Very Slow Computer, May have Virus, please help

Logfile of HijackThis v1.99.1
Scan saved at 1:10:38 PM, on 10/30/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\system32\svchost.exe
G:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
G:\Program Files\Bonjour\mDNSResponder.exe
G:\WINDOWS\System32\GEARSec.exe
G:\Program Files\Java\jre6\bin\jqs.exe
G:\WINDOWS\System32\HPZipm12.exe
G:\Program Files\Google\Update\GoogleUpdate.exe
G:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
G:\WINDOWS\System32\svchost.exe
G:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
G:\WINDOWS\system32\Ati2evxx.exe
G:\WINDOWS\Explorer.EXE
G:\WINDOWS\system32\devldr32.exe
G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
G:\Program Files\Java\jre6\bin\jusched.exe
G:\utilities\iTunes\iTunesHelper.exe
G:\Program Files\Common Files\Real\Update_OB\realsched.exe
G:\Program Files\COMODO\COMODO Internet Security\cfp.exe
G:\WINDOWS\system32\ctfmon.exe
G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Hallmark Card Studio 2009\Planner\PLNRnote.exe
G:\Utilities\iPod\bin\iPodService.exe
G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Utilities\Hijackthis\Nutty110.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: (no name) - {02478d38-c3f9-4efb-9b51-7695eca05670} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - G:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - G:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - G:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - G:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - G:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - G:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Google Desktop Search] "G:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [PSDrvCheck] G:\WINDOWS\system32\PSDrvCheck.exe
O4 - HKLM\..\Run: [ATICCC] "G:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "G:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "G:\utilities\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "G:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [COMODO Internet Security] "G:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NBJ] "G:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [EPSON PictureMate PM 240] G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBCA.EXE /FU "G:\WINDOWS\TEMP\E_S1EB.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [swg] "G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - Global Startup: Event Planner Reminder 2009.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\UTILIT~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - G:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - G:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - G:\Program Files\PokerStars\PokerStarsUpdate.exe
O10 - Unknown file in Winsock LSP: g:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International
O16 - DPF: Garmin Communicator Plug-In - https://my.garmin.com/mygarmin/m/GarminAxControl.CAB
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - G:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-24-0.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase4009.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/win/QuickTimeInstaller.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136916728625
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1160562902890
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {7530bfb8-7293-4d34-9923-61a11451afc5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15021/CTPID.cab
O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Control) - https://plugins.valueactive.eu/flashax/iefax.cab
O16 - DPF: {FAE74270-E5EE-49C3-B816-EA8B4D55F38F} (H2hPool Control) - http://mirror.worldwinner.com//games/v47/h2hpool/h2hpool.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - G:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - G:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - G:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - AppInit_DLLs: G:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: WgaLogon - G:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - G:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple Inc. - G:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - G:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - G:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: GEARSecurity - GEAR Software - G:\WINDOWS\System32\GEARSec.exe
O23 - Service: Google Desktop Manager 5.5.709.30344 (GoogleDesktopManager-093007-112848) - Google - G:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate1ca100c8fc860aa) (gupdate1ca100c8fc860aa) - Unknown owner - G:\Program Files\Google\Update\GoogleUpdate.exe" /svc (file missing)
O23 - Service: Google Software Updater (gusvc) - Google - G:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - G:\Utilities\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - G:\Program Files\Java\jre6\bin\jqs.exe" -service -config "G:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Microsoft .NET Framework v1.1.4322 Update (NetFxUpdate_v1.1.4322) - Unknown owner - G:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - G:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - G:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

Comments

  • edited November 2009
    Hello, and sorry for the late reply.

    A few things before we start....
    1. Please Read All Instructions Carefully.
    2. If you don't understand something, stop and ask! Don't keep going on.
    3. Please do not run any other tools or scans whilst I am helping you.
    4. If you have to go away for an extended period of time, let me know.
    5. Please continue to respond until I give you the "All Clear".
    (Just because you can't see a problem doesn't mean it isn't there)

    =========

    Your version of HijackThis is outdated.
    Please download the current version here:
    http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php?page=download
    Please save it in a convenient permanent folder,
    and be sure the next log is with the newer version.

    =========

    Now let's have you download ComboFix.exe. Please visit this webpage for downloading and instructions for running the tool:

    Go here ======> A guide and tutorial on using ComboFix <====== Go here

    Please ensure you read this guide carefully and install the Recovery Console first.This applies to XP Pro and XP Home users only.If you have SP3 installed you will need to use the download meant for SP2.

    The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

    Once installed, you should get a prompt that says:

    The Recovery Console was successfully installed.

    Please continue as follows:

    (1) Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
    (2) Click Yes to allow ComboFix to continue scanning for malware.

    When the tool is finished, it will produce a report for you.


    Please include C:\ComboFix.txt and a new HijackThis log for further review, so that we may continue cleansing the system.


    Caution: Never run and remove files with Combofix unless supervised by a qualified security analyst who is experienced in the use of Combofix. Misuse can cause serious computer problems.
  • edited November 2009
    The Combo Fix log is very long, so I will give it to you in parts

    ComboFix 09-10-30.01 - Randy 11/01/2009 22:16.10.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.198 [GMT -5:00]
    Running from: g:\documents and settings\Randy\Desktop\ComboFix.exe
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    g:\program files\Mozilla Firefox\extensions\{30B4D1B8-7F63-4DF9-ABA2-4566AE628CA1}
    g:\program files\Mozilla Firefox\extensions\{30B4D1B8-7F63-4DF9-ABA2-4566AE628CA1}\chrome.manifest
    g:\program files\Mozilla Firefox\extensions\{30B4D1B8-7F63-4DF9-ABA2-4566AE628CA1}\chrome\content\overlay.xul
    g:\program files\Mozilla Firefox\extensions\{30B4D1B8-7F63-4DF9-ABA2-4566AE628CA1}\install.rdf
    g:\windows\system32\Data
    g:\windows\system32\Drivers\mqrmerhn.sys
    g:\windows\system32\inf
    g:\windows\system32\SelfDel.bat

    .
    ((((((((((((((((((((((((( Files Created from 2009-10-02 to 2009-11-02 )))))))))))))))))))))))))))))))
    .

    2009-11-01 22:38 . 2009-11-01 22:38
    d
    w- g:\documents and settings\Randy\Application Data\Blitware
    2009-10-25 04:30 . 2009-10-25 04:31
    d
    w- g:\documents and settings\All Users\Application Data\Readon
    2009-10-11 13:26 . 2009-10-25 04:32
    d
    w- g:\documents and settings\Randy\Application Data\vlc

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-11-02 03:10 . 2008-05-03 14:10
    d
    w- g:\program files\COMODO
    2009-11-02 03:08 . 2009-05-15 01:24 1474832 ----a-w- g:\windows\system32\drivers\sfi.dat
    2009-11-02 02:53 . 2008-03-13 21:31
    d
    w- g:\documents and settings\Randy\Application Data\uTorrent
    2009-11-02 01:59 . 2009-08-13 13:12
    d
    w- g:\program files\PokerStars
    2009-11-01 21:41 . 2004-10-23 02:23
    d
    w- g:\documents and settings\All Users\Application Data\DVD Shrink
    2009-11-01 13:53 . 2005-08-27 02:32
    d
    w- g:\program files\Java
    2009-10-31 14:48 . 2006-12-27 04:39
    d
    w- g:\documents and settings\Randy\Application Data\Vso
    2009-10-21 21:00 . 2007-10-27 05:35
    d
    w- g:\documents and settings\All Users\Application Data\Snappy Invoice System
    2009-10-19 02:47 . 2007-07-09 13:38
    d---a-w- g:\documents and settings\All Users\Application Data\TEMP
    2009-10-12 03:52 . 2008-03-02 17:39
    d
    w- g:\program files\Yahoo!
    2009-10-11 16:32 . 2007-06-27 07:15
    d
    w- g:\program files\Windows Media Connect 2
    2009-10-07 01:09 . 2007-06-11 16:45
    d
    w- g:\program files\Full Tilt Poker
    2009-10-02 03:20 . 2004-03-31 00:21
    d
    w- g:\program files\Common Files\Real
    2009-10-02 03:19 . 2009-10-02 03:19
    d
    w- g:\program files\Common Files\xing shared
    2009-10-02 03:18 . 2006-10-01 03:41 499712 ----a-w- g:\windows\system32\msvcp71.dll
    2009-09-28 17:56 . 2005-10-21 22:01
    d
    w- g:\documents and settings\Randy\Application Data\Apple Computer
    2009-09-23 17:00 . 2009-09-23 16:56
    d
    w- g:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
    2009-09-23 16:58 . 2008-03-09 01:30
    d
    w- g:\program files\Common Files\Apple
    2009-09-23 16:50 . 2009-09-23 16:50
    d
    w- g:\program files\Bonjour
    2009-09-23 16:39 . 2008-03-09 00:37
    d
    w- g:\program files\Apple Software Update
    2009-09-23 09:01 . 2009-09-16 00:59
    d
    w- g:\program files\Microsoft Silverlight
    2009-09-22 20:28 . 2003-12-28 04:23
    d--h--w- g:\program files\InstallShield Installation Information
    2009-09-16 01:07 . 2004-07-25 18:00 82464 ----a-w- g:\documents and settings\Randy\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-09-16 00:58 . 2009-09-16 00:40
    d
    w- g:\program files\Microsoft
    2009-09-16 00:58 . 2008-04-29 18:17
    d
    w- g:\program files\Windows Live
    2009-09-16 00:56 . 2009-09-16 00:56
    d
    w- g:\program files\Microsoft Sync Framework
    2009-09-16 00:52 . 2009-09-16 00:52
    d
    w- g:\program files\Microsoft SQL Server Compact Edition
    2009-09-16 00:40 . 2009-09-16 00:40
    d
    w- g:\program files\Windows Live SkyDrive
    2009-09-16 00:31 . 2009-09-16 00:31
    d
    w- g:\program files\Common Files\Windows Live
    2009-09-13 13:26 . 2009-09-13 13:26
    d
    w- g:\documents and settings\Randy\Application Data\Thinstall
    2009-09-11 14:33 . 2002-08-29 03:41 133632 ----a-w- g:\windows\system32\msv1_0.dll
    2009-09-10 18:54 . 2009-07-28 20:55 38224 ----a-w- g:\windows\system32\drivers\mbamswissarmy.sys
    2009-09-10 18:53 . 2009-07-28 20:55 19160 ----a-w- g:\windows\system32\drivers\mbam.sys
    2009-09-07 23:35 . 2009-09-07 23:35
    d
    w- g:\documents and settings\All Users\Application Data\MGS
    2009-09-04 20:45 . 2001-08-23 12:00 58880 ----a-w- g:\windows\system32\msasn1.dll
    2009-08-29 08:08 . 2006-06-23 15:33 916480 ----a-w- g:\windows\system32\wininet.dll
    2009-08-26 08:16 . 2002-08-29 03:41 247326 ----a-w- g:\windows\system32\strmdll.dll
    2009-08-06 23:24 . 2005-06-21 19:01 327896 ----a-w- g:\windows\system32\wucltui.dll
    2009-08-06 23:24 . 2005-05-26 09:19 209632 ----a-w- g:\windows\system32\wuweb.dll
    2009-08-06 23:24 . 2005-06-21 19:01 35552 ----a-w- g:\windows\system32\wups.dll
    2009-08-06 23:24 . 2005-05-26 08:16 44768 ----a-w- g:\windows\system32\wups2.dll
    2009-08-06 23:24 . 2005-06-21 19:01 53472 ----a-w- g:\windows\system32\wuauclt.exe
    2009-08-06 23:24 . 2005-06-21 19:01 96480 ----a-w- g:\windows\system32\cdm.dll
    2009-08-06 23:23 . 2005-06-21 19:01 575704 ----a-w- g:\windows\system32\wuapi.dll
    2009-08-06 23:23 . 2007-04-11 19:44 274288 ----a-w- g:\windows\system32\mucltui.dll
    2009-08-06 23:23 . 2005-06-21 19:01 1929952 ----a-w- g:\windows\system32\wuaueng.dll
    2009-08-06 23:23 . 2005-05-26 08:19 215920 ----a-w- g:\windows\system32\muweb.dll
    2009-08-06 02:48 . 2009-09-16 00:58 54752 ----a-w- g:\windows\system32\drivers\fssfltr_tdi.sys
    2009-08-05 09:11 . 2007-02-11 23:00 204800 ----a-w- g:\windows\system32\mswebdvd.dll
    2009-08-04 14:00 . 2002-08-29 02:03 2180352 ----a-w- g:\windows\system32\ntoskrnl.exe
    2009-08-04 13:13 . 2002-08-29 01:04 2057728 ----a-w- g:\windows\system32\ntkrnlpa.exe
    2004-08-04 07:56 . 2007-04-16 23:48 93184 ----a-w- g:\program files\iexplore.exe
    2003-08-27 18:19 . 2004-07-25 17:40 36963
    r- g:\program files\Common Files\SM1updtr.dll
    2008-01-30 15:10 . 2007-05-06 06:05 131584 ----a-w- g:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
    2001-08-23 12:00 . 2001-08-23 12:00 94784 -csh--w- g:\windows\twain.dll
    2004-08-04 07:56 . 2001-08-23 12:00 50688 --sh--w- g:\windows\twain_32.dll
    2004-08-20 03:26 . 2004-08-20 03:26 1216 -csh--w- g:\windows\Twunk_16.dll
    2004-08-20 03:26 . 2004-08-20 03:26 1216 -csh--w- g:\windows\Twunk_32.dll
    2004-08-04 07:56 . 2001-08-23 12:00 54784 --sh--w- g:\windows\system32\msvcirt.dll
    2004-08-04 07:56 . 2002-08-29 03:41 413696 --sha-w- g:\windows\system32\msvcp60.dll
    2004-08-04 07:56 . 2001-08-23 12:00 11776 --sh--w- g:\windows\system32\regsvr32.exe
    2009-04-29 10:35 . 2009-04-28 23:30 77088 --sha-w- g:\windows\system32\drivers\fidbox.dat
    2009-04-29 10:35 . 2009-04-28 23:30 32 --sha-w- g:\windows\system32\drivers\fidbox2.dat
    .
  • edited November 2009
    ((((((((((((((((((((((((((((( SnapShot_2009-05-17_13.30.39 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-07-11 23:41 . 2009-07-11 23:41 97280 g:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
    + 2006-10-19 01:47 . 2006-10-19 01:47 38400 g:\windows\system32\wpdshextres.dll
    - 2006-10-19 01:47 . 2006-10-19 02:47 38400 g:\windows\system32\wpdshextres.dll
    + 2001-08-23 12:00 . 2009-06-25 08:44 59392 g:\windows\system32\wdigest.dll
    + 2007-01-29 08:58 . 2009-07-14 11:03 46080 g:\windows\system32\tzchange.exe
    + 2002-08-29 03:41 . 2009-06-12 11:50 80896 g:\windows\system32\tlntsess.exe
    + 2002-08-29 03:41 . 2009-06-12 11:50 76288 g:\windows\system32\telnet.exe
    + 2007-11-19 04:03 . 2008-07-06 12:06 89088 g:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
    + 2009-10-11 16:34 . 2008-07-08 13:02 17272 g:\windows\system32\spmsg.dll
    + 2009-10-06 03:52 . 2009-08-06 23:24 44768 g:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
    + 2009-10-06 03:52 . 2009-08-06 23:24 35552 g:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
    + 2009-07-26 20:44 . 2009-07-26 20:44 48448 g:\windows\system32\sirenacm.dll
    + 2002-08-29 03:41 . 2009-06-25 08:44 56320 g:\windows\system32\secur32.dll
    + 2008-07-29 23:59 . 2008-07-29 23:59 43544 g:\windows\system32\PresentationHostProxy.dll
    + 2001-08-23 12:00 . 2009-11-02 03:15 68532 g:\windows\system32\perfc009.dat
    + 2008-07-25 15:17 . 2008-07-25 15:17 15360 g:\windows\system32\mui\0409\mscorees.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 15360 g:\windows\system32\mui\0409\mscorees.dll
    - 2009-03-08 08:31 . 2009-03-08 08:31 55296 g:\windows\system32\msfeedsbs.dll
    + 2009-03-08 08:31 . 2009-08-29 08:08 55296 g:\windows\system32\msfeedsbs.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 83968 g:\windows\system32\mscories.dll
    + 2001-08-23 12:00 . 2009-06-25 18:36 48640 g:\windows\system32\mqupgrd.dll
    - 2001-08-23 12:00 . 2007-07-06 12:46 48640 g:\windows\system32\mqupgrd.dll
    + 2002-08-29 03:41 . 2009-06-25 18:36 95744 g:\windows\system32\mqsec.dll
    - 2002-08-29 03:41 . 2007-07-06 12:46 95744 g:\windows\system32\mqsec.dll
    - 2002-08-29 03:41 . 2007-07-06 12:46 16896 g:\windows\system32\mqise.dll
    + 2002-08-29 03:41 . 2009-06-25 18:36 16896 g:\windows\system32\mqise.dll
    - 2001-08-23 12:00 . 2007-07-06 12:46 47104 g:\windows\system32\mqdscli.dll
    + 2001-08-23 12:00 . 2009-06-25 18:36 47104 g:\windows\system32\mqdscli.dll
    + 2001-08-23 12:00 . 2009-06-22 11:49 19968 g:\windows\system32\mqbkup.exe
    - 2001-08-23 12:00 . 2004-08-04 07:56 19968 g:\windows\system32\mqbkup.exe
    - 2008-03-21 23:33 . 2009-03-09 02:47 84661 g:\windows\system32\Macromed\Flash\uninstall_plugin.exe
    + 2008-03-21 23:33 . 2009-08-24 10:33 84661 g:\windows\system32\Macromed\Flash\uninstall_plugin.exe
    + 2001-08-23 12:00 . 2009-08-29 08:08 25600 g:\windows\system32\jsproxy.dll
    - 2001-08-23 12:00 . 2009-03-08 08:33 25600 g:\windows\system32\jsproxy.dll
    + 2008-07-29 23:24 . 2008-07-29 23:24 97800 g:\windows\system32\infocardapi.dll
    + 2008-07-29 23:24 . 2008-07-29 23:24 11264 g:\windows\system32\icardres.dll
    + 2001-08-23 12:00 . 2009-06-16 14:55 82432 g:\windows\system32\fontsub.dll
    + 2008-12-17 16:22 . 2008-12-17 16:22 93184 g:\windows\system32\ff_wmv9.dll
    + 2008-12-17 16:22 . 2008-12-17 16:22 57344 g:\windows\system32\ff_vfw.dll
    + 2009-09-23 16:36 . 2009-08-28 23:42 40448 g:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaapl.sys
    + 2009-09-23 16:36 . 2009-08-28 23:42 17408 g:\windows\system32\DRVSTORE\netaapl_F433E854B3FF3BEE74986FDE8E16A64162342BFF\netaapl.sys
    + 2009-09-23 17:01 . 2009-05-18 18:17 26600 g:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys
    + 2009-09-16 00:58 . 2009-08-06 02:48 54752 g:\windows\system32\DRVSTORE\fssfltr_F64381C38F211E3160A660B196A6A585F80604F9\fssfltr_tdi.sys
    + 2002-08-29 01:45 . 2009-06-22 11:48 91776 g:\windows\system32\drivers\mqac.sys
    + 2001-08-23 12:00 . 2009-06-22 11:34 92544 g:\windows\system32\drivers\ksecdd.sys
    + 2008-01-29 16:01 . 2009-05-18 18:17 26600 g:\windows\system32\drivers\GEARAspiWDM.sys
    + 2008-12-12 15:11 . 2008-12-12 15:11 61440 g:\windows\system32\dnssd.dll
    + 2008-12-12 15:18 . 2008-12-12 15:18 87336 g:\windows\system32\dns-sd.exe
    + 2009-06-10 23:30 . 2009-08-29 08:08 12800 g:\windows\system32\dllcache\xpshims.dll
    + 2005-06-21 19:01 . 2009-08-06 23:24 35552 g:\windows\system32\dllcache\wups.dll
    + 2005-06-21 19:01 . 2009-08-06 23:24 53472 g:\windows\system32\dllcache\wuauclt.exe
    + 2009-06-25 08:44 . 2009-06-25 08:44 59392 g:\windows\system32\dllcache\wdigest.dll
    + 2009-06-12 11:50 . 2009-06-12 11:50 80896 g:\windows\system32\dllcache\tlntsess.exe
    + 2009-06-12 11:50 . 2009-06-12 11:50 76288 g:\windows\system32\dllcache\telnet.exe
    + 2009-02-03 20:08 . 2009-06-25 08:44 56320 g:\windows\system32\dllcache\secur32.dll
    - 2007-05-09 20:09 . 2009-03-08 08:31 55296 g:\windows\system32\dllcache\msfeedsbs.dll
    + 2007-05-09 20:09 . 2009-08-29 08:08 55296 g:\windows\system32\dllcache\msfeedsbs.dll
    + 2009-09-04 20:45 . 2009-09-04 20:45 58880 g:\windows\system32\dllcache\msasn1.dll
    + 2007-12-21 21:51 . 2009-06-25 18:36 48640 g:\windows\system32\dllcache\mqupgrd.dll
    - 2007-12-21 21:51 . 2007-07-06 12:46 48640 g:\windows\system32\dllcache\mqupgrd.dll
    + 2007-12-21 21:51 . 2009-06-25 18:36 95744 g:\windows\system32\dllcache\mqsec.dll
    - 2007-12-21 21:51 . 2007-07-06 12:46 95744 g:\windows\system32\dllcache\mqsec.dll
    - 2007-12-21 21:51 . 2007-07-06 12:46 16896 g:\windows\system32\dllcache\mqise.dll
    + 2007-12-21 21:51 . 2009-06-25 18:36 16896 g:\windows\system32\dllcache\mqise.dll
    - 2007-12-21 21:51 . 2007-07-06 12:46 47104 g:\windows\system32\dllcache\mqdscli.dll
    + 2007-12-21 21:51 . 2009-06-25 18:36 47104 g:\windows\system32\dllcache\mqdscli.dll
    + 2009-06-22 11:49 . 2009-06-22 11:49 19968 g:\windows\system32\dllcache\mqbkup.exe
    + 2007-12-21 21:51 . 2009-06-22 11:48 91776 g:\windows\system32\dllcache\mqac.sys
    + 2009-06-22 11:34 . 2009-06-22 11:34 92544 g:\windows\system32\dllcache\ksecdd.sys
    - 2007-01-04 13:36 . 2009-03-08 08:33 25600 g:\windows\system32\dllcache\jsproxy.dll
    + 2007-01-04 13:36 . 2009-08-29 08:08 25600 g:\windows\system32\dllcache\jsproxy.dll
    + 2001-08-23 12:00 . 2009-06-16 14:55 82432 g:\windows\system32\dllcache\fontsub.dll
    + 2006-10-14 21:43 . 2008-07-06 12:06 89088 g:\windows\system32\dllcache\filterpipelineprintproc.dll
    + 2005-06-21 19:01 . 2009-08-06 23:24 96480 g:\windows\system32\dllcache\cdm.dll
    - 2002-08-29 03:40 . 2004-08-04 07:56 84992 g:\windows\system32\dllcache\avifil32.dll
    + 2002-08-29 03:40 . 2009-06-10 14:21 84992 g:\windows\system32\dllcache\avifil32.dll
    + 2002-08-29 03:40 . 2009-07-17 18:55 58880 g:\windows\system32\dllcache\atl.dll
    - 2002-08-29 03:40 . 2004-08-04 07:56 58880 g:\windows\system32\dllcache\atl.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 96760 g:\windows\system32\dfshim.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 96760 g:\windows\system32\dfshim.dll
    + 2002-08-29 03:40 . 2009-06-10 14:21 84992 g:\windows\system32\avifil32.dll
    - 2002-08-29 03:40 . 2004-08-04 07:56 84992 g:\windows\system32\avifil32.dll
    + 2002-08-29 03:40 . 2009-07-17 18:55 58880 g:\windows\system32\atl.dll
    - 2002-08-29 03:40 . 2004-08-04 07:56 58880 g:\windows\system32\atl.dll
    + 2008-07-30 03:40 . 2008-07-30 03:40 70648 g:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
    - 2007-11-08 00:02 . 2007-11-08 00:02 91136 g:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 91136 g:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 41984 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
    - 2007-11-08 00:02 . 2007-11-08 00:02 41984 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
    + 2008-07-30 03:40 . 2008-07-30 03:40 40960 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 89080 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 92664 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 95224 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 89592 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 84480 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 94720 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 97792 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 84992 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 97280 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 95224 g:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 78856 g:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 41984 g:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 41992 g:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
    - 2007-11-08 00:02 . 2007-11-08 00:02 41992 g:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
    - 2007-11-08 00:02 . 2007-11-08 00:02 41992 g:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 41992 g:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
    + 2008-07-30 01:10 . 2008-07-30 01:10 46104 g:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
    + 2008-07-29 23:59 . 2008-07-29 23:59 32768 g:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
    - 2007-10-09 17:58 . 2007-10-09 17:58 32768 g:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
    + 2008-07-30 01:10 . 2008-07-30 01:10 71160 g:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
    + 2008-07-29 23:32 . 2008-07-29 23:32 17448 g:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
    + 2008-07-29 23:16 . 2008-07-29 23:16 32768 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    - 2007-10-11 14:55 . 2007-10-11 14:55 32768 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2008-07-29 23:16 . 2008-07-29 23:16 73728 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    + 2008-07-29 23:16 . 2008-07-29 23:16 20504 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
    + 2008-07-29 23:16 . 2008-07-29 23:16 11280 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 37896 g:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 37896 g:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 81400 g:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2008-07-25 15:17 . 2008-07-25 15:17 81400 g:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2008-07-25 15:17 . 2008-07-25 15:17 77824 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 57392 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 57392 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 81920 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 81920 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 81920 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 81920 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 95232 g:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 95232 g:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 16896 g:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 16896 g:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 61952 g:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 61952 g:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 32768 g:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 32768 g:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 53248 g:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 53248 g:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 88584 g:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 24584 g:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 24584 g:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 31744 g:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 31744 g:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 19456 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 19456 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 69632 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 18944 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 18944 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 77312 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 77312 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 94208 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 94208 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 46592 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 83456 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 83456 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 69632 g:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 69632 g:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 97792 g:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 97792 g:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 12800 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 12800 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 32768 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 32768 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 28672 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 28672 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 77824 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 77824 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 36864 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 36864 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 40960 g:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 40960 g:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 72192 g:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 72192 g:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 65032 g:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 65032 g:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 28672 g:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 28672 g:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 77824 g:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 77824 g:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 18936 g:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 18936 g:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 62968 g:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 35320 g:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 35320 g:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 69120 g:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 69120 g:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 27136 g:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 27136 g:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 13312 g:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 13312 g:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 80376 g:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 80376 g:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 89608 g:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2008-11-25 08:59 . 2008-11-25 08:59 31560 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 34312 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 33288 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 24576 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 24576 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 84480 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 84480 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 33800 g:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 17416 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 22024 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 22024 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 36864 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 36864 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 58880 g:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 98808 g:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 10752 g:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 10752 g:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 13824 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 13824 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 28672 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 28672 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 96768 g:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 16896 g:\windows\Microsoft.NET\Framework\SharedReg12.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 16896 g:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 16896 g:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 16896 g:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 16896 g:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 16896 g:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 16896 g:\windows\Microsoft.NET\Framework\sbscmp10.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 16896 g:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 82944 g:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 82944 g:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2009-11-01 23:41 . 2009-11-01 23:41 22528 g:\windows\Installer\4ca0984.msi
    + 2005-08-30 00:40 . 2005-08-30 00:40 20480 g:\windows\Installer\42d895e.msi
    + 2005-11-09 00:48 . 2005-11-09 00:48 84992 g:\windows\Installer\408461.msi
    + 2008-07-30 01:07 . 2008-07-30 01:07 23040 g:\windows\Installer\2f958d0a.msp
    + 2009-08-12 07:18 . 2009-08-12 07:18 88576 g:\windows\Installer\2f824f7a.msi
    + 2007-07-30 04:24 . 2007-07-30 04:24 95232 g:\windows\Installer\1ec3dfd.msi
    + 2009-05-09 14:29 . 2009-05-09 14:29 24064 g:\windows\Installer\1a60cc6.msi
    + 2009-09-16 00:58 . 2009-09-16 00:58 49664 g:\windows\Installer\16f679.msi
    + 2009-09-16 00:42 . 2009-09-16 00:42 22016 g:\windows\Installer\16f5c2.msi
    + 2009-09-16 00:40 . 2009-09-16 00:40 27136 g:\windows\Installer\16f542.msi
    + 2009-09-16 00:39 . 2009-09-16 00:39 83456 g:\windows\Installer\16f521.msi
    + 2009-09-16 00:39 . 2009-09-16 00:39 59904 g:\windows\Installer\16f516.msi
    + 2009-09-16 00:39 . 2009-09-16 00:39 62304 g:\windows\Installer\{F6BD194C-4190-4D73-B1B1-C48C99921BFE}\IconWlc.exe
    + 2009-09-16 00:41 . 2009-09-16 00:41 80395 g:\windows\Installer\{A85FD55B-891B-4314-97A5-EA96C0BD80B5}\MsblIco.Exe
    + 2009-09-23 16:39 . 2009-09-23 16:39 27136 g:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
    + 2009-09-16 00:43 . 2009-09-16 00:43 58945 g:\windows\Installer\{6412CECE-8172-4BE5-935B-6CECACD2CA87}\wlmail.exe
    + 2009-09-23 16:51 . 2009-09-23 16:51 86016 g:\windows\Installer\{07287123-B8AC-41CE-8346-3D777245C35B}\PrntWzrdIco.exe
    + 2009-10-14 21:52 . 2009-07-03 17:09 12800 g:\windows\ie8updates\KB974455-IE8\xpshims.dll
    + 2009-10-14 21:52 . 2009-07-03 17:09 55296 g:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll
    + 2009-10-14 21:52 . 2009-07-03 17:09 25600 g:\windows\ie8updates\KB974455-IE8\jsproxy.dll
    + 2009-07-29 07:07 . 2009-04-30 21:22 12800 g:\windows\ie8updates\KB972260-IE8\xpshims.dll
    + 2009-07-29 07:06 . 2009-03-08 08:31 55296 g:\windows\ie8updates\KB972260-IE8\msfeedsbs.dll
    + 2009-07-29 07:06 . 2009-04-30 21:22 25600 g:\windows\ie8updates\KB972260-IE8\jsproxy.dll
    + 2009-06-17 07:14 . 2009-03-08 08:33 12288 g:\windows\ie8updates\KB969897-IE8\xpshims.dll
    + 2009-06-17 07:14 . 2009-03-08 08:33 25600 g:\windows\ie8updates\KB969897-IE8\jsproxy.dll
    + 2009-08-12 07:24 . 2008-07-06 12:06 89088 g:\windows\Driver Cache\i386\filterpipelineprintproc.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 47616 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\a31f5136a236dae58c03db56ea2a1a7a\WindowsLiveWriter.ni.exe
    + 2009-09-16 01:03 . 2009-09-16 01:03 47616 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\931576d67bc4f7d5ef5d3f9ce6e5173c\WindowsLiveWriter.ni.exe
    + 2009-09-16 01:04 . 2009-09-16 01:04 99840 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\534cd402cf22bebe59ec2b87928f2fab\WindowsLive.Writer.Api.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 99840 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0cce8134aebab15d6c31143f850af1a7\WindowsLive.Writer.Api.ni.dll
    + 2009-10-14 22:24 . 2009-10-14 22:24 60928 g:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\b4a9e413d5cd6d6ec2d50aa05381e293\UIAutomationProvider.ni.dll
    + 2009-08-12 08:02 . 2009-08-12 08:02 60928 g:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa442ef87ae99b3ade185599249d\UIAutomationProvider.ni.dll
    + 2009-10-14 22:37 . 2009-10-14 22:37 37888 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\8acb476a0d4ee17a12881e17ae74a6af\System.Windows.Presentation.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 37888 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794d1f4ed6e120fbb02e436491cb\System.Windows.Presentation.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 36864 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\4b87ca3482a3c0ee733e028ecee7de65\System.Web.DynamicData.Design.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 36864 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca1747c1ea18a3b639b302bca8df93\System.Web.DynamicData.Design.ni.dll
    + 2009-10-14 22:34 . 2009-10-14 22:34 94208 g:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\a0c71055364bd356971791284c3fb910\System.ComponentModel.DataAnnotations.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 94208 g:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll
    + 2009-10-14 22:34 . 2009-10-14 22:34 82944 g:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f9a75bbdc2ce7db578b5977766a09b99\System.AddIn.Contract.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 82944 g:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll
    + 2009-10-14 22:18 . 2009-10-14 22:18 47104 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3dd0f86c966c75755d62eab8ddf0634c\PresentationFontCache.ni.exe
    + 2009-08-12 07:53 . 2009-08-12 07:53 47104 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe
    + 2009-08-12 07:54 . 2009-08-12 07:54 39424 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll
    + 2009-10-14 22:18 . 2009-10-14 22:18 39424 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\034d081fe294bab1ee1ecc98c1181424\PresentationCFFRasterizer.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 55296 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2673aec397c52796aef05bb9d2668df\Microsoft.Vsa.ni.dll
    + 2009-08-12 08:09 . 2009-08-12 08:09 55296 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee41b59be62ecbd59613b\Microsoft.Vsa.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 15872 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\ec83ec80653eb20ccc6ed42075c90aee\Microsoft.VisualC.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 15872 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\1ded203bd27031c3a5e3441f94b528c0\Microsoft.VisualC.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 65024 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2eab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 65024 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\d513fe1a81c441e7656a9b062cff4e9f\Microsoft.Build.Framework.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 74752 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c5d504724d7f351b1d034615dbb72a2a\Microsoft.Build.Framework.ni.dll
    + 2009-08-12 08:05 . 2009-08-12 08:05 74752 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d470d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll
    + 2009-08-12 08:05 . 2009-08-12 08:05 14336 g:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d6543b9fcc6\dfsvc.ni.exe
    + 2009-10-14 22:33 . 2009-10-14 22:33 14336 g:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\a664ccab020f93f1d533919f57131190\dfsvc.ni.exe
    + 2009-10-14 22:27 . 2009-10-14 22:27 25600 g:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\e63d6d26b8a664cfdfbd4ad75e03c14d\Accessibility.ni.dll
    + 2009-08-12 08:05 . 2009-08-12 08:05 25600 g:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01e5128805759121ea6c\Accessibility.ni.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 94208 g:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 98304 g:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 40960 g:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 12288 g:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 61440 g:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
    + 2009-10-14 22:06 . 2009-10-14 22:06 77824 g:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 32768 g:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 77824 g:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 32768 g:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    - 2009-02-14 01:33 . 2009-02-14 01:33 32768 g:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 73728 g:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 81920 g:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 81920 g:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2009-02-14 01:37 . 2009-02-14 01:37 53248 g:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 53248 g:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 81920 g:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 81920 g:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 57344 g:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 45056 g:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 46104 g:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
    - 2009-02-14 01:33 . 2009-02-14 01:33 32768 g:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 32768 g:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 32768 g:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 32768 g:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 12800 g:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 12800 g:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2009-02-14 01:36 . 2009-02-14 01:36 41984 g:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 41984 g:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 28672 g:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 28672 g:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 77824 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 77824 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 94208 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
    - 2009-02-14 01:36 . 2009-02-14 01:36 94208 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 36864 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-02-14 01:36 . 2009-02-14 01:36 36864 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 36864 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 36864 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 77824 g:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 77824 g:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 13312 g:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 13312 g:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 10752 g:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 10752 g:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 72192 g:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 72192 g:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 69120 g:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 69120 g:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
  • edited November 2009
    - 2007-06-27 07:14 . 2004-09-22 23:46 86016 g:\windows\$NtUninstallwmp11$\wmpshell.dll
    - 2007-06-27 07:14 . 2004-09-22 23:46 73728 g:\windows\$NtUninstallwmp11$\wmplayer.exe
    - 2007-06-27 07:14 . 2004-09-22 23:46 28672 g:\windows\$NtUninstallwmp11$\wmpenc.exe
    - 2007-06-27 07:14 . 2004-09-22 23:46 77824 g:\windows\$NtUninstallwmp11$\wmpband.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 18944 g:\windows\$NtUninstallWMFDist11$\wpdusb.sys
    - 2007-06-27 07:10 . 2004-09-22 23:46 66560 g:\windows\$NtUninstallWMFDist11$\wpdmtpus.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 61952 g:\windows\$NtUninstallWMFDist11$\wpdconns.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 38912 g:\windows\$NtUninstallWMFDist11$\wpd_ci.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 34304 g:\windows\$NtUninstallWMFDist11$\wmdmps.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 30208 g:\windows\$NtUninstallWMFDist11$\wmdmlog.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 38912 g:\windows\$NtUninstallWMFDist11$\wdfmgr.exe
    - 2007-06-27 07:10 . 2004-09-22 23:46 15872 g:\windows\$NtUninstallWMFDist11$\wdfapi.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 47104 g:\windows\$NtUninstallWMFDist11$\uwdf.exe
    - 2007-06-27 07:10 . 2006-11-02 15:46 13312 g:\windows\$NtUninstallWMFDist11$\spuninst\wpdinstallutil.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 25088 g:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 96768 g:\windows\$NtUninstallWMFDist11$\logagent.exe
    + 2009-08-14 11:58 . 2004-08-04 07:56 58880 g:\windows\$NtUninstallKB973507$\atl.dll
    + 2009-08-14 12:01 . 2004-08-04 07:56 84992 g:\windows\$NtUninstallKB971557$\avifil32.dll
    + 2009-08-14 11:50 . 2007-07-06 12:46 48640 g:\windows\$NtUninstallKB971032$\mqupgrd.dll
    + 2009-08-14 11:50 . 2007-07-06 12:46 95744 g:\windows\$NtUninstallKB971032$\mqsec.dll
    + 2009-08-14 11:50 . 2007-07-06 12:46 16896 g:\windows\$NtUninstallKB971032$\mqise.dll
    + 2009-08-14 11:50 . 2007-07-06 12:46 47104 g:\windows\$NtUninstallKB971032$\mqdscli.dll
    + 2009-08-14 11:50 . 2004-08-04 07:56 19968 g:\windows\$NtUninstallKB971032$\mqbkup.exe
    + 2009-08-14 11:50 . 2007-07-06 10:05 72960 g:\windows\$NtUninstallKB971032$\mqac.sys
    + 2009-08-29 02:38 . 2008-10-22 09:47 62976 g:\windows\$NtUninstallKB970653-v3$\tzchange.exe
    + 2009-08-29 02:38 . 2009-07-16 04:14 14336 g:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll
    + 2009-08-14 11:49 . 2006-03-24 04:37 49152 g:\windows\$NtUninstallKB968389$\wdigest.dll
    + 2009-08-14 11:49 . 2009-02-03 20:08 55808 g:\windows\$NtUninstallKB968389$\secur32.dll
    + 2009-08-14 11:49 . 2004-08-04 05:59 92032 g:\windows\$NtUninstallKB968389$\ksecdd.sys
    + 2009-07-18 05:11 . 2005-10-17 21:14 80896 g:\windows\$NtUninstallKB961371$\fontsub.dll
    + 2009-08-14 12:02 . 2004-08-04 07:56 78336 g:\windows\$NtUninstallKB960859$\tlntsess.exe
    + 2009-08-14 12:02 . 2005-05-10 23:45 75776 g:\windows\$NtUninstallKB960859$\telnet.exe
    + 2009-08-14 11:59 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB973869\update\spcustom.dll
    + 2009-08-14 11:59 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB973869\spmsg.dll
    + 2009-08-14 11:51 . 2009-05-26 11:40 26488 g:\windows\$hf_mig$\KB973815\update\spcustom.dll
    + 2009-08-14 11:51 . 2009-05-26 11:40 17272 g:\windows\$hf_mig$\KB973815\spmsg.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 26488 g:\windows\$hf_mig$\KB973507\update\spcustom.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 17272 g:\windows\$hf_mig$\KB973507\spmsg.dll
    + 2009-07-17 19:25 . 2009-07-17 19:25 58880 g:\windows\$hf_mig$\KB973507\SP3QFE\atl.dll
    + 2009-07-17 19:01 . 2009-07-17 19:01 58880 g:\windows\$hf_mig$\KB973507\SP3GDR\atl.dll
    + 2009-07-17 18:43 . 2009-07-17 18:43 58880 g:\windows\$hf_mig$\KB973507\SP2QFE\atl.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 26488 g:\windows\$hf_mig$\KB973354\update\spcustom.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 17272 g:\windows\$hf_mig$\KB973354\spmsg.dll
    + 2009-07-18 05:31 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB973346\update\spcustom.dll
    + 2009-07-18 05:31 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB973346\spmsg.dll
    + 2009-07-29 07:07 . 2009-05-26 11:40 26488 g:\windows\$hf_mig$\KB972260-IE8\update\spcustom.dll
    + 2009-07-29 07:07 . 2009-05-26 11:40 17272 g:\windows\$hf_mig$\KB972260-IE8\spmsg.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 12800 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\xpshims.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 55296 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\msfeedsbs.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 25600 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\jsproxy.dll
    + 2009-09-09 07:08 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB971961-IE8\update\spcustom.dll
    + 2009-09-09 07:08 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB971961-IE8\spmsg.dll
    + 2009-08-14 12:02 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB971657\update\spcustom.dll
    + 2009-08-14 12:02 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB971657\spmsg.dll
    + 2009-07-18 05:30 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB971633\update\spcustom.dll
    + 2009-07-18 05:30 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB971633\spmsg.dll
    + 2009-08-14 12:01 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB971557\update\spcustom.dll
    + 2009-08-14 12:01 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB971557\spmsg.dll
    + 2009-06-10 14:01 . 2009-06-10 14:01 84992 g:\windows\$hf_mig$\KB971557\SP3QFE\avifil32.dll
    + 2009-06-10 14:13 . 2009-06-10 14:13 84992 g:\windows\$hf_mig$\KB971557\SP3GDR\avifil32.dll
    + 2009-06-10 14:52 . 2009-06-10 14:52 84992 g:\windows\$hf_mig$\KB971557\SP2QFE\avifil32.dll
    + 2009-08-14 11:50 . 2007-03-06 01:22 22752 g:\windows\$hf_mig$\KB971032\update\spcustom.dll
    + 2009-08-14 11:50 . 2007-03-06 01:22 14048 g:\windows\$hf_mig$\KB971032\spmsg.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 48640 g:\windows\$hf_mig$\KB971032\SP2QFE\mqupgrd.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 95744 g:\windows\$hf_mig$\KB971032\SP2QFE\mqsec.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 16896 g:\windows\$hf_mig$\KB971032\SP2QFE\mqise.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 47104 g:\windows\$hf_mig$\KB971032\SP2QFE\mqdscli.dll
    + 2009-06-22 11:30 . 2009-06-22 11:30 19968 g:\windows\$hf_mig$\KB971032\SP2QFE\mqbkup.exe
    + 2009-06-22 11:30 . 2009-06-22 11:30 91776 g:\windows\$hf_mig$\KB971032\SP2QFE\mqac.sys
    + 2009-06-17 07:04 . 2007-11-30 12:39 26488 g:\windows\$hf_mig$\KB970238\update\spcustom.dll
    + 2009-06-17 07:04 . 2007-11-30 12:39 17272 g:\windows\$hf_mig$\KB970238\spmsg.dll
    + 2009-06-17 07:13 . 2007-11-30 12:39 26488 g:\windows\$hf_mig$\KB969898\update\spcustom.dll
    + 2009-06-17 07:13 . 2007-11-30 12:39 17272 g:\windows\$hf_mig$\KB969898\spmsg.dll
    + 2009-06-17 07:14 . 2007-11-30 12:39 26488 g:\windows\$hf_mig$\KB969897-IE8\update\spcustom.dll
    + 2009-06-17 07:14 . 2007-11-30 12:39 17272 g:\windows\$hf_mig$\KB969897-IE8\spmsg.dll
    + 2009-06-10 23:30 . 2009-04-30 21:22 12800 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\xpshims.dll
    + 2009-06-10 23:30 . 2009-04-30 21:22 25600 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\jsproxy.dll
    + 2009-06-17 07:03 . 2008-07-09 07:38 26488 g:\windows\$hf_mig$\KB968537\update\spcustom.dll
    + 2009-06-17 07:03 . 2008-07-09 07:38 17272 g:\windows\$hf_mig$\KB968537\spmsg.dll
    + 2009-08-14 11:49 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB968389\update\spcustom.dll
    + 2009-08-14 11:49 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB968389\spmsg.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41 54272 g:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41 56832 g:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll
    + 2009-06-24 10:28 . 2009-06-24 10:28 92928 g:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys
    + 2009-06-25 08:25 . 2009-06-25 08:25 54272 g:\windows\$hf_mig$\KB968389\SP3GDR\wdigest.dll
    + 2009-06-25 08:25 . 2009-06-25 08:25 56832 g:\windows\$hf_mig$\KB968389\SP3GDR\secur32.dll
    + 2009-06-24 11:18 . 2009-06-24 11:18 92928 g:\windows\$hf_mig$\KB968389\SP3GDR\ksecdd.sys
    + 2009-06-25 08:17 . 2009-06-25 08:17 59392 g:\windows\$hf_mig$\KB968389\SP2QFE\wdigest.dll
    + 2009-06-25 08:17 . 2009-06-25 08:17 56320 g:\windows\$hf_mig$\KB968389\SP2QFE\secur32.dll
    + 2009-06-22 11:35 . 2009-06-22 11:35 92544 g:\windows\$hf_mig$\KB968389\SP2QFE\ksecdd.sys
    + 2009-09-23 09:02 . 2007-11-30 12:39 26488 g:\windows\$hf_mig$\KB961503\update\spcustom.dll
    + 2009-09-23 09:02 . 2007-11-30 12:39 17272 g:\windows\$hf_mig$\KB961503\spmsg.dll
    + 2009-06-17 07:13 . 2008-07-09 07:38 26488 g:\windows\$hf_mig$\KB961501\update\spcustom.dll
    + 2009-06-17 07:13 . 2008-07-09 07:38 17272 g:\windows\$hf_mig$\KB961501\spmsg.dll
    + 2009-07-18 05:12 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB961371\update\spcustom.dll
    + 2009-07-18 05:12 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB961371\spmsg.dll
    + 2009-06-16 14:43 . 2009-06-16 14:43 81920 g:\windows\$hf_mig$\KB961371\SP3QFE\fontsub.dll
    + 2009-06-16 14:36 . 2009-06-16 14:36 81920 g:\windows\$hf_mig$\KB961371\SP3GDR\fontsub.dll
    + 2009-06-16 14:45 . 2009-06-16 14:45 81920 g:\windows\$hf_mig$\KB961371\SP2QFE\fontsub.dll
    + 2009-08-14 12:01 . 2007-11-30 11:18 26488 g:\windows\$hf_mig$\KB961118\update\spcustom.dll
    + 2009-08-14 12:01 . 2007-11-30 11:18 17272 g:\windows\$hf_mig$\KB961118\spmsg.dll
    + 2009-08-14 12:02 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB960859\update\spcustom.dll
    + 2009-08-14 12:02 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB960859\spmsg.dll
    + 2009-06-12 12:03 . 2009-06-12 12:03 80896 g:\windows\$hf_mig$\KB960859\SP3QFE\tlntsess.exe
    + 2009-06-12 12:03 . 2009-06-12 12:03 76288 g:\windows\$hf_mig$\KB960859\SP3QFE\telnet.exe
    + 2009-06-12 12:31 . 2009-06-12 12:31 80896 g:\windows\$hf_mig$\KB960859\SP3GDR\tlntsess.exe
    + 2009-06-12 12:31 . 2009-06-12 12:31 76288 g:\windows\$hf_mig$\KB960859\SP3GDR\telnet.exe
    + 2009-06-12 11:49 . 2009-06-12 11:49 80896 g:\windows\$hf_mig$\KB960859\SP2QFE\tlntsess.exe
    + 2009-06-12 11:49 . 2009-06-12 11:49 76288 g:\windows\$hf_mig$\KB960859\SP2QFE\telnet.exe
    + 2009-09-09 07:10 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB956844\update\spcustom.dll
    + 2009-09-09 07:10 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB956844\spmsg.dll
    + 2009-08-14 12:00 . 2008-07-08 13:02 26488 g:\windows\$hf_mig$\KB956744\update\spcustom.dll
    + 2009-08-14 12:00 . 2008-07-08 13:02 17272 g:\windows\$hf_mig$\KB956744\spmsg.dll
    + 2009-08-13 00:45 . 2009-06-09 14:53 53248 g:\windows\$hf_mig$\KB956744\SP2QFE\tsgqec.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 8192 g:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 8192 g:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2009-10-02 03:19 . 2009-10-02 03:19 5632 g:\windows\system32\pndx5032.dll
    - 2007-09-25 21:32 . 2009-04-16 20:12 5632 g:\windows\system32\pndx5032.dll
    - 2007-09-25 21:32 . 2009-04-16 20:12 6656 g:\windows\system32\pndx5016.dll
    + 2009-10-02 03:19 . 2009-10-02 03:19 6656 g:\windows\system32\pndx5016.dll
    - 2001-08-23 12:00 . 2004-08-04 07:56 4608 g:\windows\system32\mqsvc.exe
    + 2001-08-23 12:00 . 2009-06-22 11:49 4608 g:\windows\system32\mqsvc.exe
    + 2009-06-22 11:49 . 2009-06-22 11:49 4608 g:\windows\system32\dllcache\mqsvc.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 5632 g:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 7168 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 7168 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 5632 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 5632 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 6656 g:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 6656 g:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 8192 g:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 8192 g:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 9728 g:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 9728 g:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 5120 g:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 5120 g:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2009-06-22 00:00 . 2009-06-22 00:00 5430 g:\windows\Installer\{0FD95BFA-44E8-4AD5-954E-3407ADD55B06}\_E8C2EED12CBD54698B3A54.exe
    + 2009-06-22 00:00 . 2009-06-22 00:00 5430 g:\windows\Installer\{0FD95BFA-44E8-4AD5-954E-3407ADD55B06}\_6FEFF9B68218417F98F549.exe
    + 2009-06-22 00:00 . 2009-06-22 00:00 5430 g:\windows\Installer\{0FD95BFA-44E8-4AD5-954E-3407ADD55B06}\_6B7D9734814072B95063C9.exe
    + 2009-08-12 07:31 . 2009-08-12 07:31 5632 g:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 7168 g:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 7168 g:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2008-03-19 03:22 . 2008-03-19 03:22 5632 g:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 5632 g:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 6656 g:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 6656 g:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 8192 g:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 8192 g:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2007-06-27 07:14 . 2004-09-22 23:45 8192 g:\windows\$NtUninstallwmp11$\asferror.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 6656 g:\windows\$NtUninstallWMFDist11$\laprxy.dll
    + 2009-08-14 11:50 . 2004-08-04 07:56 4608 g:\windows\$NtUninstallKB971032$\mqsvc.exe
    + 2009-06-22 11:30 . 2009-06-22 11:30 4608 g:\windows\$hf_mig$\KB971032\SP2QFE\mqsvc.exe
    + 2009-07-10 16:15 . 2009-07-10 16:15 306544 g:\windows\WLXPGSS.SCR
    + 2009-10-14 22:08 . 2009-10-14 22:08 113664 g:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 113664 g:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 258048 g:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 258048 g:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 635904 g:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 558080 g:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 479232 g:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
    + 2007-12-04 06:56 . 2007-12-04 06:56 635904 g:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcr80.dll
    + 2007-12-04 06:56 . 2007-12-04 06:56 558080 g:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcp80.dll
    + 2007-12-03 22:58 . 2007-12-03 22:58 479232 g:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcm80.dll
    + 2008-07-30 01:26 . 2008-07-30 01:26 301568 g:\windows\system32\XPSViewer\XPSViewer.exe
    + 2006-10-15 01:21 . 2008-07-06 12:06 575488 g:\windows\system32\xpsshhdr.dll
    + 2005-05-17 00:43 . 2009-04-15 09:24 351744 g:\windows\system32\xpsp3res.dll
    - 2005-05-17 00:43 . 2009-02-19 09:47 351744 g:\windows\system32\xpsp3res.dll
    + 2004-09-22 23:46 . 2009-04-02 03:02 604160 g:\windows\system32\wmspdmod.dll
    + 2004-09-22 23:46 . 2009-07-14 03:43 286208 g:\windows\system32\wmpdxm.dll
    + 2004-09-22 23:46 . 2008-06-18 09:03 938496 g:\windows\system32\WMNetmgr.dll
    - 2004-09-22 23:46 . 2008-06-18 10:03 938496 g:\windows\system32\WMNetmgr.dll
    + 2004-09-22 23:46 . 2007-10-27 21:40 222720 g:\windows\system32\wmasf.dll
    - 2004-09-22 23:46 . 2007-10-27 22:40 222720 g:\windows\system32\wmasf.dll
    - 2001-08-23 12:00 . 2006-08-17 12:28 132096 g:\windows\system32\wkssvc.dll
    + 2001-08-23 12:00 . 2009-06-10 06:32 132096 g:\windows\system32\wkssvc.dll
    + 2006-10-24 17:29 . 2008-07-11 08:55 347648 g:\windows\system32\windowscodecsext.dll
    + 2006-10-24 17:30 . 2008-07-11 08:55 712704 g:\windows\system32\windowscodecs.dll
    + 2001-08-23 12:00 . 2009-06-16 14:55 119808 g:\windows\system32\t2embed.dll
    + 2007-11-19 04:03 . 2008-07-06 12:06 765440 g:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll
    + 2007-11-19 04:03 . 2008-07-06 12:06 765440 g:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
    + 2007-11-19 04:03 . 2008-07-06 12:06 748032 g:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll
    + 2007-11-19 04:03 . 2008-07-06 12:06 748032 g:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
    + 2007-11-19 04:03 . 2008-07-06 12:06 147456 g:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
    + 2006-10-14 21:44 . 2008-07-06 10:50 597504 g:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
    + 2006-10-14 21:40 . 2008-03-13 04:52 761344 g:\windows\system32\spool\drivers\w32x86\3\unires.dll
    - 2006-10-14 21:40 . 2007-03-23 02:03 761344 g:\windows\system32\spool\drivers\w32x86\3\unires.dll
    + 2006-10-14 21:42 . 2008-07-06 12:06 744960 g:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
    + 2006-10-14 21:42 . 2008-07-06 12:06 373248 g:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
    + 2006-10-14 21:42 . 2008-07-06 12:06 198656 g:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll
    + 2006-10-14 21:43 . 2008-07-06 12:06 765440 g:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll
    + 2002-08-29 03:41 . 2009-06-25 18:36 169472 g:\windows\system32\Setup\msmqocm.dll
    + 2002-08-29 03:41 . 2009-06-25 08:44 168448 g:\windows\system32\schannel.dll
    - 2004-12-25 06:54 . 2007-07-09 13:09 584192 g:\windows\system32\rpcrt4.dll
    + 2004-12-25 06:54 . 2009-04-15 15:11 584192 g:\windows\system32\rpcrt4.dll
    - 2007-09-25 21:32 . 2009-04-16 20:12 185920 g:\windows\system32\rmoc3260.dll
    + 2009-10-02 03:20 . 2009-10-02 03:20 185920 g:\windows\system32\rmoc3260.dll
    + 2006-10-14 21:43 . 2008-07-06 12:06 117760 g:\windows\system32\prntvpt.dll
    + 2008-07-29 23:59 . 2008-07-29 23:59 781344 g:\windows\system32\PresentationNative_v0300.dll
    + 2008-07-30 00:35 . 2008-07-30 00:35 326160 g:\windows\system32\PresentationHost.exe
    + 2008-07-29 23:59 . 2008-07-29 23:59 105016 g:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
    + 2003-11-25 22:32 . 2003-11-25 22:32 123392 g:\windows\system32\pncrt.dll
    + 2001-08-23 12:00 . 2009-11-02 03:15 434004 g:\windows\system32\perfh009.dat
    + 2001-08-23 12:00 . 2009-08-29 08:08 206848 g:\windows\system32\occache.dll
    + 2009-03-08 08:32 . 2009-08-29 08:08 594432 g:\windows\system32\msfeeds.dll
    - 2009-03-08 08:32 . 2009-03-08 08:32 594432 g:\windows\system32\msfeeds.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 158720 g:\windows\system32\mscorier.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 158720 g:\windows\system32\mscorier.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 282112 g:\windows\system32\mscoree.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 282112 g:\windows\system32\mscoree.dll
    - 2002-08-29 03:41 . 2007-07-06 12:46 471552 g:\windows\system32\mqutil.dll
    + 2002-08-29 03:41 . 2009-06-25 18:36 471552 g:\windows\system32\mqutil.dll
    - 2002-08-29 03:41 . 2004-08-04 07:56 186880 g:\windows\system32\mqtrig.dll
    + 2002-08-29 03:41 . 2009-06-25 18:36 186880 g:\windows\system32\mqtrig.dll
    + 2001-08-23 12:00 . 2009-06-22 11:49 117248 g:\windows\system32\mqtgsvc.exe
    - 2001-08-23 12:00 . 2004-08-04 07:56 117248 g:\windows\system32\mqtgsvc.exe
    + 2002-08-29 03:41 . 2009-06-25 18:36 517120 g:\windows\system32\mqsnap.dll
    - 2001-08-23 12:00 . 2004-08-04 07:56 123392 g:\windows\system32\mqrtdep.dll
    + 2001-08-23 12:00 . 2009-06-25 18:36 123392 g:\windows\system32\mqrtdep.dll
    + 2002-08-29 03:41 . 2009-06-25 18:36 177152 g:\windows\system32\mqrt.dll
    - 2002-08-29 03:41 . 2007-07-06 12:46 177152 g:\windows\system32\mqrt.dll
    + 2002-08-29 03:41 . 2009-06-25 18:36 661504 g:\windows\system32\mqqm.dll
    - 2001-08-23 12:00 . 2004-08-04 07:56 225280 g:\windows\system32\mqoa.dll
    + 2001-08-23 12:00 . 2009-06-25 18:36 225280 g:\windows\system32\mqoa.dll
    - 2002-08-29 03:41 . 2007-07-06 12:46 138240 g:\windows\system32\mqad.dll
    + 2002-08-29 03:41 . 2009-06-25 18:36 138240 g:\windows\system32\mqad.dll
    + 2009-07-18 03:21 . 2009-07-18 03:21 257440 g:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
    + 2002-08-29 03:41 . 2009-06-25 08:44 724480 g:\windows\system32\lsasrv.dll
    + 2004-09-22 23:45 . 2008-06-18 05:09 100864 g:\windows\system32\logagent.exe
    - 2004-09-22 23:45 . 2008-06-18 06:09 100864 g:\windows\system32\logagent.exe
    + 2002-08-29 03:41 . 2009-05-07 15:44 344064 g:\windows\system32\localspl.dll
    + 2008-12-17 15:59 . 2008-12-17 15:59 560802 g:\windows\system32\libmplayer.dll
    + 2005-06-15 17:50 . 2009-06-25 08:44 298496 g:\windows\system32\kerberos.dll
    - 2003-01-13 18:57 . 2009-03-08 08:33 726528 g:\windows\system32\jscript.dll
    + 2003-01-13 18:57 . 2009-06-22 06:44 726528 g:\windows\system32\jscript.dll
    + 2009-11-01 13:53 . 2009-07-31 20:23 149280 g:\windows\system32\javaws.exe
    + 2009-11-01 13:53 . 2009-07-31 20:23 145184 g:\windows\system32\javaw.exe
    + 2009-11-01 13:53 . 2009-07-31 20:23 145184 g:\windows\system32\java.exe
    + 2005-02-18 16:43 . 2009-08-29 08:08 184320 g:\windows\system32\iepeers.dll
    + 2002-08-29 03:40 . 2009-08-29 08:08 387584 g:\windows\system32\iedkcs32.dll
    + 2002-08-29 03:41 . 2009-08-28 10:35 173056 g:\windows\system32\ie4uinit.exe
    - 2002-08-29 03:41 . 2009-03-08 08:32 173056 g:\windows\system32\ie4uinit.exe
    + 2008-07-29 23:24 . 2008-07-29 23:24 622080 g:\windows\system32\icardagt.exe
    + 2008-01-29 16:02 . 2008-04-17 17:12 107368 g:\windows\system32\GEARAspi.dll
    - 2008-01-29 16:02 . 2008-01-29 16:02 107368 g:\windows\system32\GEARAspi.dll
    + 2003-12-27 22:42 . 2009-09-18 13:22 253472 g:\windows\system32\FNTCACHE.DAT
    + 2008-12-17 16:41 . 2008-12-17 16:41 884237 g:\windows\system32\ff_x264.dll
    + 2008-12-17 16:17 . 2008-12-17 16:17 239247 g:\windows\system32\ff_theora.dll
    + 2009-09-23 17:01 . 2008-04-17 17:12 107368 g:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll
    + 2006-10-15 01:21 . 2008-07-06 12:06 575488 g:\windows\system32\dllcache\xpsshhdr.dll
    + 2005-05-26 09:19 . 2009-08-06 23:24 209632 g:\windows\system32\dllcache\wuweb.dll
    + 2005-06-21 19:01 . 2009-08-06 23:24 327896 g:\windows\system32\dllcache\wucltui.dll
    + 2005-06-21 19:01 . 2009-08-06 23:23 575704 g:\windows\system32\dllcache\wuapi.dll
    + 2009-04-02 03:02 . 2009-04-02 03:02 604160 g:\windows\system32\dllcache\wmspdmod.dll
    + 2009-07-14 03:43 . 2009-07-14 03:43 286208 g:\windows\system32\dllcache\wmpdxm.dll
    + 2004-09-22 23:46 . 2008-06-18 09:03 938496 g:\windows\system32\dllcache\WMNetmgr.dll
    - 2004-09-22 23:46 . 2008-06-18 10:03 938496 g:\windows\system32\dllcache\WMNetmgr.dll
    + 2004-09-22 23:46 . 2007-10-27 21:40 222720 g:\windows\system32\dllcache\wmasf.dll
    - 2004-09-22 23:46 . 2007-10-27 22:40 222720 g:\windows\system32\dllcache\wmasf.dll
    - 2006-08-17 12:28 . 2006-08-17 12:28 132096 g:\windows\system32\dllcache\wkssvc.dll
    + 2006-08-17 12:28 . 2009-06-10 06:32 132096 g:\windows\system32\dllcache\wkssvc.dll
    + 2007-01-04 13:37 . 2009-08-29 08:08 916480 g:\windows\system32\dllcache\wininet.dll
    + 2009-09-08 19:53 . 2009-06-21 22:04 153088 g:\windows\system32\dllcache\triedit.dll
    + 2001-08-23 12:00 . 2009-06-16 14:55 119808 g:\windows\system32\dllcache\t2embed.dll
    + 2006-08-21 14:52 . 2009-08-26 08:16 247326 g:\windows\system32\dllcache\strmdll.dll
    - 2006-08-21 14:52 . 2008-10-03 10:15 247326 g:\windows\system32\dllcache\strmdll.dll
    + 2007-04-25 14:21 . 2009-06-25 08:44 168448 g:\windows\system32\dllcache\schannel.dll
    + 2007-10-10 17:02 . 2009-04-15 15:11 584192 g:\windows\system32\dllcache\rpcrt4.dll
    - 2007-10-10 17:02 . 2007-07-09 13:09 584192 g:\windows\system32\dllcache\rpcrt4.dll
    + 2006-10-14 21:44 . 2008-07-06 10:50 597504 g:\windows\system32\dllcache\printfilterpipelinesvc.exe
    + 2009-03-08 08:34 . 2009-08-29 08:08 206848 g:\windows\system32\dllcache\occache.dll
    + 2009-08-05 09:11 . 2009-08-05 09:11 204800 g:\windows\system32\dllcache\mswebdvd.dll
    + 2009-06-25 08:44 . 2009-09-11 14:33 133632 g:\windows\system32\dllcache\msv1_0.dll
    + 2009-06-25 18:36 . 2009-06-25 18:36 169472 g:\windows\system32\dllcache\msmqocm.dll
    + 2007-05-09 20:09 . 2009-08-29 08:08 594432 g:\windows\system32\dllcache\msfeeds.dll
    - 2007-05-09 20:09 . 2009-03-08 08:32 594432 g:\windows\system32\dllcache\msfeeds.dll
    - 2007-12-21 21:51 . 2007-07-06 12:46 471552 g:\windows\system32\dllcache\mqutil.dll
    + 2007-12-21 21:51 . 2009-06-25 18:36 471552 g:\windows\system32\dllcache\mqutil.dll
    + 2009-06-25 18:36 . 2009-06-25 18:36 186880 g:\windows\system32\dllcache\mqtrig.dll
    + 2009-06-22 11:49 . 2009-06-22 11:49 117248 g:\windows\system32\dllcache\mqtgsvc.exe
    + 2009-06-25 18:36 . 2009-06-25 18:36 517120 g:\windows\system32\dllcache\mqsnap.dll
    + 2009-06-25 18:36 . 2009-06-25 18:36 123392 g:\windows\system32\dllcache\mqrtdep.dll
    - 2007-12-21 21:51 . 2007-07-06 12:46 177152 g:\windows\system32\dllcache\mqrt.dll
    + 2007-12-21 21:51 . 2009-06-25 18:36 177152 g:\windows\system32\dllcache\mqrt.dll
    + 2007-12-21 21:51 . 2009-06-25 18:36 661504 g:\windows\system32\dllcache\mqqm.dll
    + 2009-06-25 18:36 . 2009-06-25 18:36 225280 g:\windows\system32\dllcache\mqoa.dll
    - 2007-12-21 21:51 . 2007-07-06 12:46 138240 g:\windows\system32\dllcache\mqad.dll
    + 2007-12-21 21:51 . 2009-06-25 18:36 138240 g:\windows\system32\dllcache\mqad.dll
    + 2006-08-17 12:28 . 2009-06-25 08:44 724480 g:\windows\system32\dllcache\lsasrv.dll
    + 2004-09-22 23:45 . 2008-06-18 05:09 100864 g:\windows\system32\dllcache\logagent.exe
    - 2004-09-22 23:45 . 2008-06-18 06:09 100864 g:\windows\system32\dllcache\logagent.exe
    + 2009-05-07 15:44 . 2009-05-07 15:44 344064 g:\windows\system32\dllcache\localspl.dll
    + 2009-06-25 08:44 . 2009-06-25 08:44 298496 g:\windows\system32\dllcache\kerberos.dll
    - 2003-01-13 18:57 . 2009-03-08 08:33 726528 g:\windows\system32\dllcache\jscript.dll
    + 2003-01-13 18:57 . 2009-06-22 06:44 726528 g:\windows\system32\dllcache\jscript.dll
    + 2009-06-10 23:30 . 2009-08-29 08:08 246272 g:\windows\system32\dllcache\ieproxy.dll
    + 2007-01-04 13:36 . 2009-08-29 08:08 184320 g:\windows\system32\dllcache\iepeers.dll
    + 2009-03-08 18:09 . 2009-08-29 08:08 387584 g:\windows\system32\dllcache\iedkcs32.dll
    - 2009-03-08 08:32 . 2009-03-08 08:32 173056 g:\windows\system32\dllcache\ie4uinit.exe
    + 2009-03-08 08:32 . 2009-08-28 10:35 173056 g:\windows\system32\dllcache\ie4uinit.exe
    + 2008-12-23 15:14 . 2009-07-31 20:23 411368 g:\windows\system32\deploytk.dll
  • edited November 2009
    + 2008-07-30 03:40 . 2008-07-30 03:40 196104 g:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
    + 2008-07-30 03:40 . 2008-07-30 03:40 802816 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 984056 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 107512 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 111096 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 110072 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 106488 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 105976 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 107000 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 107512 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 109048 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 106488 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 108536 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 110072 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 111096 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 101368 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 112120 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 106488 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 113656 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 111608 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 108536 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 108536 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 102904 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 689152 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 413184 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 632320 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
    + 2009-08-12 07:30 . 2009-08-12 07:30 652800 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
    + 2008-07-29 22:47 . 2008-07-29 22:47 110080 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 131584 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 131072 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 121344 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 121344 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 123904 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 122880 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 128512 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 121856 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 129024 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 128512 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 132096 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 111104 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 133120 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 122368 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 137728 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 130048 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 126464 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 125440 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 113152 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 269304 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
    + 2008-07-29 22:47 . 2008-07-29 22:47 177152 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 276984 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
    + 2008-07-30 03:15 . 2008-07-30 03:15 225490 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
    - 2007-11-08 00:02 . 2007-11-08 00:02 233976 g:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
    + 2008-07-30 03:40 . 2008-07-30 03:40 233976 g:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
    - 2007-11-08 00:02 . 2007-11-08 00:02 168448 g:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
    + 2008-07-30 03:40 . 2008-07-30 03:40 168448 g:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
    + 2008-07-30 00:35 . 2008-07-30 00:35 864256 g:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
    + 2008-07-29 23:59 . 2008-07-29 23:59 132120 g:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2008-07-29 23:16 . 2008-07-29 23:16 152576 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
    + 2008-07-29 23:16 . 2008-07-29 23:16 966656 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    + 2008-07-29 23:16 . 2008-07-29 23:16 132096 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
    + 2008-07-29 23:16 . 2008-07-29 23:16 110592 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2008-07-29 23:16 . 2008-07-29 23:16 156688 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
    + 2008-07-29 23:16 . 2008-07-29 23:16 163840 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
    - 2007-10-11 14:55 . 2007-10-11 14:55 397312 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
    + 2008-07-29 23:16 . 2008-07-29 23:16 397312 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
    + 2008-07-29 23:24 . 2008-07-29 23:24 881664 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
    + 2008-07-29 23:16 . 2008-07-29 23:16 168968 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
    + 2008-11-25 08:59 . 2008-11-25 08:59 436040 g:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 839680 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 839680 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 835584 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 261632 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 114688 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 114688 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 258048 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 258048 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 131072 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 131072 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 303104 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 258048 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 258048 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 372736 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 372736 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 113664 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 113664 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 258048 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 258048 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 626688 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 188416 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 188416 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 401408 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 401408 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 970752 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 745472 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2008-11-25 08:59 . 2008-11-25 08:59 486400 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 425984 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 425984 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 110592 g:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 110592 g:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 392184 g:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 118784 g:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 143360 g:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 100856 g:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 230912 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 345600 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 114176 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2008-11-25 08:59 . 2008-11-25 08:59 364872 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 308224 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 308224 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2009-08-08 03:51 . 2009-08-08 03:51 989016 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 659456 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 372736 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 372736 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 110592 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 110592 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 749568 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 749568 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 655360 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 655360 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 348160 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 348160 g:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 230904 g:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    - 2007-10-24 05:47 . 2007-10-24 05:47 230904 g:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 798224 g:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 798224 g:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 575496 g:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 106496 g:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 106496 g:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 507904 g:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 507904 g:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 106496 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2008-07-25 15:16 . 2008-07-25 15:16 106496 g:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 147968 g:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 147968 g:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 218112 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 218112 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 193016 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 193016 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 145408 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 145408 g:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    + 2008-08-10 23:19 . 2008-08-10 23:19 360960 g:\windows\Installer\fe05d7c.msi
    + 2008-08-10 23:17 . 2008-08-10 23:17 289792 g:\windows\Installer\fe05d72.msi
    + 2007-11-10 02:23 . 2007-11-10 02:23 340480 g:\windows\Installer\a38e048.msi
    + 2005-12-10 19:52 . 2005-12-10 19:52 589312 g:\windows\Installer\9b83eec.msi
    + 2007-05-09 22:43 . 2007-05-09 22:43 470528 g:\windows\Installer\9521e5.msi
    + 2009-01-17 05:19 . 2009-01-17 05:19 471552 g:\windows\Installer\744804f.msi
    + 2003-12-28 04:43 . 2003-12-28 04:43 751104 g:\windows\Installer\6e6bc.msi
    + 2004-03-29 22:08 . 2004-03-29 22:08 391680 g:\windows\Installer\635f9ba.msi
    + 2007-03-10 04:00 . 2007-03-10 04:00 318976 g:\windows\Installer\5701b.msi
    + 2009-11-01 22:49 . 2009-11-01 22:49 786432 g:\windows\Installer\49a722c.msi
    + 2005-11-09 00:49 . 2005-11-09 00:49 203776 g:\windows\Installer\40848d.msi
    + 2005-11-09 00:49 . 2005-11-09 00:49 129536 g:\windows\Installer\408482.msi
    + 2005-11-09 00:49 . 2005-11-09 00:49 130048 g:\windows\Installer\408477.msi
    + 2005-11-09 00:48 . 2005-11-09 00:48 138752 g:\windows\Installer\408456.msi
    + 2005-11-09 00:47 . 2005-11-09 00:47 139776 g:\windows\Installer\4083f6.msi
    + 2005-11-09 00:47 . 2005-11-09 00:47 124416 g:\windows\Installer\408398.msi
    + 2005-11-09 00:47 . 2005-11-09 00:47 231424 g:\windows\Installer\40838c.msi
    + 2005-11-09 00:47 . 2005-11-09 00:47 123904 g:\windows\Installer\40837f.msi
    + 2005-11-09 00:46 . 2005-11-09 00:46 970240 g:\windows\Installer\4081fc.msi
    + 2005-11-09 00:45 . 2005-11-09 00:45 204288 g:\windows\Installer\4081ea.msi
    + 2005-11-09 00:45 . 2005-11-09 00:45 207360 g:\windows\Installer\4081df.msi
    + 2005-11-09 00:45 . 2005-11-09 00:45 159744 g:\windows\Installer\4081d4.msi
    + 2005-11-09 00:45 . 2005-11-09 00:45 323072 g:\windows\Installer\408178.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 305152 g:\windows\Installer\40816d.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 363008 g:\windows\Installer\40815d.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 514048 g:\windows\Installer\408152.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 255488 g:\windows\Installer\408143.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 290304 g:\windows\Installer\408137.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 129536 g:\windows\Installer\40812c.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 197120 g:\windows\Installer\408121.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 287744 g:\windows\Installer\408115.msi
    + 2005-11-09 00:44 . 2005-11-09 00:44 698880 g:\windows\Installer\408107.msi
    + 2005-11-09 00:43 . 2005-11-09 00:43 342016 g:\windows\Installer\4080ec.msi
    + 2005-11-09 00:43 . 2005-11-09 00:43 390656 g:\windows\Installer\4080dd.msi
    + 2005-11-09 00:43 . 2005-11-09 00:43 268800 g:\windows\Installer\4080ca.msi
    + 2005-11-09 00:43 . 2005-11-09 00:43 269824 g:\windows\Installer\4080be.msi
    + 2005-11-09 00:43 . 2005-11-09 00:43 287232 g:\windows\Installer\4080b3.msi
    + 2005-11-09 00:42 . 2005-11-09 00:42 135168 g:\windows\Installer\4080a7.msi
    + 2005-11-09 00:42 . 2005-11-09 00:42 259584 g:\windows\Installer\40809c.msi
    + 2008-03-09 01:00 . 2008-03-09 01:00 289792 g:\windows\Installer\36d42f.msi
    + 2008-07-07 20:08 . 2008-07-07 20:08 532992 g:\windows\Installer\356a8.msi
    + 2008-11-13 08:03 . 2008-11-13 08:03 972800 g:\windows\Installer\34910363.msi
    + 2008-11-13 08:01 . 2008-11-13 08:01 432640 g:\windows\Installer\34910357.msi
    + 2008-12-13 13:58 . 2008-12-13 13:58 754688 g:\windows\Installer\2f9a0cc0.msp
    + 2009-08-12 07:31 . 2009-08-12 07:31 648192 g:\windows\Installer\2f9a0c11.msi
    + 2008-07-30 01:23 . 2008-07-30 01:23 250880 g:\windows\Installer\2f958d13.msp
    + 2008-07-30 01:28 . 2008-07-30 01:28 278016 g:\windows\Installer\2f958d11.msp
    + 2008-07-29 23:40 . 2008-07-29 23:40 291840 g:\windows\Installer\2f958d0f.msp
    + 2009-08-12 07:28 . 2009-08-12 07:28 137728 g:\windows\Installer\2f958d09.msi
    + 2008-07-29 21:35 . 2008-07-29 21:35 553472 g:\windows\Installer\2f824f7f.msp
    + 2008-07-29 21:33 . 2008-07-29 21:33 506368 g:\windows\Installer\2f824f7d.msp
    + 2008-07-29 21:37 . 2008-07-29 21:37 911360 g:\windows\Installer\2f824f7c.msp
    + 2007-10-07 15:16 . 2007-10-07 15:16 331264 g:\windows\Installer\2b3cdd8.msi
    + 2003-12-28 04:03 . 2003-12-28 04:03 264704 g:\windows\Installer\25d80.msi
    + 2009-03-07 01:30 . 2009-03-07 01:30 140288 g:\windows\Installer\23b045bd.msi
    + 2007-03-05 03:56 . 2007-03-05 03:56 428544 g:\windows\Installer\2391c.msi
    + 2009-07-29 07:01 . 2009-07-29 07:01 248832 g:\windows\Installer\2377fd3.msi
    + 2009-09-23 16:40 . 2009-09-23 16:40 694272 g:\windows\Installer\194ee1c.msi
    + 2009-09-23 09:03 . 2009-09-23 09:03 177664 g:\windows\Installer\18639027.msi
    + 2009-06-22 00:00 . 2009-06-22 00:00 345088 g:\windows\Installer\182b4d4f.msi
    + 2009-09-16 00:58 . 2009-09-16 00:58 549888 g:\windows\Installer\16f66e.msi
    + 2009-09-16 00:58 . 2009-09-16 00:58 969728 g:\windows\Installer\16f663.msi
    + 2009-09-16 00:57 . 2009-09-16 00:57 569344 g:\windows\Installer\16f658.msi
    + 2009-09-16 00:57 . 2009-09-16 00:57 183296 g:\windows\Installer\16f64d.msi
    + 2009-09-16 00:57 . 2009-09-16 00:57 727040 g:\windows\Installer\16f642.msi
    + 2009-09-16 00:56 . 2009-09-16 00:56 483328 g:\windows\Installer\16f637.msi
    + 2009-09-16 00:56 . 2009-09-16 00:56 778752 g:\windows\Installer\16f620.msi
    + 2009-09-16 00:55 . 2009-09-16 00:55 463872 g:\windows\Installer\16f615.msi
    + 2009-09-16 00:52 . 2009-09-16 00:52 891904 g:\windows\Installer\16f60a.msi
    + 2009-09-16 00:43 . 2009-09-16 00:43 735744 g:\windows\Installer\16f5eb.msi
    + 2009-09-16 00:41 . 2009-09-16 00:41 430080 g:\windows\Installer\16f565.msi
    + 2009-09-16 00:40 . 2009-09-16 00:40 155648 g:\windows\Installer\16f556.msi
    + 2009-09-16 00:40 . 2009-09-16 00:40 202752 g:\windows\Installer\16f537.msi
    + 2009-09-16 00:39 . 2009-09-16 00:39 152576 g:\windows\Installer\16f52c.msi
    + 2009-09-16 00:39 . 2009-09-16 00:39 107008 g:\windows\Installer\16f50b.msi
    + 2009-09-16 00:39 . 2009-09-16 00:39 301056 g:\windows\Installer\16f500.msi
    + 2005-01-31 02:03 . 2005-01-31 02:03 860672 g:\windows\Installer\14f6e64.msi
    + 2005-09-28 20:06 . 2005-09-28 20:06 390656 g:\windows\Installer\149e913.msi
    + 2005-01-31 01:47 . 2005-01-31 01:47 860672 g:\windows\Installer\141cf3a.msi
    + 2009-03-20 15:48 . 2009-03-20 15:48 183808 g:\windows\Installer\13343eb5.msp
    + 2007-08-14 22:29 . 2007-08-14 22:29 431104 g:\windows\Installer\116d4aed.msi
    + 2007-09-25 21:32 . 2007-09-25 21:32 164352 g:\windows\Installer\11352e2c.msi
  • edited November 2009
    + 2009-09-23 17:03 . 2009-09-23 17:03 102400 g:\windows\Installer\{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}\iTunesIco.exe
    + 2009-09-16 00:56 . 2009-09-16 00:56 132096 g:\windows\Installer\{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}\WLXPhotoGalleryIcon.exe
    + 2008-11-08 22:38 . 2009-06-28 00:46 295606 g:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A81300000003}\SC_Reader.exe
    - 2008-11-08 22:38 . 2009-04-01 00:29 295606 g:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A81300000003}\SC_Reader.exe
    + 2007-01-23 16:39 . 2007-01-23 16:39 443904 g:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A3100000030\8.1.3\JP2KLib.dll
    + 2009-10-14 21:52 . 2009-07-03 17:09 915456 g:\windows\ie8updates\KB974455-IE8\wininet.dll
    + 2009-10-14 21:52 . 2009-05-26 11:40 382840 g:\windows\ie8updates\KB974455-IE8\spuninst\updspapi.dll
    + 2009-10-14 21:52 . 2008-07-08 13:02 231288 g:\windows\ie8updates\KB974455-IE8\spuninst\spuninst.exe
    + 2009-10-14 21:52 . 2009-07-03 17:09 206848 g:\windows\ie8updates\KB974455-IE8\occache.dll
    + 2009-10-14 21:52 . 2009-07-03 17:09 594432 g:\windows\ie8updates\KB974455-IE8\msfeeds.dll
    + 2009-10-14 21:52 . 2009-07-03 17:09 246272 g:\windows\ie8updates\KB974455-IE8\ieproxy.dll
    + 2009-10-14 21:52 . 2009-07-03 17:09 184320 g:\windows\ie8updates\KB974455-IE8\iepeers.dll
    + 2009-10-14 21:52 . 2009-07-03 17:09 386048 g:\windows\ie8updates\KB974455-IE8\iedkcs32.dll
    + 2009-10-14 21:52 . 2009-07-03 11:01 173056 g:\windows\ie8updates\KB974455-IE8\ie4uinit.exe
    + 2009-07-29 07:06 . 2009-05-13 05:15 915456 g:\windows\ie8updates\KB972260-IE8\wininet.dll
    + 2009-07-29 07:07 . 2009-05-26 11:40 382840 g:\windows\ie8updates\KB972260-IE8\spuninst\updspapi.dll
    + 2009-07-29 07:07 . 2009-05-26 11:40 231288 g:\windows\ie8updates\KB972260-IE8\spuninst\spuninst.exe
    + 2009-07-29 07:06 . 2009-03-08 08:34 109568 g:\windows\ie8updates\KB972260-IE8\occache.dll
    + 2009-07-29 07:06 . 2009-03-08 08:32 594432 g:\windows\ie8updates\KB972260-IE8\msfeeds.dll
    + 2009-07-29 07:07 . 2009-04-30 21:22 246272 g:\windows\ie8updates\KB972260-IE8\ieproxy.dll
    + 2009-07-29 07:06 . 2009-03-08 08:31 183808 g:\windows\ie8updates\KB972260-IE8\iepeers.dll
    + 2009-07-29 07:07 . 2009-04-30 21:22 385536 g:\windows\ie8updates\KB972260-IE8\iedkcs32.dll
    + 2009-07-29 07:07 . 2009-04-30 11:21 173056 g:\windows\ie8updates\KB972260-IE8\ie4uinit.exe
    + 2009-09-09 07:08 . 2008-07-08 13:02 382840 g:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
    + 2009-09-09 07:08 . 2008-07-08 13:02 231288 g:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
    + 2009-09-09 07:08 . 2009-03-08 08:33 726528 g:\windows\ie8updates\KB971961-IE8\jscript.dll
    + 2009-06-17 07:14 . 2009-03-08 08:34 914944 g:\windows\ie8updates\KB969897-IE8\wininet.dll
    + 2009-06-17 07:14 . 2008-07-09 07:38 382840 g:\windows\ie8updates\KB969897-IE8\spuninst\updspapi.dll
    + 2009-06-17 07:14 . 2007-11-30 12:39 231288 g:\windows\ie8updates\KB969897-IE8\spuninst\spuninst.exe
    + 2009-06-17 07:14 . 2009-03-08 08:33 246784 g:\windows\ie8updates\KB969897-IE8\ieproxy.dll
    + 2009-06-17 07:14 . 2009-03-08 18:09 391536 g:\windows\ie8updates\KB969897-IE8\iedkcs32.dll
    + 2009-06-17 07:14 . 2009-03-08 08:32 173056 g:\windows\ie8updates\KB969897-IE8\ie4uinit.exe
    + 2009-08-12 07:24 . 2008-03-13 04:52 761344 g:\windows\Driver Cache\i386\unires.dll
    + 2009-08-12 07:24 . 2008-07-06 12:06 744960 g:\windows\Driver Cache\i386\unidrvui.dll
    + 2009-08-12 07:24 . 2008-07-06 12:06 373248 g:\windows\Driver Cache\i386\unidrv.dll
    + 2009-08-12 07:24 . 2008-07-06 12:06 198656 g:\windows\Driver Cache\i386\mxdwdui.dll
    + 2009-08-12 07:24 . 2008-07-06 12:06 765440 g:\windows\Driver Cache\i386\mxdwdrv.dll
    + 2005-11-06 03:57 . 2005-11-06 03:57 917504 g:\windows\Downloaded Installations\{A79FB927-4BB1-4DDE-9159-F707D3A62FD3}\VMware Movie Decoder.msi
    + 2005-10-21 22:23 . 2005-04-04 06:07 982016 g:\windows\Downloaded Installations\{872653C6-5DDC-488B-B7C2-CF9E4D9335E5}\ISScript11.Msi
    + 2005-10-21 21:11 . 2005-04-04 06:07 982016 g:\windows\Downloaded Installations\{78F4DFCE-1336-4027-BCB2-1A00C24A8653}\ISScript11.Msi
    + 2009-01-17 05:19 . 2009-01-17 05:19 785920 g:\windows\Downloaded Installations\{648991DA-1015-4E97-80B3-D0720F082108}\HP Product Detection.msi
    + 2009-08-12 07:47 . 2009-08-12 07:47 372736 g:\windows\assembly\temp\W26AEIMQUY\System.Management.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 321536 g:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\e2098e43d115155d6ba91ba3a7e577cf\WsatConfig.ni.exe
    + 2009-08-12 08:05 . 2009-08-12 08:05 321536 g:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2ef5bc3a2edd7570bb23886a4f32294a\WsatConfig.ni.exe
    + 2009-10-14 22:33 . 2009-10-14 22:33 633856 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\9d1a36d51bb6a24f943e73c0011e342a\WindowsLiveLocal.WriterPlugin.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 633856 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\5f8809146507a8956047b7980cb049c1\WindowsLiveLocal.WriterPlugin.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 118784 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\feb5009ee6406995983c67d61254b713\WindowsLive.Writer.Extensibility.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 428032 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fad42c0c7c2c60c7d371ca356d027433\WindowsLive.Writer.Localization.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 117760 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fa4fc31a45a276040fe60fe9b2370e05\WindowsLive.Writer.Instrumentation.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 322048 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f6b33dc9e92ddb49069262e3b1dc31c0\WindowsLive.Writer.SpellChecker.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 594944 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ef0daf9b5b7002d4d3493671db79fec5\WindowsLive.Writer.HtmlEditor.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 119296 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\eed6e22ab93b2370b6a9b70204b42e6c\WindowsLive.Writer.FileDestinations.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 174080 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ea3b7fc0ae639a2cd268d9a0aab47d15\WindowsLive.Writer.BrowserControl.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 851968 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e195165c4e7c44d5f404709a8f8d5758\WindowsLive.Writer.BlogClient.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 258048 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\dd20f981722448ea96d2c0995eeaf9b7\WindowsLive.Writer.Mshtml.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 258048 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bb8e348a5c9b28a622b6d3c37661d8e6\WindowsLive.Writer.Mshtml.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 851968 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ac50120d9dfafb4868aa4531456cf2e7\WindowsLive.Writer.BlogClient.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 322048 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9603a068ba2de2c7ec244454e8ad0763\WindowsLive.Writer.SpellChecker.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 843776 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8b674da2d622aec8a9c150e4f7437c4f\WindowsLive.Writer.Controls.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 108544 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8335570e4770bcef587c21a55cc3dd39\WindowsLive.Writer.Passport.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 843776 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\82c122c2491be216031b6ddcd8f84c64\WindowsLive.Writer.Controls.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 118784 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7d2fc985641178605ba9debdfe146e59\WindowsLive.Writer.Extensibility.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 108544 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7ca3eb94ab1ae6867d35382ecf407260\WindowsLive.Writer.Passport.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 428032 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7c494448c732a975d727098bad24f42b\WindowsLive.Writer.Localization.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 334848 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\75a1c524a87004611e911be710454234\WindowsLive.Writer.Interop.Mshtml.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 594944 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\74f0d8ed64db5dadd0ffd8f1b1b02c33\WindowsLive.Writer.HtmlEditor.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 334848 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6cf11694fdc6cb7a79ddd28faded7a2c\WindowsLive.Writer.Interop.Mshtml.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 313856 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\681ad822aa7295018c1b9f96ad372ee0\WindowsLive.Writer.Interop.SHDocVw.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 319488 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\655369517d0a6237ceacdfe25daa02b4\WindowsLive.Writer.Interop.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 117760 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\63d852a9374556240906cbd19946f7b0\WindowsLive.Writer.Instrumentation.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 119296 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\627621628abc220fd9c02f442178e41c\WindowsLive.Writer.FileDestinations.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 152064 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\60e6ca35b86ce10970a63fa5ea8b1d9c\WindowsLive.Writer.HtmlParser.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 152064 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\56305a199f4f12e8c9b3123b192944fb\WindowsLive.Writer.HtmlParser.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 313856 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\551d4211cde9574615ad847741667699\WindowsLive.Writer.Interop.SHDocVw.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 174080 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3c2e32b33e55538a330d714500e9275e\WindowsLive.Writer.BrowserControl.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 319488 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\311874611f12ea8440bc760c3203cbd3\WindowsLive.Writer.Interop.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 145920 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\f5d7a7417ffcd9af285e64946ba48f74\WindowsLive.Client.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 145920 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\01847dc3c3aa981649e7a59e2d53e474\WindowsLive.Client.ni.dll
    + 2009-10-14 22:24 . 2009-10-14 22:24 240128 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\bf92bc207f927cbbd6dfc9dc0c3eae68\WindowsFormsIntegration.ni.dll
    + 2009-08-12 08:02 . 2009-08-12 08:02 240128 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6a818099f0386e2356ae94f886a2196f\WindowsFormsIntegration.ni.dll
    + 2009-08-12 08:02 . 2009-08-12 08:02 187904 g:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\a6d9503962d47c722231c1478f180695\UIAutomationTypes.ni.dll
    + 2009-10-14 22:24 . 2009-10-14 22:24 187904 g:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\6f488b7644dc50a083868e91a4014466\UIAutomationTypes.ni.dll
    + 2009-10-14 22:24 . 2009-10-14 22:24 447488 g:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2fbf25609b704061a93500efa6f241d\UIAutomationClient.ni.dll
    + 2009-08-12 08:02 . 2009-08-12 08:02 447488 g:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\5c028c3d8db6c0f0277673ea4a2d89fb\UIAutomationClient.ni.dll
    + 2009-10-14 22:38 . 2009-10-14 22:38 400896 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\eb23b78564687badff1bd1f1d0a0ec97\System.Xml.Linq.ni.dll
    + 2009-08-12 08:11 . 2009-08-12 08:11 400896 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c338a470b14851ce5987bb0f0869c310\System.Xml.Linq.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 129536 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\e7666364bf9f3ba5f4833c9efedd8218\System.Web.Routing.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 129536 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\bb77ea11f46ab438b2b7ed7c180011a1\System.Web.Routing.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 202240 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5f1b8791e6c47e5bd5e7018c346c586\System.Web.RegularExpressions.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 202240 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6ee255220d90dcbe80c990e443051cc5\System.Web.RegularExpressions.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:37 859648 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\884eacddf339b8b342f66aedff5f8ef9\System.Web.Extensions.Design.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 859648 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\58f62044fa702ea6f936071aa5520baa\System.Web.Extensions.Design.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 328704 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\9e199645bd26f1afe58ebe185d1e7f0f\System.Web.Entity.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 328704 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\79c29ac85dd57dd485ab60118ac292ff\System.Web.Entity.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 301056 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d3d65e34fa60f0b6c72ca0d12ec89933\System.Web.Entity.Design.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 301056 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\652017ebe962ab2eb271c2524f31cd61\System.Web.Entity.Design.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 547328 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\d0070c1c1a642ae30394e00bc0d82336\System.Web.DynamicData.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 547328 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\b7891f5659db299dbd1b3c72db7edb9f\System.Web.DynamicData.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 141312 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\1896753d02d146be1988d32241300f51\System.Web.Abstractions.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 141312 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\00ec08741a765c707bd9169346064a81\System.Web.Abstractions.ni.dll
    + 2009-08-12 08:09 . 2009-08-12 08:09 627200 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5a555c9ae6984c40157cf940bb519f7c\System.Transactions.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 627200 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\408e637346ef628a3f54fb1b9b83ac9f\System.Transactions.ni.dll
    + 2009-08-12 08:09 . 2009-08-12 08:09 212992 g:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ea3366939280c1715f1c620e33ee3c8a\System.ServiceProcess.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 212992 g:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\1f61bccb700d687775cf778dd77752e9\System.ServiceProcess.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 676352 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\a9e9b885a6601469c4058375cc74d856\System.Security.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 676352 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\1c8df2da33222c048d683017f2095f04\System.Security.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 311296 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bfd6e16d8c3589cd2bd3f8d46f0a5402\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 311296 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\9bc34a79af9c3ed2cf17a0226c769b4c\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 771584 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\af21e3011fb4e107b13ea5c40c351ec4\System.Runtime.Remoting.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 771584 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\2abd876a3c8a6b088fa6d8d39d901e3c\System.Runtime.Remoting.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 621056 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\5f74a84e9d28c2332c51f6e30da0e125\System.Net.ni.dll
    + 2009-08-12 08:09 . 2009-08-12 08:09 621056 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\519d9c618341b136f9b963ffb7495308\System.Net.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 998400 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\8642fdfbf02a6cb6f01169fe6fdb5d11\System.Management.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 998400 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\2c208e4c5521f31057ea7d6e93c6a567\System.Management.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 330752 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\818b20a7c6f3b2fe97bf008ca24080c1\System.Management.Instrumentation.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 330752 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1d3fbbd23ce1e8637ef4f40a8d23cd32\System.Management.Instrumentation.ni.dll
    + 2009-08-12 08:04 . 2009-08-12 08:04 381440 g:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7c367a96b10d626ec8cbf8149272d845\System.IO.Log.ni.dll
    + 2009-10-14 22:28 . 2009-10-14 22:28 381440 g:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\6c273eb9d1ee8b66b5ecb073de4b785d\System.IO.Log.ni.dll
    + 2009-10-14 22:28 . 2009-10-14 22:28 212992 g:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\7222db518afb4eaaa138824278249bc7\System.IdentityModel.Selectors.ni.dll
    + 2009-08-12 08:04 . 2009-08-12 08:04 212992 g:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\68e71147704ef0d34d9a4bece7767fc5\System.IdentityModel.Selectors.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 280064 g:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.Wrapper.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 627712 g:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 280064 g:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.Wrapper.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 627712 g:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.ni.dll
    + 2009-10-14 22:23 . 2009-10-14 22:23 208384 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\ca6d7208c0fb72ff97429f2636ced321\System.Drawing.Design.ni.dll
    + 2009-08-12 08:01 . 2009-08-12 08:01 208384 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\18bbe2b6717e7f1d1dd672526e9889ee\System.Drawing.Design.ni.dll
    + 2009-10-14 22:35 . 2009-10-14 22:35 881152 g:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c92fc19800e701c90f90ab7a2ab44c47\System.DirectoryServices.AccountManagement.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 455680 g:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c434a07332ce490711c27fd0edb7562f\System.DirectoryServices.Protocols.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 455680 g:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a601f47a98ee67df424685c9a66ea449\System.DirectoryServices.Protocols.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 881152 g:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8b3bb7a2c2f3ffe94c866283f1cd5957\System.DirectoryServices.AccountManagement.ni.dll
    + 2009-10-14 22:35 . 2009-10-14 22:35 939008 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\b91b44015859163646f210d284f7166a\System.Data.Services.Client.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 939008 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a4b887f476fa4b8746a93a9fc2208560\System.Data.Services.Client.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 354816 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1cf3acad6553d6c59df576794f4e8bd6\System.Data.Services.Design.ni.dll
    + 2009-10-14 22:35 . 2009-10-14 22:35 354816 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1b35297e07b85071daecdb06f96750a1\System.Data.Services.Design.ni.dll
    + 2009-10-14 22:35 . 2009-10-14 22:35 756736 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\cf906bf9146d1f0013451ec63b58e064\System.Data.Entity.Design.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 756736 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\392de34573f9f8ec885714f2f3e7f07f\System.Data.Entity.Design.ni.dll
    + 2009-10-14 22:34 . 2009-10-14 22:34 135680 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\4ff4134b0d490c090e03d74e104517c4\System.Data.DataSetExtensions.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 135680 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\1db495ff00bbd14df4af6680c4de0653\System.Data.DataSetExtensions.ni.dll
    + 2009-08-12 08:05 . 2009-08-12 08:05 971264 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\b82c00e2d24305ad6cb08556e3779b75\System.Configuration.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 971264 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\7c743462baccf29b3567b0e3ec9ac134\System.Configuration.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 141312 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\de514e484e49b04b016949d57ffac03e\System.Configuration.Install.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 141312 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\443e3a85c491b2de4a2ac654cb957484\System.Configuration.Install.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 633856 g:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ce984d754e3c0b6be4504b785cc43574\System.AddIn.ni.dll
    + 2009-10-14 22:34 . 2009-10-14 22:34 633856 g:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\cba35f47925431a54d0e6ae147a292f1\System.AddIn.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 366080 g:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6af32fe5cbec0aa54e2efa6910c73651\SMSvcHost.ni.exe
    + 2009-08-12 08:05 . 2009-08-12 08:05 366080 g:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\045dd501b7257b1cc26083538ae69045\SMSvcHost.ni.exe
    + 2009-08-12 08:05 . 2009-08-12 08:05 256000 g:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9790551187e294b4ed3aaa1c221891c7\SMDiagnostics.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 256000 g:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\7602d7687fb9bd21cd9ae60d2b187c99\SMDiagnostics.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 320512 g:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\a23dc25782df04533a13e348203e4dc5\ServiceModelReg.ni.exe
    + 2009-08-12 08:05 . 2009-08-12 08:05 320512 g:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\10a0c9707876fc1f65e64b811a28b020\ServiceModelReg.ni.exe
    + 2009-08-12 07:59 . 2009-08-12 07:59 224768 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f475294d8c7dc2dd4febeef27bc0417e\PresentationFramework.Classic.ni.dll
    + 2009-10-14 22:20 . 2009-10-14 22:20 258048 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96f74da5fc40b92f09069230bc0df4f0\PresentationFramework.Royale.ni.dll
    + 2009-08-12 07:59 . 2009-08-12 07:59 539648 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8003abaf6bcf70f7eb620d06837e897b\PresentationFramework.Luna.ni.dll
    + 2009-08-12 07:59 . 2009-08-12 07:59 368128 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\59a67874d8d8475faa5be1d993083d12\PresentationFramework.Aero.ni.dll
    + 2009-10-14 22:20 . 2009-10-14 22:20 539648 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3bb4d16b042b72c2c85a0f8ac9d48f28\PresentationFramework.Luna.ni.dll
    + 2009-10-14 22:20 . 2009-10-14 22:20 368128 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\30c5c2682d3c5bdaa83bb9a36ee48afa\PresentationFramework.Aero.ni.dll
    + 2009-08-12 07:59 . 2009-08-12 07:59 258048 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c980c9a5051d723c6ec2a78a3d0e2b3\PresentationFramework.Royale.ni.dll
    + 2009-10-14 22:20 . 2009-10-14 22:20 224768 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\07e952efd70f5608e221a008e6231ace\PresentationFramework.Classic.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 133632 g:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\eade8c1c9c1e8e5ffb50e6c9b9af0f6a\MSBuild.ni.exe
    + 2009-08-12 08:05 . 2009-08-12 08:05 133632 g:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\6d38e317128608bc4516ea46ab94590e\MSBuild.ni.exe
    + 2009-10-14 22:33 . 2009-10-14 22:33 386560 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fc4d66e0a92b3767006a84f2519d2457\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2009-08-12 08:05 . 2009-08-12 08:05 386560 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1820d6a012fc0e16c3e1d29d973cd2d0\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2009-10-14 22:34 . 2009-10-14 22:34 144384 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\58ca3ecc52b7246b448c109817198a0b\Microsoft.Build.Utilities.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 144384 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\55b9eff9e23359faed4351386c062238\Microsoft.Build.Utilities.ni.dll
    + 2009-10-14 22:34 . 2009-10-14 22:34 175104 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4dd43724dd92026577c6f588270137a0\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 175104 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4217124db1ea5de5f1a1f3eea75e8d32\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 839680 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\96825c34d7e1f7df1923ff2123bed8da\Microsoft.Build.Engine.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 839680 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\8c651f75bb741330370986dcad8e9e5b\Microsoft.Build.Engine.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 222720 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a6dcbae619ccd938bfe808c54d6d3ae0\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 222720 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\9b321ebf67587237f576df6104a32588\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2009-08-12 08:05 . 2009-08-12 08:05 220672 g:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9bea05938bee3555c5aa8763d89a68f9\CustomMarshalers.ni.dll
    + 2009-10-14 22:28 . 2009-10-14 22:28 220672 g:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\77688ce14f221ed94a9f442ae4736123\CustomMarshalers.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 410112 g:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a17c65f0cffaa4f792dd38d50df9d526\ComSvcConfig.ni.exe
    + 2009-08-12 08:05 . 2009-08-12 08:05 410112 g:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\12629e2f3e315459bee67cbbaac85cb2\ComSvcConfig.ni.exe
    + 2009-08-12 08:05 . 2009-08-12 08:05 842240 g:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b5b2feadc3943e3976daebc0bcd2b5e2\AspNetMMCExt.ni.dll
    + 2009-10-14 22:28 . 2009-10-14 22:28 842240 g:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\85d7c111956b478766d90625b35d963f\AspNetMMCExt.ni.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 385024 g:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 167936 g:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    - 2009-02-14 01:37 . 2009-02-14 01:37 139264 g:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 139264 g:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 507904 g:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 540672 g:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 839680 g:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-10-14 22:06 . 2009-10-14 22:06 839680 g:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-10-14 22:06 . 2009-10-14 22:06 835584 g:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 335872 g:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
    + 2009-08-12 07:55 . 2009-08-12 07:55 139264 g:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 131072 g:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
    + 2009-08-12 07:55 . 2009-08-12 07:55 229376 g:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
    - 2008-03-19 03:22 . 2008-03-19 03:22 114688 g:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 114688 g:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 569344 g:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 258048 g:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2008-03-19 03:22 . 2008-03-19 03:22 258048 g:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-08-12 07:26 . 2009-08-12 07:26 966656 g:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 131072 g:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 131072 g:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 303104 g:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 233472 g:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
    - 2009-02-14 01:37 . 2009-02-14 01:37 233472 g:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 258048 g:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 258048 g:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 372736 g:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 372736 g:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 143360 g:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2009-08-12 07:26 . 2009-08-12 07:26 131072 g:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2009-02-14 01:33 . 2009-02-14 01:33 131072 g:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    + 2009-08-12 07:26 . 2009-08-12 07:26 430080 g:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2009-02-14 01:33 . 2009-02-14 01:33 430080 g:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2009-02-14 01:33 . 2009-02-14 01:33 126976 g:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 126976 g:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 626688 g:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 401408 g:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 401408 g:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 188416 g:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 188416 g:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 286720 g:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 970752 g:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 745472 g:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2009-09-16 00:52 . 2009-09-16 00:52 236392 g:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\9.0.242.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
    + 2009-08-12 07:55 . 2009-08-12 07:55 442368 g:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 114688 g:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
    + 2009-08-12 07:55 . 2009-08-12 07:55 294912 g:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 684032 g:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 229376 g:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 667648 g:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 425984 g:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 425984 g:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 163840 g:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 110592 g:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 110592 g:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-08-12 07:26 . 2009-08-12 07:26 110592 g:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    - 2009-02-14 01:33 . 2009-02-14 01:33 528384 g:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 528384 g:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 864256 g:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 163840 g:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 397312 g:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 139264 g:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 196608 g:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 598016 g:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 659456 g:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 372736 g:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 372736 g:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 110592 g:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 110592 g:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2009-02-14 01:33 . 2009-02-14 01:33 397312 g:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    + 2009-08-12 07:26 . 2009-08-12 07:26 397312 g:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 749568 g:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 749568 g:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 655360 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 655360 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 802816 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 733184 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 348160 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 348160 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 106496 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
    - 2009-02-14 01:36 . 2009-02-14 01:36 106496 g:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 507904 g:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2009-10-14 22:06 . 2009-10-14 22:06 507904 g:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 261632 g:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 368640 g:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 113664 g:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 113664 g:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2008-03-19 03:23 . 2008-03-19 03:23 258048 g:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 258048 g:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 486400 g:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2009-08-12 07:26 . 2009-08-12 07:26 163840 g:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
  • edited November 2009
    g:\windows\$NtUninstallwmp11$\wmpsrcwp.dll
    - 2007-06-27 07:14 . 2004-09-22 23:46 282624 g:\windows\$NtUninstallwmp11$\wmpdxm.dll
    - 2007-06-27 07:14 . 2004-09-22 23:46 135168 g:\windows\$NtUninstallwmp11$\wmpasf.dll
    - 2007-06-27 07:14 . 2004-09-22 23:46 122880 g:\windows\$NtUninstallwmp11$\wmlaunch.exe
    - 2007-06-27 07:14 . 2004-09-22 23:46 189440 g:\windows\$NtUninstallwmp11$\wmerror.dll
    - 2007-06-27 07:14 . 2004-09-22 23:46 192512 g:\windows\$NtUninstallwmp11$\unregmp2.exe
    - 2007-06-27 07:14 . 2006-05-16 22:11 371424 g:\windows\$NtUninstallwmp11$\spuninst\updspapi.dll
    - 2007-06-27 07:14 . 2006-05-16 22:11 213216 g:\windows\$NtUninstallwmp11$\spuninst\spuninst.exe
    - 2007-06-27 07:14 . 2004-09-22 23:46 819200 g:\windows\$NtUninstallwmp11$\setup_wm.exe
    - 2007-06-27 07:14 . 2004-09-22 23:45 344064 g:\windows\$NtUninstallwmp11$\mpvis.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 327680 g:\windows\$NtUninstallWMFDist11$\wpdsp.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 114176 g:\windows\$NtUninstallWMFDist11$\wpdmtp.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 999424 g:\windows\$NtUninstallWMFDist11$\wmvdmoe2.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 871160 g:\windows\$NtUninstallWMFDist11$\wmvdmod.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 936960 g:\windows\$NtUninstallWMFDist11$\wmspdmoe.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 531192 g:\windows\$NtUninstallWMFDist11$\wmspdmod.dll
    - 2007-06-27 07:10 . 2004-08-11 06:45 819200 g:\windows\$NtUninstallWMFDist11$\wmsetsdk.exe
    - 2007-06-27 07:10 . 2004-09-22 23:46 773368 g:\windows\$NtUninstallWMFDist11$\wmsdmod.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 150016 g:\windows\$NtUninstallWMFDist11$\wmidx.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 290816 g:\windows\$NtUninstallWMFDist11$\wmdrmnet.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 344064 g:\windows\$NtUninstallWMFDist11$\wmdrmdev.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 229376 g:\windows\$NtUninstallWMFDist11$\wmasf.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 712704 g:\windows\$NtUninstallWMFDist11$\wmadmoe.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 380144 g:\windows\$NtUninstallWMFDist11$\wmadmod.dll
    - 2007-06-27 07:10 . 2006-05-16 22:11 371424 g:\windows\$NtUninstallWMFDist11$\spuninst\updspapi.dll
    - 2007-06-27 07:10 . 2006-05-16 22:11 213216 g:\windows\$NtUninstallWMFDist11$\spuninst\spuninst.exe
    - 2007-06-27 07:10 . 2004-09-22 23:46 221184 g:\windows\$NtUninstallWMFDist11$\qasf.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 311296 g:\windows\$NtUninstallWMFDist11$\mswmdm.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 360176 g:\windows\$NtUninstallWMFDist11$\msscp.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 169472 g:\windows\$NtUninstallWMFDist11$\mspmsp.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 141312 g:\windows\$NtUninstallWMFDist11$\msnetobj.dll
    - 2007-06-27 07:10 . 2004-08-04 07:56 240640 g:\windows\$NtUninstallWMFDist11$\mpg4dmod.dll
    - 2007-06-27 07:10 . 2004-08-04 07:56 384512 g:\windows\$NtUninstallWMFDist11$\mp4sdmod.dll
    - 2007-06-27 07:10 . 2004-08-04 07:56 310272 g:\windows\$NtUninstallWMFDist11$\mp43dmod.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 527360 g:\windows\$NtUninstallWMFDist11$\drmv2clt.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 161792 g:\windows\$NtUninstallWMFDist11$\cewmdm.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 233472 g:\windows\$NtUninstallWMFDist11$\blackbox.dll
    - 2007-06-27 07:10 . 2004-09-22 23:45 480768 g:\windows\$NtUninstallWMFDist11$\audiodev.dll
    + 2009-08-14 11:59 . 2008-07-08 13:02 382840 g:\windows\$NtUninstallKB973869$\spuninst\updspapi.dll
    + 2009-08-14 11:59 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB973869$\spuninst\spuninst.exe
    + 2009-08-14 11:51 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB973815$\spuninst\updspapi.dll
    + 2009-08-14 11:51 . 2009-05-26 11:40 231288 g:\windows\$NtUninstallKB973815$\spuninst\spuninst.exe
    + 2009-08-14 11:51 . 2004-08-04 07:56 204288 g:\windows\$NtUninstallKB973815$\mswebdvd.dll
    + 2009-08-14 11:59 . 2006-10-19 01:47 314880 g:\windows\$NtUninstallKB973540_WM9L$\wmpdxm.dll
    + 2009-08-14 11:59 . 2007-07-27 14:41 382840 g:\windows\$NtUninstallKB973540_WM9L$\spuninst\updspapi.dll
    + 2009-08-14 11:59 . 2007-07-27 14:41 231288 g:\windows\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe
    + 2009-08-14 11:58 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB973507$\spuninst\updspapi.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 231288 g:\windows\$NtUninstallKB973507$\spuninst\spuninst.exe
    + 2009-08-14 11:58 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB973354$\spuninst\updspapi.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 231288 g:\windows\$NtUninstallKB973354$\spuninst\spuninst.exe
    + 2009-07-18 05:31 . 2008-07-08 13:02 382840 g:\windows\$NtUninstallKB973346$\spuninst\updspapi.dll
    + 2009-07-18 05:31 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB973346$\spuninst\spuninst.exe
    + 2009-08-14 12:02 . 2006-08-17 12:28 132096 g:\windows\$NtUninstallKB971657$\wkssvc.dll
    + 2009-08-14 12:02 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB971657$\spuninst\updspapi.dll
    + 2009-08-14 12:02 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB971657$\spuninst\spuninst.exe
    + 2009-07-18 05:30 . 2008-07-09 07:38 382840 g:\windows\$NtUninstallKB971633$\spuninst\updspapi.dll
    + 2009-07-18 05:30 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB971633$\spuninst\spuninst.exe
    + 2009-08-14 12:01 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB971557$\spuninst\updspapi.dll
    + 2009-08-14 12:01 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB971557$\spuninst\spuninst.exe
    + 2009-08-14 11:50 . 2007-03-06 01:23 371424 g:\windows\$NtUninstallKB971032$\spuninst\updspapi.dll
    + 2009-08-14 11:50 . 2007-03-06 01:22 213216 g:\windows\$NtUninstallKB971032$\spuninst\spuninst.exe
    + 2009-08-14 11:50 . 2004-08-04 07:56 169984 g:\windows\$NtUninstallKB971032$\msmqocm.dll
    + 2009-08-14 11:50 . 2007-07-06 12:46 471552 g:\windows\$NtUninstallKB971032$\mqutil.dll
    + 2009-08-14 11:50 . 2004-08-04 07:56 186880 g:\windows\$NtUninstallKB971032$\mqtrig.dll
    + 2009-08-14 11:50 . 2004-08-04 07:56 117248 g:\windows\$NtUninstallKB971032$\mqtgsvc.exe
    + 2009-08-14 11:50 . 2004-08-04 07:56 517632 g:\windows\$NtUninstallKB971032$\mqsnap.dll
    + 2009-08-14 11:50 . 2004-08-04 07:56 123392 g:\windows\$NtUninstallKB971032$\mqrtdep.dll
    + 2009-08-14 11:50 . 2007-07-06 12:46 177152 g:\windows\$NtUninstallKB971032$\mqrt.dll
    + 2009-08-14 11:50 . 2007-07-06 12:46 660992 g:\windows\$NtUninstallKB971032$\mqqm.dll
    + 2009-08-14 11:50 . 2004-08-04 07:56 225280 g:\windows\$NtUninstallKB971032$\mqoa.dll
    + 2009-08-14 11:50 . 2007-07-06 12:46 138240 g:\windows\$NtUninstallKB971032$\mqad.dll
    + 2009-08-29 02:38 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB970653-v3$\spuninst\updspapi.dll
    + 2009-08-29 02:38 . 2009-05-26 11:40 231288 g:\windows\$NtUninstallKB970653-v3$\spuninst\spuninst.exe
    + 2009-06-17 07:04 . 2009-02-19 09:47 351744 g:\windows\$NtUninstallKB970238$\xpsp3res.dll
    + 2009-06-17 07:04 . 2007-11-30 12:39 382840 g:\windows\$NtUninstallKB970238$\spuninst\updspapi.dll
    + 2009-06-17 07:04 . 2007-11-30 12:39 231288 g:\windows\$NtUninstallKB970238$\spuninst\spuninst.exe
    + 2009-06-17 07:04 . 2007-07-09 13:09 584192 g:\windows\$NtUninstallKB970238$\rpcrt4.dll
    + 2009-06-17 07:13 . 2007-11-30 12:39 382840 g:\windows\$NtUninstallKB969898$\spuninst\updspapi.dll
    + 2009-06-17 07:13 . 2007-11-30 12:39 231288 g:\windows\$NtUninstallKB969898$\spuninst\spuninst.exe
    + 2009-09-09 07:09 . 2007-07-27 14:41 382840 g:\windows\$NtUninstallKB968816_WM9$\spuninst\updspapi.dll
    + 2009-09-09 07:09 . 2007-07-27 14:41 231288 g:\windows\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe
    + 2009-06-17 07:03 . 2008-07-09 07:38 382840 g:\windows\$NtUninstallKB968537$\spuninst\updspapi.dll
    + 2009-06-17 07:03 . 2008-07-09 07:38 231288 g:\windows\$NtUninstallKB968537$\spuninst\spuninst.exe
    + 2009-08-14 11:49 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB968389$\spuninst\updspapi.dll
    + 2009-08-14 11:49 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB968389$\spuninst\spuninst.exe
    + 2009-08-14 11:49 . 2008-12-05 07:12 144896 g:\windows\$NtUninstallKB968389$\schannel.dll
    + 2009-08-14 11:49 . 2004-08-04 07:56 129536 g:\windows\$NtUninstallKB968389$\msv1_0.dll
    + 2009-08-14 11:49 . 2009-02-09 10:20 723456 g:\windows\$NtUninstallKB968389$\lsasrv.dll
    + 2009-08-14 11:49 . 2005-06-15 17:49 295936 g:\windows\$NtUninstallKB968389$\kerberos.dll
    + 2009-09-23 09:02 . 2007-11-30 12:39 382840 g:\windows\$NtUninstallKB961503$\spuninst\updspapi.dll
    + 2009-09-23 09:02 . 2007-11-30 12:39 231288 g:\windows\$NtUninstallKB961503$\spuninst\spuninst.exe
    + 2009-06-17 07:13 . 2008-07-09 07:38 382840 g:\windows\$NtUninstallKB961501$\spuninst\updspapi.dll
    + 2009-06-17 07:13 . 2008-07-09 07:38 231288 g:\windows\$NtUninstallKB961501$\spuninst\spuninst.exe
    + 2009-06-17 07:13 . 2004-08-04 07:56 341504 g:\windows\$NtUninstallKB961501$\localspl.dll
    + 2009-07-18 05:11 . 2005-10-17 21:14 118272 g:\windows\$NtUninstallKB961371$\t2embed.dll
    + 2009-07-18 05:11 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB961371$\spuninst\updspapi.dll
    + 2009-07-18 05:11 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB961371$\spuninst\spuninst.exe
    + 2009-08-14 12:01 . 2007-11-30 11:18 382840 g:\windows\$NtUninstallKB961118$\spuninst\updspapi.dll
    + 2009-08-14 12:01 . 2007-11-30 11:18 231288 g:\windows\$NtUninstallKB961118$\spuninst\spuninst.exe
    + 2009-08-14 12:02 . 2009-05-26 11:40 382840 g:\windows\$NtUninstallKB960859$\spuninst\updspapi.dll
    + 2009-08-14 12:02 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB960859$\spuninst\spuninst.exe
    + 2009-09-09 07:10 . 2004-08-04 07:56 153088 g:\windows\$NtUninstallKB956844$\triedit.dll
    + 2009-09-09 07:10 . 2008-07-08 13:02 382840 g:\windows\$NtUninstallKB956844$\spuninst\updspapi.dll
    + 2009-09-09 07:10 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB956844$\spuninst\spuninst.exe
    + 2009-08-14 12:00 . 2008-07-08 13:02 382840 g:\windows\$NtUninstallKB956744$\spuninst\updspapi.dll
    + 2009-08-14 12:00 . 2008-07-08 13:02 231288 g:\windows\$NtUninstallKB956744$\spuninst\spuninst.exe
    + 2009-09-16 00:50 . 2006-10-24 17:29 352256 g:\windows\$NtUninstallKB954708$\windowscodecsext.dll
    + 2009-09-16 00:50 . 2006-10-24 17:30 716288 g:\windows\$NtUninstallKB954708$\windowscodecs.dll
    + 2009-09-16 00:50 . 2007-11-30 12:39 382840 g:\windows\$NtUninstallKB954708$\spuninst\updspapi.dll
    + 2009-09-16 00:50 . 2007-11-30 12:39 231288 g:\windows\$NtUninstallKB954708$\spuninst\spuninst.exe
    + 2009-08-14 11:59 . 2008-07-08 13:02 382840 g:\windows\$hf_mig$\KB973869\update\updspapi.dll
    + 2009-08-14 11:59 . 2008-07-08 13:02 755576 g:\windows\$hf_mig$\KB973869\update\update.exe
    + 2009-08-14 11:59 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB973869\spuninst.exe
    + 2009-08-14 11:51 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB973815\update\updspapi.dll
    + 2009-08-14 11:51 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB973815\update\update.exe
    + 2009-08-14 11:51 . 2009-05-26 11:40 231288 g:\windows\$hf_mig$\KB973815\spuninst.exe
    + 2009-08-05 08:52 . 2009-08-05 08:52 204800 g:\windows\$hf_mig$\KB973815\SP3QFE\mswebdvd.dll
    + 2009-08-05 09:01 . 2009-08-05 09:01 204800 g:\windows\$hf_mig$\KB973815\SP3GDR\mswebdvd.dll
    + 2009-08-05 08:42 . 2009-08-05 08:42 204800 g:\windows\$hf_mig$\KB973815\SP2QFE\mswebdvd.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB973507\update\updspapi.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB973507\update\update.exe
    + 2009-08-14 11:58 . 2009-05-26 11:40 231288 g:\windows\$hf_mig$\KB973507\spuninst.exe
    + 2009-08-14 11:58 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB973354\update\updspapi.dll
    + 2009-08-14 11:58 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB973354\update\update.exe
    + 2009-08-14 11:58 . 2009-05-26 11:40 231288 g:\windows\$hf_mig$\KB973354\spuninst.exe
    + 2009-07-18 05:31 . 2008-07-08 13:02 382840 g:\windows\$hf_mig$\KB973346\update\updspapi.dll
    + 2009-07-18 05:31 . 2008-07-08 13:02 755576 g:\windows\$hf_mig$\KB973346\update\update.exe
    + 2009-07-18 05:31 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB973346\spuninst.exe
    + 2009-07-29 07:07 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB972260-IE8\update\updspapi.dll
    + 2009-07-29 07:07 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB972260-IE8\update\update.exe
    + 2009-07-29 07:07 . 2009-05-26 11:40 231288 g:\windows\$hf_mig$\KB972260-IE8\spuninst.exe
    + 2009-07-28 18:06 . 2009-07-03 17:06 915456 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 206848 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\occache.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 594432 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\msfeeds.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 246272 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ieproxy.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 184320 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iepeers.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 386048 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iedkcs32.dll
    + 2009-07-28 18:06 . 2009-07-03 11:38 173056 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ie4uinit.exe
    + 2009-09-09 07:08 . 2008-07-08 13:02 382840 g:\windows\$hf_mig$\KB971961-IE8\update\updspapi.dll
    + 2009-09-09 07:08 . 2008-07-08 13:02 755576 g:\windows\$hf_mig$\KB971961-IE8\update\update.exe
    + 2009-09-09 07:08 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB971961-IE8\spuninst.exe
    + 2009-09-08 19:53 . 2009-06-22 06:47 726528 g:\windows\$hf_mig$\KB971961-IE8\SP3QFE\jscript.dll
    + 2009-08-14 12:02 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB971657\update\updspapi.dll
    + 2009-08-14 12:02 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB971657\update\update.exe
    + 2009-08-14 12:02 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB971657\spuninst.exe
    + 2009-06-10 06:17 . 2009-06-10 06:17 134144 g:\windows\$hf_mig$\KB971657\SP3QFE\wkssvc.dll
    + 2009-06-10 06:14 . 2009-06-10 06:14 132096 g:\windows\$hf_mig$\KB971657\SP3GDR\wkssvc.dll
    + 2009-06-10 06:26 . 2009-06-10 06:26 134144 g:\windows\$hf_mig$\KB971657\SP2QFE\wkssvc.dll
    + 2009-07-18 05:30 . 2008-07-09 07:38 382840 g:\windows\$hf_mig$\KB971633\update\updspapi.dll
    + 2009-07-18 05:30 . 2008-07-09 07:38 755576 g:\windows\$hf_mig$\KB971633\update\update.exe
    + 2009-07-18 05:30 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB971633\spuninst.exe
    + 2009-08-14 12:01 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB971557\update\updspapi.dll
    + 2009-08-14 12:01 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB971557\update\update.exe
    + 2009-08-14 12:01 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB971557\spuninst.exe
    + 2009-08-14 11:50 . 2007-03-06 01:23 371424 g:\windows\$hf_mig$\KB971032\update\updspapi.dll
    + 2009-08-14 11:50 . 2007-03-06 01:22 716000 g:\windows\$hf_mig$\KB971032\update\update.exe
    + 2009-08-14 11:50 . 2007-03-06 01:22 213216 g:\windows\$hf_mig$\KB971032\spuninst.exe
    + 2009-06-25 18:26 . 2009-06-25 18:26 169472 g:\windows\$hf_mig$\KB971032\SP2QFE\msmqocm.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 471552 g:\windows\$hf_mig$\KB971032\SP2QFE\mqutil.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 186880 g:\windows\$hf_mig$\KB971032\SP2QFE\mqtrig.dll
    + 2009-06-22 11:30 . 2009-06-22 11:30 117248 g:\windows\$hf_mig$\KB971032\SP2QFE\mqtgsvc.exe
    + 2009-06-25 18:26 . 2009-06-25 18:26 517120 g:\windows\$hf_mig$\KB971032\SP2QFE\mqsnap.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 123392 g:\windows\$hf_mig$\KB971032\SP2QFE\mqrtdep.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 177152 g:\windows\$hf_mig$\KB971032\SP2QFE\mqrt.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 661504 g:\windows\$hf_mig$\KB971032\SP2QFE\mqqm.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 225280 g:\windows\$hf_mig$\KB971032\SP2QFE\mqoa.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 138240 g:\windows\$hf_mig$\KB971032\SP2QFE\mqad.dll
    + 2009-06-17 07:04 . 2007-11-30 12:39 382840 g:\windows\$hf_mig$\KB970238\update\updspapi.dll
    + 2009-06-17 07:04 . 2007-11-30 12:39 755576 g:\windows\$hf_mig$\KB970238\update\update.exe
    + 2009-06-17 07:04 . 2007-11-30 12:39 231288 g:\windows\$hf_mig$\KB970238\spuninst.exe
    + 2009-04-15 15:24 . 2009-04-15 15:24 585216 g:\windows\$hf_mig$\KB970238\SP3QFE\rpcrt4.dll
    + 2009-04-15 14:51 . 2009-04-15 14:51 585216 g:\windows\$hf_mig$\KB970238\SP3GDR\rpcrt4.dll
    + 2009-04-15 09:24 . 2009-04-15 09:24 351744 g:\windows\$hf_mig$\KB970238\SP2QFE\xpsp3res.dll
    + 2009-04-15 15:26 . 2009-04-15 15:26 583168 g:\windows\$hf_mig$\KB970238\SP2QFE\rpcrt4.dll
    + 2009-06-17 07:13 . 2007-11-30 12:39 382840 g:\windows\$hf_mig$\KB969898\update\updspapi.dll
    + 2009-06-17 07:13 . 2007-11-30 12:39 755576 g:\windows\$hf_mig$\KB969898\update\update.exe
    + 2009-06-17 07:13 . 2007-11-30 12:39 231288 g:\windows\$hf_mig$\KB969898\spuninst.exe
    + 2009-06-17 07:14 . 2008-07-09 07:38 382840 g:\windows\$hf_mig$\KB969897-IE8\update\updspapi.dll
    + 2009-06-17 07:14 . 2007-11-30 12:39 755576 g:\windows\$hf_mig$\KB969897-IE8\update\update.exe
    + 2009-06-17 07:14 . 2007-11-30 12:39 231288 g:\windows\$hf_mig$\KB969897-IE8\spuninst.exe
    + 2009-06-10 23:30 . 2009-05-13 05:10 915456 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll
    + 2009-06-10 23:30 . 2009-04-30 21:22 246272 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ieproxy.dll
    + 2009-06-10 23:30 . 2009-04-30 21:22 385536 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\iedkcs32.dll
    + 2009-06-10 23:30 . 2009-04-30 10:47 173056 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ie4uinit.exe
    + 2009-06-17 07:03 . 2008-07-09 07:38 382840 g:\windows\$hf_mig$\KB968537\update\updspapi.dll
    + 2009-06-17 07:03 . 2008-07-09 07:38 755576 g:\windows\$hf_mig$\KB968537\update\update.exe
    + 2009-06-17 07:03 . 2008-07-09 07:38 231288 g:\windows\$hf_mig$\KB968537\spuninst.exe
    + 2009-08-14 11:49 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB968389\update\updspapi.dll
    + 2009-08-14 11:49 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB968389\update\update.exe
    + 2009-08-14 11:49 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB968389\spuninst.exe
    + 2009-06-25 08:41 . 2009-06-25 08:41 147456 g:\windows\$hf_mig$\KB968389\SP3QFE\schannel.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41 136704 g:\windows\$hf_mig$\KB968389\SP3QFE\msv1_0.dll
    + 2009-06-26 09:41 . 2009-06-26 09:41 730112 g:\windows\$hf_mig$\KB968389\SP3QFE\lsasrv.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41 301568 g:\windows\$hf_mig$\KB968389\SP3QFE\kerberos.dll
    + 2009-06-25 08:25 . 2009-06-25 08:25 147456 g:\windows\$hf_mig$\KB968389\SP3GDR\schannel.dll
    + 2009-06-25 08:25 . 2009-06-25 08:25 136192 g:\windows\$hf_mig$\KB968389\SP3GDR\msv1_0.dll
    + 2009-06-25 08:25 . 2009-06-25 08:25 730112 g:\windows\$hf_mig$\KB968389\SP3GDR\lsasrv.dll
    + 2009-06-25 08:25 . 2009-06-25 08:25 301568 g:\windows\$hf_mig$\KB968389\SP3GDR\kerberos.dll
    + 2009-06-25 08:17 . 2009-06-25 08:17 168448 g:\windows\$hf_mig$\KB968389\SP2QFE\schannel.dll
    + 2009-02-06 18:46 . 2009-02-06 18:46 408064 g:\windows\$hf_mig$\KB968389\SP2QFE\netlogon.dll
    + 2009-06-25 08:17 . 2009-06-25 08:17 136192 g:\windows\$hf_mig$\KB968389\SP2QFE\msv1_0.dll
    + 2009-06-25 08:17 . 2009-06-25 08:17 729600 g:\windows\$hf_mig$\KB968389\SP2QFE\lsasrv.dll
    + 2009-06-25 08:17 . 2009-06-25 08:17 301568 g:\windows\$hf_mig$\KB968389\SP2QFE\kerberos.dll
    + 2009-09-23 09:03 . 2007-11-30 12:39 382840 g:\windows\$hf_mig$\KB961503\update\updspapi.dll
    + 2009-09-23 09:02 . 2007-11-30 12:39 755576 g:\windows\$hf_mig$\KB961503\update\update.exe
    + 2009-09-23 09:02 . 2007-11-30 12:39 231288 g:\windows\$hf_mig$\KB961503\spuninst.exe
    + 2009-06-17 07:13 . 2008-07-09 07:38 382840 g:\windows\$hf_mig$\KB961501\update\updspapi.dll
    + 2009-06-17 07:13 . 2008-07-09 07:38 755576 g:\windows\$hf_mig$\KB961501\update\update.exe
    + 2009-06-17 07:13 . 2008-07-09 07:38 231288 g:\windows\$hf_mig$\KB961501\spuninst.exe
    + 2009-05-07 15:14 . 2009-05-07 15:14 346112 g:\windows\$hf_mig$\KB961501\SP3QFE\localspl.dll
    + 2009-05-07 15:32 . 2009-05-07 15:32 345600 g:\windows\$hf_mig$\KB961501\SP3GDR\localspl.dll
    + 2009-05-07 15:26 . 2009-05-07 15:26 346112 g:\windows\$hf_mig$\KB961501\SP2QFE\localspl.dll
    + 2009-07-18 05:12 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB961371\update\updspapi.dll
    + 2009-07-18 05:12 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB961371\update\update.exe
    + 2009-07-18 05:12 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB961371\spuninst.exe
    + 2009-06-16 14:43 . 2009-06-16 14:43 119808 g:\windows\$hf_mig$\KB961371\SP3QFE\t2embed.dll
    + 2009-06-16 14:36 . 2009-06-16 14:36 119808 g:\windows\$hf_mig$\KB961371\SP3GDR\t2embed.dll
    + 2009-06-16 14:45 . 2009-06-16 14:45 119808 g:\windows\$hf_mig$\KB961371\SP2QFE\t2embed.dll
    + 2009-08-14 12:01 . 2007-11-30 11:18 382840 g:\windows\$hf_mig$\KB961118\update\updspapi.dll
    + 2009-08-14 12:01 . 2007-11-30 11:18 755576 g:\windows\$hf_mig$\KB961118\update\update.exe
    + 2009-08-14 12:01 . 2007-11-30 11:18 231288 g:\windows\$hf_mig$\KB961118\spuninst.exe
    + 2009-08-14 12:02 . 2009-05-26 11:40 382840 g:\windows\$hf_mig$\KB960859\update\updspapi.dll
    + 2009-08-14 12:02 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB960859\update\update.exe
    + 2009-08-14 12:02 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB960859\spuninst.exe
    + 2009-09-09 07:10 . 2008-07-08 13:02 382840 g:\windows\$hf_mig$\KB956844\update\updspapi.dll
    + 2009-09-09 07:10 . 2008-07-08 13:02 755576 g:\windows\$hf_mig$\KB956844\update\update.exe
    + 2009-09-09 07:10 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB956844\spuninst.exe
    + 2009-09-08 19:53 . 2009-06-21 21:49 153088 g:\windows\$hf_mig$\KB956844\SP3QFE\triedit.dll
    + 2009-09-08 19:53 . 2009-06-21 21:44 153088 g:\windows\$hf_mig$\KB956844\SP3GDR\triedit.dll
    + 2009-09-08 19:53 . 2009-06-21 21:55 153088 g:\windows\$hf_mig$\KB956844\SP2QFE\triedit.dll
    + 2009-08-14 12:00 . 2008-07-08 13:02 382840 g:\windows\$hf_mig$\KB956744\update\updspapi.dll
    + 2009-08-14 12:00 . 2009-05-26 11:40 755576 g:\windows\$hf_mig$\KB956744\update\update.exe
    + 2009-08-14 12:00 . 2008-07-08 13:02 231288 g:\windows\$hf_mig$\KB956744\spuninst.exe
    + 2009-08-13 00:45 . 2009-06-09 14:53 290816 g:\windows\$hf_mig$\KB956744\SP2QFE\rhttpaa.dll
    + 2009-08-13 00:45 . 2009-06-09 09:12 677888 g:\windows\$hf_mig$\KB956744\SP2QFE\lhmstsc.exe
    + 2009-08-13 00:45 . 2009-06-09 14:53 136192 g:\windows\$hf_mig$\KB956744\SP2QFE\aaclient.dll
    + 2009-10-14 13:05 . 2009-08-13 13:55 1748992 g:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
  • edited November 2009
    g:\windows\system32\xpssvcs.dll
    - 2004-09-22 23:46 . 2008-06-18 10:03 2458112 g:\windows\system32\WMVCore.dll
    + 2004-09-22 23:46 . 2009-05-20 08:56 2458112 g:\windows\system32\WMVCore.dll
    + 2002-08-29 02:14 . 2009-04-17 09:58 1846656 g:\windows\system32\win32k.sys
    + 2002-07-01 21:38 . 2004-07-17 18:35 1326080 g:\windows\system32\webfldrs.msi
    + 2006-08-31 00:42 . 2009-08-29 08:08 1208832 g:\windows\system32\urlmon.dll
    + 2007-11-19 04:03 . 2008-07-06 12:06 1676288 g:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
    + 2007-11-19 04:03 . 2008-07-06 12:06 1676288 g:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
    + 2007-11-19 04:03 . 2008-07-06 21:36 2936832 g:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
    + 2007-11-19 04:03 . 2008-07-06 21:36 2936832 g:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
    + 2006-10-15 01:22 . 2008-07-06 12:06 1676288 g:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
    - 2004-10-28 15:45 . 2006-06-22 05:06 1435648 g:\windows\system32\query.dll
    + 2004-10-28 15:45 . 2009-07-17 16:27 1435648 g:\windows\system32\query.dll
    + 2007-02-11 23:00 . 2009-06-03 19:27 1290752 g:\windows\system32\quartz.dll
    + 2003-12-28 06:51 . 2009-06-09 15:06 1871872 g:\windows\system32\mstscax.dll
    + 2005-11-22 21:49 . 2009-08-29 08:08 5940224 g:\windows\system32\mshtml.dll
    + 2009-07-18 03:21 . 2009-07-18 03:21 3883424 g:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2008-12-19 14:15 . 2008-12-19 14:15 4338246 g:\windows\system32\libavcodec.dll
    + 2009-03-08 08:32 . 2009-08-29 08:08 1985536 g:\windows\system32\iertutil.dll
    + 2009-09-23 16:36 . 2009-08-28 23:42 2065696 g:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaaplrc.dll
    + 2009-09-23 16:36 . 2009-08-28 23:42 1417504 g:\windows\system32\DRVSTORE\netaapl_F433E854B3FF3BEE74986FDE8E16A64162342BFF\wdfcoinstaller01005.dll
    + 2006-10-15 01:22 . 2008-07-06 12:06 1676288 g:\windows\system32\dllcache\xpssvcs.dll
    + 2005-06-21 19:01 . 2009-08-06 23:23 1929952 g:\windows\system32\dllcache\wuaueng.dll
    - 2004-09-22 23:46 . 2008-06-18 10:03 2458112 g:\windows\system32\dllcache\WMVCore.dll
    + 2004-09-22 23:46 . 2009-05-20 08:56 2458112 g:\windows\system32\dllcache\WMVCore.dll
    + 2007-03-08 13:47 . 2009-04-17 09:58 1846656 g:\windows\system32\dllcache\win32k.sys
    + 2007-01-25 12:48 . 2009-08-29 08:08 1208832 g:\windows\system32\dllcache\urlmon.dll
    + 2006-06-22 05:06 . 2009-07-17 16:27 1435648 g:\windows\system32\dllcache\query.dll
    - 2006-06-22 05:06 . 2006-06-22 05:06 1435648 g:\windows\system32\dllcache\query.dll
    + 2007-12-21 21:51 . 2009-06-03 19:27 1290752 g:\windows\system32\dllcache\quartz.dll
    + 2006-12-19 14:17 . 2009-08-04 14:00 2180352 g:\windows\system32\dllcache\ntoskrnl.exe
    - 2006-12-19 12:55 . 2009-02-06 16:49 2015744 g:\windows\system32\dllcache\ntkrpamp.exe
    + 2006-12-19 12:55 . 2009-08-04 13:13 2015744 g:\windows\system32\dllcache\ntkrpamp.exe
    - 2006-12-19 12:55 . 2009-02-06 16:49 2057728 g:\windows\system32\dllcache\ntkrnlpa.exe
    + 2006-12-19 12:55 . 2009-08-04 13:13 2057728 g:\windows\system32\dllcache\ntkrnlpa.exe
    + 2006-12-19 14:15 . 2009-08-04 13:58 2136064 g:\windows\system32\dllcache\ntkrnlmp.exe
    - 2006-12-19 14:15 . 2009-02-06 17:22 2136064 g:\windows\system32\dllcache\ntkrnlmp.exe
    + 2009-08-13 00:45 . 2009-06-09 15:06 1871872 g:\windows\system32\dllcache\mstscax.dll
    + 2006-11-08 05:06 . 2009-07-10 13:42 1315328 g:\windows\system32\dllcache\msoe.dll
    + 2007-01-04 13:36 . 2009-08-29 08:08 5940224 g:\windows\system32\dllcache\mshtml.dll
    + 2007-05-09 20:09 . 2009-08-29 08:08 1985536 g:\windows\system32\dllcache\iertutil.dll
    + 2006-03-02 23:47 . 2004-07-17 18:35 1326080 g:\windows\ServicePackFiles\i386\webfldrs.msi
    + 2008-07-30 03:40 . 2008-07-30 03:40 1720824 g:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
    + 2008-07-29 22:47 . 2008-07-29 22:47 1054208 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 1364992 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
    + 2008-07-29 22:47 . 2008-07-29 22:47 1064448 g:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
    + 2008-07-30 03:40 . 2008-07-30 03:40 1548280 g:\windows\Microsoft.NET\Framework\v3.5\csc.exe
    + 2008-12-05 23:35 . 2008-12-05 23:35 1736528 g:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
    + 2008-12-06 00:12 . 2008-12-06 00:12 5931008 g:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 1344000 g:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 1344000 g:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    - 2007-10-24 05:47 . 2007-10-24 05:47 1172472 g:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2008-07-25 15:17 . 2008-07-25 15:17 1172472 g:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2008-11-25 08:59 . 2008-11-25 08:59 2048000 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 5025792 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2008-11-25 08:59 . 2008-11-25 08:59 5242880 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 3149824 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 5062656 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2008-07-25 15:17 . 2008-07-25 15:17 2933248 g:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2009-08-08 03:51 . 2009-08-08 03:51 5812560 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2009-08-08 03:51 . 2009-08-08 03:51 4546560 g:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2008-07-25 15:16 . 2008-07-25 15:16 1163768 g:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    + 2005-03-24 23:35 . 2005-03-24 23:36 3177984 g:\windows\Installer\ffafe50.msi
    + 2005-04-27 02:25 . 2005-04-27 02:25 1832448 g:\windows\Installer\ee05ada.msi
    + 2009-06-28 00:45 . 2009-06-28 00:45 9680384 g:\windows\Installer\bc1208e.msp
    + 2004-08-08 23:40 . 2004-08-08 23:40 4862976 g:\windows\Installer\8a4e1.msi
    + 2004-11-29 01:20 . 2004-11-29 01:20 6049280 g:\windows\Installer\815e85.msi
    + 2006-01-01 19:05 . 2006-01-01 19:05 1476096 g:\windows\Installer\72111.msi
    + 2004-01-02 05:43 . 2004-01-02 05:43 1112064 g:\windows\Installer\6aed03.msi
    + 2009-04-01 00:28 . 2009-04-01 00:28 4733440 g:\windows\Installer\49c7113.msp
    + 2003-12-29 06:27 . 2003-12-29 06:27 1126400 g:\windows\Installer\483960.msi
    + 2005-10-21 21:57 . 2005-10-21 21:57 7417344 g:\windows\Installer\449b4.msi
    + 2005-11-09 00:48 . 2005-11-09 00:48 3459072 g:\windows\Installer\40846c.msi
    + 2005-11-09 00:47 . 2005-11-09 00:47 1166848 g:\windows\Installer\40836d.msi
    + 2005-11-09 00:46 . 2005-11-09 00:46 1067520 g:\windows\Installer\40829e.msi
    + 2009-02-27 18:00 . 2009-02-27 18:00 1633792 g:\windows\Installer\3ac1c93.msi
    + 2008-06-25 18:19 . 2008-06-25 18:19 2307072 g:\windows\Installer\396733.msi
    + 2004-12-05 05:58 . 2004-12-05 05:58 1206272 g:\windows\Installer\34bba.msi
    + 2009-02-14 01:29 . 2009-02-14 01:29 8070144 g:\windows\Installer\2f9fe44.msi
    + 2008-12-13 13:57 . 2008-12-13 13:57 8397824 g:\windows\Installer\2f9a0c9f.msp
    + 2008-07-29 23:26 . 2008-07-29 23:26 1043456 g:\windows\Installer\2f958d12.msp
    + 2008-07-30 00:37 . 2008-07-30 00:37 2679808 g:\windows\Installer\2f958d10.msp
    + 2008-07-30 01:15 . 2008-07-30 01:15 3697664 g:\windows\Installer\2f958d0e.msp
    + 2008-07-29 23:34 . 2008-07-29 23:34 1448448 g:\windows\Installer\2f958d0d.msp
    + 2008-07-30 00:22 . 2008-07-30 00:22 4137984 g:\windows\Installer\2f958d0c.msp
    + 2008-07-29 23:18 . 2008-07-29 23:18 3376640 g:\windows\Installer\2f958d0b.msp
    + 2008-07-29 21:45 . 2008-07-29 21:45 2543616 g:\windows\Installer\2f824f83.msp
    + 2008-07-29 21:29 . 2008-07-29 21:29 2926080 g:\windows\Installer\2f824f82.msp
    + 2008-07-29 21:41 . 2008-07-29 21:41 6487040 g:\windows\Installer\2f824f81.msp
    + 2008-07-29 21:39 . 2008-07-29 21:39 3403264 g:\windows\Installer\2f824f80.msp
    + 2008-07-29 21:43 . 2008-07-29 21:43 1013248 g:\windows\Installer\2f824f7e.msp
    + 2008-07-29 21:31 . 2008-07-29 21:31 6083072 g:\windows\Installer\2f824f7b.msp
    + 2005-01-31 16:01 . 2005-01-31 16:01 3982848 g:\windows\Installer\2f55bc.msp
    + 2009-04-05 15:24 . 2009-04-05 15:24 4467712 g:\windows\Installer\2d112e.msi
    + 2009-05-18 03:08 . 2009-05-18 03:08 1711616 g:\windows\Installer\2b2a4e4.msp
    + 2003-12-31 00:00 . 2003-12-31 00:00 3489280 g:\windows\Installer\1f52abb.msi
    + 2008-11-08 22:38 . 2008-11-08 22:38 4192256 g:\windows\Installer\1def2d40.msi
    + 2009-09-23 17:03 . 2009-09-23 17:03 4405248 g:\windows\Installer\194f262.msi
    + 2009-09-23 16:51 . 2009-09-23 16:51 1659392 g:\windows\Installer\194f0d0.msi
    + 2009-09-23 16:48 . 2009-09-23 16:48 9013760 g:\windows\Installer\194f0c5.msi
    + 2009-09-23 16:39 . 2009-09-23 16:39 1549312 g:\windows\Installer\194ee11.msi
    + 2009-09-23 16:36 . 2009-09-23 16:36 3310592 g:\windows\Installer\194edc6.msi
    + 2005-01-07 22:12 . 2005-01-07 22:12 6489600 g:\windows\Installer\18224e5.msi
    + 2004-08-15 02:31 . 2004-08-15 02:31 3113984 g:\windows\Installer\15bfb93b.msi
    + 2008-03-09 01:24 . 2008-03-09 01:24 1540096 g:\windows\Installer\11702a.msi
    + 2009-10-14 21:52 . 2009-07-03 17:09 1208832 g:\windows\ie8updates\KB974455-IE8\urlmon.dll
    + 2009-10-14 21:52 . 2009-07-19 13:18 5937152 g:\windows\ie8updates\KB974455-IE8\mshtml.dll
    + 2009-10-14 21:52 . 2009-07-03 17:09 1985536 g:\windows\ie8updates\KB974455-IE8\iertutil.dll
    + 2009-07-29 07:06 . 2009-04-30 21:22 1207808 g:\windows\ie8updates\KB972260-IE8\urlmon.dll
    + 2009-07-29 07:06 . 2009-05-13 05:15 5936128 g:\windows\ie8updates\KB972260-IE8\mshtml.dll
    + 2009-07-29 07:06 . 2009-04-30 21:22 1985024 g:\windows\ie8updates\KB972260-IE8\iertutil.dll
    + 2009-06-17 07:14 . 2009-03-08 08:34 1206784 g:\windows\ie8updates\KB969897-IE8\urlmon.dll
    + 2009-06-17 07:14 . 2009-03-08 08:41 5937152 g:\windows\ie8updates\KB969897-IE8\mshtml.dll
    + 2009-06-17 07:14 . 2009-03-08 08:32 1985024 g:\windows\ie8updates\KB969897-IE8\iertutil.dll
    + 2005-08-20 11:38 . 2005-12-10 19:51 2220544 g:\windows\Hewlett-Packard\Setup Files\HP Software Update\{BB4EE741-CA46-4345-A3B7-1AECBFAB0AFE}\HP Software Update.msi
    + 2005-03-02 00:59 . 2009-08-04 14:00 2180352 g:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2005-03-02 00:34 . 2009-08-04 13:13 2015744 g:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2005-03-02 00:34 . 2009-02-06 16:49 2015744 g:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2005-03-02 00:34 . 2009-02-06 16:49 2057728 g:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2005-03-02 00:34 . 2009-08-04 13:13 2057728 g:\windows\Driver Cache\i386\ntkrnlpa.exe
    - 2005-03-02 00:57 . 2009-02-06 17:22 2136064 g:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2005-03-02 00:57 . 2009-08-04 13:58 2136064 g:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2009-11-01 22:48 . 2009-11-01 22:48 1407488 g:\windows\Downloaded Installations\{EDE9D264-7633-4D24-937C-3EF34A7FA1D8}\HP Driver Diagnostics.msi
    + 2006-10-01 03:42 . 2006-10-01 03:42 7583232 g:\windows\Downloaded Installations\{DE4D9CD8-DF3F-427C-B4DD-CE88A635D3F8}\EA downloader.msi
    + 2007-06-05 17:24 . 2007-06-05 17:24 9517056 g:\windows\Downloaded Installations\{CB2127D1-E45E-4F74-A5AD-9BD46E2EADDF}\ScorePokerSetup.msi
    + 2005-10-21 22:23 . 2005-10-18 17:01 9935872 g:\windows\Downloaded Installations\{872653C6-5DDC-488B-B7C2-CF9E4D9335E5}\iTunes.msi
    + 2005-10-21 21:11 . 2005-09-16 14:15 9926144 g:\windows\Downloaded Installations\{78F4DFCE-1336-4027-BCB2-1A00C24A8653}\iTunes.msi
    + 2004-09-02 03:44 . 2004-09-18 05:02 2443264 g:\windows\Downloaded Installations\{29287C6F-0A9A-4FA7-9774-94A371E03DA1}\PS2 HD Handiness 0.70.msi
    + 2004-07-21 23:53 . 2004-07-21 23:53 2765512 g:\windows\Downloaded Installations\{22B4BF4A-0025-42D4-BB69-227405AD602F}\DriverMAGIC Pro Trial.msi
    + 2005-03-30 03:13 . 2005-03-31 00:18 5786624 g:\windows\Downloaded Installations\{0F5BF410-4D79-4DBE-AF54-C3271D47D4BD}\Microsoft AntiSpyware.msi
    + 2005-01-31 01:46 . 2005-01-31 02:02 8322048 g:\windows\Downloaded Installations\{04E5C73C-C298-4378-8215-E6B333FF453F}\pulver.Communicator.msi
    + 2009-10-14 22:32 . 2009-10-14 22:32 1105920 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f431bc9e7c51a50035c19abea4cbcaa2\WindowsLive.Writer.ApplicationFramework.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 2002432 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e79feaf99eadddc64c6612cefdb8d9e2\WindowsLive.Writer.CoreServices.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 2002432 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bf704776939a6c4d0fac5ad70099300b\WindowsLive.Writer.CoreServices.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 1105920 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\951375335aae58a5e5fd61e39414582b\WindowsLive.Writer.ApplicationFramework.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 6392832 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7e735c4d2b299eb78cf8cb2c70865978\WindowsLive.Writer.PostEditor.ni.dll
    + 2009-09-16 01:03 . 2009-09-16 01:03 6392832 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3b0b01354b3735e2165f4234b601692d\WindowsLive.Writer.PostEditor.ni.dll
    + 2009-10-14 22:18 . 2009-10-14 22:18 3313664 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\204d6e5b335134f23ca37638b9227ecf\WindowsBase.ni.dll
    + 2009-08-12 07:54 . 2009-08-12 07:54 3313664 g:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\14cd5f4b61d35f9b76327d6be9853755\WindowsBase.ni.dll
    + 2009-08-12 08:02 . 2009-08-12 08:02 1049600 g:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\f3c7957351aec85f526a3350c9718b1e\UIAutomationClientsideProviders.ni.dll
    + 2009-10-14 22:24 . 2009-10-14 22:24 1049600 g:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\0f2ed6a204eb13841e99b77025464afc\UIAutomationClientsideProviders.ni.dll
    + 2009-08-12 07:53 . 2009-08-12 07:53 7868416 g:\windows\assembly\NativeImages_v2.0.50727_32\System\80978a322d7dd39f0a71be1251ae395a\System.ni.dll
    + 2009-10-14 22:18 . 2009-10-14 22:18 7868416 g:\windows\assembly\NativeImages_v2.0.50727_32\System\3de5bd01124463d7862bd173af90bc83\System.ni.dll
    + 2009-08-12 08:01 . 2009-08-12 08:01 5450752 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\773a9786013451d3baaeff003dc4230f\System.Xml.ni.dll
    + 2009-10-14 22:24 . 2009-10-14 22:24 5450752 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5913d3f81e77194ec833991b1047a532\System.Xml.ni.dll
    + 2009-10-14 22:38 . 2009-10-14 22:38 1356288 g:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\fa48917b13629d8effa80dd4a2f2973d\System.WorkflowServices.ni.dll
    + 2009-08-12 08:11 . 2009-08-12 08:11 1356288 g:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\ac1750e78d79520dcf19195772eff1b6\System.WorkflowServices.ni.dll
    + 2009-08-12 08:11 . 2009-08-12 08:11 1908224 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\d265da36954fcb4cb7ad5adc693ea0f2\System.Workflow.Runtime.ni.dll
    + 2009-10-14 22:37 . 2009-10-14 22:37 1908224 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\6fe66ee6f3c81996bc148f1ebe7ec030\System.Workflow.Runtime.ni.dll
    + 2009-10-14 22:37 . 2009-10-14 22:37 4514304 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\9d0b61f2f1ebdc300bd970f594c422ef\System.Workflow.ComponentModel.ni.dll
    + 2009-08-12 08:11 . 2009-08-12 08:11 4514304 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\693a8fbe6f7ad6e4e429052da4317e59\System.Workflow.ComponentModel.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 2992640 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\cc99fbbac0b6e4e9ca62093e49b0c16b\System.Workflow.Activities.ni.dll
    + 2009-10-14 22:37 . 2009-10-14 22:37 2992640 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\65328898148a720d394f802f192fc2a0\System.Workflow.Activities.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 1840640 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\ea07ac791bb5cb9f83679e3dd1a0c0cc\System.Web.Services.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 1840640 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b57bb002a655920cbfa2bee29d1e22b7\System.Web.Services.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 2209280 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\81197e32ec931f439b3114e9031b65d6\System.Web.Mobile.ni.dll
    + 2009-10-14 22:37 . 2009-10-14 22:37 2209280 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\29e2f8b1fb691ced973acf49fcee6ec1\System.Web.Mobile.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 2403328 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\981dea02bc63c0c083e335adf9018788\System.Web.Extensions.ni.dll
    + 2009-08-12 08:10 . 2009-08-12 08:10 2403328 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\7f64c9d25471b72e1e957bdfe67947c8\System.Web.Extensions.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 1917440 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\99594bae1d022502925f5b9dfcdaae9a\System.Speech.ni.dll
    + 2009-08-12 08:09 . 2009-08-12 08:09 1917440 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\63cf639b6e0a3c25c1643c85016e7422\System.Speech.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 1706496 g:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\e182695d05ea57257568bc5f3208aca7\System.ServiceModel.Web.ni.dll
    + 2009-08-12 08:09 . 2009-08-12 08:09 1706496 g:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\340cad17fe57947eacbc8fa2cea780da\System.ServiceModel.Web.ni.dll
    + 2009-10-14 22:28 . 2009-10-14 22:28 2338304 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\67ad55827f2542552b576170f0a7dc56\System.Runtime.Serialization.ni.dll
    + 2009-08-12 08:04 . 2009-08-12 08:04 2338304 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\034c91b133dee73d452652c52767b5ea\System.Runtime.Serialization.ni.dll
    + 2009-10-14 22:23 . 2009-10-14 22:23 1035264 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\e5313735a40c0800f116e27fba4754db\System.Printing.ni.dll
    + 2009-08-12 08:01 . 2009-08-12 08:01 1035264 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\646ab52eef343380aa002c220dc31e13\System.Printing.ni.dll
    + 2009-10-14 22:28 . 2009-10-14 22:28 1056768 g:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c3b18fef5c6dc3bcdbe5df699fd21a55\System.IdentityModel.ni.dll
    + 2009-08-12 08:04 . 2009-08-12 08:04 1056768 g:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c2de8479e54852f56996f79bc93acb13\System.IdentityModel.ni.dll
    + 2009-10-14 22:22 . 2009-10-14 22:22 1587200 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\abb2ac7e08bee026f857d8fa36f9fe6f\System.Drawing.ni.dll
    + 2009-08-12 08:01 . 2009-08-12 08:01 1587200 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3da96ee075bab9202626ae44c18d226c\System.Drawing.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 1116672 g:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f47ebb9db460874b1bcbfc391dc970b1\System.DirectoryServices.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 1116672 g:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\543aced762f6b0c3f8e037955941afc6\System.DirectoryServices.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 1801216 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c94a427baa7683f4221b91f90c18461b\System.Deployment.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 1801216 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\a6b58624486714fa71e5e35186850ff0\System.Deployment.ni.dll
    + 2009-08-12 07:59 . 2009-08-12 07:59 6616576 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c70731047b0022638b3f9fb158948a03\System.Data.ni.dll
    + 2009-10-14 22:21 . 2009-10-14 22:21 6616576 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\694c07365e0fd6bba0bc304d4d2404a7\System.Data.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 2510336 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\826b09ab0d0e36f4d631b4cd335df511\System.Data.SqlXml.ni.dll
    + 2009-10-14 22:31 . 2009-10-14 22:31 2510336 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\272152f0cc139490729e215611a4b244\System.Data.SqlXml.ni.dll
    + 2009-08-12 08:08 . 2009-08-12 08:08 1328128 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\956a513dcbd44d5a6801840ef2b0b47b\System.Data.Services.ni.dll
    + 2009-10-14 22:35 . 2009-10-14 22:35 1328128 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\112a48e34620a0210eb850040da8a31b\System.Data.Services.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 1115136 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\ffa1018e8022964eb51025c2c6d8727a\System.Data.OracleClient.ni.dll
    + 2009-09-16 01:04 . 2009-09-16 01:04 1115136 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\283ecfbaa6a6fab76c8b544a4a89d5ce\System.Data.OracleClient.ni.dll
    + 2009-10-14 22:21 . 2009-10-14 22:21 2516480 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\32788c58ff9f8324460604cf1fe7681b\System.Data.Linq.ni.dll
    + 2009-08-12 08:00 . 2009-08-12 08:00 2516480 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\0bbec79460b1137df5313f9baf7b246f\System.Data.Linq.ni.dll
    + 2009-10-14 22:35 . 2009-10-14 22:35 9924096 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\9012cac7819660f61f1c69cf8e4f2ccf\System.Data.Entity.ni.dll
    + 2009-08-12 08:07 . 2009-08-12 08:07 9924096 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6479f975b105808a8d9e7a7fdc762551\System.Data.Entity.ni.dll
    + 2009-10-14 22:21 . 2009-10-14 22:21 2295296 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\c0a42d2ad8a4078040b334f6770ea11f\System.Core.ni.dll
    + 2009-08-12 07:59 . 2009-08-12 07:59 2295296 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\47d87251e93256c635eb73403b8db33e\System.Core.ni.dll
    + 2009-10-14 22:20 . 2009-10-14 22:20 2128896 g:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\954685c29689d2a6126ceca1fd55e904\ReachFramework.ni.dll
    + 2009-08-12 07:59 . 2009-08-12 07:59 2128896 g:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4bfb3048bf200a6a8592d1b4ba861a7f\ReachFramework.ni.dll
    + 2009-10-14 22:20 . 2009-10-14 22:20 1657856 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a3a6f52ce1d09a7bdccc8e7fc664792d\PresentationUI.ni.dll
    + 2009-08-12 07:59 . 2009-08-12 07:59 1657856 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\6bafb1a2a73794ddb9761cb321c9e7e2\PresentationUI.ni.dll
    + 2009-10-14 22:18 . 2009-10-14 22:18 1451008 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\f906701365083c1473db31519147e263\PresentationBuildTasks.ni.dll
    + 2009-08-12 07:53 . 2009-08-12 07:53 1451008 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\e634bc4c4a00635a0a254febab0e2e2c\PresentationBuildTasks.ni.dll
    + 2009-10-14 22:34 . 2009-10-14 22:34 1712128 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6eee9b772b6d12d3dbd82f118c2ab2e5\Microsoft.VisualBasic.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 1712128 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\1c86afc399d0fdd8e069266ffbe748d1\Microsoft.VisualBasic.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 1093120 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f19e9b439636d0744597fff1331cad04\Microsoft.Transactions.Bridge.ni.dll
    + 2009-08-12 08:05 . 2009-08-12 08:05 1093120 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6b2f62f5e981913fce1d223f645d9ddf\Microsoft.Transactions.Bridge.ni.dll
    + 2009-08-12 08:09 . 2009-08-12 08:09 2332160 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b261961046545831aa60963e84905968\Microsoft.JScript.ni.dll
    + 2009-10-14 22:36 . 2009-10-14 22:36 2332160 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\5b1af7b5be24c7ace065fe1c81c2b650\Microsoft.JScript.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 1620992 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\bd241492d96db39f20e758c13c845033\Microsoft.Build.Tasks.ni.dll
    + 2009-08-12 08:06 . 2009-08-12 08:06 1966080 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a47100d8f4574bed2d49d83d0ab8964e\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 1620992 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\9eec1cc7ac37e0c7f3205e8156149c5a\Microsoft.Build.Tasks.ni.dll
    + 2009-10-14 22:34 . 2009-10-14 22:34 1966080 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\28c0730288453d57d5dcd62903c4d31b\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2009-08-12 08:05 . 2009-08-12 08:05 1888768 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6cfe582681724965fb817e8ece5f0909\Microsoft.Build.Engine.ni.dll
    + 2009-10-14 22:33 . 2009-10-14 22:33 1888768 g:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5dd4f58999eed37c12aee7ea9f9863ac\Microsoft.Build.Engine.ni.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 1245184 g:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2009-10-14 22:08 . 2009-10-14 22:09 3149824 g:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-10-14 22:09 . 2009-10-14 22:09 2048000 g:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 1630208 g:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 1138688 g:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
    + 2009-10-14 22:07 . 2009-10-14 22:07 5025792 g:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-08-12 07:55 . 2009-08-12 07:55 1277952 g:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2009-08-12 07:53 . 2009-08-12 07:53 5931008 g:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2009-10-14 22:06 . 2009-10-14 22:07 5062656 g:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-08-12 07:31 . 2009-08-12 07:31 2879488 g:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
    + 2009-08-12 07:53 . 2009-08-12 07:53 5283840 g:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2009-10-14 22:05 . 2009-10-14 22:05 5242880 g:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 2933248 g:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2009-08-12 07:27 . 2009-08-12 07:27 4210688 g:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2009-10-14 22:08 . 2009-10-14 22:08 4546560 g:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
  • edited November 2009
    g:\windows\$NtUninstallwmp11$\wmploc.dll
    - 2007-06-27 07:14 . 2004-09-22 23:46 1589760 g:\windows\$NtUninstallwmp11$\wmpencen.dll
    - 2007-06-27 07:14 . 2006-04-29 10:07 5533696 g:\windows\$NtUninstallwmp11$\wmp.dll
    - 2007-06-27 07:10 . 2006-12-07 06:40 2362184 g:\windows\$NtUninstallWMFDist11$\wmvcore.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 1509376 g:\windows\$NtUninstallWMFDist11$\wmvadve.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 1181944 g:\windows\$NtUninstallWMFDist11$\wmvadvd.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 1116160 g:\windows\$NtUninstallWMFDist11$\wmsdmoe2.dll
    - 2007-06-27 07:10 . 2004-09-22 23:46 1027072 g:\windows\$NtUninstallWMFDist11$\wmnetmgr.dll
    + 2009-08-14 11:58 . 2007-05-16 15:12 1314816 g:\windows\$NtUninstallKB973354$\msoe.dll
    + 2009-07-18 05:30 . 2008-12-20 22:43 1287680 g:\windows\$NtUninstallKB971633$\quartz.dll
    + 2009-09-09 07:09 . 2008-06-18 10:03 2458112 g:\windows\$NtUninstallKB968816_WM9$\wmvcore.dll
    + 2009-06-17 07:03 . 2009-02-09 10:19 1846272 g:\windows\$NtUninstallKB968537$\win32k.sys
    + 2009-08-14 12:00 . 2006-11-13 06:02 1866240 g:\windows\$NtUninstallKB956744$\mstscax.dll
    + 2007-03-05 03:07 . 2002-07-01 21:38 1325568 g:\windows\$NtServicePackUninstall$\webfldrs.msi
    + 2009-07-10 22:54 . 2009-07-10 22:54 1315328 g:\windows\$hf_mig$\KB973354\SP3QFE\msoe.dll
    + 2009-08-13 00:44 . 2009-07-10 13:27 1315328 g:\windows\$hf_mig$\KB973354\SP3GDR\msoe.dll
    + 2009-08-13 00:44 . 2009-07-10 13:36 1315328 g:\windows\$hf_mig$\KB973354\SP2QFE\msoe.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 1208832 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\urlmon.dll
    + 2009-07-28 18:06 . 2009-07-19 13:17 5938176 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll
    + 2009-07-28 18:06 . 2009-07-03 17:06 1985536 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\iertutil.dll
    + 2009-06-03 19:12 . 2009-06-03 19:12 1291264 g:\windows\$hf_mig$\KB971633\SP3QFE\quartz.dll
    + 2009-06-03 19:09 . 2009-06-03 19:09 1291264 g:\windows\$hf_mig$\KB971633\SP3GDR\quartz.dll
    + 2009-06-03 19:24 . 2009-06-03 19:24 1291264 g:\windows\$hf_mig$\KB971633\SP2QFE\quartz.dll
    + 2009-06-10 23:30 . 2009-04-30 21:22 1207808 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\urlmon.dll
    + 2009-06-10 23:30 . 2009-05-13 05:10 5936128 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll
    + 2009-06-10 23:30 . 2009-04-30 21:22 1985024 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\iertutil.dll
    + 2009-04-17 10:50 . 2009-04-17 10:50 1847808 g:\windows\$hf_mig$\KB968537\SP3QFE\win32k.sys
    + 2009-04-17 12:26 . 2009-04-17 12:26 1847168 g:\windows\$hf_mig$\KB968537\SP3GDR\win32k.sys
    + 2009-04-17 10:09 . 2009-04-17 10:09 1847936 g:\windows\$hf_mig$\KB968537\SP2QFE\win32k.sys
    + 2009-08-13 00:45 . 2009-06-09 15:21 2067968 g:\windows\$hf_mig$\KB956744\SP3QFE\lhmstscx.dll
    + 2009-06-10 13:19 . 2009-06-10 13:19 2066432 g:\windows\$hf_mig$\KB956744\SP3GDR\lhmstscx.dll
    + 2009-08-13 00:45 . 2009-06-09 14:53 2067968 g:\windows\$hf_mig$\KB956744\SP2QFE\lhmstscx.dll
    + 2004-09-22 23:46 . 2009-07-14 03:43 10841088 g:\windows\system32\wmp.dll
    + 2005-05-13 14:43 . 2009-10-02 18:01 25198016 g:\windows\system32\MRT.exe
    + 2009-03-08 08:39 . 2009-08-29 08:08 11069440 g:\windows\system32\ieframe.dll
    + 2004-08-04 04:56 . 2009-07-14 03:43 10841088 g:\windows\system32\dllcache\wmp.dll
    + 2007-05-09 20:09 . 2009-08-29 08:08 11069440 g:\windows\system32\dllcache\ieframe.dll
    + 2007-10-23 23:16 . 2007-01-19 17:20 16633344 g:\windows\Installer\MSN Messenger 8.1.0178\MsnMsgs.Msi
    + 2004-07-25 18:13 . 2004-07-25 18:13 53031424 g:\windows\Installer\e4634.msp
    + 2004-10-24 19:09 . 2004-10-24 19:09 29674496 g:\windows\Installer\d4ca8.msi
    + 2007-07-25 22:37 . 2007-07-25 22:37 13135872 g:\windows\Installer\afdf5.msi
    + 2003-12-28 20:05 . 2003-12-28 20:05 26283520 g:\windows\Installer\9cf14a.msi
    + 2005-04-14 06:37 . 2005-04-14 06:37 19210240 g:\windows\Installer\54c681c.msp
    + 2004-11-27 17:46 . 2004-11-27 17:46 14385664 g:\windows\Installer\3632109.msi
    + 2008-12-13 14:21 . 2008-12-13 14:21 10473472 g:\windows\Installer\2f9a0caf.msp
    + 2009-08-15 00:32 . 2009-08-15 00:32 11110912 g:\windows\Installer\21d256f.msp
    + 2009-09-23 07:01 . 2009-09-23 07:01 15709696 g:\windows\Installer\18639009.msp
    + 2009-09-16 00:59 . 2009-09-16 00:59 15706112 g:\windows\Installer\16f685.msp
    + 2009-10-14 21:52 . 2009-07-19 22:48 11067392 g:\windows\ie8updates\KB974455-IE8\ieframe.dll
    + 2009-07-29 07:06 . 2009-04-30 21:22 11064832 g:\windows\ie8updates\KB972260-IE8\ieframe.dll
    + 2009-06-17 07:14 . 2009-03-08 08:39 11063808 g:\windows\ie8updates\KB969897-IE8\ieframe.dll
    + 2007-07-29 19:32 . 2007-07-29 19:48 35758592 g:\windows\Downloaded Installations\{FCEE301D-01FA-4811-9567-366F2D06D70A}\Personal Colour Viewer.msi
    + 2006-01-01 18:49 . 2006-01-01 18:52 11814464 g:\windows\Downloaded Installations\{F160293E-0E0F-4845-AECA-36FC14A86925}\ACDSee 7.0.msi
    + 2005-10-21 20:54 . 2005-10-21 21:52 35885568 g:\windows\Downloaded Installations\{B9C0ED57-3C59-4B31-9AE9-50E12D0357DD}\iPod for Windows 2005-09-23.msi
    + 2005-03-24 23:37 . 2005-03-24 23:37 12406272 g:\windows\Downloaded Installations\{97F709BD-5B08-4007-B4AE-08C6277EDCC5}\GameShadow.msi
    + 2007-02-11 22:54 . 2007-02-11 22:54 10851212 g:\windows\Downloaded Installations\{8F9F97E4-045F-475F-AC5F-215316834C11}\GameShadow.msi
    + 2003-12-28 17:17 . 2006-01-01 19:03 12506904 g:\windows\Downloaded Installations\{4F2720AC-0516-495E-AA54-793C39767899}\ACDSee 5.0 PowerPack.msi
    + 2009-08-12 07:56 . 2009-08-12 07:56 12216320 g:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP97C.tmp\PresentationCore.dll
    + 2009-10-14 22:24 . 2009-10-14 22:24 12430848 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2ea8d76f015817db1607075812b555f\System.Windows.Forms.ni.dll
    + 2009-08-12 08:01 . 2009-08-12 08:01 12430848 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\63406259e94d5c0ff5b79401dfe113ce\System.Windows.Forms.ni.dll
    + 2009-10-14 22:32 . 2009-10-14 22:32 11796992 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\5cea03cfb008f2eac1439a9905467f37\System.Web.ni.dll
    + 2009-08-12 08:09 . 2009-08-12 08:09 11796992 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\3963ce03d445a8619abbf388d590134b\System.Web.ni.dll
    + 2009-08-12 08:04 . 2009-08-12 08:04 17317888 g:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\4146033013edebd7e0cb604e504ebfee\System.ServiceModel.ni.dll
    + 2009-10-14 22:30 . 2009-10-14 22:30 17317888 g:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\06d6eab93282d2b136a377bd50b7c5a9\System.ServiceModel.ni.dll
    + 2009-08-12 08:00 . 2009-08-12 08:00 10683392 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8ee220bc3cce4f7bbd7818946519ed7f\System.Design.ni.dll
    + 2009-10-14 22:22 . 2009-10-14 22:22 10683392 g:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8b82e08c008924d51833cb0884bcbfc5\System.Design.ni.dll
    + 2009-08-12 07:58 . 2009-08-12 07:58 14327808 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96e710f47c601cba3f2348a8d11ddede\PresentationFramework.ni.dll
    + 2009-10-14 22:20 . 2009-10-14 22:20 14327808 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\58c7ac6b6054038dc9346d7ec8e32b4c\PresentationFramework.ni.dll
    + 2009-08-12 07:57 . 2009-08-12 07:57 12216320 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\956375d487cbef36165b3250030e3574\PresentationCore.ni.dll
    + 2009-10-14 22:19 . 2009-10-14 22:19 12216320 g:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\94badbd64df59de7da249f71da38b1c2\PresentationCore.ni.dll
    + 2009-10-14 22:17 . 2009-10-14 22:17 11486720 g:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
    + 2009-08-12 07:52 . 2009-08-12 07:52 11486720 g:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6d667f19d687361886990f3ca0f49816\mscorlib.ni.dll
    + 2009-08-14 11:59 . 2008-11-11 22:34 10838016 g:\windows\$NtUninstallKB973540_WM9L$\wmp.dll
    + 2009-07-28 18:06 . 2009-07-19 13:17 11068416 g:\windows\$hf_mig$\KB972260-IE8\SP3QFE\ieframe.dll
    + 2009-05-01 19:22 . 2009-05-01 19:22 11064832 g:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ieframe.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NBJ"="g:\program files\Ahead\Nero BackItUp\NBJ.exe" [2005-02-10 1937408]
    "swg"="g:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-09 39408]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NeroFilterCheck"="g:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
    "Google Desktop Search"="g:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-01-30 29744]
    "PSDrvCheck"="g:\windows\system32\PSDrvCheck.exe" [2003-11-10 406016]
    "ATICCC"="g:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
    "Adobe Reader Speed Launcher"="g:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
    "Google Quick Search Box"="g:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-05-09 68592]
    "Malwarebytes Anti-Malware (reboot)"="c:\malwarebytes' anti-malware\mbam.exe" [2009-09-10 1312080]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]
    "iTunesHelper"="g:\utilities\iTunes\iTunesHelper.exe" [2009-09-21 305440]
    "TkBellExe"="g:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-02 198160]
    "SunJavaUpdateSched"="g:\program files\Java\jre6\bin\jusched.exe" [2009-07-31 149280]

    g:\documents and settings\All Users\Start Menu\Programs\Startup\
    Event Planner Reminder 2009.lnk - g:\windows\Installer\{C4609419-C11E-4CE6-B369-F3F8A7DDD94C}\Shortcut_EventPlan_E2FBA8F7F7FD4C5EAA7D652BB0CAAA9D.exe [2009-2-13 237568]

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
    "NoSetActiveDesktop"= 1 (0x1)
    "NoActiveDesktopChanges"= 1 (0x1)

    [HKLM\~\startupfolder\G:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
    backup=g:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

    [HKLM\~\startupfolder\G:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Image Zone Fast Start.lnk]
    backup=g:\windows\pss\HP Image Zone Fast Start.lnkCommon Startup

    [HKLM\~\startupfolder\G:^Documents and Settings^Randy^Start Menu^Programs^Startup^Poppy for Windows.lnk]
    backup=g:\windows\pss\Poppy for Windows.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "C-DillaCdaC11BA"=2 (0x2)

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "g:\\Utilities\\InterVideo\\DVD7\\WinDVD.exe"=
    "g:\\Utilities\\uTorrent\\uTorrent.exe"=
    "g:\\WINDOWS\\system32\\ftp.exe"=
    "g:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "g:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "g:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
    "g:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "g:\\Utilities\\iTunes\\iTunes.exe"=
    "c:\\Mirc\\mirc.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "5757:TCP"= 5757:TCP:Superforge4
    "5757:UDP"= 5757:UDP:Superforge4

    R1 kid_sys;Kensington Input Devices Class filter driver;g:\windows\system32\drivers\KID_SYS.sys [11/21/2004 12:41 AM 11920]
    R2 DLPortIO;DLPORTIO;g:\windows\DLPORTIO.sys [01/12/2008 10:43 AM 3584]
    R2 fssfltr;FssFltr;g:\windows\system32\drivers\fssfltr_tdi.sys [09/15/2009 7:58 PM 54752]
    R3 Dvd43;Dvd43;g:\windows\system32\drivers\Dvd43.sys [10/30/2007 8:30 PM 26048]
    R3 EPPSCSIx;EPPSCSI Driver;g:\windows\system32\drivers\eppscan.sys [01/31/2004 10:57 PM 105124]
    R3 SMC1211;SMC EZ Card 10/100 PCI (SMC1211 Series) NT 5.0 Driver;g:\windows\system32\drivers\SMC1211.sys [07/11/2001 10:06 AM 23153]
    S0 xmasbus;xmasbus;g:\windows\system32\DRIVERS\xmasbus.sys --> g:\windows\system32\DRIVERS\xmasbus.sys [?]
    S0 xmasscsi;xmasscsi;g:\windows\system32\Drivers\xmasscsi.sys --> g:\windows\system32\Drivers\xmasscsi.sys [?]
    S1 1e735214;1e735214;g:\windows\system32\drivers\1e735214.sys --> g:\windows\system32\drivers\1e735214.sys [?]
    S1 9c0c92a3;9c0c92a3;g:\windows\system32\drivers\9c0c92a3.sys [04/03/2009 10:30 AM 0]
    S1 oxmf;OXPCI Bus enumerator;g:\windows\system32\drivers\oxmf.sys [03/04/2007 12:53 PM 15872]
    S1 oxser;OX16C95x Serial port driver;g:\windows\system32\drivers\oxser.sys [03/04/2007 12:53 PM 50048]
    S2 gupdate1ca100c8fc860aa;Google Update Service (gupdate1ca100c8fc860aa);g:\program files\Google\Update\GoogleUpdate.exe [07/29/2009 12:22 AM 133104]
    S2 NetFxUpdate_v1.1.4322;Microsoft .NET Framework v1.1.4322 Update;g:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe --> g:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe [?]
    S2 SOFTLOK;SOFTLOK; [x]
    S3 DtvAudio;DtvAudio;g:\windows\system32\drivers\DtvAudio.sys [09/27/2005 8:02 PM 9216]
    S3 DtvVideo;DtvVideo;g:\windows\system32\drivers\DtvVideo.sys [09/27/2005 8:02 PM 23680]
    S3 fsssvc;Windows Live Family Safety Service;g:\program files\Windows Live\Family Safety\fsssvc.exe [08/05/2009 9:48 PM 704864]
    S3 GoogleDesktopManager-093007-112848;Google Desktop Manager 5.5.709.30344;g:\program files\Google\Google Desktop Search\GoogleDesktop.exe [05/06/2007 1:04 AM 29744]
    S3 ntxpgp;Gravis Xperience GamePort device driver;g:\windows\system32\drivers\ntxpgp.sys [11/21/2004 12:41 AM 240188]
    S3 Oxmfuf;Filter driver for OX16PCI954 ports;g:\windows\system32\drivers\oxmfuf.sys [03/04/2007 12:53 PM 4992]
    S3 VPNET;DTVNet Ethernet Controller;g:\windows\system32\drivers\DTVNet.sys [09/27/2005 8:01 PM 18192]

    --- Other Services/Drivers In Memory ---

    *NewlyCreated* - MBR
    *Deregistered* - mbr
    .
    Contents of the 'Scheduled Tasks' folder

    2009-10-31 g:\windows\Tasks\AppleSoftwareUpdate.job
    - g:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

    2009-11-02 g:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - g:\program files\Google\Update\GoogleUpdate.exe [2009-07-29 05:22]

    2009-11-02 g:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - g:\program files\Google\Update\GoogleUpdate.exe [2009-07-29 05:22]
    .
    .
    Supplementary Scan
    .
    uStart Page = hxxp://www.nfohump.com/index.php?switchto=nfos&menu=sections&sectionid=18
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    uInternet Settings,ProxyOverride = *.local
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: &eBay Search
    IE: E&xport to Microsoft Excel - g:\utilit~1\MICROS~1\Office10\EXCEL.EXE/3000
    DPF: DirectAnimation Java Classes - file://g:\windows\Java\classes\dajava.cab
    DPF: Garmin Communicator Plug-In - hxxps://my.garmin.com/mygarmin/m/GarminAxControl.CAB
    DPF: Microsoft XML Parser for Java - file://g:\windows\Java\classes\xmldso.cab
    DPF: {7530bfb8-7293-4d34-9923-61a11451afc5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
    DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} - hxxps://plugins.valueactive.eu/flashax/iefax.cab
    FF - ProfilePath - g:\documents and settings\Randy\Application Data\Mozilla\Firefox\Profiles\default.kps\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
    FF - prefs.js: browser.search.selectedEngine - Bing
    FF - prefs.js: browser.startup.homepage - hxxp://www.torrentscan.com/
    FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
    FF - component: g:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
    FF - plugin: c:\divx\DivX Player\npDivxPlayerPlugin.dll
    FF - plugin: c:\divx\DivX Web Player\npdivx32.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin2.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin3.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin4.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin5.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin6.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin7.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
    FF - plugin: c:\program files\real\realplayer\Netscape6\nppl3260.dll
    FF - plugin: c:\program files\real\realplayer\Netscape6\nprjplug.dll
    FF - plugin: c:\program files\real\realplayer\Netscape6\nprpjplug.dll
    FF - plugin: g:\program files\Microsoft\Office Live\npOLW.dll
    FF - plugin: g:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
    FF - plugin: g:\program files\Mozilla Firefox\plugins\NPSFDMGR.dll
    FF - plugin: g:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: g:\utilities\DivX\DivX Content Uploader\npUpload.dll
    FF - plugin: g:\utilities\iTunes\Mozilla Plugins\npitunes.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - g:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

    ---- FIREFOX POLICIES ----
    g:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
    .
    - - - - ORPHANS REMOVED - - - -

    SafeBoot-AVG Anti-Spyware Driver
    SafeBoot-AVG Anti-Spyware Guard
    AddRemove-Google Earth Pro 4.2 - g:\windows\Google Earth Pro 4.2\uninstall.exe
    AddRemove-WinAVI Video Converter 9.09.0 - g:\windows\WinAVI Video Converter 9.0\uninstall.exe



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-11-01 22:30
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    LOCKED REGISTRY KEYS

    [HKEY_USERS\S-1-5-21-2000478354-1563985344-839522115-1003\Software\Microsoft\SystemCertificates\AddressBook*]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)

    [HKEY_USERS\S-1-5-21-2000478354-1563985344-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D77D8070-1B9B-3032-1EDE-A5E747C4FDE6}*]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)
    "abalkdoalmceibnldgbhcmjlhgafaoaied"=hex:65,62,61,6c,6e,66,68,69,65,70,68,62,
    68,6c,6d,6f,6d,66,6c,66,64,6f,6c,6f,63,62,6f,6e,62,66,63,6d,65,63,63,65,6e,\
    "bbalkdoalmceibnldgogdmoiopfhbfhfjkgh"=hex:61,62,6a,6d,65,64,65,6d,68,64,69,6d,
    68,69,63,68,6d,64,62,64,68,67,6b,6e,62,6f,65,68,69,65,69,6e,69,70,00,65

    [HKEY_USERS\S-1-5-21-2000478354-1563985344-839522115-1003\Software\ðÿ*×o|9*8*5*3**àý8«T€Èÿ*¨
    £‚ÿÿÿÿ¨šƒ|ào|\Main Window]
    "WP"=hex:2c,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,
    ff,ff,ff,ff,ff,84,00,00,00,ae,00,00,00,01,03,00,00,05,03,00,00

    [HKEY_USERS\S-1-5-21-2000478354-1563985344-839522115-1003\Software\ðÿ*×o|`Ýì*þá|*ðý8«T€Èÿ* Mþÿÿÿÿ¨šƒ|ào|]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)

    [HKEY_USERS\S-1-5-21-2000478354-1563985344-839522115-1003\Software\ðÿ*×o|`Ýì*þá|*ðý8«T€Èÿ* Mþÿÿÿÿ¨šƒ|ào|\Main Window]
    "WP"=hex:2c,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,
    ff,ff,ff,ff,ff,16,00,00,00,1d,00,00,00,93,02,00,00,74,02,00,00

    [HKEY_USERS\S-1-5-21-2000478354-1563985344-839522115-1003\Software\ðÿ*×o|`Ýù*þá|*Àý8«T€Èÿ* @¢‚ÿÿÿÿ¨šƒ|ào|]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)

    [HKEY_USERS\S-1-5-21-2000478354-1563985344-839522115-1003\Software\ðÿ*×o|`Ýþá|*@ý8«T€Èÿ*Èð%ƒÿÿÿÿ¨šƒ|ào|]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)

    [HKEY_USERS\S-1-5-21-2000478354-1563985344-839522115-1003\Software\ðÿ*×o|`Ýþá|*ðý8«T€Èÿ*ˆ*ÿÿÿÿÿ¨šƒ|ào|]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)
    .
    DLLs Loaded Under Running Processes

    - - - - - - - > 'winlogon.exe'(672)
    g:\windows\system32\Ati2evxx.dll
    .
    Completion time: 2009-11-02 22:36
    ComboFix-quarantined-files.txt 2009-11-02 03:35
    ComboFix2.txt 2009-05-15 01:07
    ComboFix3.txt 2009-05-08 01:24
    ComboFix4.txt 2008-04-20 21:46
    ComboFix5.txt 2009-05-17 13:22

    Pre-Run: 1,870,653,952 bytes free
    Post-Run: 2,042,145,792 bytes free

    Current=2 Default=2 Failed=4 LastKnownGood=5 Sets=1,2,3,4,5
    - - End Of File - - 7CECF4D05FFF1F9D6AD1D0A34DFAB94D
  • edited November 2009
    Sorry for the long Combo Fix but thats what I got on the log.......


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:59:03 PM, on 11/01/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    G:\WINDOWS\System32\smss.exe
    G:\WINDOWS\system32\winlogon.exe
    G:\WINDOWS\system32\services.exe
    G:\WINDOWS\system32\lsass.exe
    G:\WINDOWS\system32\Ati2evxx.exe
    G:\WINDOWS\system32\svchost.exe
    G:\WINDOWS\System32\svchost.exe
    G:\WINDOWS\system32\svchost.exe
    G:\WINDOWS\system32\spoolsv.exe
    G:\WINDOWS\system32\Ati2evxx.exe
    G:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    G:\Program Files\Bonjour\mDNSResponder.exe
    G:\WINDOWS\System32\GEARSec.exe
    G:\WINDOWS\System32\HPZipm12.exe
    G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    G:\utilities\iTunes\iTunesHelper.exe
    G:\Program Files\Common Files\Real\Update_OB\realsched.exe
    G:\WINDOWS\system32\ctfmon.exe
    G:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    G:\WINDOWS\System32\svchost.exe
    G:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    G:\WINDOWS\system32\devldr32.exe
    G:\Utilities\iPod\bin\iPodService.exe
    G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    G:\WINDOWS\explorer.exe
    G:\Program Files\Internet Explorer\iexplore.exe
    G:\Program Files\Internet Explorer\iexplore.exe
    G:\Utilities\Hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nfohump.com/index.php?switchto=nfos&menu=sections&sectionid=18
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: (no name) - {02478d38-c3f9-4efb-9b51-7695eca05670} - (no file)
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - G:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - G:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - G:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - G:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - G:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - G:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "G:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [PSDrvCheck] G:\WINDOWS\system32\PSDrvCheck.exe
    O4 - HKLM\..\Run: [ATICCC] "G:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Google Quick Search Box] "G:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "G:\utilities\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "G:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [NBJ] "G:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [swg] "G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O4 - Global Startup: Event Planner Reminder 2009.lnk = ?
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\UTILIT~1\MICROS~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - G:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - G:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - G:\Program Files\PokerStars\PokerStarsUpdate.exe
    O16 - DPF: Garmin Communicator Plug-In - https://my.garmin.com/mygarmin/m/GarminAxControl.CAB
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - G:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-24-0.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase4009.cab
    O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/win/QuickTimeInstaller.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136916728625
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1160562902890
    O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
    O16 - DPF: {7530bfb8-7293-4d34-9923-61a11451afc5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
    O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} (DDRevision Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15021/CTPID.cab
    O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Control) - https://plugins.valueactive.eu/flashax/iefax.cab
    O16 - DPF: {FAE74270-E5EE-49C3-B816-EA8B4D55F38F} (H2hPool Control) - http://mirror.worldwinner.com//games/v47/h2hpool/h2hpool.cab
    O23 - Service: Apple Mobile Device - Apple Inc. - G:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Bonjour Service - Apple Inc. - G:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: GEARSecurity - GEAR Software - G:\WINDOWS\System32\GEARSec.exe
    O23 - Service: Google Desktop Manager 5.5.709.30344 (GoogleDesktopManager-093007-112848) - Google - G:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: Google Update Service (gupdate1ca100c8fc860aa) (gupdate1ca100c8fc860aa) - Google Inc. - G:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - G:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: iPod Service - Apple Inc. - G:\Utilities\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - G:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Microsoft .NET Framework v1.1.4322 Update (NetFxUpdate_v1.1.4322) - Unknown owner - G:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe (file missing)
    O23 - Service: Pml Driver HPZ12 - HP - G:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - G:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    --
    End of file - 9899 bytes
  • edited November 2009
    Hello again....Just to let you no that I had to uninstall Comodo anti virus to get Combo Fix to run properely...I am reinstalling Comodo anti virus. Thanks
  • edited November 2009
    Please go HERE to run Panda ActiveScan 2.0
    • Click the big green Scan now button
    • If it wants to install an ActiveX component allow it
    • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
    • Once the scan is completed, please hit the notepad icon next to the text Export to:
    • Save it to a convenient location such as your Desktop
    • Post the contents of the ActiveScan.txt in your next reply, along with a fresh HijackThis log.
  • edited November 2009
    Panda ActiveScan 2.0 actually locks up my computer while scanning.
    Is there another scanner I can use....thanks alot
  • edited November 2009
  • edited November 2009
    hmmmm....it seems that Kaspersky scanner did not work either. It did not scan as far as Acticescan 2.0.....left over night and got about 20% into scan. Where does that leave us now? thanks so much for the trouble.
  • edited November 2009
    here is a fresh highjack this log
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:15:27 PM, on 11/06/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    G:\WINDOWS\System32\smss.exe
    G:\WINDOWS\system32\winlogon.exe
    G:\WINDOWS\system32\services.exe
    G:\WINDOWS\system32\lsass.exe
    G:\WINDOWS\system32\Ati2evxx.exe
    G:\WINDOWS\system32\svchost.exe
    C:\Comodo\COMODO Internet Security\cmdagent.exe
    G:\WINDOWS\system32\svchost.exe
    G:\WINDOWS\system32\svchost.exe
    G:\WINDOWS\system32\spoolsv.exe
    G:\WINDOWS\system32\Ati2evxx.exe
    G:\WINDOWS\Explorer.EXE
    G:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    G:\Program Files\Bonjour\mDNSResponder.exe
    G:\WINDOWS\System32\GEARSec.exe
    G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    G:\utilities\iTunes\iTunesHelper.exe
    G:\Program Files\Common Files\Real\Update_OB\realsched.exe
    G:\Program Files\Java\jre6\bin\jusched.exe
    G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    G:\WINDOWS\system32\ctfmon.exe
    G:\WINDOWS\system32\devldr32.exe
    G:\Program Files\Java\jre6\bin\jqs.exe
    C:\Hallmark Card Studio 2009\Planner\PLNRnote.exe
    G:\WINDOWS\System32\HPZipm12.exe
    G:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    G:\WINDOWS\System32\svchost.exe
    G:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    G:\Utilities\iPod\bin\iPodService.exe
    G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Comodo\COMODO Internet Security\cfp.exe
    G:\Utilities\uTorrent\uTorrent.exe
    G:\Program Files\Internet Explorer\iexplore.exe
    G:\Program Files\Internet Explorer\iexplore.exe
    G:\Utilities\Hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nfohump.com/index.php?switchto=nfos&menu=sections&sectionid=18
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: (no name) - {02478d38-c3f9-4efb-9b51-7695eca05670} - (no file)
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - G:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - G:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - G:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - G:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - G:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - G:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "G:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [PSDrvCheck] G:\WINDOWS\system32\PSDrvCheck.exe
    O4 - HKLM\..\Run: [ATICCC] "G:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Google Quick Search Box] "G:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "G:\utilities\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "G:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Comodo\COMODO Internet Security\cfp.exe" -h
    O4 - HKCU\..\Run: [NBJ] "G:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [swg] "G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Event Planner Reminder 2009.lnk = ?
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\UTILIT~1\MICROS~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - G:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - G:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - G:\Program Files\PokerStars\PokerStarsUpdate.exe
    O16 - DPF: Garmin Communicator Plug-In - https://my.garmin.com/mygarmin/m/GarminAxControl.CAB
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - G:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-24-0.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase4009.cab
    O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/win/QuickTimeInstaller.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136916728625
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1160562902890
    O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
    O16 - DPF: {7530bfb8-7293-4d34-9923-61a11451afc5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
    O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
    O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} (DDRevision Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15021/CTPID.cab
    O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Control) - https://plugins.valueactive.eu/flashax/iefax.cab
    O16 - DPF: {FAE74270-E5EE-49C3-B816-EA8B4D55F38F} (H2hPool Control) - http://mirror.worldwinner.com//games/v47/h2hpool/h2hpool.cab
    O20 - AppInit_DLLs: G:\WINDOWS\system32\guard32.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - G:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Bonjour Service - Apple Inc. - G:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Comodo\COMODO Internet Security\cmdagent.exe
    O23 - Service: GEARSecurity - GEAR Software - G:\WINDOWS\System32\GEARSec.exe
    O23 - Service: Google Desktop Manager 5.5.709.30344 (GoogleDesktopManager-093007-112848) - Google - G:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: Google Update Service (gupdate1ca100c8fc860aa) (gupdate1ca100c8fc860aa) - Google Inc. - G:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - G:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: iPod Service - Apple Inc. - G:\Utilities\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - G:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Microsoft .NET Framework v1.1.4322 Update (NetFxUpdate_v1.1.4322) - Unknown owner - G:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe (file missing)
    O23 - Service: Pml Driver HPZ12 - HP - G:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - G:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    --
    End of file - 10644 bytes
  • edited November 2009
    OK how is your PC running now?
  • edited November 2009
    I find its still slow as when I use any of my browzer IE and or Firefox the red light on my computer lights up and takes forever to turn off, it seems as though the hard drive is accessing something, when the light turns off my browzer will pop up, and then I can use the internet.
  • edited November 2009
    OK, we will now do a deep search of your processes and files.

    Download avz4.zip from here
    Unzip it to your desktop to a folder named avz4
    Double click on AVZ.exe to run it.
    Run an update by clicking the Auto Update button on the Right of the Log window:
    Click Start to begin the update

    Note: If you recieve an error message, chose a different source, then click Start again


    Start AVZ.
    Choose from the menu "File" => "Standard scripts " and mark the "Healing/Quarantine and Advanced System Investigation" check box.
    Click on the “Execute selected scripts”.
    Automatic scanning, healing and system check will be executed.
    A logfile (avz_sysinfo.htm) will be created and saved in the LOG folder in the AVZ directory as virusinfo_syscure.zip.
    It is necessary to reboot your machine, because AVZ might disturb some program operations (like antiviruses and firewall) during the system scan.
    All applications will work properly after the system restart.


    When restarted

    Start AVZ.
    Choose from the menu "File" => "Standard scripts " and mark the “Advanced System Investigation" check box.
    Click on the "Execute selected scripts".
    A system check will be automatically performed, and the created logfile (avz_sysinfo.htm) will be saved in the LOG folder in the AVZ directory as virusinfo_syscheck.zip.

    Attach the zip files to your next reply.
  • edited November 2009
    hello...

    here is the files from my AVZ LOG folder.

    find attached files
  • edited November 2009
    Sorry for the delay in response. I still don't see any malware. You may want to look into eliminating some of the programs you are running on background, or upgrade to better hardware components.

    It's time to remove ComboFix.

    Go to to Start > Run
    Type in box

    combofix /u

    Note: the space between the X and the /u

    Press Enter.

    This command will:

    Delete the following:
    ComboFix and its associated files and folders.
    VundoFix backups, if present
    The C:\Deckard folder, if present
    The C:_OtMoveIt folder, if present

    Reset the clock settings.
    Hide file extensions, if required.
    Hide System/Hidden files, if required.
    Reset System Restore.


    Even if you have no more queries, I would appreciate if you can reply once more to this thread so that I will be able to have this archived. Thanks. :)
Sign In or Register to comment.