running.


This is a serious tool. Please make sure you have a current backup of all of your data before proceeding.

[stefanus]

Thank you once again. Have a dentist appointment shortly, so will get to it on my return.

[stefanus]

The Combofix log is very long. How much of it is required?
The machine seems to be running fine now.

Herewith latest HJT log.

ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:06:41, on 21/10/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Windows\system32\notepad.exe
C:\Windows\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 127.0.0.1:29775
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\s wg.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInsta nce.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [PCDrProfiler] C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe -r
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - [url]http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab[/url]
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - [url]http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab[/url]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [url]http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[/url]
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll C:\Windows\System32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\Windows\System32\YPCSER~1.EXE

--
End of file - 7939 bytes

[classicsoftware]

The Combofix log is very long. How much of it is required?

All of it...

[stefanus]

Here it is...

All of it...

Geewiz...

Here goes...


ComboFix 10-10-20.04 - Steve 21/10/2010 15:51:03.2.2 - x86
Running from: c:\users\Steve\Downloads\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\Steve\GoToAssistDownloadHelper.exe
c:\windows\system32\jusched.exe

.
((((((((((((((((((((((((( Files Created from 2010-09-21 to 2010-10-21 )))))))))))))))))))))))))))))))
.

2010-10-21 14:56 . 2010-10-21 14:56 -------- d-----w- c:\users\Steve\AppData\Local\temp
2010-10-21 14:56 . 2010-10-21 14:56 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-10-21 14:56 . 2010-10-21 14:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-10-20 16:34 . 2010-10-20 16:34 -------- d-----w- c:\windows\en
2010-10-20 16:33 . 2010-09-22 23:21 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2010-10-20 16:02 . 2009-09-04 16:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2010-10-20 16:02 . 2009-09-04 16:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2010-10-20 16:01 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2010-10-20 16:00 . 2010-10-20 16:00 15712 ----a-w- c:\program files\Common Files\Windows Live\.cache\f40506671cb706f1f\MeshBetaRemover.exe
2010-10-20 15:57 . 2010-10-20 15:57 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\80331f671cb706f18\DSETUP.dll
2010-10-20 15:57 . 2010-10-20 15:57 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\80331f671cb706f18\DXSETUP.exe
2010-10-20 15:57 . 2010-10-20 15:57 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\80331f671cb706f18\dsetup32.dll
2010-10-20 15:57 . 2010-10-20 15:57 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\7dbc53071cb706f17\DSETUP.dll
2010-10-20 15:57 . 2010-10-20 15:57 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\7dbc53071cb706f17\DXSETUP.exe
2010-10-20 15:57 . 2010-10-20 15:57 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\7dbc53071cb706f17\dsetup32.dll
2010-10-20 15:43 . 2010-10-20 15:43 -------- d-----w- c:\users\Steve\AppData\Local\Windows Live
2010-10-20 15:34 . 2009-08-04 08:02 754688 ----a-w- c:\windows\system32\webservices.dll
2010-10-18 13:14 . 2010-06-20 12:57 17880 ----a-w- c:\program files\Mozilla Firefox\nse480E.tmp\xpcom.dll
2010-10-13 16:30 . 2010-09-13 13:56 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2010-10-13 16:30 . 2010-09-13 13:56 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2010-10-13 16:28 . 2010-08-31 15:44 531968 ----a-w- c:\windows\system32\comctl32.dll
2010-09-29 12:18 . 2010-06-22 13:30 2048 ----a-w- c:\windows\system32\tzres.dll
2010-09-29 12:18 . 2010-08-26 04:23 13312 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2010-09-22 23:47 . 2010-09-22 23:47 49016 ----a-w- c:\windows\system32\sirenacm.dll
2010-09-22 23:32 . 2010-09-22 23:32 301936 ----a-w- c:\windows\WLXPGSS.SCR
2010-09-21 16:39 . 2010-09-21 16:39 -------- d-----w- c:\programdata\UAB
2010-09-21 16:39 . 2010-09-21 16:39 -------- d-----w- c:\users\Steve\AppData\Local\PC_Drivers_Headquarte rs
2010-09-21 16:39 . 2010-09-21 16:39 -------- d-----w- c:\programdata\Driver Whiz
2010-09-21 16:38 . 2010-09-21 16:38 -------- d-----w- c:\program files\Driver Whiz

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
.

((((((((((((((((((((((((((((( SnapShot@2009-09-29_15.25.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-10-20 20:30 . 2009-04-11 06:28 52224 c:\windows\winsxs\x86_wudfusbcciddriver.inf_31bf38 56ad364e35_6.0.6002.18005_none_646528b4fed68d6e\WU DFUsbccidDriver.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 54272 c:\windows\winsxs\x86_wsdscdrv.inf_31bf3856ad364e3 5_6.0.6002.18005_none_d229bfffc6a32553\WSDScPrx.dl l
+ 2009-10-20 20:29 . 2009-04-11 06:28 56320 c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e3 5_6.0.6002.18005_none_173ab75eae68bace\WSDPrPxy.dl l
+ 2009-10-20 20:30 . 2009-02-18 18:39 23408 c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6002.18005_none_57 f9c58d7a0eaddb\XamlViewer_v0300.exe
+ 2009-10-20 20:30 . 2009-02-18 18:39 94208 c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6002. 18005_none_fc07886f78f1dcd7\WindowsFormsIntegratio n.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 98304 c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6002.18005_ none_5efd9a79981257bd\UIAutomationTypes.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 40960 c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6002.180 05_none_06884a618813ae63\UIAutomationProvider.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 35680 c:\windows\winsxs\x86_wpf-terminalserverwpfwrapperexe_31bf3856ad364e35_6.0.6 002.18005_none_264ab896c8c14f1a\TsWpfWrp.exe
+ 2010-06-24 08:07 . 2009-11-08 09:55 99176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.1.6001.18 242_none_f290a8a118b9134c\PresentationHostProxy.dl l
+ 2010-06-23 09:46 . 2010-03-30 11:59 99176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.22 377_none_2cb6816f90457914\PresentationHostProxy.dl l
+ 2010-06-23 09:46 . 2010-04-05 12:19 99176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.18 236_none_2c57240a7708502f\PresentationHostProxy.dl l
+ 2009-10-20 20:31 . 2009-02-18 18:39 41344 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.18 005_none_2c768fb876f0e8b7\PresentationHostProxy.dl l
+ 2009-10-20 20:30 . 2009-02-18 18:39 43904 c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6002.18 005_none_07850fdb0f4fdd06\PresentationFontCache.ex e
+ 2009-10-20 20:30 . 2009-02-18 18:39 68960 c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6002.18005_none_ad9c8b f401cf9f35\PenIMC.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 40448 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_ 6.0.6002.18112_none_2177efcb83dd35a0\wpdusb.sys
+ 2009-11-18 12:40 . 2009-10-01 01:01 61952 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_ 6.0.6002.18112_none_2177efcb83dd35a0\wpdmtpus.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 68608 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_ 6.0.6002.18112_none_2177efcb83dd35a0\wpdmtpip.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 78336 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_ 6.0.6002.18112_none_2177efcb83dd35a0\wpdmtpbt.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 33280 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_ 6.0.6002.18112_none_2177efcb83dd35a0\wpdconns.dll
+ 2009-10-20 20:29 . 2009-04-11 04:42 31616 c:\windows\winsxs\x86_winusb.inf_31bf3856ad364e35_ 6.0.6002.18005_none_f9e05d9212c3259d\winusb.sys
+ 2009-10-20 20:30 . 2009-04-11 06:27 87552 c:\windows\winsxs\x86_windowssearchengine_31bf3856 ad364e35_7.0.6002.18005_none_3d746908b76294a3\Sear chFilterHost.exe
+ 2009-10-20 20:30 . 2009-04-11 06:28 71680 c:\windows\winsxs\x86_windowssearchengine_31bf3856 ad364e35_7.0.6002.18005_none_3d746908b76294a3\prop defs.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 43008 c:\windows\winsxs\x86_windowssearchengine_31bf3856 ad364e35_7.0.6002.18005_none_3d746908b76294a3\msst rc.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 33280 c:\windows\winsxs\x86_windowssearchengine_31bf3856 ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssp rxy.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 87040 c:\windows\winsxs\x86_windowssearchengine_31bf3856 ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssi tlb.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 11776 c:\windows\winsxs\x86_windowssearchengine_31bf3856 ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssh ooks.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 60416 c:\windows\winsxs\x86_windowssearchengine_31bf3856 ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssc ntrs.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 35328 c:\windows\winsxs\x86_windowssearchengine_31bf3856 ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssc b.dll
+ 2008-08-26 16:30 . 2008-05-27 04:59 18904 c:\windows\winsxs\x86_windowssearchengine..uredque ryschema.bin_31bf3856ad364e35_7.0.6002.18005_none_ 8ae0ca49e0ec3b69\StructuredQuerySchemaTrivial.bin
+ 2009-10-20 20:30 . 2009-04-11 06:28 13312 c:\windows\winsxs\x86_windowssearch-wtrservicingsupport_31bf3856ad364e35_7.0.6002.1800 5_none_1828286a1e96a1f4\WSWTRSvc.exe
+ 2009-10-20 20:29 . 2009-04-11 04:42 73216 c:\windows\winsxs\x86_wdma_usb.inf_31bf3856ad364e3 5_6.0.6002.18005_none_6f0354adb3fcb0ad\USBAUDIO.sy s
+ 2010-06-10 22:52 . 2010-04-12 12:22 17256 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.22380_ none_a7f79e1e62233116\ServiceMonikerSupport.dll
+ 2010-06-10 22:52 . 2010-04-12 12:21 17256 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.18239_ none_a7ad138948d4e9a6\ServiceMonikerSupport.dll
+ 2009-10-20 20:30 . 2009-02-18 18:38 18288 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.18005_ none_a7c97e5948c03629\ServiceMonikerSupport.dll
+ 2009-10-20 20:30 . 2009-02-18 18:38 99680

[stefanus]

Haveing a problem copying and pasting, too many bytes...
Bit late, so I shall continue to-morrow...
Please excuse me...


c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6002.18213_none_8cb9a 1f386f18fd3\mrxsmb20.sys
+ 2009-10-20 20:29 . 2009-04-11 04:14 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6002.18005_none_8cc66 ea786e7ac42\mrxsmb20.sys
+ 2010-04-14 08:07 . 2010-02-23 11:30 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6001.22641_none_8b3a5 c7ea302fb9e\mrxsmb20.sys
+ 2010-04-14 08:07 . 2010-02-23 11:32 78848 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6001.18431_none_8abb8 db989dd42bc\mrxsmb20.sys
+ 2010-04-14 08:07 . 2010-02-23 11:30 58368 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6000.21230_none_895dc 3b6a5d56b80\mrxsmb20.sys
+ 2010-02-10 13:45 . 2009-12-04 16:14 58368 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6000.21173_none_89358 2fea5f32a22\mrxsmb20.sys
+ 2010-04-14 08:07 . 2010-02-23 13:14 58368 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6000.17025_none_88e3f 6638cab3151\mrxsmb20.sys
+ 2009-10-20 20:29 . 2009-04-11 06:28 95232 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005 _none_19e8b8b06714b3ae\SCardSvr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 40448 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005 _none_19e8b8b06714b3ae\certprop.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 79872 c:\windows\winsxs\x86_microsoft-windows-shmig_31bf3856ad364e35_6.0.6002.18005_none_6189f2a 77440c81c\shmig.dll
+ 2008-05-22 15:06 . 2008-01-19 07:33 62976 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_341 7f75aaa6413e3\windeploy.exe
+ 2009-10-20 20:30 . 2009-04-11 06:28 13312 c:\windows\winsxs\x86_microsoft-windows-servicepackcoordinator_31bf3856ad364e35_6.0.6002.1 8005_none_36ac9b2124b2bf26\spcmsg.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_microsoft-windows-sendmail_31bf3856ad364e35_6.0.6002.18005_none_5cd4 f36d1924f929\sendmail.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 61440 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6be af3aa18d\wscsvc.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 17920 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6be af3aa18d\wscisvif.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 33280 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6be af3aa18d\wscapi.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 67584 c:\windows\winsxs\x86_microsoft-windows-security-licensing-wmi_31bf3856ad364e35_6.0.6002.18005_none_50382e6ff 6c7e8f5\slwmi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 12288 c:\windows\winsxs\x86_microsoft-windows-security-licensing-wga_31bf3856ad364e35_6.0.6002.18005_none_5032e2f3f 6cc83e3\slwga.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 42496 c:\windows\winsxs\x86_microsoft-windows-security-licensing-slc_31bf3856ad364e35_6.0.6002.18005_none_5062f685f 6a7c614\slcinst.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 29184 c:\windows\winsxs\x86_microsoft-windows-search-profilenotify_31bf3856ad364e35_7.0.6002.18005_none _da55184c8a60e444\wsepno.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 60928 c:\windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6002.18005_none_8c636822b2 598b6a\SLUINotify.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 92918 c:\windows\winsxs\x86_microsoft-windows-s..ity-licensing-tools_31bf3856ad364e35_6.0.6002.18005_none_c7357f7 a65060ad7\slmgr.vbs
+ 2009-10-20 20:29 . 2009-04-11 06:28 90112 c:\windows\winsxs\x86_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.0.6002.18005_none_0c6 d503021655122\wshext.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 79872 c:\windows\winsxs\x86_microsoft-windows-s..entication-usermode_31bf3856ad364e35_6.0.6002.18005_none_3c0d 3c3f7176376a\authz.dll
+ 2009-10-20 20:29 . 2009-04-11 04:46 15872 c:\windows\winsxs\x86_microsoft-windows-rndis-usb-microport_31bf3856ad364e35_6.0.6002.18005_none_c6d 83e044fcd06f5\usb8023.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 33280 c:\windows\winsxs\x86_microsoft-windows-rndis-miniport_31bf3856ad364e35_6.0.6002.18005_none_e31a 28b989072805\RNDISMP.sys
+ 2009-10-20 20:30 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_microsoft-windows-rastapi_31bf3856ad364e35_6.0.6002.18005_none_10cfa 36576fecc90\rastapi.dll
+ 2010-08-12 11:34 . 2010-06-18 18:00 36864 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6002.22427_none_0f 77105600c85cb8\rtutils.dll
+ 2010-08-12 11:34 . 2010-06-18 17:31 36864 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6002.18274_none_0e b4612ae7d5ff77\rtutils.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 36352 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6002.18005_none_0f 010d1ce79c5ae9\rtutils.dll
+ 2010-08-12 11:34 . 2010-06-18 16:38 36352 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6001.22715_none_0d 996dc6039bb8f5\rtutils.dll
+ 2010-08-12 11:34 . 2010-06-18 16:43 36352 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6001.18495_none_0c b94dceeabefe65\rtutils.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 29696 c:\windows\winsxs\x86_microsoft-windows-rasifmon_31bf3856ad364e35_6.0.6002.18005_none_ccbb 42deea504b23\ifmon.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 49152 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.180 05_none_610bb87d5da7583b\cmmon32.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 16896 c:\windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6002.18005_non e_713248d4a5d30dec\rasdial.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 52736 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe 0ed77911065\rasdiag.dll
+ 2009-10-20 20:29 . 2009-04-11 04:46 69120 c:\windows\winsxs\x86_microsoft-windows-rasbase-rassstp_31bf3856ad364e35_6.0.6002.18005_none_9bbd2 8fee50e4840\rassstp.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 41472 c:\windows\winsxs\x86_microsoft-windows-rasbase-raspppoe_31bf3856ad364e35_6.0.6002.18005_none_581e fd2c97b9a460\raspppoe.sys
+ 2009-10-20 20:30 . 2009-04-11 06:27 61952 c:\windows\winsxs\x86_microsoft-windows-r..-commandline-editor_31bf3856ad364e35_6.0.6002.18005_none_337fad 0927d14431\reg.exe
+ 2009-10-20 20:29 . 2009-04-11 04:45 72192 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c5 4c66d2f\pacer.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 50664 c:\windows\winsxs\x86_microsoft-windows-pshed_31bf3856ad364e35_6.0.6002.18005_none_5dde5c5 c2a365a60\PSHED.DLL
+ 2008-05-22 15:06 . 2008-01-19 07:36 29184 c:\windows\winsxs\x86_microsoft-windows-profsvc_31bf3856ad364e35_

[stefanus]

+ 2009-10-20 20:30 . 2009-04-11 06:28 29184 c:\windows\winsxs\x86_microsoft-windows-search-profilenotify_31bf3856ad364e35_7.0.6002.18005_none _da55184c8a60e444\wsepno.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 60928 c:\windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6002.18005_none_8c636822b2 598b6a\SLUINotify.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 92918 c:\windows\winsxs\x86_microsoft-windows-s..ity-licensing-tools_31bf3856ad364e35_6.0.6002.18005_none_c7357f7 a65060ad7\slmgr.vbs
+ 2009-10-20 20:29 . 2009-04-11 06:28 90112 c:\windows\winsxs\x86_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.0.6002.18005_none_0c6 d503021655122\wshext.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 79872 c:\windows\winsxs\x86_microsoft-windows-s..entication-usermode_31bf3856ad364e35_6.0.6002.18005_none_3c0d 3c3f7176376a\authz.dll
+ 2009-10-20 20:29 . 2009-04-11 04:46 15872 c:\windows\winsxs\x86_microsoft-windows-rndis-usb-microport_31bf3856ad364e35_6.0.6002.18005_none_c6d 83e044fcd06f5\usb8023.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 33280 c:\windows\winsxs\x86_microsoft-windows-rndis-miniport_31bf3856ad364e35_6.0.6002.18005_none_e31a 28b989072805\RNDISMP.sys
+ 2009-10-20 20:30 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_microsoft-windows-rastapi_31bf3856ad364e35_6.0.6002.18005_none_10cfa 36576fecc90\rastapi.dll
+ 2010-08-12 11:34 . 2010-06-18 18:00 36864 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6002.22427_none_0f 77105600c85cb8\rtutils.dll
+ 2010-08-12 11:34 . 2010-06-18 17:31 36864 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6002.18274_none_0e b4612ae7d5ff77\rtutils.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 36352 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6002.18005_none_0f 010d1ce79c5ae9\rtutils.dll
+ 2010-08-12 11:34 . 2010-06-18 16:38 36352 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6001.22715_none_0d 996dc6039bb8f5\rtutils.dll
+ 2010-08-12 11:34 . 2010-06-18 16:43 36352 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6001.18495_none_0c b94dceeabefe65\rtutils.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 29696 c:\windows\winsxs\x86_microsoft-windows-rasifmon_31bf3856ad364e35_6.0.6002.18005_none_ccbb 42deea504b23\ifmon.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 49152 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.180 05_none_610bb87d5da7583b\cmmon32.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 16896 c:\windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6002.18005_non e_713248d4a5d30dec\rasdial.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 52736 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe 0ed77911065\rasdiag.dll
+ 2009-10-20 20:29 . 2009-04-11 04:46 69120 c:\windows\winsxs\x86_microsoft-windows-rasbase-rassstp_31bf3856ad364e35_6.0.6002.18005_none_9bbd2 8fee50e4840\rassstp.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 41472 c:\windows\winsxs\x86_microsoft-windows-rasbase-raspppoe_31bf3856ad364e35_6.0.6002.18005_none_581e fd2c97b9a460\raspppoe.sys
+ 2009-10-20 20:30 . 2009-04-11 06:27 61952 c:\windows\winsxs\x86_microsoft-windows-r..-commandline-editor_31bf3856ad364e35_6.0.6002.18005_none_337fad 0927d14431\reg.exe
+ 2009-10-20 20:29 . 2009-04-11 04:45 72192 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c5 4c66d2f\pacer.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 50664 c:\windows\winsxs\x86_microsoft-windows-pshed_31bf3856ad364e35_6.0.6002.18005_none_5dde5c5 c2a365a60\PSHED.DLL
+ 2008-05-22 15:06 . 2008-01-19 07:36 29184 c:\windows\winsxs\x86_microsoft-windows-profsvc_31bf3856ad364e35_6.0.6002.18005_none_fd9cd 0792fced6f5\profprov.dll
+ 2010-03-11 09:38 . 2010-02-20 23:12 24064 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.22 343_none_dce43630c143fd87\wbhstipm.dll
+ 2010-03-11 09:38 . 2010-02-20 23:12 22528 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.22 343_none_dce43630c143fd87\wbhst_pm.dll
+ 2010-03-11 09:38 . 2010-02-20 23:12 48128 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.22 343_none_dce43630c143fd87\w3wphost.dll
+ 2010-03-11 09:38 . 2010-02-20 23:12 15872 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.22 343_none_dce43630c143fd87\w3tp.dll
+ 2009-12-10 09:24 . 2009-11-09 12:32 24064 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18 210_none_dc78084ba810bde5\wbhstipm.dll
+ 2009-12-10 09:24 . 2009-11-09 12:32 22528 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18 210_none_dc78084ba810bde5\wbhst_pm.dll
+ 2009-12-10 09:24 . 2009-11-09 12:32 47616 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18 210_none_dc78084ba810bde5\w3wphost.dll
+ 2009-12-10 09:24 . 2009-11-09 12:32 15872 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18 210_none_dc78084ba810bde5\w3tp.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 47616 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18 005_none_dc87d5dda8042659\w3wphost.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 24064 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6001.22 638_none_db0d95a6c4110b25\wbhstipm.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 22528 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6001.22 638_none_db0d95a6c4110b25\wbhst_pm.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 46592

[stefanus]

c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6001.22 638_none_db0d95a6c4110b25\w3wphost.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 15872 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6001.22 638_none_db0d95a6c4110b25\w3tp.dll
+ 2009-12-10 09:24 . 2009-11-09 13:23 24064 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6001.18 428_none_da8ec6e1aaeb5243\wbhstipm.dll
+ 2009-12-10 09:24 . 2009-11-09 13:23 22528 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6001.18 428_none_da8ec6e1aaeb5243\wbhst_pm.dll
+ 2009-12-10 09:24 . 2009-11-09 13:23 46592 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6001.18 428_none_da8ec6e1aaeb5243\w3wphost.dll
+ 2009-12-10 09:24 . 2009-11-09 13:23 15872 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6001.18 428_none_da8ec6e1aaeb5243\w3tp.dll
+ 2010-03-11 09:38 . 2010-02-20 23:36 25088 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6000.21 227_none_d930fcdec6e37b07\wbhstipm.dll
+ 2010-03-11 09:38 . 2010-02-20 23:36 22016 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6000.21 227_none_d930fcdec6e37b07\wbhst_pm.dll
+ 2010-03-11 09:38 . 2010-02-20 23:36 39424 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6000.21 227_none_d930fcdec6e37b07\w3wphost.dll
+ 2010-03-11 09:38 . 2010-02-20 23:36 15360 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6000.21 227_none_d930fcdec6e37b07\w3tp.dll
+ 2010-03-11 09:38 . 2010-02-20 23:55 25088 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6000.17 022_none_d8a25cbbadca5f63\wbhstipm.dll
+ 2010-03-11 09:38 . 2010-02-20 23:55 22016 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6000.17 022_none_d8a25cbbadca5f63\wbhst_pm.dll
+ 2010-03-11 09:38 . 2010-02-20 23:55 39424 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6000.17 022_none_d8a25cbbadca5f63\w3wphost.dll
+ 2010-03-11 09:38 . 2010-02-20 23:55 15360 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6000.17 022_none_d8a25cbbadca5f63\w3tp.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 19968 c:\windows\winsxs\x86_microsoft-windows-processmodel_31bf3856ad364e35_6.0.6002.18005_none_ b8ad073aa1e5201e\w3wp.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 52224 c:\windows\winsxs\x86_microsoft-windows-processmodel_31bf3856ad364e35_6.0.6002.18005_none_ b8ad073aa1e5201e\apphostsvc.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 97792 c:\windows\winsxs\x86_microsoft-windows-printing-oleprn_31bf3856ad364e35_6.0.6002.18005_none_7d1255 665c646ab2\oleprn.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 33280 c:\windows\winsxs\x86_microsoft-windows-pnputil_31bf3856ad364e35_6.0.6002.18005_none_ff4f3 b9db9a951ba\PnPutil.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 26112 c:\windows\winsxs\x86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.0.6002.18005_none_ eaccaa9547e03a1f\DeviceEject.exe
+ 2009-10-20 20:30 . 2009-04-11 06:32 54248 c:\windows\winsxs\x86_microsoft-windows-partitionmanager_31bf3856ad364e35_6.0.6002.18005_n one_e3878c97b7915bdf\partmgr.sys
+ 2009-10-20 20:29 . 2009-04-11 06:27 58368 c:\windows\winsxs\x86_microsoft-windows-p..tomizationsnonwinpe_31bf3856ad364e35_6.0.6002.1 8005_none_cdba626f8c588d30\PnPUnattend.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 15360 c:\windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.0.6002.18005_none_8cbdde b9c585058e\inetppui.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 31744 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.1 8005_none_335eb6cf5a3b9de4\perfdisk.dll
+ 2009-11-18 12:40 . 2009-09-24 22:54 26112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.22164_non e_2de0cf8ef1d7d6cc\printfilterpipelineprxy.dll
+ 2009-11-18 12:40 . 2009-09-24 22:54 26112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.18060_non e_2d53319bd8bdd1a6\printfilterpipelineprxy.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 26112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.18005_non e_2d991295d888a8b3\printfilterpipelineprxy.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 57344 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.1 8005_none_630ef3dcfbf6e9a4\logman.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 88576 c:\windows\winsxs\x86_microsoft-windows-ole-automation-legacy_31bf3856ad364e35_6.0.6002.18005_none_3bff33 9efed611ca\olepro32.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 35840 c:\windows\winsxs\x86_microsoft-windows-ocsetup_31bf3856ad364e35_6.0.6002.18005_none_e568a b025c6992bf\ocsetup.exe
+ 2010-06-10 22:52 . 2010-04-05 17:14 67072

[stefanus]

4-05 17:14 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6002.22377_none_ 78f4d4e8cf978645\asycfilt.dll
+ 2010-06-10 22:52 . 2010-04-05 17:01 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6002.18236_none_ 78957783b65a5d60\asycfilt.dll
+ 2010-06-10 22:52 . 2010-04-05 16:28 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6001.22665_none_ 77173258d26ae282\asycfilt.dll
+ 2010-06-10 22:52 . 2010-04-05 16:07 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6001.18454_none_ 76976349b9461049\asycfilt.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 22016 c:\windows\winsxs\x86_microsoft-windows-o..inefiles-win32-apis_31bf3856ad364e35_6.0.6002.18005_none_ad5672dc f647053c\cscdll.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 31744 c:\windows\winsxs\x86_microsoft-windows-o..inefiles-win32-apis_31bf3856ad364e35_6.0.6002.18005_none_ad5672dc f647053c\cscapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 17408 c:\windows\winsxs\x86_microsoft-windows-ntvdm-vdmdbg_31bf3856ad364e35_6.0.6002.18005_none_50b897 cb80d4ae0e\vdmdbg.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 46080 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8 f2266fafa2e8\csrstub.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 82944 c:\windows\winsxs\x86_microsoft-windows-nslookup_31bf3856ad364e35_6.0.6002.18005_none_cd6b ecfc639459d1\nslookup.exe
+ 2010-03-11 09:38 . 2010-02-20 23:10 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6002.22343_none_75f50 0438adc1033\nshhttp.dll
+ 2009-12-09 10:38 . 2009-11-03 21:55 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6002.22258_none_75ef2 fe38adfadb0\nshhttp.dll
+ 2010-03-11 09:38 . 2010-02-20 23:06 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6002.18210_none_7588d 25e71a8d091\nshhttp.dll
+ 2009-12-09 10:38 . 2009-11-03 21:43 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6002.18136_none_75793 25c71b3a356\nshhttp.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6001.22638_none_741e5 fb98da91dd1\nshhttp.dll
+ 2009-12-09 10:38 . 2009-11-03 22:01 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6001.22556_none_7406b d678dbb25de\nshhttp.dll
+ 2010-03-11 09:38 . 2010-02-20 23:39 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6001.18428_none_739f9 0f4748364ef\nshhttp.dll
+ 2009-12-09 10:38 . 2009-11-03 22:17 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6001.18356_none_737d1 eb6749d88ed\nshhttp.dll
+ 2010-03-11 09:38 . 2010-02-20 23:35 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.21227_none_7241c 6f1907b8db3\nshhttp.dll
+ 2009-12-09 10:38 . 2009-11-03 12:49 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.21154_none_721e5 4699096985a\nshhttp.dll
+ 2010-03-11 09:38 . 2010-02-20 23:54 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.17022_none_71b32 6ce7762720f\nshhttp.dll
+ 2009-12-09 10:38 . 2009-11-03 13:01 24064 c:\windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.16951_none_7191d e9e777b7949\nshhttp.dll
+ 2009-10-20 20:29 . 2009-04-11 04:14 35328 c:\windows\winsxs\x86_microsoft-windows-npfs_31bf3856ad364e35_6.0.6002.18005_none_a85cfde9 1a0cfe5b\npfs.sys
+ 2009-10-20 20:29 . 2009-04-11 06:27 74752 c:\windows\winsxs\x86_microsoft-windows-newdev_31bf3856ad364e35_6.0.6002.18005_none_1361c4 604dcae2ff\newdev.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 39936 c:\windows\winsxs\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_no ne_423dda1e430226e5\networkitemfactory.dll
+ 2009-10-20 20:29 . 2009-04-11 05:42 93696 35_

[stefanus]

c:\windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6002.18005_none _09d569e703376473\bridge.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 99816 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6002.18005_none_cf0f e8f527aca355\FWPKCLNT.SYS
+ 2010-08-12 11:33 . 2010-06-16 15:56 98192 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22713_none_cda6 490a43adceb3\FWPKCLNT.SYS
+ 2010-04-14 08:07 . 2010-02-18 17:36 98192 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22636_none_cd93 a82a43bb5573\FWPKCLNT.SYS
+ 2010-02-10 13:45 . 2009-12-08 20:36 98392 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22577_none_cd69 66de43dae167\FWPKCLNT.SYS
+ 2010-04-14 08:07 . 2010-02-18 11:50 85504 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21226_none_cbb8 0fac468cdeac\FWPKCLNT.SYS
+ 2010-02-10 13:45 . 2009-12-08 17:44 85504 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21175_none_cb80 fde046b653e3\FWPKCLNT.SYS
+ 2010-10-13 16:29 . 2010-09-06 17:37 17920 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.22481_none_5c60 f3828112acea\netevent.dll
+ 2010-10-13 16:29 . 2010-09-06 16:19 17920 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.18306_none_5c32 d78967afac4b\netevent.dll
+ 2010-10-13 16:29 . 2010-09-06 16:03 17920 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.22756_none_5a9f f2d083cf82a6\netevent.dll
+ 2010-10-13 16:29 . 2010-09-06 16:23 17920 c:\windows\winsxs\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.18524_none_5a34 c34f6a9b5f34\netevent.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 19968 c:\windows\winsxs\x86_microsoft-windows-ncdprop_31bf3856ad364e35_6.0.6002.18005_none_55a13 53f0d2506e6\NcdProp.dll
+ 2009-10-20 20:29 . 2009-04-11 04:45 66560 c:\windows\winsxs\x86_microsoft-windows-nbsmb_31bf3856ad364e35_6.0.6002.18005_none_61560a3 ff5180c84\smb.sys
+ 2008-05-22 15:06 . 2008-01-19 07:33 17408 c:\windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6002.1 8005_none_d31a09b83321829f\iashost.exe
+ 2009-10-20 20:30 . 2009-04-11 06:28 47104 c:\windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6002.1 8005_none_d31a09b83321829f\iasdatastore.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 57344 c:\windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6002.1 8005_none_d31a09b83321829f\iasads.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 33792 c:\windows\winsxs\x86_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_6.0.6002.1 8005_none_faec53b03fa80e64\iaspolcy.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 58880 c:\windows\winsxs\x86_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_6.0.6002.1 8005_none_faec53b03fa80e64\iasacct.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 76288 c:\windows\winsxs\x86_microsoft-windows-n..ion_service_iassvcs_31bf3856ad364e35_6.0.6002.1 8005_none_e4680adfbcddcca2\iassvcs.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 70656 c:\windows\winsxs\x86_microsoft-windows-n.._service_runtimeapi_31bf3856ad364e35_6.0.6002.1 8005_none_8d80784b5dfd7b22\iashlpr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 28672 c:\windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6002.18005_none_45f9f0dde 92709b8\FwRemoteSvr.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 48104 c:\windows\winsxs\x86_microsoft-windows-mup_31bf3856ad364e35_6.0.6002.18005_none_aeddc23a5 5a59404\mup.sys
+ 2009-10-20 20:29 . 2009-04-11 06:28 37376 c:\windows\winsxs\x86_microsoft-windows-msmq-http_31bf3856ad364e35_6.0.6002.18005_none_c25aca8b b3999e83\mqise.dll
+ 2009-10-14 18:04 . 2009-09-04 14:19 60928 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6002.22218_none_c9c75e 79bba6335e\msasn1.dll
+ 2009-10-14 18:04 . 2009-09-04 11:41 60928 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6002.18106_none_c94691 06a28244f5\msasn1.dll
+ 2009-10-14 18:04 . 2009-09-04 14:23 61440 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6001.22515_none_c7ddeb b3be829235\msasn1.dll
+ 2009-10-14 18:04 . 2009-09-04 12:24 61440 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6001.18326_none_c74a7d 60a56c2a8c\msasn1.dll
+ 2009-10-14 18:04 . 2009-09-04 12:32 60928 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6000.21122_none_c5e9b2 7fc167074b\msasn1.dll
+ 2009-10-14 18:04 . 2009-09-04 12:38 60928 c:\windows\winsxs\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6000.16922_none_c5603d 92a849343f\msasn1.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 97792 c:\windows\winsxs\x86_microsoft-windows-mprapi_31bf3856ad364e35_6.0.6002.18005_none_15f7fd f850266685\mprapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 68608 c:\windows\winsxs\x86_microsoft-windows-mpr_31bf3856ad364e35_6.0.6002.18005_none_afc1427e5 5131ced\mpr.dll
+ 2010-08-12 11:34 . 2010-06-17 18:30 23552 c:\windows\winsxs\x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6002.22426_none_f4 c2683b236c5a9c\WMM2EXT.dll
+ 2010-03-10 21:08 . 2009-10-14 14:12 23552 c:\windows\winsxs\x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6002.22245_none_f4 abc44d237d7ed9\WMM2EXT.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 23040 c:\windows\winsxs\x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6002.18273_none_f3 ffb9100a79fd5b\WMM2EXT.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 23040 c:\windows\winsxs\x86_microsoft-windows-moviemaker_31bf3856ad364e

[stefanus]

1-09 13:18 51712 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18428_no ne_10dbdcd4b4db4e82\admwprox.dll
+ 2010-03-11 09:38 . 2010-02-20 23:36 10752 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.21227_no ne_0f7e12d1d0d37746\wamregps.dll
+ 2010-03-11 09:38 . 2010-02-20 23:35 26624 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.21227_no ne_0f7e12d1d0d37746\rsca.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 31232 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.21227_no ne_0f7e12d1d0d37746\iissyspr.dll
+ 2010-03-11 09:38 . 2010-02-20 21:31 30720 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.21227_no ne_0f7e12d1d0d37746\iisrstas.exe
+ 2010-03-11 09:38 . 2010-02-20 21:31 14848 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.21227_no ne_0f7e12d1d0d37746\iisreset.exe
+ 2010-03-11 09:38 . 2010-02-20 23:31 89088 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.21227_no ne_0f7e12d1d0d37746\iisreg.dll
+ 2010-03-11 09:38 . 2010-02-20 23:30 51200 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.21227_no ne_0f7e12d1d0d37746\admwprox.dll
+ 2010-03-11 09:38 . 2010-02-20 23:55 10752 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.17022_no ne_0eef72aeb7ba5ba2\wamregps.dll
+ 2010-03-11 09:38 . 2010-02-20 23:55 26624 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.17022_no ne_0eef72aeb7ba5ba2\rsca.dll
+ 2010-03-11 09:38 . 2010-02-20 23:52 31232 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.17022_no ne_0eef72aeb7ba5ba2\iissyspr.dll
+ 2010-03-11 09:38 . 2010-02-20 21:46 30720 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.17022_no ne_0eef72aeb7ba5ba2\iisrstas.exe
+ 2010-03-11 09:38 . 2010-02-20 21:46 14848 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.17022_no ne_0eef72aeb7ba5ba2\iisreset.exe
+ 2010-03-11 09:38 . 2010-02-20 23:52 89088 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.17022_no ne_0eef72aeb7ba5ba2\iisreg.dll
+ 2010-03-11 09:38 . 2010-02-20 23:50 51200 c:\windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6000.17022_no ne_0eef72aeb7ba5ba2\admwprox.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 54784 c:\windows\winsxs\x86_microsoft-windows-iis-isapifilter_31bf3856ad364e35_6.0.6002.18005_none_5 586816005dcc67a\filter.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 41984 c:\windows\winsxs\x86_microsoft-windows-iis-httperrors_31bf3856ad364e35_6.0.6002.18005_none_f8 efdf896075a81b\custerr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 43520 c:\windows\winsxs\x86_microsoft-windows-iis-httpcache_31bf3856ad364e35_6.0.6002.18005_none_61a b45b2d41659a4\cachhttp.dll
+ 2010-03-11 09:38 . 2010-02-20 23:12 23552 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6002.22343_none _d1f1e1863fa65f97\w3dt.dll
+ 2010-03-11 09:38 . 2010-02-20 23:08 12800 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6002.22343_none _d1f1e1863fa65f97\hwebcore.dll
+ 2010-03-11 09:38 . 2010-02-20 23:07 23552 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6002.18210_none _d185b3a126731ff5\w3dt.dll
+ 2009-12-10 09:24 . 2009-11-09 12:30 12800 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6002.18210_none _d185b3a126731ff5\hwebcore.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 23552 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6001.22638_none _d01b40fc42736d35\w3dt.dll
+ 2010-03-11 09:38 . 2010-02-20 23:29 12800 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6001.22638_none _d01b40fc42736d35\hwebcore.dll
+ 2010-03-11 09:38 . 2010-02-20 23:40 23552 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6001.18428_none _cf9c7237294db453\w3dt.dll
+ 2009-12-10 09:24 . 2009-11-09 13:20 12800 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6001.18428_none _cf9c7237294db453\hwebcore.dll
+ 2010-03-11 09:38 . 2010-02-20 23:36 23552 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6000.21227_none _ce3ea8344545dd17\w3dt.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 12288 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6000.21227_none _ce3ea8344545dd17\hwebcore.dll
+ 2010-03-11 09:38 . 2010-02-20 23:55 23552 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6000.17022_none _cdb008112c2cc173\w3dt.dll
+ 2010-03-11 09:38 . 2010-02-20 23:51 12288 c:\windows\winsxs\x86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6000.17022_none _cdb008112c2cc173\hwebcore.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 58880 c:\windows\winsxs\x86_microsoft-windows-iis-cgi_31bf3856ad364e35_6.0.6002.18005_none_58939dd85 fe6ae05\iisfcgi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 86016 c:\windows\winsxs\x86_microsoft-windows-iis-adsicompatibility_31bf3856ad364e35_6.0.6002.18005_ none_e986aa15de7d490b\iisext.dll
+ 2010-10-13 16:29 . 2010-09-08 06:21 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23067_none_a9097 03b8d8eb057\iesetup.dll
+ 2010-10-13 16:29 . 2010-09-08 06:21 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23067_none_a9097 03b8d8eb057\iernonce.dll
+ 2010-08-12 11:34 . 2010-06-26 06:48 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23040_none_a9180 e0d8d84c714\iesetup.dll
+ 2010-08-12 11:34 . 2010-06-26 06:48 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23040_none_a9180 e0d8d84c714\iernonce.dll
+ 2010-06-10 22:52 . 2010-05-04 06:30 71680

[stefanus]

c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a9418 06b8d645750\iesetup.dll
+ 2010-06-10 22:52 . 2010-05-04 06:30 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a9418 06b8d645750\iernonce.dll
+ 2010-03-31 12:06 . 2010-02-23 15:00 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22995_none_a8e72 7c18da89e3a\iesetup.dll
+ 2010-03-31 12:06 . 2010-02-23 15:00 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22995_none_a8e72 7c18da89e3a\iernonce.dll
+ 2010-01-22 13:10 . 2010-01-02 14:50 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22973_none_a8fac 7058d9a33aa\iesetup.dll
+ 2010-01-22 13:10 . 2010-01-02 14:50 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22973_none_a8fac 7058d9a33aa\iernonce.dll
+ 2009-12-09 10:39 . 2009-11-21 14:59 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22956_none_a9136 7bb8d8747cd\iesetup.dll
+ 2009-12-09 10:39 . 2009-11-21 14:59 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22956_none_a9136 7bb8d8747cd\iernonce.dll
+ 2009-10-14 18:05 . 2009-08-27 13:21 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22918_none_a940a 7ff8d650ab7\iesetup.dll
+ 2009-10-14 18:05 . 2009-08-27 13:21 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22918_none_a940a 7ff8d650ab7\iernonce.dll
+ 2010-10-13 16:29 . 2010-09-08 05:56 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18975_none_a8732 cb4747ac3b5\iesetup.dll
+ 2010-10-13 16:29 . 2010-09-08 05:56 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18975_none_a8732 cb4747ac3b5\iernonce.dll
+ 2010-08-12 11:34 . 2010-06-26 06:02 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18943_none_a8919 be474643d34\iesetup.dll
+ 2010-08-12 11:34 . 2010-06-26 06:02 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18943_none_a8919 be474643d34\iernonce.dll
+ 2010-06-10 22:52 . 2010-05-04 05:55 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3 d2e744f8405\iesetup.dll
+ 2010-06-10 22:52 . 2010-05-04 05:55 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3 d2e744f8405\iernonce.dll
+ 2010-03-31 12:06 . 2010-02-23 06:33 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18904_none_a8bdd bde7442e6c7\iesetup.dll
+ 2010-03-31 12:06 . 2010-02-23 06:33 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18904_none_a8bdd bde7442e6c7\iernonce.dll
+ 2010-01-22 13:10 . 2010-01-02 06:32 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18882_none_a8655 a047485967a\iesetup.dll
+ 2010-01-22 13:10 . 2010-01-02 06:32 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18882_none_a8655 a047485967a\iernonce.dll
+ 2009-12-09 10:39 . 2009-11-21 06:34 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18865_none_a87df aba7472aa9d\iesetup.dll
+ 2009-12-09 10:39 . 2009-11-21 06:34 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18865_none_a87df aba7472aa9d\iernonce.dll
+ 2009-10-14 18:05 . 2009-08-27 05:17 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18828_none_a8ac3 b48744f86de\iesetup.dll
+ 2009-10-14 18:05 . 2009-08-27 05:17 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18828_none_a8ac3 b48744f86de\iernonce.dll
+ 2008-05-22 15:07 . 2008-01-19 07:34 69120 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6002.18005_none_c7bc2 e305b9b14ba\iesetup.dll
+ 2010-09-29 12:18 . 2010-08-26 05:15 13312 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.23061_none_8422 41d16004f2b8\iecompat.dll
+ 2010-08-12 11:33 . 2010-06-24 05:17 16896 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.23039_none_844a b3e55fe5699d\ieco

[stefanus]

6-24 05:17 16896 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.23039_none_844a b3e55fe5699d\iecompat.dll
+ 2010-05-26 07:56 . 2010-04-16 00:06 41984 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.23013_none_845a 52015fda99b1\iecompat.dll
+ 2010-03-24 09:51 . 2010-02-18 12:44 64000 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22993_none_8403 fa7f601b45f7\iecompat.dll
+ 2010-01-27 10:12 . 2009-12-10 13:03 69120 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22963_none_8424 6a436002f224\iecompat.dll
+ 2009-10-28 09:41 . 2009-10-01 11:55 92160 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22933_none_8444 da075fea9e51\iecompat.dll
+ 2010-09-29 12:18 . 2010-08-26 04:23 13312 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18969_none_83a0 d11a46dfe78b\iecompat.dll
+ 2010-08-12 11:33 . 2010-06-24 04:49 16896 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18942_none_83af 6eec46d5fe48\iecompat.dll
+ 2010-05-26 07:56 . 2010-04-15 04:20 41984 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18922_none_83c5 0ec446c5c666\iecompat.dll
+ 2010-03-24 09:51 . 2010-02-18 04:45 64000 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18902_none_83da ae9c46b58e84\iecompat.dll
+ 2010-01-27 10:12 . 2009-12-10 05:05 69120 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18872_none_838e fd4246ee54f4\iecompat.dll
+ 2009-10-28 09:41 . 2009-10-01 03:59 92160 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18842_none_83af 6d0646d60121\iecompat.dll
+ 2010-10-13 16:29 . 2010-09-08 06:22 66560 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_8.0.6001.23067_none_2 b61a47e727a2bdd\mshtmled.dll
+ 2010-10-13 16:29 . 2010-09-08 05:57 66560 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_8.0.6001.18975_none_2 acb60f759663f3b\mshtmled.dll
+ 2010-10-13 16:29 . 2010-09-08 04:42 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23067_none_df86a a2109d76aae\msfeedssync.exe
+ 2010-10-13 16:29 . 2010-09-08 06:21 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23067_none_df86a a2109d76aae\msfeedsbs.dll
+ 2010-08-12 11:34 . 2010-06-26 05:12 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23040_none_df954 7f309cd816b\msfeedssync.exe
+ 2010-08-12 11:34 . 2010-06-26 06:49 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23040_none_df954 7f309cd816b\msfeedsbs.dll
+ 2010-06-10 22:52 . 2010-05-04 04:58 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23019_none_dfbeb a5109ad11a7\msfeedssync.exe
+ 2010-06-10 22:52 . 2010-05-04 06:30 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23019_none_dfbeb a5109ad11a7\msfeedsbs.dll

[stefanus]

+ 2010-03-31 12:06 . 2010-02-23 13:25 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22995_none_df646 1a709f15891\msfeedssync.exe
+ 2010-03-31 12:06 . 2010-02-23 15:01 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22995_none_df646 1a709f15891\msfeedsbs.dll
+ 2010-01-22 13:10 . 2010-01-02 13:12 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22973_none_df780 0eb09e2ee01\msfeedssync.exe
+ 2010-01-22 13:10 . 2010-01-02 14:51 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22973_none_df780 0eb09e2ee01\msfeedsbs.dll
+ 2009-12-09 10:39 . 2009-11-21 13:05 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22956_none_df90a 1a109d00224\msfeedssync.exe
+ 2009-12-09 10:39 . 2009-11-21 15:00 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22956_none_df90a 1a109d00224\msfeedsbs.dll
+ 2009-10-14 18:05 . 2009-08-27 11:43 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22918_none_dfbde 1e509adc50e\msfeedssync.exe
+ 2009-10-14 18:05 . 2009-08-27 13:22 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22918_none_dfbde 1e509adc50e\msfeedsbs.dll
+ 2010-10-13 16:29 . 2010-09-08 04:25 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18975_none_def06 699f0c37e0c\msfeedssync.exe
+ 2010-10-13 16:29 . 2010-09-08 05:57 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18975_none_def06 699f0c37e0c\msfeedsbs.dll
+ 2010-08-12 11:34 . 2010-06-26 04:24 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18943_none_df0ed 5c9f0acf78b\msfeedssync.exe
+ 2010-08-12 11:34 . 2010-06-26 06:03 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18943_none_df0ed 5c9f0acf78b\msfeedsbs.dll
+ 2010-06-10 22:52 . 2010-05-04 04:30 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18928_none_df297 713f0983e5c\msfeedssync.exe
+ 2010-06-10 22:52 . 2010-05-04 05:56 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18928_none_df297 713f0983e5c\msfeedsbs.dll
+ 2010-03-31 12:06 . 2010-02-23 04:54 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18904_none_df3b1 5c3f08ba11e\msfeedssync.exe
+ 2010-03-31 12:06 . 2010-02-23 06:34 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18904_none_df3b1 5c3f08ba11e\msfeedsbs.dll
+ 2010-01-22 13:10 . 2010-01-02 04:56 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18882_none_dee29 3e9f0ce50d1\msfeedssync.exe
+ 2010-01-22 13:10 . 2010-01-02 06:33 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18882_none_dee29 3e9f0ce50d1\msfeedsbs.dll
+ 2009-12-09 10:39 . 2009-11-21 04:59 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18865_none_defb3 49ff0bb64f4\msfeedssync.exe
+ 2009-12-09 10:39 . 2009-11-21 06:35 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18865_none_defb3 49ff0bb64f4\msfeedsbs.dll
+ 2009-10-14 18:05 . 2009-08-27 03:41 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18828_none_df297 52df0984135\msfeedssync.exe
+ 2009-10-14 18:05 . 2009-08-27 05:18 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18828_none_df297 52df0984135\msfeedsbs.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 52224 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_6.0.6002.18005_none_fe396 815d7e3cf11\msfeedsbs.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 87040 c:\windows\winsxs\x86_microsoft-windows-ie-extensionmanager_31bf3856ad364e35_6.0.6002.18005_n one_50110c917488da3d\iedw.exe
+ 2010-10-13 16:29 . 2010-09-08 06:21 43520 c:\windows\winsxs\x86_microsoft-windows-ie-controls_31bf3856ad364e35_8.0.6001.23067_none_ad1a 13017f081fb6\licmgr10.dll
+ 2010-10-13 16:29 . 2010-09-08 05:57 43520 c:\windows\winsxs\x86_microsoft-windows-ie-controls_31bf3856ad364e35_8.0.6001.18975_none_ac83 cf7a65f43314\licmgr10.dll
+ 2010-10-13 16:29 . 2010-09-08 06:25 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 3067_none_e521ae94d0e878cf\WininetPlugin.dll
+ 2010-10-13 16:29 . 2010-09-08 06:21 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 3067_none_e521ae94d0e878cf\jsproxy.dll
+ 2010-08-12 11:34 . 2010-06-26 06:51 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 3040_none_e5304c66d0de8f8c\WininetPlugin.dll
+ 2010-08-12 11:34 . 2010-06-26 06:48 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 3040_none_e5304c66d0de8f8c\jsproxy.dll
+ 2010-06-10 22:52 . 2010-05-04 06:31 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 3019_none_e559bec4d0be1fc8\WininetPlugin.dll
+ 2010-06-10 22:52 . 2010-05-04 06:30 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 3019_none_e559bec4d0be1fc8\jsproxy.dll
+ 2010-03-31 12:06 . 2010-02-23 15:06 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 2995_none_e4ff661ad10266b2\WininetPlugin.dll
+ 2010-03-31 12:06 . 2010-02-23 15:01 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 2995_none_e4ff661ad10266b2\jsproxy.dll
+ 2010-01-22 13:10 . 2010-01-02 14:56 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 2973_none_e513055ed0f3fc22\WininetPlugin.dll
+ 2010-01-22 13:10 . 2010-01-02 14:50 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 2973_none_e513055ed0f3fc22\jsproxy.dll
+ 2009-12-09 10:39 . 2009-11-21 15:03 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 2956_none_e52ba614d0e11045\WininetPlugin.dll
+ 2009-12-09 10:39 . 2009-11-21 14:59 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 2956_none_e52ba614d0e11045\jsproxy.dll
+ 2009-10-14 18:05 . 2009-08-27 13:29 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 29

[stefanus]

8-27 13:21 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.2 2918_none_e558e658d0bed32f\jsproxy.dll
+ 2010-10-13 16:29 . 2010-09-08 06:01 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8975_none_e48b6b0db7d48c2d\WininetPlugin.dll
+ 2010-10-13 16:29 . 2010-09-08 05:57 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8975_none_e48b6b0db7d48c2d\jsproxy.dll
+ 2010-08-12 11:34 . 2010-06-26 06:05 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8943_none_e4a9da3db7be05ac\WininetPlugin.dll
+ 2010-08-12 11:34 . 2010-06-26 06:02 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8943_none_e4a9da3db7be05ac\jsproxy.dll
+ 2010-06-10 22:52 . 2010-05-04 05:59 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8928_none_e4c47b87b7a94c7d\WininetPlugin.dll
+ 2010-06-10 22:52 . 2010-05-04 05:55 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8928_none_e4c47b87b7a94c7d\jsproxy.dll
+ 2010-03-31 12:06 . 2010-02-23 06:39 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8904_none_e4d61a37b79caf3f\WininetPlugin.dll
+ 2010-03-31 12:06 . 2010-02-23 06:34 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8904_none_e4d61a37b79caf3f\jsproxy.dll
+ 2010-01-22 13:10 . 2010-01-02 06:38 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8882_none_e47d985db7df5ef2\WininetPlugin.dll
+ 2010-01-22 13:10 . 2010-01-02 06:32 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8882_none_e47d985db7df5ef2\jsproxy.dll
+ 2009-12-09 10:39 . 2009-11-21 06:40 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8865_none_e4963913b7cc7315\WininetPlugin.dll
+ 2009-12-09 10:39 . 2009-11-21 06:34 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8865_none_e4963913b7cc7315\jsproxy.dll
+ 2009-10-14 18:05 . 2009-08-27 05:22 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8828_none_e4c479a1b7a94f56\WininetPlugin.dll
+ 2009-10-14 18:05 . 2009-08-27 05:18 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.1 8828_none_e4c479a1b7a94f56\jsproxy.dll
+ 2009-06-11 11:12 . 2009-04-11 06:28 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.1 8005_none_03d46c899ef4dd32\WininetPlugin.dll
+ 2009-06-11 11:12 . 2009-04-11 06:28 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.1 8005_none_03d46c899ef4dd32\jsproxy.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 37888 c:\windows\winsxs\x86_microsoft-windows-i..stfilteringbinaries_31bf3856ad364e35_6.0.6002.1 8005_none_d47c83e3a96c4256\modrqflt.dll
+ 2010-09-29 12:18 . 2010-06-22 13:26 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.22429_none_17a ad34f1fde10ac\tzupd.exe
+ 2010-05-26 07:56 . 2010-04-23 14:23 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.22391_none_175 71fa5201e0c64\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:20 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.22320_none_17a 1cecf1fe62f76\tzupd.exe
+ 2009-11-25 11:30 . 2009-10-29 09:26 18944 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.22254_none_178 55e4d1ffaeb7e\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:26 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18276_none_16e 8242406ebb36b\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:26 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18248_none_170 a947c06d19246\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:26 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18192_none_16c e813e06ff88ca\tzupd.exe
+ 2008-05-22 15:07 . 2008-01-19 07:33 18944 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18132_none_170 f60c606cee124\tzupd.exe
+ 2008-05-22 15:07 . 2008-01-19 07:33 18944 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18005_none_173 2cf8206b3dc2f\tzupd.exe
+ 2010-09-29 12:18 . 2010-06-22 13:04 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22717_none_15c d30bf22b16ce9\tzupd.exe
+ 2010-05-26 07:56 . 2010-04-23 14:02 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22677_none_158 c4f5122e21768\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:43 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22612_none_15c 82d6722b5f10f\tzupd.exe
+ 2009-11-25 11:30 . 2009-10-29 09:44 18944 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22552_none_159 cebd122d663ac\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:44 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18497_none_14e d10c809d4b259\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:44 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18464_none_150 a7fae09bf1281\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:44 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18410_none_153 c8e22099a2170\tzupd.exe
+ 2008-05-22 15:07 . 2008-01-19 07:33 18944 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18351_none_151 24cd609b9ad64\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:39 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.21209_none_13f 396ef25812ba9\tzupd.exe
+ 2009-11-25 11:30 . 2009-10-29 09:36 18944 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.21150_none_13b 482d325b1d628\tzupd.exe
+ 2010-02-24 09:44 . 2010-01-23 09:58 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.17007_none_136 7f7aa0c655c0a\tzupd.exe
+ 2009-11-25 11:30 . 2009-10-29 09:51 18944 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6000.16947_none_133 cdfd80c85988c\tzupd.exe
+ 2010-04-14 08:07 . 2010-02-18 11:42 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.2 2341_none_1428eb9d92bddb72\tunnel.sys
+ 2010-04-14 08:07 . 2010-02-18 11:42 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.2 2341_none_1428eb9d92bddb72\TUNMP.SYS
+ 2010-04-14 08:07 . 2010-02-18 11:28 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.1 8209_none_13d290d27978969c\tunnel.sys

[stefanus]

2-18 12:04 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.1 7021_none_0fe812727f4356a5\tunnel.sys
+ 2010-04-14 08:07 . 2010-02-18 12:04 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.1 7021_none_0fe812727f4356a5\TUNMP.SYS
+ 2009-10-20 20:29 . 2009-04-11 06:28 53760 c:\windows\winsxs\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.0.6002.18005_none_19fcd6ed 45154956\PMIGRATE.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 87552 c:\windows\winsxs\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.0.6002.18005_none_19fcd6ed 45154956\IMSCPROP.exe
+ 2010-03-11 09:38 . 2010-02-20 23:07 43520 c:\windows\winsxs\x86_microsoft-windows-i..henticationbinaries_31bf3856ad364e35_6.0.6002.2 2343_none_22e5433d125cc342\authsspi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:04 43520 c:\windows\winsxs\x86_microsoft-windows-i..henticationbinaries_31bf3856ad364e35_6.0.6002.1 8210_none_22791557f92983a0\authsspi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:27 43520 c:\windows\winsxs\x86_microsoft-windows-i..henticationbinaries_31bf3856ad364e35_6.0.6001.2 2638_none_210ea2b31529d0e0\authsspi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:35 43520 c:\windows\winsxs\x86_microsoft-windows-i..henticationbinaries_31bf3856ad364e35_6.0.6001.1 8428_none_208fd3edfc0417fe\authsspi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:30 36352 c:\windows\winsxs\x86_microsoft-windows-i..henticationbinaries_31bf3856ad364e35_6.0.6000.2 1227_none_1f3209eb17fc40c2\authsspi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:50 36352 c:\windows\winsxs\x86_microsoft-windows-i..henticationbinaries_31bf3856ad364e35_6.0.6000.1 7022_none_1ea369c7fee3251e\authsspi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:08 30720 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22343_none_f7f4165eb 3ad7c4d\httpapi.dll
+ 2009-12-09 10:38 . 2009-11-03 21:53 30720 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22258_none_f7ee45feb 3b119ca\httpapi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:05 30720 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.18210_none_f787e8799 a7a3cab\httpapi.dll
+ 2009-12-09 10:38 . 2009-11-03 21:42 30720 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.18136_none_f77848779 a850f70\httpapi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:29 31232 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22638_none_f61d75d4b 67a89eb\httpapi.dll
+ 2009-12-09 10:38 . 2009-11-03 22:00 31232 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22556_none_f605d382b 68c91f8\httpapi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:37 31232 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.18428_none_f59ea70f9 d54d109\httpapi.dll
+ 2009-12-09 10:38 . 2009-11-03 22:15 31232 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.18356_none_f57c34d19 d6ef507\httpapi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:31 31232 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6000.21227_none_f440dd0cb 94cf9cd\httpapi.dll
+ 2009-12-09 10:38 . 2009-11-03 12:46 31232 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6000.21154_none_f41d6a84b 9680474\httpapi.dll
+ 2010-03-11 09:38 . 2010-02-20 23:51 31232 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6000.17022_none_f3b23ce9a 033de29\httpapi.dll
+ 2009-12-09 10:38 . 2009-11-03 12:57 31232 c:\windows\winsxs\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6000.16951_none_f390f4b9a 04ce563\httpapi.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 26112 c:\windows\winsxs\x86_microsoft-windows-hid-user_31bf3856ad364e35_6.0.6002.18005_none_d897c179 84907383\hidserv.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 41472 c:\windows\winsxs\x86_microsoft-windows-hbaapi_31bf3856ad364e35_6.0.6002.18005_none_4aff25 ef70419ecf\hbaapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 75264 c:\windows\winsxs\x86_microsoft-windows-grouppolicy-base_31bf3856ad364e35_6.0.6002.18005_none_2a0edaea e4247151\gpapi.dll
+ 2010-06-10 22:52 . 2010-05-26 17:10 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a63377 0d08fc3\lpk.dll
+ 2010-06-10 22:52 . 2010-05-26 17:09 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a63377 0d08fc3\fontsub.dll
+ 2010-06-10 22:52 . 2010-05-26 17:08 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a63377 0d08fc3\dciman32.dll
+ 2010-06-10 22:52 . 2010-05-26 17:08 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a63377 0d08fc3\atmlib.dll
+ 2010-01-13 12:50 . 2009-10-19 13:48 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22247_none_ac1ef1197 0e467fb\lpk.dll
+ 2010-01-13 12:50 . 2009-10-19 13:47 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22247_none_ac1ef1197 0e467fb\fontsub.dll
+ 2010-01-13 12:50 . 2009-10-19 13:47 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22247_none_ac1ef1197 0e467fb\dciman32.dll
+ 2010-01-13 12:50 . 2009-10-19 13:46 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22247_none_ac1ef1197 0e467fb\atmlib.dll
+ 2009-07-14 21:15 . 2009-06-15 14:52 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea5 7db7e87\lpk.dll
+ 2010-01-13 12:50 . 2009-10-19 13:35 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea5 7db7e87\fontsub.dll
+ 2009-07-14 21:15 . 2009-06-15 14:51 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea5 7db7e87\dciman32.dll
+ 2010-06-10 22:52 . 2010-05-26 17:06 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea5 7db7e87\atmlib.dll
+ 2009-07-14 21:15 . 2009-06-15 14:52 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18124_none_aba7f3485 7b9444a\lpk.dll
+ 2010-01-13 12:50 . 2009-10-19 13:35 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18124_none_aba7f3485 7b9444a\fontsub.dll
+ 2009-07-14 21:15 . 2009-06-15 14:51 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18124_none_aba7f3485 7b9444a\dciman32.dll
+ 2009-07-14 21:15 . 2009-04-11 06:28 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18124_none_aba7f3485 7b9444a\atmlib.dll
+ 2009-07-14 21:15 . 2009-04-11 06:28 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe91845 7a82898\atmlib.dll
+ 2010-06-10 22:52 . 2010-05-26 16:20 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a77 3a3ec00\lpk.dll
+ 2010-06-10 22:52 . 2010-05-26 16:19 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a77 3a3ec00\fontsub.dll
+ 2010-06-10 22:52 . 2010-05-26 16:18 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a77 3a3ec00\dciman32.dll
+ 2010-06-10 22:52 . 2010-05-26 16:17 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a77 3a3ec00\atmlib.dll
+ 2010-01-13 12:50 . 2009-10-19 14:09 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22544_none_aa357e537 3c0c6d2\lpk.dll
+ 2010-01-13 12:50 . 2009-10-19 14:08 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22544_none_aa357e537 3c0c6d2\fontsub.dll
+ 2010-01-13 12:50 . 2009-10-19 14:08 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22544_none_aa357e537 3c0c6d2\dciman32.dll
+ 2010-01-13 12:50 . 2009-10-19 14:07 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22544_none_aa357e537 3c0c6d2\atmlib.dll
+ 2010-01-13 12:50 . 2009-10-19 14:24 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445 ac5641e\fontsub.dll
+ 2009-07-14 21:15 . 2009-06-15 15:20 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445 ac5641e\dciman32.dll
+ 2010-06-10 22:52 . 2010-05-26 16:16 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445 ac5641e\atmlib.dll
+ 2010-01-13 12:50 . 2009-10-19 14:24 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18344_none_a9abdfa25 aa329e1\fontsub.dll
+ 2009-07-14 21:15 . 2009-06-15 15:20 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18344_none_a9abdfa25 aa32

[stefanus]

6-15 15:20 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18344_none_a9abdfa25 aa329e1\dciman32.dll
+ 2010-01-13 12:50 . 2009-10-19 14:17 24064 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.21142_none_a84d15557 69c394e\lpk.dll
+ 2010-01-13 12:50 . 2009-10-19 14:16 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.21142_none_a84d15557 69c394e\fontsub.dll
+ 2010-01-13 12:50 . 2009-10-19 14:15 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.21142_none_a84d15557 69c394e\dciman32.dll
+ 2010-01-13 12:50 . 2009-10-19 14:14 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.21142_none_a84d15557 69c394e\atmlib.dll
+ 2010-01-13 12:50 . 2009-10-19 14:39 24064 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.16939_none_a7d5725a5 d6ffbb2\lpk.dll
+ 2010-01-13 12:50 . 2009-10-19 14:37 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.16939_none_a7d5725a5 d6ffbb2\fontsub.dll
+ 2010-01-13 12:50 . 2009-10-19 14:37 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.16939_none_a7d5725a5 d6ffbb2\dciman32.dll
+ 2010-01-13 12:50 . 2009-10-19 14:36 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.16939_none_a7d5725a5 d6ffbb2\atmlib.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 16896 c:\windows\winsxs\x86_microsoft-windows-g..policy-cmdlinetools_31bf3856ad364e35_6.0.6002.18005_none_ 3d54780bd9160acd\gpupdate.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 41984 c:\windows\winsxs\x86_microsoft-windows-ftp_31bf3856ad364e35_6.0.6002.18005_none_aed6d6fc5 5abc902\ftp.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 60928 c:\windows\winsxs\x86_microsoft-windows-findstr_31bf3856ad364e35_6.0.6002.18005_none_291b0 46e56d672d0\findstr.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 54272 c:\windows\winsxs\x86_microsoft-windows-feclient_31bf3856ad364e35_6.0.6002.18005_none_c0c5 8a3754b6a02c\feclient.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 53760 c:\windows\winsxs\x86_microsoft-windows-fdeploy_31bf3856ad364e35_6.0.6002.18005_none_e1a10 b494de0202b\fdeploy.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 88064 c:\windows\winsxs\x86_microsoft-windows-fdbth_31bf3856ad364e35_6.1.6002.18005_none_1d6c708 5cffdc449\fdBth.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 99840 c:\windows\winsxs\x86_microsoft-windows-f..temutilitylibraries_31bf3856ad364e35_6.0.6002.1 8005_none_eb81d0e3eccf24e4\ulib.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 19968 c:\windows\winsxs\x86_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.0.6002.1 8005_none_02b21d8f327e1d66\fc.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 20992 c:\windows\winsxs\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none _c468826f70f2b226\ExplorerFrame.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 37376 c:\windows\winsxs\x86_microsoft-windows-es-configurepassword_31bf3856ad364e35_6.0.6002.18005_ none_e9e5c7caedfa0e18\EhStorPwdMgr.dll
+ 2009-10-14 18:10 . 2009-08-31 14:17 18944 c:\windows\winsxs\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.21119_none_375e3 7c82fd728c1\ehtrace.dll
+ 2009-10-14 18:10 . 2009-08-31 15:16 18944 c:\windows\winsxs\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.16919_none_36d4c 2db16b955b5\ehtrace.dll
+ 2009-10-14 18:10 . 2009-08-31 14:17 21504 c:\windows\winsxs\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.21119_none_2e7f2 5c89e39432b\ehdebug.dll
+ 2009-10-14 18:10 . 2009-08-31 15:16 21504 c:\windows\winsxs\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.16919_none_2df5b 0db851b701f\ehdebug.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 82944 c:\windows\winsxs\x86_microsoft-windows-ehome-devices-mcx2prov_31bf3856ad364e35_6.0.6002.18005_none_da78 aae016329fa4\Mcx2Prov.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 43520 c:\windows\winsxs\x86_microsoft-windows-efs-rekeywiz_31bf3856ad364e35_6.0.6002.18005_none_09d6 238908f9aaa1\rekeywiz.exe
+ 2008-05-22 15:07 . 2008-01-19 07:34 57344 c:\windows\winsxs\x86_microsoft-windows-e..otocol-host-service_31bf3856ad364e35_6.0.6002.18005_none_8c356 0ecfb3fdb56\eapsvc.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 91136 c:\windows\winsxs\x86_microsoft-windows-e..ongestioncontroller_31bf3856ad364e35_6.0.6002.1 8005_none_d303d6f4e296e695\MFCongestionController. dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 93696 c:\windows\winsxs\x86_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.0.6002.18005_none_65ff0438 c08bf3b7\eappgnui.dll
+ 2009-10-20 20:29 . 2009-04-11 04:23 76288 c:\windows\winsxs\x86_microsoft-windows-dxg_31bf3856ad364e35_6.0.6002.18005_none_aad6baaa5 83ed419\dxg.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 27624 c:\windows\winsxs\x86_microsoft-windows-dumpata_31bf3856ad364e35_6.0.6002.18005_none_6b299 70a6b2ac670\Dumpata.sys
+ 2009-10-20 20:29 . 2009-04-11 06:28 75264 c:\windows\winsxs\x86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d578 7d470a61746\dot3msm.dll
+ 2008-05-22 15:06 . 2008-01-19 07:34 45056 c:\windows\winsxs\x86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d578 7d470a61746\dot3api.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 49664 c:\windows\winsxs\x86_microsoft-windows-dot3-netsh-helper_31bf3856ad364e35_6.0.6002.18005_none_dc928d 6fc13935b8\dot3cfg.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 86528 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.18005_none_e3cdf5 e97f7b2eb7\dnsrslvr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 19968 c:\windows\winsxs\x86_microsoft-windows-dns-client-winrnr_31bf3856ad364e35_6.0.6002.18005_none_5b39cb fb4d3802b6\winrnr.dll
+ 2009-10-20 20:29 . 2009-04-11 04:39 19456 c:\windows\winsxs\x86_microsoft-windows-diskdump_31bf3856ad364e35_6.0.6002.18005_none_68a9 af189467fc29\Diskdump.sys
+ 2009-10-20 20:29 . 2009-04-11 06:28 57344 c:\windows\winsxs\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6002.18005_none_b3d9d2699 e1659b0\samlib.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 54784 c:\windows\winsxs\x86_microsoft-windows-dims-keyroam_31bf3856ad364e35_6.0.6002.18005_none_5d8f9 10c2abf1b4e\dimsroam.dll
+ 2009-10-20 20:29 . 2009-04-11 04:14 75264 c:\windows\winsxs\x86_microsoft-windows-dfsclient_31bf3856ad364e35_6.0.6002.18005_none_898 5a6e9e33db02a\dfsc.sys
+ 2009-10-20 20:31 . 2009-04-11 06:27 65536 c:\windows\winsxs\x86_microsoft-windows-devicepairingapp_31bf3856ad364e35_6.1.6002.18005_n one_39b8a7fe9df9ac9e\DevicePairingWizard.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 45056 c:\windows\winsxs\x86_microsoft-windows-dataclen_31bf3856ad364e35_6.0.6002.18005_none_f891 ae7d9097853a\dataclen.dll
+ 2009-11-18 12:40 . 2009-10-01 01:02 31232 c:\windows\winsxs\x86_microsoft-windows-d..thmtpcontexthandler_31bf3856ad364e35_7.0.6002.1 8112_none_302fc434dcfbe04c\BthMtpContextHandler.dl l
+ 2009-10-20 20:29 . 2009-04-11 06:27 60416 c:\windows\winsxs\x86_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.0.6002.18005_none_7156d67f 8ac9ab5b\IMJPMGR.EXE
+ 2009-10-20 20:29 . 2009-04-11 06:27 59392 c:\windows\winsxs\x86_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.0.6002.18005_none_7156d67f 8ac9ab5b\IMJPDSVR.EXE
+ 2009-10-20 20:29 . 2009-04-11 06:28 29184 c:\windows\winsxs\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6002.18005_none_8f8f0d20 ba53c683\uxsms.dll
+ 2008-05-22 15:06 . 2008-01-19 07:34 81920 c:\windows\winsxs\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6002.18005_none_8f8f0d20 ba53c683\dwmredir.dll
+ 2009-10-20 20:30 . 2009-04-11 06:27 81920 c:\windows\winsxs\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6002.18005_none_8f8f0d20 ba53c683\dwm.exe

[stefanus]

+ 2009-10-20 20:29 . 2009-04-11 06:28 31744 c:\windows\winsxs\x86_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_6.0.6002.1 8005_none_de1f34a38b533228\imecfm.dll
+ 2010-02-10 13:45 . 2009-12-28 12:07 12288 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.2 2295_none_6798d5c3c48290e9\tsbyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 12:05 22528 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.2 2295_none_6798d5c3c48290e9\msyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 12:04 50176 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.2 2295_none_6798d5c3c48290e9\iyuv_32.dll
+ 2010-02-10 13:45 . 2009-12-04 18:30 12288 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.1 8158_none_673d7986ab41cd60\tsbyuv.dll
+ 2010-02-10 13:45 . 2009-12-04 18:28 22528 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.1 8158_none_673d7986ab41cd60\msyuv.dll
+ 2010-02-10 13:45 . 2009-12-04 18:28 50176 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.1 8158_none_673d7986ab41cd60\iyuv_32.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 12288 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.1 8005_none_6770865eab1bf87f\tsbyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 13:41 11776 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6001.2 2590_none_65ad6269c760bd12\tsbyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 13:40 22528 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6001.2 2590_none_65ad6269c760bd12\msyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 13:40 50176 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6001.2 2590_none_65ad6269c760bd12\iyuv_32.dll
+ 2010-02-10 13:45 . 2009-12-28 12:35 11776 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6001.1 8389_none_6537963eae32e83f\tsbyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 12:32 22528 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6001.1 8389_none_6537963eae32e83f\msyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 12:31 50176 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6001.1 8389_none_6537963eae32e83f\iyuv_32.dll
+ 2010-02-10 13:45 . 2009-12-28 12:31 11776 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6000.2 1188_none_63d9cc3bca2b1103\tsbyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 12:30 22528 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6000.2 1188_none_63d9cc3bca2b1103\msyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 12:28 50176 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6000.2 1188_none_63d9cc3bca2b1103\iyuv_32.dll
+ 2010-02-10 13:45 . 2009-12-28 12:36 11776 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6000.1 6986_none_634e56bab10f0b49\tsbyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 12:34 22528 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6000.1 6986_none_634e56bab10f0b49\msyuv.dll
+ 2010-02-10 13:45 . 2009-12-28 12:32 50176 c:\windows\winsxs\x86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6000.1 6986_none_634e56bab10f0b49\iyuv_32.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 18944 c:\windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31b

[stefanus]

4-11 06:28 18944 c:\windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.0.6002.18005_none_3c77bb 369c52cd10\padrs411.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 32768 c:\windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.0.6002.18005_none_3c77bb 369c52cd10\IMEPADSM.DLL
+ 2009-10-20 20:29 . 2009-04-11 06:28 15360 c:\windows\winsxs\x86_microsoft-windows-d..hared-versiondialog_31bf3856ad364e35_6.0.6002.18005_none _0c7ac8c43729bf30\imever.dll
+ 2009-10-20 20:30 . 2009-04-11 06:27 44544 c:\windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.0.6002.18005_none_ef1 cb7f16f3c7508\IMJPUEX.EXE
+ 2009-10-20 20:30 . 2009-04-11 06:28 37888 c:\windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.0.6002.18005_none_ef1 cb7f16f3c7508\IMJPDCTP.DLL
+ 2009-10-20 20:29 . 2009-04-11 06:27 24064 c:\windows\winsxs\x86_microsoft-windows-d..-japanese-migration_31bf3856ad364e35_6.0.6002.18005_none_105 1bfce8308a832\imjppdmg.exe
+ 2009-10-20 20:30 . 2009-04-11 06:28 29696 c:\windows\winsxs\x86_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.0.6002.18005_none_9872d66 b52cd2ba6\IMEAPIS.DLL
+ 2009-10-20 20:30 . 2009-04-11 06:32 35304 c:\windows\winsxs\x86_microsoft-windows-crashdump_31bf3856ad364e35_6.0.6002.18005_none_a77 8d6cb13f7ce0f\crashdmp.sys
+ 2009-10-20 20:30 . 2009-04-11 06:28 38400 c:\windows\winsxs\x86_microsoft-windows-content-filter-rtf_31bf3856ad364e35_7.0.6002.18005_none_4a41a5df7 40517d0\rtffilt.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 41984 c:\windows\winsxs\x86_microsoft-windows-content-filter-mime_31bf3856ad364e35_7.0.6002.18005_none_128b99fd 3c7c81a4\mimefilt.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 56320 c:\windows\winsxs\x86_microsoft-windows-content-filter-html_31bf3856ad364e35_7.0.6002.18005_none_15e75f09 3a4b2c5d\xmlfilter.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 69120 c:\windows\winsxs\x86_microsoft-windows-consoleime_31bf3856ad364e35_6.0.6002.18005_none_b8 26026c54dd064c\conime.exe
+ 2008-05-22 15:07 . 2008-01-19 07:37 38912 c:\windows\winsxs\x86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6002.18005_none_4ede66 c2b66f93f3\xolehlp.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 58368 c:\windows\winsxs\x86_microsoft-windows-cipher_31bf3856ad364e35_6.0.6002.18005_none_af01f8 66a23a6e87\cipher.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 58368 c:\windows\winsxs\x86_microsoft-windows-capturewizard_31bf3856ad364e35_6.0.6002.18005_none _6e9a9aea2ecda51b\VideoCameraAutoPlayManager.exe
+ 2010-04-14 08:05 . 2010-01-13 17:48 98304 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6002.22311_none_3a689 ec7f7c9ca5e\cabview.dll
+ 2010-04-14 08:05 . 2010-01-13 17:34 98304 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6002.18184_none_39965 180dee23d09\cabview.dll
+ 2010-04-14 08:05 . 2010-01-13 18:51 98304 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6001.22605_none_3890f df3fa97bea5\cabview.dll
+ 2010-04-14 08:05 . 2010-01-15 00:04 98304 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6001.18404_none_38065 ef8e17b085d\cabview.dll
+ 2010-04-14 08:05 . 2010-01-13 18:12 97792 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6000.21203_none_36a89 4f5fd733121\cabview.dll
+ 2010-04-14 08:05 . 2010-01-13 18:23 97792 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6000.17002_none_361df 5fae4567ad9\cabview.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 34304 c:\windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.1.6002.18005_none_2f33863c 711b37e7\wshbth.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 34304 c:\windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.1.6002.18005_none_2f33863c 711b37e7\bthudtask.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 73216 c:\windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.1.6002.18005_none_2f33863c 711b37e7\bthmigplugin.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 31744 c:\windows\winsxs\x86_microsoft-windows-bits-igdsearcher_31bf3856ad364e35_6.0.6002.18005_none_b 357b6158c221aa4\bitsigd.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 17896 c:\windows\winsxs\x86_microsoft-windows-b..uggertransport-1394_31bf3856ad364e35_6.0.6002.18005_none_65b6d03e f1044a44\kd1394.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 17384 c:\windows\winsxs\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.0.6002.18005_none_13a106 2aa9ccba61\kdcom.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 19944 c:\windows\winsxs\x86_microsoft-windows-b..buggertransport-usb_31bf3856ad364e35_6.0.6002.18005_none_9f6922a70 7a9331f\kdusb.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 21504 c:\windows\winsxs\x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.0.6002.18005_none_8ee9411 00db1acf2\msacm32.drv
+ 2009-10-20 20:29 . 2009-04-11 06:28 12800 c:\windows\winsxs\x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.0.6002.18005_none_8ee9411 00db1acf2\mmcico.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 52224 c:\windows\winsxs\x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.0.6002.18005_none_8ee9411 00db1acf2\mmci.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 17408 c:\windows\winsxs\x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.0.6002.18005_none_8ee9411 00db1acf2\midimap.dll
+ 2009-10-20 20:30 . 2009-04-11 06:27 88576 c:\windows\winsxs\x86_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.0.6002.18005_none_788 b3d32e1c18b26\audiodg.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 40960 c:\windows\winsxs\x86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6002.18005_non e_7cc3af8dde4f2233\apihex86.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 75264 c:\windows\winsxs\x86_microsoft-windows-a..ace-ldap-extensions_31bf3856ad364e35_6.0.6002.18005_none_27 601c9d22560396\adsmsext.dll
+ 2010-06-23 09:46 . 2010-04-16 17:14 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22384_none_841f7 3bf774481ad\Apphlpdm.dll
+ 2010-02-24 09:44 . 2010-01-06 16:01 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22303_none_8474f 2d5770488ce\Apphlpdm.dll
+ 2010-06-23 09:46 . 2010-04-16 16:43 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18244_none_83c11 6a45e06721f\Apphlpdm.dll
+ 2010-02-24 09:44 . 2010-01-06 15:38 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18179_none_83a5a 66c5e1a477e\Apphlpdm.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18005_none_83ed5 2d25de52164\Apphlpdm.dll
+ 2010-06-23 09:46 . 2010-04-16 16:08 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22672_none_8241d 12f7a17ddea\Apphlpdm.dll
+ 2010-06-23 09:46 . 2010-04-16 16:05 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18461_none_81c20 22060f30bb1\Apphlpdm.dll
+ 2009-10-20 20:29 . 2009-04-11 04:42 27648 c:\windows\winsxs\x86_mdmcpq.inf_31bf3856ad364e35_ 6.0.6002.18005_none_750016fdb1ed1899\usbser.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 41472 c:\windows\winsxs\x86_mdmbtmdm.inf_31bf3856ad364e3 5_6.0.6002.18005_none_ef8f47268880c1ff\bthmodem.sy s
+ 2009-10-20 20:30 . 2009-04-11 06:31 79872 c:\windows\winsxs\x86_mcstoredb_31bf3856ad364e35_6 .0.6002.18005_none_4e8fcd4edf744234\mcstoredb.dll
+ 2008-05-22 15:06 . 2008-01-19 07:42 52792 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35 _6.0.6002.18005_none_bbfe6647bbd2a4c6\volmgr.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 53224 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35 _6.0.6002.18005_none_bbfe6647bbd2a4c6\termdd.sys
+ 2008-05-22 15:07 . 2008-01-19 07:41 15288 c:\windows\winsxs\x86_machine.inf_31bf3856ad364e35 _6.0.6002.18005_none_bbfe6647bbd2a4c6\swenum.sys
+ 2009-10-20 20:29 . 2009-04-11 04:38 17408 c:\windows\winsxs\x86_keyboard.inf_31bf3856ad364e3 5_6.0.6002.18005_none_9939e6e4d61ab7ca\kbdhid

[stefanus]

4-11 04:38 17408 c:\windows\winsxs\x86_keyboard.inf_31bf3856ad364e3 5_6.0.6002.18005_none_9939e6e4d61ab7ca\kbdhid.sys
+ 2009-10-20 20:29 . 2009-03-30 04:42 72192 c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a _6.0.6002.18005_none_083721311371ff99\ISymWrapper. dll
+ 2009-10-20 20:29 . 2009-04-11 04:39 16384 c:\windows\winsxs\x86_iscsi.inf_31bf3856ad364e35_6 .0.6002.18005_none_3eaf3ebff0c87d7a\iscsilog.dll
+ 2009-10-20 20:29 . 2009-04-11 04:27 64512 c:\windows\winsxs\x86_ipmidrv.inf_31bf3856ad364e35 _6.0.6002.18005_none_fd946afde8b42526\IPMIDrv.sys
+ 2009-10-20 20:29 . 2009-03-30 04:42 28672 c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a _6.0.6002.18005_none_7b531e9721728881\InstallUtil. exe
+ 2009-10-20 20:29 . 2009-04-11 04:42 12800 c:\windows\winsxs\x86_input.inf_31bf3856ad364e35_6 .0.6002.18005_none_225b12d31d3f7b27\hidusb.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 39424 c:\windows\winsxs\x86_input.inf_31bf3856ad364e35_6 .0.6002.18005_none_225b12d31d3f7b27\hidclass.sys
+ 2009-10-20 20:31 . 2009-04-11 06:32 69096 c:\windows\winsxs\x86_hpcisss.inf_31bf3856ad364e35 _6.0.6002.18005_none_7b6943886defef38\HpCISSs.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 30720 c:\windows\winsxs\x86_hidbth.inf_31bf3856ad364e35_ 6.0.6002.18005_none_24fe3635529569c2\hidbth.sys
+ 2009-10-20 20:29 . 2009-04-11 06:28 67072 c:\windows\winsxs\x86_fdwsd_31bf3856ad364e35_6.0.6 002.18005_none_7f93fc7fbf47a3e1\fdWSD.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 68096 c:\windows\winsxs\x86_fdssdp_31bf3856ad364e35_6.0. 6002.18005_none_3cc96ba371602cad\fdSSDP.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 24064 c:\windows\winsxs\x86_fdproxy_31bf3856ad364e35_6.1 .6002.18005_none_458098410a7e837c\fdProxy.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 53736 c:\windows\winsxs\x86_disk.inf_31bf3856ad364e35_6. 0.6002.18005_none_fbb1faf0714e4ea6\disk.sys
+ 2009-10-20 20:30 . 2009-04-11 06:28 54784 c:\windows\winsxs\x86_devicepairingproxy_31bf3856a d364e35_6.1.6002.18005_none_fa885864b1bfe82e\Devic ePairingProxy.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 69120 c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d 50a3a_6.0.6002.18005_none_721aa0c5920da977\CustomM arshalers.dll
+ 2009-10-20 20:29 . 2009-04-11 04:20 26112 c:\windows\winsxs\x86_clusdisk.inf_31bf3856ad364e3 5_6.0.6002.18005_none_ef7fbedd01708477\ClusDisk.sy s
+ 2009-10-20 20:29 . 2009-04-11 04:39 67072 c:\windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6 .0.6002.18005_none_6194d4eea0e93596\cdrom.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 29696 c:\windows\winsxs\x86_bthprint.inf_31bf3856ad364e3 5_6.0.6002.18005_none_eece2a613d4bebc4\BTHPRINT.SY S
+ 2009-11-18 12:40 . 2009-10-01 01:01 50688 c:\windows\winsxs\x86_bthmtpenum.inf_31bf3856ad364 e35_6.0.6002.18112_none_01d56cf0911e704e\bthmtpenu m.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 29696 c:\windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0 .6002.18005_none_74303d47b8b302e1\BTHUSB.SYS
+ 2009-10-20 20:30 . 2009-04-11 04:43 22528 c:\windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0 .6002.18005_none_74303d47b8b302e1\bthenum.sys
+ 2009-10-20 20:29 . 2009-03-30 04:42 24576 c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f1 1d50a3a_6.0.6002.18005_none_09438aef19644181\aspne t_regbrowsers.exe
+ 2009-10-20 20:29 . 2009-03-30 04:42 36864 c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d5 0a3a_6.0.6002.18005_none_18a2a2e658e26abb\aspnet_c ompiler.exe
+ 2009-10-20 20:29 . 2009-04-11 04:43 62208 c:\windows\winsxs\x86_1394.inf_31bf3856ad364e35_6. 0.6002.18005_none_fd1acfab0309bd5e\ohci1394.sys
+ 2009-10-20 20:30 . 2009-02-18 18:39 94208 c:\windows\winsxs\msil_windowsformsintegration_31b f3856ad364e35_6.0.6002.18005_none_2aca67b8cb7eb3f2 \WindowsFormsIntegration.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 98304 c:\windows\winsxs\msil_uiautomationtypes_31bf3856a d364e35_6.0.6002.18005_none_ba7b50e10f71df40\UIAut omationTypes.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 40960 c:\windows\winsxs\msil_uiautomationprovider_31bf38 56ad364e35_6.0.6002.18005_none_7438aec6774134f4\UI AutomationProvider.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 77824 c:\windows\winsxs\msil_system.web.regularexpressio ns_b03f5f7f11d50a3a_6.0.6002.18005_none_4d6652e01e d1a1d5\System.Web.RegularExpressions.dll
+ 2010-06-10 22:52 . 2010-04-12 12:23 32768 c:\windows\winsxs\msil_system.servicemodel.washost ing_b77a5c561934e089_6.0.6002.22380_none_a725653cf b4fe6ae\System.ServiceModel.WasHosting.dll
+ 2010-06-10 22:52 . 2010-04-12 12:21 32768 c:\windows\winsxs\msil_system.servicemodel.washost ing_b77a5c561934e089_6.0.6002.18239_none_bded3d82e 1adee9e\System.ServiceModel.WasHosting.dll
+ 2009-10-20 20:29 . 2009-02-18 18:38 32768 c:\windows\winsxs\msil_system.servicemodel.washost ing_b77a5c561934e089_6.0.6002.18005_none_bdea980ce 1b03b73\System.ServiceModel.WasHosting.dll
+ 2009-10-20 20:29 . 2009-02-18 18:38 73728 c:\windows\winsxs\msil_system.servicemodel.install _b77a5c561934e089_6.0.6002.18005_none_6b7dba0c372f b8cf\System.ServiceModel.Install.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 81920 c:\windows\winsxs\msil_system.drawing.design_b03f5 f7f11d50a3a_6.0.6002.18005_none_1be3a910b0bb38ae\S ystem.Drawing.Design.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 81920 c:\windows\winsxs\msil_system.configuration.instal l_b03f5f7f11d50a3a_6.0.6002.18005_none_8b9cdc5b78f 8032d\System.Configuration.Install.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 43904 c:\windows\winsxs\msil_presentationfontcache_31bf3 856ad364e35_6.0.6002.18005_none_0fb649d9ad5630d5\P resentationFontCache.exe
+ 2009-10-20 20:29 . 2009-02-18 18:39 32768 c:\windows\winsxs\msil_presentationcffrasterizer_3 1bf3856ad364e35_6.0.6002.18005_none_43070e2e1454a6 a0\PresentationCFFRasterizer.dll
+ 2009-10-20 20:29 . 2009-04-11 06:38 77824 c:\windows\winsxs\msil_microsoft.web.management.re sources_31bf3856ad364e35_6.0.6002.18005_en-us_f4167eb509a14bf2\Microsoft.Web.Management.resou rces.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 32768 c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50 a3a_6.0.6002.18005_none_682aad423a72f74b\Microsoft .Vsa.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 12800 c:\windows\winsxs\msil_microsoft.vsa.vb.codedompro cessor_b03f5f7f11d50a3a_6.0.6002.18005_none_445782 32f2ea7160\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 28672 c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b 03f5f7f11d50a3a_6.0.6002.18005_none_f2b3e9f14ccc4d 0f\Microsoft.VisualBasic.Vsa.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 77824 c:\windows\winsxs\msil_microsoft.build.utilities_b 03f5f7f11d50a3a_6.0.6002.18005_none_e1e4fa8ea55672 25\Microsoft.Build.Utilities.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 36864 c:\windows\winsxs\msil_microsoft.build.framework_b 03f5f7f11d50a3a_6.0.6002.18005_none_c2a3acd783e72d 57\Microsoft.Build.Framework.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 40960 c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.60 02.18005_none_a7af7d70d7c9356f\jsc.exe
+ 2009-10-20 20:29 . 2009-03-30 04:42 77824 c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0 .6002.18005_none_7e35165408616421\IEHost.dll
+ 2009-10-14 18:10 . 2009-08-31 15:15 77824 c:\windows\winsxs\msil_ehiextens_31bf3856ad364e35_ 6.0.6000.21119_none_fc6d2af022d468ed\ehiExtens.dll
+ 2009-10-14 18:10 . 2009-08-31 16:15 77824 c:\windows\winsxs\msil_ehiextens_31bf3856ad364e35_ 6.0.6000.16919_none_fbe3b60309b695e1\ehiExtens.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 13312 c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_ 6.0.6002.18005_none_1872efd4aa5a4414\cscompmgd.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 10752 c:\windows\winsxs\msil_accessibility_b03f5f7f11d50 a3a_6.0.6002.18005_none_4d866065934e5ef7\Accessibi lity.dll
+ 2008-05-22 15:07 . 2008-01-19 07:37 38912 c:\windows\System32\xolehlp.dll
- 2009-04-16 11:40 . 2008-06-06 03:27 38912 c:\windows\System32\xolehlp.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 56320 c:\windows\System32\xmlfilter.dll
- 2008-08-26 16:30 . 2008-05-27 05:18 56320 c:\windows\System32\xmlfilter.dll
+ 2009-10-27 11:14 . 2009-08-07 02:24 44768 c:\windows\System32\wups2.dll
+ 2009-10-27 11:13 . 2009-08-07 02:24 35552 c:\windows\System32\wups.dll
+ 2009-10-27 11:13 . 2009-08-07 01:44 87552 c:\windows\System32\wudriver.dll
+ 2009-10-27 11:14 . 2009-08-07 02:24 53472 c:\windows\System32\wuauclt.exe
+ 2009-10-27 11:13 . 2009-08-06 18:44 33792 c:\windows\System32\wuapp.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 50688 c:\windows\System32\wsnmp32.dll
- 2008-05-22 15:05 . 2008-01-19 07:37 50688 c:\windows\System32\wsnmp32.dll
- 2008-07-08 21:18 . 2008-05-08 21:59 90112 c:\windows\System32\wshext.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 90112 c:\windows\System32\wshext.dll
- 2006-11-02 08:55 . 2006-11-02 09:46 34304 c:\windows\System32\wshbth.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 34304 c:\windows\System32\wshbth.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 29184 c:\windows\System32\wsepno.dll

[stefanus]

4-11 06:28 29184 c:\windows\System32\wsepno.dll
- 2008-08-26 16:30 . 2008-05-27 05:18 29184 c:\windows\System32\wsepno.dll
- 2006-11-02 09:16 . 2006-11-02 09:46 20992 c:\windows\System32\wsdchngr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 20992 c:\windows\System32\wsdchngr.dll
- 2008-05-22 15:06 . 2008-01-19 07:37 61440 c:\windows\System32\wscsvc.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 61440 c:\windows\System32\wscsvc.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 17920 c:\windows\System32\wscisvif.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 33280 c:\windows\System32\wscapi.dll
+ 2009-11-18 12:40 . 2009-10-01 01:02 87552 c:\windows\System32\WPDShServiceObj.dll
+ 2009-11-18 12:40 . 2009-10-01 01:02 30208 c:\windows\System32\WPDShextAutoplay.exe
- 2008-05-22 15:05 . 2008-01-19 07:33 30208 c:\windows\System32\WPDShextAutoplay.exe
+ 2009-11-18 12:40 . 2009-10-01 01:01 61952 c:\windows\System32\WpdMtpUS.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 33280 c:\windows\System32\WpdConns.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 81920 c:\windows\System32\wpdbusenum.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 83456 c:\windows\System32\wlgpclnt.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 83456 c:\windows\System32\wlgpclnt.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 68096 c:\windows\System32\wlanhlp.dll
+ 2009-09-09 18:33 . 2009-04-11 06:28 68096 c:\windows\System32\wlanhlp.dll
+ 2009-09-09 18:33 . 2009-07-11 19:01 65024 c:\windows\System32\wlanapi.dll
- 2006-11-02 08:45 . 2006-11-02 09:46 19968 c:\windows\System32\winrnr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 19968 c:\windows\System32\winrnr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 31232 c:\windows\System32\whealogr.dll
- 2008-05-22 15:07 . 2008-01-19 07:36 31232 c:\windows\System32\whealogr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 61952 c:\windows\System32\wbem\xml\wmi2xml.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 61952 c:\windows\System32\wbem\xml\wmi2xml.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 83968 c:\windows\System32\wbem\wmiutils.dll
- 2008-05-22 15:04 . 2008-01-19 07:36 83968 c:\windows\System32\wbem\wmiutils.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 47104 c:\windows\System32\wbem\WmiPerfInst.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 47104 c:\windows\System32\wbem\WmiPerfInst.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 74752 c:\windows\System32\wbem\WMICOOKR.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 74752 c:\windows\System32\wbem\WMICOOKR.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 90112 c:\windows\System32\wbem\WmiApRpl.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 90112 c:\windows\System32\wbem\WmiApRpl.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 49152 c:\windows\System32\wbem\wbemsvc.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 49152 c:\windows\System32\wbem\wbemsvc.dll
- 2008-05-22 15:04 . 2008-01-19 07:36 30208 c:\windows\System32\wbem\wbemprox.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 30208 c:\windows\System32\wbem\wbemprox.dll
- 2008-05-22 15:05 . 2008-01-19 07:33 37888 c:\windows\System32\wbem\unsecapp.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 37888 c:\windows\System32\wbem\unsecapp.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 57856 c:\windows\System32\wbem\NCProv.dll
- 2008-05-22 15:06 . 2008-01-19 07:35 57856 c:\windows\System32\wbem\NCProv.dll
- 2006-11-02 08:41 . 2006-11-02 09:46 35840 c:\windows\System32\wbem\KrnlProv.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 35840 c:\windows\System32\wbem\KrnlProv.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 20480 c:\windows\System32\version.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 20480 c:\windows\System32\version.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 17408 c:\windows\System32\vdmdbg.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 17408 c:\windows\System32\vdmdbg.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 29184 c:\windows\System32\uxsms.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 99840 c:\windows\System32\ulib.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 99840 c:\windows\System32\ulib.dll
+ 2009-11-18 12:41 . 2009-09-10 02:00 92672 c:\windows\System32\UIAnimation.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 35680 c:\windows\System32\TsWpfWrp.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 38400 c:\windows\System32\TSTheme.exe
+ 2009-08-12 11:49 . 2009-04-11 06:28 53248 c:\windows\System32\tsgqec.dll
- 2008-05-22 15:07 . 2008-01-19 07:36 53248 c:\windows\System32\tsgqec.dll
- 2008-05-22 15:05 . 2008-01-19 07:33 63488 c:\windows\System32\tscupgrd.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 63488 c:\windows\System32\tscupgrd.exe
+ 2010-02-10 13:45 . 2009-12-04 18:30 12288 c:\windows\System32\tsbyuv.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 55808 c:\windows\System32\Storprop.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 55808 c:\windows\System32\Storprop.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 11776 c:\windows\System32\spwinsat.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 13312 c:\windows\System32\spcmsg.dll
- 2008-05-22 15:06 . 2008-01-19 07:33 64000 c:\windows\System32\smss.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 64000 c:\windows\System32\smss.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 83456 c:\windows\System32\SMBHelperClass.dll
- 2008-05-22 15:07 . 2008-01-19 07:36 83456 c:\windows\System32\SMBHelperClass.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 67584 c:\windows\System32\slwmi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 12288 c:\windows\System32\slwga.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 12288 c:\windows\System32\slwga.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 60928 c:\windows\System32\SLUINotify.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 92918 c:\windows\System32\slmgr.vbs
- 2008-05-22 15:06 . 2008-01-19 07:36 42496 c:\windows\System32\slcinst.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 42496 c:\windows\System32\slcinst.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 66048 c:\windows\System32\setup\tssysprep.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 69632 c:\windows\System32\sendmail.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 69632 c:\windows\System32\sendmail.dll
+ 2009-08-16 13:41 . 2009-06-15 14:53 72704 c:\windows\System32\secur32.dll
- 2009-08-16 13:41 . 2009-06-15 15:24 72704 c:\windows\System32\secur32.dll
- 2008-08-26 16:30 . 2008-05-27 05:17 87552 c:\windows\System32\SearchFilterHost.exe
+ 2009-10-20 20:30 . 2009-04-11 06:27 87552 c:\windows\System32\SearchFilterHost.exe
- 2008-05-22 15:06 . 2008-01-19 07:36 95232 c:\windows\System32\SCardSvr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 95232 c:\windows\System32\SCardSvr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 57344 c:\windows\System32\samlib.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 57344 c:\windows\System32\samlib.dll
+ 2010-08-12 11:34 . 2010-06-18 17:31 36864 c:\windows\System32\rtutils.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 38400 c:\windows\System32\rtffilt.dll
- 2008-08-26 16:30 . 2008-05-27 05:18 38400 c:\windows\System32\rtffilt.dll
+ 2009-09-09 18:33 . 2009-04-11 06:27 53248

[stefanus]

1-19 07:33 53248 c:\windows\System32\rrinstaller.exe
- 2009-09-09 18:33 . 2009-08-14 14:16 17920 c:\windows\System32\ROUTE.EXE
+ 2009-09-09 18:33 . 2009-08-14 13:49 17920 c:\windows\System32\ROUTE.EXE
+ 2009-10-20 20:29 . 2009-04-11 06:27 43520 c:\windows\System32\rekeywiz.exe
- 2008-05-22 15:06 . 2008-01-19 07:36 67584 c:\windows\System32\regapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 67584 c:\windows\System32\regapi.dll
+ 2009-10-20 20:30 . 2009-04-11 06:27 61952 c:\windows\System32\reg.exe
+ 2009-10-20 20:30 . 2009-04-11 06:28 69632 c:\windows\System32\rastapi.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 69632 c:\windows\System32\rastapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 16896 c:\windows\System32\rasdial.exe
- 2006-11-02 08:58 . 2006-11-02 09:45 16896 c:\windows\System32\rasdial.exe
- 2008-05-22 15:05 . 2008-01-19 07:36 52736 c:\windows\System32\rasdiag.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 52736 c:\windows\System32\rasdiag.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 50664 c:\windows\System32\PSHED.DLL
- 2008-08-26 16:30 . 2008-05-27 05:18 71680 c:\windows\System32\propdefs.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 71680 c:\windows\System32\propdefs.dll
- 2009-04-16 11:40 . 2009-03-03 04:39 26112 c:\windows\System32\printfilterpipelineprxy.dll
+ 2009-11-18 12:40 . 2009-09-24 22:54 26112 c:\windows\System32\printfilterpipelineprxy.dll
+ 2010-06-24 08:07 . 2009-11-08 09:55 99176 c:\windows\System32\PresentationHostProxy.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 98816 c:\windows\System32\powrprof.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 60928 c:\windows\System32\PortableDeviceConnectApi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 69632 c:\windows\System32\PNPXAssoc.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 69632 c:\windows\System32\PNPXAssoc.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 33280 c:\windows\System32\PnPutil.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 58368 c:\windows\System32\PnPUnattend.exe
- 2008-05-22 15:06 . 2008-01-19 07:33 58368 c:\windows\System32\PnPUnattend.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 31744 c:\windows\System32\perfdisk.dll
- 2006-11-02 08:35 . 2006-11-02 09:46 31744 c:\windows\System32\perfdisk.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 88576 c:\windows\System32\olepro32.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 88576 c:\windows\System32\olepro32.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 97792 c:\windows\System32\oleprn.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 40960 c:\windows\System32\odbcconf.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 40960 c:\windows\System32\odbcconf.dll
- 2008-05-22 15:05 . 2008-01-19 07:33 35840 c:\windows\System32\ocsetup.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 35840 c:\windows\System32\ocsetup.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 82944 c:\windows\System32\nslookup.exe
- 2008-05-22 15:06 . 2008-01-19 07:33 82944 c:\windows\System32\nslookup.exe
+ 2010-03-11 09:38 . 2010-02-20 23:06 24064 c:\windows\System32\nshhttp.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 74752 c:\windows\System32\newdev.exe
- 2006-11-02 08:33 . 2006-11-02 09:45 74752 c:\windows\System32\newdev.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 39936 c:\windows\System32\networkitemfactory.dll
- 2008-05-22 15:05 . 2008-01-19 07:35 39936 c:\windows\System32\networkitemfactory.dll
- 2009-09-09 18:33 . 2009-08-14 14:16 27136 c:\windows\System32\NETSTAT.EXE
+ 2009-09-09 18:33 . 2009-08-14 13:49 27136 c:\windows\System32\NETSTAT.EXE
+ 2010-06-24 08:07 . 2009-11-08 09:55 49472 c:\windows\System32\netfxperf.dll
- 2009-09-09 18:33 . 2009-08-14 16:29 17920 c:\windows\System32\netevent.dll
+ 2010-10-13 16:29 . 2010-09-06 16:19 17920 c:\windows\System32\netevent.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 19968 c:\windows\System32\NcdProp.dll
- 2008-05-22 15:05 . 2008-01-19 07:35 19968 c:\windows\System32\NcdProp.dll
+ 2010-06-24 08:07 . 2009-11-08 09:55 11600 c:\windows\System32\MUI\0409\mscorees.dll
- 2006-11-02 08:55 . 2006-11-02 09:46 22528 c:\windows\System32\msyuv.dll
+ 2010-02-10 13:45 . 2009-12-04 18:28 22528 c:\windows\System32\msyuv.dll
+ 2010-02-10 13:45 . 2009-12-04 18:28 31744 c:\windows\System32\msvidc32.dll

[stefanus]

4-11 06:28 84992 c:\windows\System32\mstlsapi.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 43008 c:\windows\System32\msstrc.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 33280 c:\windows\System32\mssprxy.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 87040 c:\windows\System32\mssitlb.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 11776 c:\windows\System32\msshooks.dll
- 2008-08-26 16:30 . 2008-05-27 05:17 11776 c:\windows\System32\msshooks.dll
- 2008-08-26 16:30 . 2008-05-27 05:17 60416 c:\windows\System32\msscntrs.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 60416 c:\windows\System32\msscntrs.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 35328 c:\windows\System32\msscb.dll
+ 2010-02-10 13:45 . 2009-12-04 18:28 13312 c:\windows\System32\msrle32.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 61440 c:\windows\System32\msjter40.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 24576 c:\windows\System32\msjint40.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 16384 c:\windows\System32\msisip.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 31232 c:\windows\System32\msimtf.dll
- 2008-05-22 15:05 . 2008-01-19 07:35 31232 c:\windows\System32\msimtf.dll
+ 2009-10-20 20:30 . 2009-04-11 06:27 73216 c:\windows\System32\msiexec.exe
+ 2010-10-13 16:29 . 2010-09-08 05:57 66560 c:\windows\System32\mshtmled.dll
- 2009-08-14 15:04 . 2009-03-08 11:31 66560 c:\windows\System32\mshtmled.dll
+ 2010-10-13 16:29 . 2010-09-08 04:25 13312 c:\windows\System32\msfeedssync.exe
- 2009-08-14 15:50 . 2009-07-21 20:13 13312 c:\windows\System32\msfeedssync.exe
+ 2010-10-13 16:29 . 2010-09-08 05:57 55296 c:\windows\System32\msfeedsbs.dll
- 2009-08-14 15:50 . 2009-07-21 21:48 55296 c:\windows\System32\msfeedsbs.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 85504 c:\windows\System32\msctfui.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 84992 c:\windows\System32\msctfp.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 19456 c:\windows\System32\MsCtfMonitor.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 19456 c:\windows\System32\MsCtfMonitor.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 80720 c:\windows\System32\mscories.dll
+ 2009-10-14 18:04 . 2009-09-04 11:41 60928 c:\windows\System32\msasn1.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 21504 c:\windows\System32\msacm32.drv
- 2008-05-22 15:05 . 2008-01-19 07:32 21504 c:\windows\System32\msacm32.drv
+ 2009-09-09 18:33 . 2009-08-14 13:49 11264 c:\windows\System32\MRINFO.EXE
- 2009-09-09 18:33 . 2009-08-14 14:16 11264 c:\windows\System32\MRINFO.EXE
- 2008-05-22 15:06 . 2008-01-19 07:34 97792 c:\windows\System32\mprapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 97792 c:\windows\System32\mprapi.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 68608 c:\windows\System32\mpr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 68608 c:\windows\System32\mpr.dll
- 2006-11-02 09:03 . 2006-11-02 09:46 12800 c:\windows\System32\mmcico.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 12800 c:\windows\System32\mmcico.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 52224 c:\windows\System32\mmci.dll
- 2006-11-02 09:03 . 2006-11-02 09:46 52224 c:\windows\System32\mmci.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 41984 c:\windows\System32\mimefilt.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 38912 c:\windows\System32\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imkrmig.dll
- 2008-05-22 15:06 . 2008-01-19 07:36 38912 c:\windows\System32\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imkrmig.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 79872 c:\windows\System32\migwiz\dlmanifests\Microsoft-Windows-shmig-DL\shmig.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 79872 c:\windows\System32\migwiz\dlmanifests\Microsoft-Windows-shmig-DL\shmig.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 44544 c:\windows\System32\migwiz\dlmanifests\Microsoft-Windows-IE-ESC\EscMigPlugin.dll
- 2009-08-14 15:50 . 2009-07-21 21:52 64512 c:\windows\System32\migration\WininetPlugin.dll
+ 2010-10-13 16:29 . 2010-09-08 06:01 64512 c:\windows\System32\migration\WininetPlugin.dll
- 2008-05-22 15:05 . 2008-01-19 07:36 79872 c:\windows\System32\migration\shmig.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 79872 c:\windows\System32\migration\shmig.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 38912 c:\windows\System32\migration\imkrmig.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 38912 c:\windows\System32\migration\imkrmig.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 73216 c:\windows\System32\migration\bthmigplugin.dll
- 2008-05-22 15:06 . 2008-01-19 07:33 73216 c:\windows\System32\migration\bthmigplugin.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 17408 c:\windows\System32\midimap.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 17408 c:\windows\System32\midimap.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 98816 c:\windows\System32\mfps.dll
+ 2009-09-09 18:33 . 2009-04-11 06:28 98816 c:\windows\System32\mfps.dll
+ 2009-09-09 18:33 . 2009-04-11 06:27 24576 c:\windows\System32\mfpmp.exe
- 2008-05-22 15:05 . 2008-01-19 07:33 24576 c:\windows\System32\mfpmp.exe
- 2006-11-02 09:03 . 2006-11-02 09:46 82944 c:\windows\System32\mciavi32.dll
+ 2010-02-10 13:45 . 2009-12-04 18:28 82944 c:\windows\System32\mciavi32.dll
- 2009-03-03 12:39 . 2009-03-03 12:39 84661 c:\windows\System32\Macromed\Flash\uninstall_plugi n.exe
+ 2009-03-03 12:39 . 2010-03-22 19:12 84661 c:\windows\System32\Macromed\Flash\uninstall_plugi n.exe
+ 2009-07-14 21:15 . 2009-06-15 14:52 23552 c:\windows\System32\lpk.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 23552 c:\windows\System32\lpk.dll

[stefanus]

4-11 06:27 57344 c:\windows\System32\logman.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 94720 c:\windows\System32\logagent.exe
- 2008-12-12 18:17 . 2008-06-23 01:58 94720 c:\windows\System32\logagent.exe
+ 2010-10-13 16:29 . 2010-09-08 05:57 43520 c:\windows\System32\licmgr10.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 48128 c:\windows\System32\l2nacp.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 19944 c:\windows\System32\kdusb.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 17384 c:\windows\System32\kdcom.dll
+ 2009-10-20 20:30 . 2009-04-11 06:32 17896 c:\windows\System32\kd1394.dll
+ 2010-10-13 16:29 . 2010-09-08 05:57 25600 c:\windows\System32\jsproxy.dll
- 2009-08-14 15:50 . 2009-07-21 21:47 25600 c:\windows\System32\jsproxy.dll
+ 2010-02-10 13:45 . 2009-12-04 18:28 50176 c:\windows\System32\iyuv_32.dll
+ 2009-10-20 20:29 . 2009-04-11 04:39 16384 c:\windows\System32\iscsilog.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 91648 c:\windows\System32\IPHLPAPI.DLL
+ 2009-10-20 20:30 . 2009-04-11 06:28 91648 c:\windows\System32\IPHLPAPI.DLL
+ 2009-10-20 20:29 . 2009-04-11 06:27 26624 c:\windows\System32\ipconfig.exe
- 2008-05-22 15:05 . 2008-01-19 07:33 26624 c:\windows\System32\ipconfig.exe
+ 2009-10-20 20:30 . 2009-02-18 18:38 99680 c:\windows\System32\infocardapi.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 15360 c:\windows\System32\inetppui.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 15360 c:\windows\System32\inetppui.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 17920 c:\windows\System32\IME\shared\res\padrs412.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 17920 c:\windows\System32\IME\shared\res\padrs412.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 18944 c:\windows\System32\IME\shared\res\padrs411.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 18944 c:\windows\System32\IME\shared\res\padrs411.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 15360 c:\windows\System32\IME\shared\imever.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 15360 c:\windows\System32\IME\shared\imever.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 32768 c:\windows\System32\IME\shared\IMEPADSM.DLL
- 2008-05-22 15:06 . 2008-01-19 07:34 32768 c:\windows\System32\IME\shared\IMEPADSM.DLL
- 2008-05-22 15:06 . 2008-01-19 07:34 31744 c:\windows\System32\IME\shared\imecfm.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 31744 c:\windows\System32\IME\shared\imecfm.dll
- 2006-11-02 08:38 . 2006-11-02 09:46 29696 c:\windows\System32\IME\shared\IMEAPIS.DLL
+ 2009-10-20 20:30 . 2009-04-11 06:28 29696 c:\windows\System32\IME\shared\IMEAPIS.DLL
- 2008-05-22 15:06 . 2008-01-19 07:34 53760 c:\windows\System32\IME\IMESC5\PMIGRATE.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 53760 c:\windows\System32\IME\IMESC5\PMIGRATE.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 87552 c:\windows\System32\IME\IMESC5\IMSCPROP.exe
- 2008-05-22 15:06 . 2008-01-19 07:33 87552 c:\windows\System32\IME\IMESC5\IMSCPROP.exe
- 2008-05-22 15:06 . 2008-01-19 07:34 52736 c:\windows\System32\IME\imekr8\imkrudt.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 52736 c:\windows\System32\IME\imekr8\imkrudt.dll
+ 2009-10-20 20:30 . 2009-04-11 06:27 44544 c:\windows\System32\IME\IMEJP10\IMJPUEX.EXE
+ 2009-10-20 20:29 . 2009-04-11 06:27 24064 c:\windows\System32\IME\IMEJP10\imjppdmg.exe
- 2008-05-22 15:06 . 2008-01-19 07:33 24064 c:\windows\System32\IME\IMEJP10\imjppdmg.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 60416 c:\windows\System32\IME\IMEJP10\IMJPMGR.EXE
- 2008-05-22 15:06 . 2008-01-19 07:33 60416 c:\windows\System32\IME\IMEJP10\IMJPMGR.EXE
+ 2009-10-20 20:29 . 2009-04-11 06:27 59392 c:\windows\System32\IME\IMEJP10\IMJPDSVR.EXE
- 2008-05-22 15:06 . 2008-01-19 07:33 59392 c:\windows\System32\IME\IMEJP10\IMJPDSVR.EXE
+ 2009-10-20 20:30 . 2009-04-11 06:28 37888 c:\windows\System32\IME\IMEJP10\IMJPDCTP.DLL
- 2008-05-22 15:06 . 2008-01-19 07:34 29696 c:\windows\System32\ifmon.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 29696 c:\windows\System32\ifmon.dll
+ 2010-10-13 16:29 . 2010-09-08 05:56 71680 c:\windows\System32\iesetup.dll
- 2009-08-14 15:50 . 2009-07-21 21:47 71680 c:\windows\System32\iesetup.dll
+ 2010-10-13 16:29 . 2010-09-08 05:56 55808 c:\windows\System32\iernonce.dll
- 2009-08-14 15:50 . 2009-07-21 21:47 55808 c:\windows\System32\iernonce.dll
- 2006-11-02 12:34 . 2006-11-02 12:34 81920 c:\windows\System32\iccvid.dll
+ 2010-08-12 11:34 . 2010-05-27 20:08 81920 c:\windows\System32\iccvid.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 76288 c:\windows\System32\iassvcs.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 33792 c:\windows\System32\iaspolcy.dll
+ 2008-05-22 15:06 . 2008-01-19 07:33 17408 c:\windows\System32\iashost.exe
- 2009-04-16 11:40 . 2009-03-03 02:38 17408 c:\windows\System32\iashost.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 70656 c:\windows\System32\iashlpr.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 47104 c:\windows\System32\iasdatastore.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 57344 c:\windows\System32\iasads.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 58880 c:\windows\System32\iasacct.dll
+ 2010-03-11 09:38 . 2010-02-20 23:05 30720 c:\windows\System32\httpapi.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 30720 c:\windows\System32\httpapi.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 26112 c:\windows\System32\hidserv.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 80384 c:\windows\System32\hdwwiz.exe
- 2006-11-02 08:33 . 2006-11-02 09:45 80384 c:\windows\System32\hdwwiz.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 41472 c:\windows\System32\hbaapi.dll
- 2008-05-22 15:05 . 2008-01-19 07:33 16896 c:\windows\System32\gpupdate.exe

[stefanus]

4-11 06:27 16896 c:\windows\System32\gpupdate.exe
- 2008-05-22 15:06 . 2008-01-19 07:34 75264 c:\windows\System32\gpapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 75264 c:\windows\System32\gpapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 28672 c:\windows\System32\FwRemoteSvr.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 28672 c:\windows\System32\FwRemoteSvr.dll
- 2008-05-22 15:05 . 2008-01-19 07:33 41984 c:\windows\System32\ftp.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 41984 c:\windows\System32\ftp.exe
+ 2010-01-13 12:50 . 2009-10-19 13:35 72704 c:\windows\System32\fontsub.dll
- 2009-07-14 21:15 . 2009-06-15 15:20 72704 c:\windows\System32\fontsub.dll
+ 2009-09-09 18:33 . 2009-08-14 13:49 10240 c:\windows\System32\finger.exe
- 2009-09-09 18:33 . 2009-08-14 14:16 10240 c:\windows\System32\finger.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 60928 c:\windows\System32\findstr.exe
- 2008-05-22 15:06 . 2008-01-19 07:34 54272 c:\windows\System32\feclient.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 54272 c:\windows\System32\feclient.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 67072 c:\windows\System32\fdWSD.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 67072 c:\windows\System32\fdWSD.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 69120 c:\windows\System32\fdWCN.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 69120 c:\windows\System32\fdWCN.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 68096 c:\windows\System32\fdSSDP.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 68096 c:\windows\System32\fdSSDP.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 24064 c:\windows\System32\fdProxy.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 53760 c:\windows\System32\fdeploy.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 53760 c:\windows\System32\fdeploy.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 88064 c:\windows\System32\fdBth.dll
- 2006-11-02 08:32 . 2006-11-02 09:45 19968 c:\windows\System32\fc.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 19968 c:\windows\System32\fc.exe
- 2008-05-22 15:05 . 2008-01-19 07:34 20992 c:\windows\System32\ExplorerFrame.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 20992 c:\windows\System32\ExplorerFrame.dll
+ 2009-10-20 20:32 . 2009-10-20 20:32 13312 c:\windows\System32\EventProviders\spcmsg.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 37376 c:\windows\System32\EhStorPwdMgr.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 93696 c:\windows\System32\eappgnui.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 93696 c:\windows\System32\eappgnui.dll
- 2008-05-22 15:06 . 2008-01-19 07:33 81920 c:\windows\System32\dwm.exe
+ 2009-10-20 20:30 . 2009-04-11 06:27 81920 c:\windows\System32\dwm.exe
+ 2010-10-20 16:33 . 2010-09-22 23:21 39272 c:\windows\System32\DRVSTORE\fssfltr_A5FA3C925848F F31CD1FDE1A2696CEACA292B950\fssfltr.sys
+ 2009-10-20 20:30 . 2009-04-11 06:28 52224 c:\windows\System32\DriverStore\FileRepository\wud fusbcciddriver.inf_d7a408ce\WUDFUsbccidDriver.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 54272 c:\windows\System32\DriverStore\FileRepository\wsd scdrv.inf_5eb2c3a6\WSDScPrx.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 56320 c:\windows\System32\DriverStore\FileRepository\wsd print.inf_b05b5e02\WSDPrPxy.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 40448 c:\windows\System32\DriverStore\FileRepository\wpd mtp.inf_2a7adb02\WpdUsb.sys
+ 2009-11-18 12:40 . 2009-10-01 01:01 61952 c:\windows\System32\DriverStore\FileRepository\wpd mtp.inf_2a7adb02\WpdMtpUS.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 68608 c:\windows\System32\DriverStore\FileRepository\wpd mtp.inf_2a7adb02\WpdMtpIP.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 78336 c:\windows\System32\DriverStore\FileRepository\wpd mtp.inf_2a7adb02\WpdMtpbt.dll
+ 2009-11-18 12:40 . 2009-10-01 01:01 33280 c:\windows\System32\DriverStore\FileRepository\wpd mtp.inf_2a7adb02\WpdConns.dll
+ 2009-10-20 20:29 . 2009-04-11 04:42 31616 c:\windows\System32\DriverStore\FileRepository\win usb.inf_c07c5ec4\winusb.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 73216 c:\windows\System32\DriverStore\FileRepository\wdm a_usb.inf_dc7189cc\USBAUDIO.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 31616 c:\windows\System32\DriverStore\FileRepository\wce usbsh.inf_2fb04100\winusb.sys
+ 2009-10-20 20:30 . 2009-04-11 04:42 65536 c:\windows\System32\DriverStore\FileRepository\usb stor.inf_72a6a3e5\USBSTOR.SYS
+ 2009-10-20 20:29 . 2009-04-11 04:42 19456 c:\windows\System32\DriverStore\FileRepository\usb port.inf_2c537348\usbohci.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 39936 c:\windows\System32\DriverStore\FileRepository\usb port.inf_2c537348\usbehci.sys
+ 2008-05-22 15:07 . 2008-01-19 07:34 15872 c:\windows\System32\DriverStore\FileRepository\usb port.inf_2c537348\hcrstco.dll
+ 2009-10-20 20:29 . 2009-04-11 04:38 30208 c:\windows\System32\DriverStore\FileRepository\usb ccid.inf_54511730\usbccid.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 31616 c:\windows\System32\DriverStore\FileRepository\tra nsfercable.inf_9c53df5f\x86\winusb.sys
+ 2009-10-20 20:29 . 2009-04-11 05:06 19968 c:\windows\System32\DriverStore\FileRepository\sti .inf_0bb72b9f\WSDScan.sys
+ 2009-10-20 20:29 . 2009-04-11 04:39 11776 c:\windows\System32\DriverStore\FileRepository\sff disk.inf_f081f8b7\sffp_sd.sys
+ 2009-10-20 20:29 . 2009-04-11 04:39 12288 c:\windows\System32\DriverStore\FileRepository\sff disk.inf_f081f8b7\sffp_mmc.sys
+ 2009-10-20 20:29 . 2009-04-11 04:19 89088 c:\windows\System32\DriverStore\FileRepository\sdb us.inf_cbadf2d2\sdbus.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 82408 c:\windows\System32\DriverStore\FileRepository\sbp 2.inf_dd2a3429\sbp2port.sys
+ 2009-10-20 20:29 . 2009-04-11 06:28 17408 c:\windows\System32\DriverStore\FileRepository\ntp rint.inf_fceaf475\I386\PJLMON.DLL
+ 2009-10-20 20:29 . 2009-04-11 04:46 15872 c:\windows\System32\DriverStore\FileRepository\net rndis.inf_e5fc9df6\usb8023x.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 33280 c:\windows\System32\DriverStore\FileRepository\net rndis.inf_e5fc9df6\rndismpx.sys
+ 2008-05-22 15:07 . 2008-01-19 07:41 20024 c:\windows\System32\DriverStore\FileRepository\msh dc.inf_b12d8e84\viaide.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 43496 c:\windows\System32\DriverStore\FileRepository\msh dc.inf_b12d8e84\pciidex.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 14312 c:\windows\System32\DriverStore\FileRepository\msh dc.inf_b12d8e84\pciide.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 27112 c:\windows\System32\DriverStore\FileRepository\msh dc.inf_b12d8e84\msahci.sys
+ 2008-05-22 15:07 . 2008-01-19 07:41 17976 c:\windows\System32\DriverStore\Fil

[stefanus]

1-19 07:41 17976 c:\windows\System32\DriverStore\FileRepository\msh dc.inf_b12d8e84\intelide.sys
+ 2008-05-22 15:07 . 2008-01-19 07:41 19000 c:\windows\System32\DriverStore\FileRepository\msh dc.inf_b12d8e84\cmdide.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 19944 c:\windows\System32\DriverStore\FileRepository\msh dc.inf_b12d8e84\atapi.sys
+ 2008-05-22 15:07 . 2008-01-19 07:41 17464 c:\windows\System32\DriverStore\FileRepository\msh dc.inf_b12d8e84\aliide.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 93160 c:\windows\System32\DriverStore\FileRepository\msd sm.inf_2952f7e7\msdsm.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 27648 c:\windows\System32\DriverStore\FileRepository\mdm cpq.inf_a4839249\usbser.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 41472 c:\windows\System32\DriverStore\FileRepository\mdm btmdm.inf_ab57df1e\bthmodem.sys
+ 2008-05-22 15:06 . 2008-01-19 07:42 52792 c:\windows\System32\DriverStore\FileRepository\mac hine.inf_51b95d75\volmgr.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 53224 c:\windows\System32\DriverStore\FileRepository\mac hine.inf_51b95d75\termdd.sys
+ 2008-05-22 15:07 . 2008-01-19 07:41 15288 c:\windows\System32\DriverStore\FileRepository\mac hine.inf_51b95d75\swenum.sys
+ 2009-10-20 20:29 . 2009-04-11 04:38 17408 c:\windows\System32\DriverStore\FileRepository\key board.inf_f55d5e51\kbdhid.sys
+ 2009-10-20 20:29 . 2009-04-11 04:39 16384 c:\windows\System32\DriverStore\FileRepository\isc si.inf_7cf731e4\iscsilog.dll
+ 2009-10-20 20:29 . 2009-04-11 04:27 64512 c:\windows\System32\DriverStore\FileRepository\ipm idrv.inf_a46ca46a\IPMIDrv.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 12800 c:\windows\System32\DriverStore\FileRepository\inp ut.inf_45f308e6\hidusb.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 39424 c:\windows\System32\DriverStore\FileRepository\inp ut.inf_45f308e6\hidclass.sys
+ 2009-10-20 20:31 . 2009-04-11 06:32 69096 c:\windows\System32\DriverStore\FileRepository\hpc isss.inf_3d49a363\HpCISSs.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 30720 c:\windows\System32\DriverStore\FileRepository\hid bth.inf_e1bc61a9\hidbth.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 53736 c:\windows\System32\DriverStore\FileRepository\dis k.inf_5c850fad\disk.sys
+ 2009-10-20 20:29 . 2009-04-11 04:20 26112 c:\windows\System32\DriverStore\FileRepository\clu sdisk.inf_1f8551c9\ClusDisk.sys
+ 2009-10-20 20:29 . 2009-04-11 04:39 67072 c:\windows\System32\DriverStore\FileRepository\cdr om.inf_c949a5b6\cdrom.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 29696 c:\windows\System32\DriverStore\FileRepository\bth print.inf_fa0c9014\BTHPRINT.SYS
+ 2009-11-18 12:40 . 2009-10-01 01:01 50688 c:\windows\System32\DriverStore\FileRepository\bth mtpenum.inf_201caa7f\BthMtpEnum.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 29696 c:\windows\System32\DriverStore\FileRepository\bth .inf_00899617\BTHUSB.SYS
+ 2009-10-20 20:30 . 2009-04-11 04:43 22528 c:\windows\System32\DriverStore\FileRepository\bth .inf_00899617\bthenum.sys
+ 2009-10-20 20:29 . 2009-04-11 04:43 62208 c:\windows\System32\DriverStore\FileRepository\139 4.inf_5e025c7c\ohci1394.sys
+ 2009-11-18 12:40 . 2009-10-01 01:01 40448 c:\windows\System32\drivers\WpdUsb.sys
+ 2009-10-20 20:29 . 2009-04-11 04:22 33280 c:\windows\System32\drivers\watchdog.sys
+ 2009-10-20 20:30 . 2009-04-11 04:42 65536 c:\windows\System32\drivers\USBSTOR.SYS
+ 2009-10-20 20:29 . 2009-04-11 04:42 39936 c:\windows\System32\drivers\usbehci.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 25856 c:\windows\System32\drivers\USBCAMD2.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 25856 c:\windows\System32\drivers\USBCAMD.sys
- 2008-05-22 15:05 . 2008-01-19 05:56 15872 c:\windows\System32\drivers\usb8023.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 15872 c:\windows\System32\drivers\usb8023.sys
+ 2010-04-14 08:07 . 2010-02-18 11:28 25088 c:\windows\System32\drivers\tunnel.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 53224 c:\windows\System32\drivers\termdd.sys
+ 2009-10-20 20:29 . 2009-04-11 04:45 72192 c:\windows\System32\drivers\tdx.sys
+ 2010-02-10 13:45 . 2009-12-08 17:26 30720 c:\windows\System32\drivers\tcpipreg.sys
- 2008-05-22 15:05 . 2008-01-19 05:53 52992 c:\windows\System32\drivers\stream.sys
+ 2009-10-20 20:29 . 2009-04-11 04:42 52992 c:\windows\System32\drivers\stream.sys
+ 2009-10-20 20:29 . 2009-04-11 04:45 66560 c:\windows\System32\drivers\smb.sys
- 2008-05-22 15:06 . 2008-01-19 05:55 66560 c:\windows\System32\drivers\smb.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 33280 c:\windows\System32\drivers\RNDISMP.sys
- 2008-05-22 15:05 . 2008-01-19 05:56 33280 c:\windows\System32\drivers\RNDISMP.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 69120 c:\windows\System32\drivers\rassstp.sys
- 2008-05-22 15:07 . 2008-01-19 05:56 69120 c:\windows\System32\drivers\rassstp.sys
- 2008-05-22 15:05 . 2008-01-19 05:56 41472 c:\windows\System32\drivers\raspppoe.sys
+ 2009-10-20 20:29 . 2009-04-11 04:46 41472 c:\windows\System32\drivers\raspppoe.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 43496 c:\windows\System32\drivers\pciidex.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 54248 c:\windows\System32\drivers\partmgr.sys
- 2008-07-08 21:18 . 2008-04-05 01:21 72192 c:\windows\System32\drivers\pacer.sys
+ 2009-10-20 20:29 . 2009-04-11 04:45 72192 c:\windows\System32\drivers\pacer.sys
+ 2009-10-20 20:29 . 2009-04-11 04:14 35328 c:\windows\System32\drivers\npfs.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 48104 c:\windows\System32\drivers\mup.sys
+ 2010-04-14 08:07 . 2010-02-23 11:10 79360 c:\windows\System32\drivers\mrxsmb20.sys
- 2009-03-29 20:30 . 2009-09-10 13:54 38224 c:\windows\System32\drivers\mbamswissarmy.sys
+ 2009-03-29 20:30 . 2010-04-29 14:39 38224 c:\windows\System32\drivers\mbamswissarmy.sys
+ 2009-03-29 20:30 . 2010-04-29 14:39 20952 c:\windows\System32\drivers\mbam.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 99816 c:\windows\System32\drivers\FWPKCLNT.SYS
- 2008-05-22 15:05 . 2008-01-19 05:36 76288

[stefanus]

c:\windows\System32\drivers\dxg.sys
+ 2009-10-20 20:29 . 2009-04-11 04:23 76288 c:\windows\System32\drivers\dxg.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 27624 c:\windows\System32\drivers\Dumpata.sys
+ 2009-10-20 20:29 . 2009-04-11 04:39 19456 c:\windows\System32\drivers\Diskdump.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 53736 c:\windows\System32\drivers\disk.sys
+ 2009-10-20 20:29 . 2009-04-11 04:14 75264 c:\windows\System32\drivers\dfsc.sys
- 2008-05-22 15:05 . 2008-01-19 05:28 75264 c:\windows\System32\drivers\dfsc.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 35304 c:\windows\System32\drivers\crashdmp.sys
+ 2009-10-20 20:29 . 2009-04-11 04:39 67072 c:\windows\System32\drivers\cdrom.sys
- 2008-05-22 15:05 . 2008-01-19 05:49 67072 c:\windows\System32\drivers\cdrom.sys
+ 2009-10-20 20:29 . 2009-04-11 05:42 93696 c:\windows\System32\drivers\bridge.sys
- 2008-05-22 15:05 . 2008-01-19 06:58 93696 c:\windows\System32\drivers\bridge.sys
+ 2009-02-09 15:10 . 2010-06-03 09:09 29584 c:\windows\System32\drivers\avgmfx86.sys
+ 2009-10-20 20:30 . 2009-04-11 06:32 19944 c:\windows\System32\drivers\atapi.sys
+ 2009-10-20 20:29 . 2009-04-11 06:28 75264 c:\windows\System32\dot3msm.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 49664 c:\windows\System32\dot3cfg.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 49664 c:\windows\System32\dot3cfg.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 86528 c:\windows\System32\dnsrslvr.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 86528 c:\windows\System32\dnsrslvr.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 54784 c:\windows\System32\dimsroam.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 54784 c:\windows\System32\dimsroam.dll
+ 2009-10-20 20:31 . 2009-04-11 06:27 65536 c:\windows\System32\DevicePairingWizard.exe
+ 2009-10-20 20:30 . 2009-04-11 06:28 54784 c:\windows\System32\DevicePairingProxy.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 26112 c:\windows\System32\DeviceEject.exe
+ 2009-07-14 21:15 . 2009-06-15 14:51 10240 c:\windows\System32\dciman32.dll
- 2009-07-14 21:15 . 2009-06-15 15:20 10240 c:\windows\System32\dciman32.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 61440 c:\windows\System32\davclnt.dll
- 2008-09-10 12:52 . 2008-06-26 03:29 45056 c:\windows\System32\dataclen.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 45056 c:\windows\System32\dataclen.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 46080 c:\windows\System32\csrstub.exe
- 2008-05-22 15:05 . 2008-01-19 07:33 46080 c:\windows\System32\csrstub.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 22016 c:\windows\System32\cscdll.dll
- 2008-05-22 15:05 . 2008-01-19 07:34 22016 c:\windows\System32\cscdll.dll
- 2008-05-22 15:06 . 2008-01-19 07:34 31744 c:\windows\System32\cscapi.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 31744 c:\windows\System32\cscapi.dll
- 2008-05-22 15:06 . 2008-01-19 07:33 69120 c:\windows\System32\conime.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 69120 c:\windows\System32\conime.exe
+ 2009-10-20 20:30 . 2009-04-11 06:27 57856 c:\windows\System32\compcln.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 49152 c:\windows\System32\cmmon32.exe
- 2008-05-22 15:06 . 2008-01-19 07:33 58368 c:\windows\System32\cipher.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 58368 c:\windows\System32\cipher.exe
- 2006-11-02 08:38 . 2006-11-02 09:46 10752 c:\windows\System32\CHxReadingStringIME.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 10752 c:\windows\System32\CHxReadingStringIME.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 40448 c:\windows\System32\certprop.dll
- 2008-05-22 15:05 . 2008-01-19 07:33 40448 c:\windows\System32\certprop.dll
+ 2009-11-18 12:40 . 2009-09-25 01:27 37888 c:\windows\System32\cdd.dll
+ 2009-10-20 20:29 . 2009-04-11 06:27 44032

[stefanus]

4-11 06:27 44032 c:\windows\System32\cbsra.exe
- 2008-05-22 15:06 . 2008-01-19 07:33 44032 c:\windows\System32\cbsra.exe
+ 2010-04-14 08:05 . 2010-01-13 17:34 98304 c:\windows\System32\cabview.dll
- 2006-11-02 08:55 . 2006-11-02 09:44 34304 c:\windows\System32\bthudtask.exe
+ 2009-10-20 20:29 . 2009-04-11 06:27 34304 c:\windows\System32\bthudtask.exe
+ 2009-10-20 20:30 . 2009-04-11 06:28 40960 c:\windows\System32\bthserv.dll
+ 2009-11-18 12:40 . 2009-10-01 01:02 31232 c:\windows\System32\BthMtpContextHandler.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 45568 c:\windows\System32\bthci.dll
- 2008-05-22 15:06 . 2008-01-19 07:33 45568 c:\windows\System32\bthci.dll
- 2008-05-22 15:05 . 2008-01-19 07:33 31744 c:\windows\System32\bitsigd.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 31744 c:\windows\System32\bitsigd.dll
- 2009-08-12 11:49 . 2009-06-10 12:07 91136 c:\windows\System32\avifil32.dll
+ 2010-02-10 13:45 . 2009-12-04 18:27 91136 c:\windows\System32\avifil32.dll
+ 2010-07-17 13:30 . 2010-07-17 13:30 12536 c:\windows\System32\avgrsstx.dll
+ 2009-10-20 20:29 . 2009-04-11 06:28 79872 c:\windows\System32\authz.dll
+ 2009-10-20 20:30 . 2009-04-11 06:27 88576 c:\windows\System32\audiodg.exe
+ 2010-06-10 22:52 . 2010-05-26 17:06 34304 c:\windows\System32\atmlib.dll
- 2006-11-02 08:38 . 2006-11-02 09:46 34304 c:\windows\System32\atmlib.dll
+ 2009-08-12 11:49 . 2009-07-17 13:54 71680 c:\windows\System32\atl.dll
- 2009-08-12 11:49 . 2009-07-17 14:35 71680 c:\windows\System32\atl.dll
+ 2010-06-10 22:52 . 2010-04-05 17:01 67072 c:\windows\System32\asycfilt.dll
- 2009-09-09 18:33 . 2009-08-14 14:16 19968 c:\windows\System32\ARP.EXE
+ 2009-09-09 18:33 . 2009-08-14 13:49 19968 c:\windows\System32\ARP.EXE
+ 2010-06-23 09:46 . 2010-04-16 16:43 28672 c:\windows\System32\Apphlpdm.dll
- 2009-09-03 11:56 . 2009-08-28 12:39 28672 c:\windows\System32\Apphlpdm.dll
+ 2009-10-20 20:30 . 2009-04-11 06:28 75264 c:\windows\System32\adsmsext.dll
+ 2009-08-06 19:23 . 2009-08-06 19:23 73288 c:\windows\SoftwareDistribution\SelfUpdate\Handler \WuSetupV.exe
- 2008-05-22 15:06 . 2008-01-19 07:33 39424 c:\windows\servicing\TrustedInstaller.exe
+ 2009-10-20 20:29 . 2009-04-11 06:28 39424 c:\windows\servicing\TrustedInstaller.exe
+ 2010-02-24 09:44 . 2010-01-23 09:26 19456 c:\windows\servicing\GC32\tzupd.exe
- 2009-08-17 14:42 . 2009-08-17 14:42 16384 c:\windows\ServiceProfiles\NetworkService\AppData\ Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-08-17 14:42 . 2010-10-17 15:06 16384 c:\windows\ServiceProfiles\NetworkService\AppData\ Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-08-17 14:42 . 2010-10-17 15:06 32768 c:\windows\ServiceProfiles\NetworkService\AppData\ Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-08-17 14:42 . 2009-08-17 14:42 32768 c:\windows\ServiceProfiles\NetworkService\AppData\ Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-08-17 14:42 . 2009-08-17 14:42 16384 c:\windows\ServiceProfiles\NetworkService\AppData\ Local\Microsoft\Windows\History\History.IE5\index. dat
+ 2009-08-17 14:42 . 2010-10-17 15:06 16384 c:\windows\ServiceProfiles\NetworkService\AppData\ Local\Microsoft\Windows\History\History.IE5\index. dat
- 2008-05-23 19:04 . 2009-08-26 14:58 16384 c:\windows\ServiceProfiles\LocalService\AppData\Ro aming\Microsoft\Windows\Cookies\index.dat
+ 2008-05-23 19:04 . 2010-10-19 23:39 16384 c:\windows\ServiceProfiles\LocalService\AppData\Ro aming\Microsoft\Windows\Cookies\index.dat
- 2008-05-23 19:04 . 2009-08-26 14:58 16384 c:\windows\ServiceProfiles\LocalService\AppData\Lo cal\Microsoft\Windows\History\History.IE5\index.da t
+ 2008-05-23 19:04 . 2010-10-19 23:39 16384 c:\windows\ServiceProfiles\LocalService\AppData\Lo cal\Microsoft\Windows\History\History.IE5\index.da t
+ 2010-03-18 12:16 . 2010-03-18 12:16 87408 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\ WindowsFormsIntegration.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 93024 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\ UIAutomationTypes.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 35688 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\ UIAutomationProvider.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 17784 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\ System.Windows.Presentation.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 58240 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\ System.Windows.Input.Manipulations.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 67912 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\ PenIMC.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 31576 c:\windows\Microsoft.NET\Framework\v4.0.30319\WMIN et_Utils.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 44920 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.Web.ApplicationServices.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 37240 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.ServiceModel.Channels.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 64352 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.Numerics.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 45952 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.EnterpriseServices.Thunk.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 51032 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.Device.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 50552 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.Data.DataSetExtensions.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 81784 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.Configuration.Install.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 81800 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.ComponentModel.DataAnnotations.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 39784 c:\windows\Microsoft.NET\Framework\v4.0.30319\Syst em.AddIn.Contract.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 68952 c:\windows\Microsoft.NET\Framework\v4.0.30319\SMDi agnostics.dll
+ 2010-03-18 19:58 . 2010-03-18 19:58 96088 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\SetupUtility.exe
+ 2010-03-18 20:16 . 2010-03-18 20:16 78152 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\Setup.exe
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\3082\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\3076\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\2070\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\2052\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1055\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1053\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1049\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1046\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1045\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1044\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1043\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 15192 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1042\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 15704 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1041\SetupResources.dll

[stefanus]

-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1040\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1038\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 16728 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1037\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1036\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1035\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1033\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1032\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1031\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1030\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1029\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1028\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\Setu pCache\Client\1025\SetupResources.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 42880 c:\windows\Microsoft.NET\Framework\v4.0.30319\Serv iceModelPerformanceCounters.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 13648 c:\windows\Microsoft.NET\Framework\v4.0.30319\SbsN clPerf.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 58192 c:\windows\Microsoft.NET\Framework\v4.0.30319\regt libv12.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 32592 c:\windows\Microsoft.NET\Framework\v4.0.30319\RegS vcs.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 52040 c:\windows\Microsoft.NET\Framework\v4.0.30319\RegA sm.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 21336 c:\windows\Microsoft.NET\Framework\v4.0.30319\norm alization.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlss orting.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 27984 c:\windows\Microsoft.NET\Framework\v4.0.30319\MUI\ 0409\mscorsecr.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 40784 c:\windows\Microsoft.NET\Framework\v4.0.30319\msco rpe.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 20816 c:\windows\Microsoft.NET\Framework\v4.0.30319\msco reeis.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 62880 c:\windows\Microsoft.NET\Framework\v4.0.30319\Micr osoft.Windows.ApplicationServer.Applications.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 12128 c:\windows\Microsoft.NET\Framework\v4.0.30319\Micr osoft.VisualC.Dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 97680 c:\windows\Microsoft.NET\Framework\v4.0.30319\Micr osoft.VisualBasic.Compatibility.Data.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 36168 c:\windows\Microsoft.NET\Framework\v4.0.30319\jsc. exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 78168 c:\windows\Microsoft.NET\Framework\v4.0.30319\ISym Wrapper.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 58200 c:\windows\Microsoft.NET\Framework\v4.0.30319\Inst allUtilLib.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 27992 c:\windows\Microsoft.NET\Framework\v4.0.30319\Inst allUtil.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 42312 c:\windows\Microsoft.NET\Framework\v4.0.30319\fusi on.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 35656 c:\windows\Microsoft.NET\Framework\v4.0.30319\dw20 .exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 11592 c:\windows\Microsoft.NET\Framework\v4.0.30319\dfsv c.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 88904 c:\windows\Microsoft.NET\Framework\v4.0.30319\dfdl l.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 31048 c:\windows\Microsoft.NET\Framework\v4.0.30319\cvtr es.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 81248 c:\windows\Microsoft.NET\Framework\v4.0.30319\Cust omMarshalers.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Cult ure.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 95048 c:\windows\Microsoft.NET\Framework\v4.0.30319\CasP ol.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 29008 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddI nUtil.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 29528 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddI nProcess32.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 29016 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddI nProcess.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\Acce ssibility.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 10064 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033 \CvtResUI.dll
+ 2010-03-18 12:16 . 2010-03-18 12:16 24400 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033 \alinkui.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 23408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\XamlVi ewer\XamlViewer_v0300.exe
+ 2009-10-20 20:30 . 2009-02-18 18:39 43904 c:\windows\Microsoft.NET\Framework\v3.0\WPF\Presen tationFontCache.exe
+ 2009-10-20 20:29 . 2009-02-18 18:39 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\Presen tationCFFRasterizer.dll
- 2009-02-06 15:17 . 2008-06-20 01:14 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\Presen tationCFFRasterizer.dll
+ 2009-10-20 20:30 . 2009-02-18 18:39 68960 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC .dll
- 2009-02-06 15:17 . 2008-06-20 01:14 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-06-10 22:52 . 2010-04-12 12:21 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
- 2009-02-06 15:17 . 2008-06-20 01:14 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2009-10-20 20:29 . 2009-02-18 18:38 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2010-06-10 22:52 . 2010-04-12 12:21 17256 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Web.RegularExpressions.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 77824

[stefanus]

c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Web.RegularExpressions.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Drawing.Design.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Drawing.Design.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Configuration.Install.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Configuration.Install.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegS vcs.exe
+ 2009-10-20 20:29 . 2009-03-30 04:42 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegS vcs.exe
- 2009-02-06 15:10 . 2008-07-27 18:03 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegA sm.exe
+ 2009-10-20 20:29 . 2009-03-30 04:42 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegA sm.exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 85320 c:\windows\Microsoft.NET\Framework\v2.0.50727\Perf Counter.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 97592 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen .exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 66368 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 74048 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rsec.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 90960 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rld.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 43344 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rie.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 80208 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rdbc.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBu ild.exe
- 2009-02-06 15:10 . 2008-07-27 18:03 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBu ild.exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 94544 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcA spExt.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.Vsa.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.Vsa.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.VisualBasic.Vsa.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.VisualBasic.Vsa.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.Build.Utilities.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.Build.Utilities.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.Build.Framework.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Micr osoft.Build.Framework.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc. exe
- 2009-02-06 15:10 . 2008-07-27 18:03 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc. exe
- 2009-02-06 15:10 . 2008-07-27 18:03 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISym Wrapper.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISym Wrapper.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Inst allUtil.exe
- 2009-02-06 15:10 . 2008-07-27 18:03 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Inst allUtil.exe
+ 2009-10-20 20:29 . 2009-03-30 04:42 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHo st.dll

[stefanus]

7-27 18:03 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHo st.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 15688 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusi on.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 33080 c:\windows\Microsoft.NET\Framework\v2.0.50727\dw20 .exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 59720 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdl l.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 32064 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtr es.exe
- 2009-02-06 15:10 . 2008-07-27 18:03 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\Cust omMarshalers.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\Cust omMarshalers.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\csco mpmgd.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\csco mpmgd.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 77112 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc. exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 86360 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORP erfMonExt.dll
+ 2010-10-06 21:21 . 2010-09-25 18:34 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_wp.exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 31048 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_state.exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 30024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_regiis.exe
+ 2009-10-20 20:29 . 2009-03-30 04:42 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_regbrowsers.exe
- 2009-02-06 15:10 . 2008-07-27 18:03 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_regbrowsers.exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 30552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspn et_perf.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 14168 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_isapi.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 18760 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_filter.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_compiler.exe
+ 2009-10-20 20:29 . 2009-03-30 04:42 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_compiler.exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 55616 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppL aunch.exe
+ 2009-10-20 20:30 . 2009-03-30 04:42 95544 c:\windows\Microsoft.NET\Framework\v2.0.50727\alin k.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Acce ssibility.dll
- 2009-02-06 15:10 . 2008-07-27 18:03 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Acce ssibility.dll
+ 2009-10-20 20:30 . 2009-03-30 04:42 93504 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscor mmc.dll
+ 2009-10-20 20:29 . 2009-03-30 04:42 79696 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2010-06-26 11:19 . 2010-06-26 11:19 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Windows FormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\Wi ndowsFormsIntegration.dll
+ 2010-06-26 11:19 . 2010-06-26 11:19 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutom ationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutoma tionTypes.dll
+ 2010-06-26 11:19 . 2010-06-26 11:19 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutom ationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAut omationProvider.dll
+ 2010-06-26 11:19 . 2010-06-26 11:19 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e08 9\System.Windows.Presentation.dll
+ 2010-06-26 11:19 . 2010-06-26 11:19 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c56 1934e089\System.Windows.Input.Manipulations.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad36 4e35\System.Web.ApplicationServices.dll
+ 2010-06-26 11:19 . 2010-06-26 11:19 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e 35\System.ServiceModel.Channels.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Num erics.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. Device\v4.0_4.0.0.0__b77a5c561934e089\System.Devic e.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e 089\System.Data.DataSetExtensions.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a 3a\System.Configuration.Install.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3 856ad364e35\System.ComponentModel.DataAnnotations. dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System. AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\Syst em.AddIn.Contract.dll
+ 2010-06-26 11:19 . 2010-06-26 11:19 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagn ostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostic s.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microso ft.Windows.ApplicationServer.Applications\v4.0_4.0 .0.0__31bf3856ad364e35\Microsoft.Windows.Applicati onServer.Applications.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microso ft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microso ft.VisualC.Dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microso ft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b 03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibilit y.Data.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessi bility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibilit y.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapp er\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2010-06-26 11:18 . 2010-06-26 11:18 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMar shalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarsh alers.dll
+ 2010-10-20 16:34 . 2010-10-20 16:34 20992 c:\windows\Installer\3a4ccd.msi
+ 2010-10-20 16:34 . 2010-10-20 16:34 21504 c:\windows\Installer\3a4cc9.msi
+ 2010-10-20 16:34 . 2010-10-20 16:34 21504 c:\windows\Installer\3a4cc5.msi
+ 2010-10-20 16:34 . 2010-10-20 16:34 23552 c:\windows\Installer\3a4cc1.msi
+ 2010-10-20 16:34 . 2010-10-20 16:34 22528 c:\windows\Installer\3a4cb9.msi
+ 2010-10-20 16:34 . 2010-10-20 16:34 23552 c:\windows\Installer\3a4cb5.msi
+ 2010-10-20 16:33 . 2010-10-20 16:33 22528 c:\windows\Installer\3a4cb1.msi

[stefanus]

6-03 15:12 12358144 c:\windows\Installer\15398ad.msi
- 2009-06-13 21:31 . 2009-04-30 12:33 10111488 c:\windows\ehome\ehres.dll
+ 2010-06-24 08:07 . 2010-04-14 18:23 10111488 c:\windows\ehome\ehres.dll
+ 2010-06-26 11:20 . 2010-06-26 11:20 13006336 c:\windows\assembly\NativeImages_v4.0.30319_32\Sys tem.Windows.Forms\f3cdd09fc0acc85c7febbd2e2ef9c4e5 \System.Windows.Forms.ni.dll
+ 2010-06-26 11:27 . 2010-06-26 11:27 17919488 c:\windows\assembly\NativeImages_v4.0.30319_32\Sys tem.ServiceModel\40f4f298c3c655b834c73b5046a9cd0b\ System.ServiceModel.ni.dll
+ 2010-06-26 11:26 . 2010-06-26 11:26 13273600 c:\windows\assembly\NativeImages_v4.0.30319_32\Sys tem.Data.Entity\7afa32d3d9ab340abd33e960a849685c\S ystem.Data.Entity.ni.dll
+ 2010-06-26 11:21 . 2010-06-26 11:21 17629184 c:\windows\assembly\NativeImages_v4.0.30319_32\Pre sentationFramewo#\8357ade60159c25ee88db0aab8686e6d \PresentationFramework.ni.dll
+ 2010-06-26 11:20 . 2010-06-26 11:20 11057664 c:\windows\assembly\NativeImages_v4.0.30319_32\Pre sentationCore\7a1eeb425f9318f432afead4b2da965a\Pre sentationCore.ni.dll
+ 2010-06-26 11:20 . 2010-06-26 11:20 14415872 c:\windows\assembly\NativeImages_v4.0.30319_32\msc orlib\4ff1f12a08d455f195ba996fe77497c6\mscorlib.ni .dll
+ 2010-08-13 08:09 . 2010-08-13 08:09 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Forms\d9ab6e29eba6cb0d8459fcbb2c40c1a7 \System.Windows.Forms.ni.dll
+ 2010-10-07 11:42 . 2010-10-07 11:42 11804672 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web\62dfd8797881fd7a0d0de3f448a18c01\System.We b.ni.dll
+ 2010-10-07 11:43 . 2010-10-07 11:43 17404416 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceModel\15251dccd20b85097faa6a33256dff5d\ System.ServiceModel.ni.dll
+ 2010-10-07 11:40 . 2010-10-07 11:40 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Design\e04351b75b666417b0f36cb8e94d8697\System .Design.ni.dll
+ 2010-08-12 21:57 . 2010-08-12 21:57 14328832 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\c87cc40b22b2b014f9c0ade54773b6ea \PresentationFramework.ni.dll
+ 2010-08-12 21:57 . 2010-08-12 21:57 12216832 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCore\e53b9c43b17c02a75f2358a24047dd52\Pre sentationCore.ni.dll
+ 2010-08-12 21:56 . 2010-08-12 21:56 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\msc orlib\98bbdd8c400493ad228b8283665cc9da\mscorlib.ni .dll
+ 2010-10-07 11:43 . 2010-10-07 11:43 11588096 c:\windows\assembly\NativeImages_v2.0.50727_32\ehs hell\c2045c83aff81ea96c9a228d1f9ee259\ehshell.ni.d ll
+ 2009-06-13 21:28 . 2010-10-20 16:13 283373662 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001 c11ba_blobs.bin
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" [2010-01-20 39408]
"Messenger (Yahoo!)"="c:\progra~1\Yahoo!\MESSEN~1\YahooMessenger.exe" [2010-06-01 5252408]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2010-08-24 247144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce]
"PCDrProfiler"="c:\program files\PC-Doctor 5 for Windows\RunProfiler.exe" [2007-06-25 73728]
"Launcher"="c:\windows\SMINST\launcher.exe" [2007-10-09 44168]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversio

[stefanus]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Users^Steve^AppData^Roamin g^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\users\Steve\AppData\Roaming\Microsoft\Wind ows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup
backupExtension=.Startup

[HKLM\~\startupfolder\C:^Users^Steve^AppData^Roamin g^Microsoft^Windows^Start Menu^Programs^Startup^wkcalrem.LNK]
path=c:\users\Steve\AppData\Roaming\Microsoft\Wind ows\Start Menu\Programs\Startup\wkcalrem.LNK
backup=c:\windows\pss\wkcalrem.LNK.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-15 01:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG9_TRAY]
2010-10-05 11:49 2067808 ----a-w- c:\progra~1\AVG\AVG9\avgtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\btbb_McciTrayApp]
2009-09-14 16:56 1584640 ----a-w- c:\program files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-19 07:33 125952 ----a-w- c:\windows\ehome\ehtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2008-04-01 13:41 166424 ----a-w- c:\windows\System32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-08 15:24 54840 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPADVISOR]
2009-08-05 10:27 1644088 ----a-w- c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
2007-04-18 15:01 65536 ----a-w- c:\hp\support\hpsysdrv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2008-04-01 13:41 141848 ----a-w- c:\windows\System32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
2010-04-29 14:39 1090952 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Monitor]
2006-11-03 10:01 319488 ----a-w- c:\windows\PixArt\Pac207\Monitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OsdMaestro]
2007-02-15 11:59 118784 ----a-w- c:\program files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2008-04-01 13:41 133656 ----a-w- c:\windows\System32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-01-15 10:26 4874240 ----a-w- c:\windows\RtHDVCpl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2009-04-11 06:28 1233920 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateReg]
2009-10-11 04:17 55072 ----a-w- c:\windows\System32\jureg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2008-05-06 08:42 202088 ----a-w- c:\program files\TomTom HOME 2\HOMERunner.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2008-01-19 07:38 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-19 07:33 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YBrowser]
2003-12-09 11:03 57344 ----a-w- c:\progra~1\Yahoo!\browser\ybrwicon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3050771261-1287843731-569478081-1000]
"EnableNotificationsRef"=dword:00000001

R0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\ v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 PAC207;SoC PC-Camera;c:\windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30 319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 LEIFV;LEIFV;c:\users\Steve\AppData\Local\Temp\LEIF V.exe [x]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2010-07-17 216400]
S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2010-07-17 243024]
S2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2010-07-21 921952]
S2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-07-17 308136]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2010-08-24 92008]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder

2010-09-29 c:\windows\Tasks\HPCeeScheduleForSteve.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2007-12-03 00:34]
.

[stefanus]

------- Supplementary Scan -------
.
uInternet Settings,ProxyServer = 127.0.0.1:29775
uInternet Settings,ProxyOverride = <local>
Trusted Zone: motive.com\pbttbc.bt
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
.
- - - - ORPHANS REMOVED - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - (no file)
WebBrowser-{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - (no file)
MSConfigStartUp-Ad-Watch - c:\program files\Lavasoft\Ad-Aware\AAWTray.exe
MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre6\bin\jusched.exe


.
Completion time: 2010-10-21 15:59:47
ComboFix-quarantined-files.txt 2010-10-21 14:59

Pre-Run: 303,121,338,368 bytes free
Post-Run: 303,157,641,216 bytes free

- - End Of File - - 8AE4F92EA17C79BD4DE1D065F7AA9F58

[stefanus]

That seems to be the end of it...

[stefanus]

Should I now delete the Combo Fix link from my pc?

Latest HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:12:27, on 23/10/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10k_Ac tiveX.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 127.0.0.1:29775
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\s wg.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInsta nce.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [PCDrProfiler] C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe -r
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - [url]http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab[/url]
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - [url]http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab[/url]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [url]http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[/url]
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll C:\Windows\System32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\Windows\System32\YPCSER~1.EXE

--
End of file - 7967 bytes