מציג תוצאות 1 עד 16 מתוך 16

אשכול: שגיאה | ב- ESE כניראה תמונה בפנים

  1. 31/07/09, 14:18 #1
    ProJecT^X ProJecT^X מנותק גורו
    תאריך הצטרפות
    26/07/05
    שם פרטי
    אושרי
    הודעות
    2,480
    קיבל לייק
    1 פעמים

    שגיאה | ב- ESE כניראה תמונה בפנים

    קיצר הרבה זמן לא הייתי פה :| עידכנתי את ה- ESE שלי והכל ניכנס לשרת אחרי דקה הוא יוצא לי מהטקטיקל אם שגיאה כזאת


    http://img338.imageshack.us/i/30970660.jpg/

    עוד קישור אם לא עובד לכםם...

    http://i30.tinypic.com/10eqaop.jpg

    תודה לעוזרים :]
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  2. 31/07/09, 15:25 #2
    הסמל האישי של p1rate
    p1rate p1rate מנותק ותיק
    תאריך הצטרפות
    05/02/06
    שם פרטי
    ריי
    הודעות
    1,166
    קיבל לייק
    0 פעמים
    האיש שברקע הוא שר i know u want me ? כן ?
    ובקשר לבעיה של ה- ESE אין לי מושג אחי חכה מישהו שמבין יבוא ויגיד לך מה הבעיה
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  3. 31/07/09, 15:58 #3
    ProJecT^X ProJecT^X מנותק גורו
    תאריך הצטרפות
    26/07/05
    שם פרטי
    אושרי
    הודעות
    2,480
    קיבל לייק
    1 פעמים
    ציטוט במקור פורסם על ידי p1rate צפה בהודעה
    האיש שברקע הוא שר i know u want me ? כן ?
    ובקשר לבעיה של ה- ESE אין לי מושג אחי חכה מישהו שמבין יבוא ויגיד לך מה הבעיה
    כן..
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  4. 01/08/09, 03:29 #4
    הסמל האישי של Almightyz
    Almightyz Almightyz מנותק תואר כבוד
    תאריך הצטרפות
    26/07/06
    שם פרטי
    ۞
    הודעות
    6,157
    קיבל לייק
    30 פעמים
    הכל טוב אושרי?
    http://ese-protect.de/homepage/forum...&n=last#bottom
    תעקוב.
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  5. 01/08/09, 12:12 #5
    הסמל האישי של Idan
    Idan Idan מנותק מנהל האתר
    תאריך הצטרפות
    22/12/04
    שם פרטי
    עידן
    הודעות
    10,019
    קיבל לייק
    573 פעמים
    פרסם פה לוג של HijackThis
    - לוג של התוכנה HijackThis
    תתקינו את התוכנה ואחרי שנכנסתם לתוכנה לחצו על "Do a system scan and save a logfile", זה לוקח בדיוק כמה שניות לעשות את זה ובסוף צריך להיפתח לכם חלון של Notepad עם כל הפרטים שצריכים, תשמרו את זה ותצרפו להודעה שלכם. (לא לעשות שום דבר מעבר לזה)
    http://download.bleepingcomputer.com...HJTInstall.exe
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  6. 01/08/09, 16:03 #6
    הסמל האישי של Shayz
    Shayz Shayz מנותק גורו
    תאריך הצטרפות
    07/01/09
    שם פרטי
    שי
    הודעות
    2,648
    קיבל לייק
    5 פעמים
    זה pitbull !
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  7. 01/08/09, 17:31 #7
    ProJecT^X ProJecT^X מנותק גורו
    תאריך הצטרפות
    26/07/05
    שם פרטי
    אושרי
    הודעות
    2,480
    קיבל לייק
    1 פעמים
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 17:30:31, on 01/08/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\ICQ6.5\ICQ.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\oshri\lwqppo.exe \s,C:\Documents and Settings\oshri\nvuf.exe \s
    O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: ???? ?????? ?? Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
    O4 - HKLM\..\Run: [dewbw] C:\WINDOWS\system32\dewbw.exe \u
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [regdiit] C:\WINDOWS\system32\winxp.exe
    O4 - HKLM\..\Run: [CTFMON] C:\WINDOWS\system32\wscript.exe /E:vbs C:\WINDOWS\system32\winjpg.jpg
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Xfire.lnk = D:\Program Files\Xfire\xfire.exe
    O4 - Startup: ???? ??? ?? OneNote 2007 ?- Launcher.lnk
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: ??? ?? OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: ?&?? ?? OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.systemrequirementslab.com...reqlab_srl.cab
    O16 - DPF: {3BF72F68-72D8-461D-A884-329D936C5581} (Image Uploader Combo Control) - http://www.mekusharim.co.il/ImageUploader5.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0353F056-2EA8-4DA5-A09B-0A7052CF07B7}: NameServer = 194.90.1.5 212.143.212.143
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0353F056-2EA8-4DA5-A09B-0A7052CF07B7}: NameServer = 194.90.1.5 212.143.212.143
    O17 - HKLM\System\CS2\Services\Tcpip\..\{0353F056-2EA8-4DA5-A09B-0A7052CF07B7}: NameServer = 212.143.212.143 194.90.1.5
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O21 - SSODL: mRxLFJRAkzgfm - {B0C0163E-1A6A-BC94-3412-BADCA1F60DF1} - C:\WINDOWS\system32\ozy.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    O24 - Desktop Component 0: (no name) - http://tbn3.google.com/images?q=tbn:...08/12/fat2.jpg
    O24 - Desktop Component 1: (no name) - http://tbn3.google.com/images?q=tbn:...1553f74115.jpg
    --
    End of file - 6778 bytes




    ==========================
    לא הבנתי איך הדבר הזה קשור אבל שיהיה..
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  8. 01/08/09, 22:05 #8
    הסמל האישי של Idan
    Idan Idan מנותק מנהל האתר
    תאריך הצטרפות
    22/12/04
    שם פרטי
    עידן
    הודעות
    10,019
    קיבל לייק
    573 פעמים
    נתחיל בזה שהמחשב שלך מפוצץ בוירוסים אם לא ידעת עד היום.
    ולגבי הטקטיקל, אני חושב שהתוכנה Ad Aware היא זאת שגורמת לחסימה של הקובץ, נסה לסגור אותה או להסיר אותה כי גם ככה זאת כבר לא אותה תוכנה טובה כמו פעם.

    ומה שאני אישית מציע לך לעשות עם התוכנה HijackThis הוא זה:
    כנס לתוכנה, תלחץ Do a system scan only

    תסמן ב-V את כל אלה:
    קוד:
    R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\oshri\lwqppo.exe \s,C:\Documents and Settings\oshri\nvuf.exe \s
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: ???? ?????? ?? Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [dewbw] C:\WINDOWS\system32\dewbw.exe \u
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [regdiit] C:\WINDOWS\system32\winxp.exe
O4 - HKLM\..\Run: [CTFMON] C:\WINDOWS\system32\wscript.exe /E:vbs C:\WINDOWS\system32\winjpg.jpg
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Startup: Xfire.lnk = D:\Program Files\Xfire\xfire.exe
O4 - Startup: ???? ??? ?? OneNote 2007 ?- Launcher.lnk
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ??? ?? OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: ?&?? ?? OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.systemrequirementslab.com...reqlab_srl.cab
O16 - DPF: {3BF72F68-72D8-461D-A884-329D936C5581} (Image Uploader Combo Control) - http://www.mekusharim.co.il/ImageUploader5.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O21 - SSODL: mRxLFJRAkzgfm - {B0C0163E-1A6A-BC94-3412-BADCA1F60DF1} - C:\WINDOWS\system32\ozy.dll
O24 - Desktop Component 0: (no name) - http://tbn3.google.com/images?q=tbn:...08/12/fat2.jpg
O24 - Desktop Component 1: (no name) - http://tbn3.google.com/images?q=tbn:...1553f74115.jpg
    תלחץ Fix Checked וחכה שזה יסיים להעיף הכל.
    תעשה ריסט למחשב, אחרי שעשית ריסט למחשב תעשה שוב פעם את הבדיקה הזאת רק שהפעם תבחר באפשרות "Do a system scan and save a logfile" ותביא לי לפה לוג חדש לאחר הניקוי.
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  9. 14/08/09, 15:13 #9
    ProJecT^X ProJecT^X מנותק גורו
    תאריך הצטרפות
    26/07/05
    שם פרטי
    אושרי
    הודעות
    2,480
    קיבל לייק
    1 פעמים
    קח אחי :


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:15:07, on 14/08/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: ???? ??? ?? OneNote 2007 ?- Launcher.lnk
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0353F056-2EA8-4DA5-A09B-0A7052CF07B7}: NameServer = 212.143.212.143 194.90.1.5
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0353F056-2EA8-4DA5-A09B-0A7052CF07B7}: NameServer = 212.143.212.143 194.90.1.5
    O21 - SSODL: mRxLFJRAkzgfm - {B0C0163E-1A6A-BC94-3412-BADCA1F60DF1} - C:\WINDOWS\system32\ozy.dll
    O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    --
    End of file - 1686 bytes



    ניכנסתי סתם שוב לטקטיקל וזה עושה את אותה שגיאה כמו בתמונה ששמתי פה |:
    נערך בפעם האחרונה על ידי ProJecT^X : 14/08/09 ב 15:21
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  10. 14/08/09, 17:16 #10
    הסמל האישי של Idan
    Idan Idan מנותק מנהל האתר
    תאריך הצטרפות
    22/12/04
    שם פרטי
    עידן
    הודעות
    10,019
    קיבל לייק
    573 פעמים
    כנס להתחל > הפעלה > תרשום CMD
    תכניס לשם את השורות הבאות:
    קוד:
    del C:\WINDOWS\system32\ozy.dll /q
del C:\WINDOWS\system32\winjpg.jpg /q
del C:\WINDOWS\system32\dewbw.exe /q
del "C:\Documents and Settings\oshri\*.exe" /q
rmdir %temp% /q /s
mkdir %temp%
sc delete npggsvc
    אחרי שהכנסת את כל הפקודות תעשה מקש ימני > סמן > תסמן את כל הטקסט עם המקש השמאלי של העכבר, ואחרי שסימנת תלחץ מקש ימני וזה יעתיק לך את הכל.
    אחרי שהעתקת תביא לפה את מה שזה רשם לך.

    בנוסף תשתמש גם ב-ComboFix.
    כאן תמצא הסבר מפורט איך להשתמש בזה: http://www.bleepingcomputer.com/comb...o-use-combofix
    אני מקווה שאין לך בעיה עם קצת אנגלית.
    אחרי שסיימת להשתמש ב-ComboFix תביא לכאן בבקשה גם את הלוג שלו.
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  11. 14/08/09, 19:11 #11
    ProJecT^X ProJecT^X מנותק גורו
    תאריך הצטרפות
    26/07/05
    שם פרטי
    אושרי
    הודעות
    2,480
    קיבל לייק
    1 פעמים
    C:\Documents and Settings\oshri>del C:\WINDOWS\system32\ozy.dll /q
    C:\WINDOWS\system32\ozy.dll
    The process cannot access the file because it is being used by another process.
    C:\Documents and Settings\oshri>del C:\WINDOWS\system32\winjpg.jpg /q
    Could Not Find C:\WINDOWS\system32\winjpg.jpg
    C:\Documents and Settings\oshri>del C:\WINDOWS\system32\dewbw.exe /q
    Could Not Find C:\WINDOWS\system32\dewbw.exe
    C:\Documents and Settings\oshri>del "C:\Documents and Settings\oshri\*.exe" /q
    Could Not Find C:\Documents and Settings\oshri\*.exe
    C:\Documents and Settings\oshri>rmdir %temp% /q /s
    C:\DOCUME~1\oshri\LOCALS~1\Temp\JET6FC.tmp - The process cannot access the file
    because it is being used by another process.
    C:\Documents and Settings\oshri>mkdir %temp%
    A subdirectory or file C:\DOCUME~1\oshri\LOCALS~1\Temp already exists.
    C:\Documents and Settings\oshri>sc delete npggsvc
    [SC] DeleteService SUCCESS
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  12. 14/08/09, 19:34 #12
    ProJecT^X ProJecT^X מנותק גורו
    תאריך הצטרפות
    26/07/05
    שם פרטי
    אושרי
    הודעות
    2,480
    קיבל לייק
    1 פעמים
    ComboFix
    קצת נירא ארוך אבל בטח תסתדר

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    C:\autorun.inf
    c:\documents and settings\oshri\Local Settings\Temporary Internet Files\_tm11.tmp
    c:\documents and settings\oshri\Local Settings\Temporary Internet Files\ijjistarter_verinfo.dat
    c:\documents and settings\oshri\Local Settings\Temporary Internet Files\stb06759.tmp
    c:\documents and settings\oshri\nvuf.exe
    c:\program files\Internet Saving Optimizer
    c:\program files\Internet Saving Optimizer\3.6.0.4470\_NPIEAddOn.dll
    c:\program files\Internet Saving Optimizer\3.6.0.4470\adwpx.exe
    c:\program files\Internet Saving Optimizer\3.6.0.4470\Data\config.md
    c:\program files\Internet Saving Optimizer\3.6.0.4470\FF\chrome.manifest
    c:\program files\Internet Saving Optimizer\3.6.0.4470\FF\chrome\content\NPAddOn.js
    c:\program files\Internet Saving Optimizer\3.6.0.4470\FF\chrome\content\NPAddOn.xul
    c:\program files\Internet Saving Optimizer\3.6.0.4470\FF\chrome\NPAddOn.jar
    c:\program files\Internet Saving Optimizer\3.6.0.4470\FF\components\NPFFAddOn.dll
    c:\program files\Internet Saving Optimizer\3.6.0.4470\FF\components\NPFFAddOn.xpt
    c:\program files\Internet Saving Optimizer\3.6.0.4470\FF\components\NPFFHelperComponent.js
    c:\program files\Internet Saving Optimizer\3.6.0.4470\FF\install.rdf
    c:\program files\Internet Saving Optimizer\3.6.0.4470\NPCommon.dll
    c:\program files\Internet Saving Optimizer\3.6.0.4470\unins000.dat
    c:\program files\Internet Saving Optimizer\3.6.0.4470\unins000.exe
    c:\program files\Media Access Startup
    c:\program files\Media Access Startup\1.5.3.850\_HPIEAddOn.dll
    c:\program files\Media Access Startup\1.5.3.850\Data\config.md
    c:\program files\Media Access Startup\1.5.3.850\FF\chrome.manifest
    c:\program files\Media Access Startup\1.5.3.850\FF\chrome\content\HPAddOn.js
    c:\program files\Media Access Startup\1.5.3.850\FF\chrome\content\HPAddOn.xul
    c:\program files\Media Access Startup\1.5.3.850\FF\chrome\HPAddOn.jar
    c:\program files\Media Access Startup\1.5.3.850\FF\components\HPFFAddOn.dll
    c:\program files\Media Access Startup\1.5.3.850\FF\components\HPFFAddOn.xpt
    c:\program files\Media Access Startup\1.5.3.850\FF\components\HPFFHelperComponent.js
    c:\program files\Media Access Startup\1.5.3.850\FF\install.rdf
    c:\program files\Media Access Startup\1.5.3.850\HPCommon.dll
    c:\program files\Media Access Startup\1.5.3.850\hppx.exe
    c:\program files\Media Access Startup\1.5.3.850\MAHelper.exe
    c:\program files\Media Access Startup\1.5.3.850\unins000.dat
    c:\program files\Media Access Startup\1.5.3.850\unins000.exe
    c:\windows\system32\azton.mt
    c:\windows\system32\ctfmon .exe
    c:\windows\system32\kr_done1
    c:\windows\system32\nerocheck .exe
    c:\windows\system32\secupdat.dat
    c:\windows\system32\winxp.exe
    D:\Autorun.inf
    .
    ((((((((((((((((((((((((( Files Created from 2009-07-14 to 2009-08-14 )))))))))))))))))))))))))))))))
    .
    2009-08-12 19:01 . 2009-08-12 19:01 33920 ----a-w- c:\windows\system32\drivers\orxakowk.sys
    2009-08-08 20:38 . 2009-08-08 20:38 -------- d-----w- c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer
    2009-08-08 20:38 . 2009-08-08 20:38 -------- d-----w- c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup
    2009-08-08 20:37 . 2009-08-08 20:37 -------- d-----w- c:\program files\System Search Dispatcher
    2009-08-08 20:35 . 2009-08-08 20:35 -------- d-----w- c:\program files\DoubleD
    2009-08-08 20:34 . 2009-08-08 20:34 -------- d-----w- c:\documents and settings\oshri\Local Settings\Application Data\DoubleD
    2009-07-23 12:10 . 2009-07-23 12:10 -------- d-----w- c:\program files\RoeiBajayo
    2009-07-23 12:10 . 2009-07-23 12:10 195408 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
    2009-07-23 12:09 . 2009-07-23 12:09 -------- d-----w- c:\windows\system32\XPSViewer
    2009-07-23 12:08 . 2009-07-23 12:08 -------- d-----w- c:\program files\Reference Assemblies
    2009-07-23 12:07 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
    2009-07-23 12:02 . 2009-07-23 12:02 -------- d-----w- c:\program files\MSXML 6.0
    2009-07-21 16:41 . 2009-07-21 16:41 -------- d-----w- C:\tmpDownload
    2009-07-17 15:42 . 2009-07-21 07:29 -------- d-----w- c:\program files\AVIConverter
    2009-07-17 15:25 . 2009-07-17 20:04 -------- d-----w- C:\Download
    2009-07-17 15:25 . 2009-07-21 07:20 -------- d-----w- C:\YoutubeMusicDownloader
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-08-12 19:01 . 2009-04-16 05:22 -------- d-----w- c:\program files\ICQToolbar
    2009-08-12 10:05 . 2009-04-16 05:16 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-08-08 20:59 . 2009-05-16 13:18 -------- d-----w- c:\program files\Google
    2009-07-30 19:57 . 2009-06-18 15:06 -------- d-----w- c:\documents and settings\oshri\Application Data\Winamp
    2009-07-23 12:11 . 2009-04-14 21:27 97272 ----a-w- c:\documents and settings\oshri\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-07-23 12:09 . 2009-05-23 18:06 -------- d-----w- c:\program files\MSBuild
    2009-07-17 01:03 . 2009-04-19 01:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2009-07-04 19:42 . 2009-04-16 16:36 -------- d-----w- c:\program files\Common Files\InstallShield
    2009-07-04 19:08 . 2009-07-04 19:08 -------- d-----w- c:\documents and settings\oshri\Application Data\teamspeak2
    2009-06-28 11:13 . 2009-06-28 11:13 4608 ----a-w- c:\windows\system32\w95inf32.dll
    2009-06-28 11:13 . 2009-06-28 11:13 2272 ----a-w- c:\windows\system32\w95inf16.dll
    2009-06-28 10:59 . 2009-06-28 10:59 -------- d-----w- c:\program files\directx
    2009-06-18 15:09 . 2009-06-18 15:06 -------- d-----w- c:\program files\Winamp
    2009-06-16 14:55 . 2004-08-03 22:56 119808 ----a-w- c:\windows\system32\t2embed.dll
    2009-06-16 14:55 . 2001-08-23 12:00 82432 ----a-w- c:\windows\system32\fontsub.dll
    2009-06-03 19:27 . 2004-08-03 22:56 1290752 ----a-w- c:\windows\system32\quartz.dll
    2009-05-26 13:21 . 2009-05-26 13:21 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
    2009-05-26 13:06 . 2009-05-26 13:06 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
    .
    ------- Sigcheck -------
    [-] 2008-04-14 00:12 14336 27C6D03BCDB8CFEB96B716F3D8BE3E18 c:\windows\SoftwareDistribution\Download\e9500597a78495f397efb821e37bf356\svchost.exe
    [-] 2004-08-03 22:56 17408 D41D8CD98F00B204E9800998ECF8427E c:\windows\system32\svchost.exe
    [-] 2008-04-14 00:12 507904 ED0EF0A136DEC83DF69F04118870003E c:\windows\SoftwareDistribution\Download\e9500597a78495f397efb821e37bf356\winlogon.exe
    [-] 2004-08-03 22:56 506368 D41D8CD98F00B204E9800998ECF8427E c:\windows\system32\winlogon.exe
    [-] 2007-06-13 10:23 1033216 D41D8CD98F00B204E9800998ECF8427E c:\windows\explorer.exe
    [7] 2007-06-13 11:26 1033216 7712DF0CDDE3A5AC89843E61CD5B3658 c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
    [-] 2004-08-03 22:56 1034752 ABCD84209178AF7EA0DC0DD05DCE7092 c:\windows\$NtUninstallKB938828$\explorer.exe
    [7] 2004-08-03 22:56 1032192 A0732187050030AE399B241436565E64 c:\windows\SoftwareDistribution\Download\2bc0b3c55e0c166e04844934d1c7c342\backup\explorer.exe
    [-] 2008-04-14 00:12 1033728 12896823FB95BFB3DC9B46BCAEDC9923 c:\windows\SoftwareDistribution\Download\e9500597a78495f397efb821e37bf356\explorer.exe
    [7] 2007-06-13 10:23 1033216 97BD6515465659FF8F3B7BE375B2EA87 c:\windows\system32\dllcache\explorer.exe
    [7] 2009-02-06 10:22 110592 4712531AB7A01B7EE059853CA17D39BD c:\windows\$hf_mig$\KB956572\SP2QFE\services.exe
    [7] 2009-02-06 11:11 110592 65DF52F5B8B6E9BBD183505225C37315 c:\windows\$hf_mig$\KB956572\SP3GDR\services.exe
    [7] 2009-02-06 11:06 110592 020CEAAEDC8EB655B6506B8C70D53BB6 c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
    [7] 2004-08-03 22:56 108032 C6CE6EEC82F187615D1002BB3BB50ED4 c:\windows\$NtUninstallKB956572$\services.exe
    [-] 2008-04-14 00:12 108544 0E776ED5F7CC9F94299E70461B7B8185 c:\windows\SoftwareDistribution\Download\e9500597a78495f397efb821e37bf356\services.exe
    [-] 2009-02-06 17:14 113152 D41D8CD98F00B204E9800998ECF8427E c:\windows\system32\services.exe
    [-] 2004-08-03 22:56 13312 D7EAB96F074B593C3FC7139C6EB818BB c:\windows\SoftwareDistribution\Download\2bc0b3c55e0c166e04844934d1c7c342\backup\lsass.exe
    [-] 2008-04-14 00:12 13312 BF2466B3E18E970D8A976FB95FC1CA85 c:\windows\SoftwareDistribution\Download\e9500597a78495f397efb821e37bf356\lsass.exe
    [-] 2004-08-03 22:56 14848 D41D8CD98F00B204E9800998ECF8427E c:\windows\system32\lsass.exe
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    "mRxLFJRAkzgfm"= {B0C0163E-1A6A-BC94-3412-BADCA1F60DF1} - c:\windows\system32\ozy.dll [2009-03-21 32768]
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk *\0aswBoot.exe /A:* /L:English /KBD:2
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\orxakowk.sys]
    @="Driver"
    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
    "c:\\Program Files\\ICQ6.5\\ICQ.exe"=
    "c:\\ijji\\ENGLISH\\u_gunz.exe"=
    "c:\\WINDOWS\\Downloaded Program Files\\PLauncher.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "d:\\Ketamine-v10[1] Rc2\\Ketamine-v10.RC2\\emule.exe"=
    "d:\\eMule_0.47c_-_TCMatic_v3dUPLODED.PINI_A.OR.BLAUGRANA\\eMule 0.47c - TCMatic v3dUPLODED.PINI_A.OR.BLAUGRANA\\emule.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
    "d:\\Ketamine-v10[1] Rc2\\Ketamine-v10[1] Rc2\\Ketamine-v10.RC2\\emule.exe"=
    "c:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
    "d:\\TacticalOps.By.ONmyS3LF.Www.Satla-Zone.Com\\TacticalOps\\TacticalOps\\System\\TacticalOps.exe"=
    "c:\\Documents and Settings\\oshri\\lwqppo.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    R0 orxakowk;orxakowk;c:\windows\system32\drivers\orxakowk.sys [12/08/2009 21:01 33920]
    .
    Contents of the 'Scheduled Tasks' folder
    2009-08-14 c:\windows\Tasks\WGASetup.job
    - c:\windows\system32\KB905474\wgasetup.exe [2009-05-08 20:18]
    .
    - - - - ORPHANS REMOVED - - - -
    HKLM-Run-regdiit - c:\windows\system32\winxp.exe

    .
    ------- Supplementary Scan -------
    .
    uStart Page = about:blank
    uInternet Connection Wizard,ShellNext = iexplore
    IE: &????? ?? Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    .
    **************************************************************************
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-08-14 19:31
    Windows 5.1.2600 Service Pack 2 NTFS
    scanning hidden processes ...
    scanning hidden autostart entries ...
    scanning hidden files ...
    scan completed successfully
    hidden files: 0
    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    [HKEY_USERS\S-1-5-21-436374069-879983540-839522115-1003\Software\Microsoft\  M*i*c*r*o*s*o*f*t* *M*a*n*a*g*e*m*e*n*t* *C*o*n*s*o*l*e*\Recent File List]
    "File1"="c:\\WINDOWS\\system32\\devmgmt.msc"
    "File2"="c:\\WINDOWS\\system32\\compmgmt.msc"
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    - - - - - - - > 'explorer.exe'(3220)
    c:\windows\system32\msi.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\nvsvc32.exe
    c:\program files\Analog Devices\SoundMAX\SMAgent.exe
    c:\windows\system32\wdfmgr.exe
    .
    **************************************************************************
    .
    Completion time: 2009-08-14 19:34 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-08-14 17:34
    Pre-Run: 4,870,258,688 bytes free
    Post-Run: 5,443,276,800 bytes free
    WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
    197 --- E O F --- 2009-07-17 01:03
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  13. 14/08/09, 21:20 #13
    הסמל האישי של Idan
    Idan Idan מנותק מנהל האתר
    תאריך הצטרפות
    22/12/04
    שם פרטי
    עידן
    הודעות
    10,019
    קיבל לייק
    573 פעמים
    קח שוב פעם את הקובץ ComboFix.exe, שמור אותו בשולחן עבודה.
    תיצור קובץ txt בשם CFScript (דגש על זה שהשם יהיה תקין!) ותכניס אליו את השורות הבאות ותשמור.
    קוד:
    KillAll::

File::
c:\windows\system32\ozy.dll
c:\windows\system32\drivers\orxakowk.sys

Driver::
orxakowk
orxakowk.sys

Folder::
c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup
c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"mRxLFJRAkzgfm"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\orxakowk.sys]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Documents and Settings\\oshri\\lwqppo.exe"=-
    שמור אותו גם בשולחן עבודה ביחד עם ComboFix.exe ולאחר מכן תגרור אותו לתוך ComboFix.exe וזה יריץ לך אותו.
    כמו בתמונה הזאת:


    עכשיו תמשיך עם הפעולות כמו שעשית בפעם שעברה ותביא לאחר מכן את הלוג החדש לפה.
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  14. 20/08/09, 22:08 #14
    ProJecT^X ProJecT^X מנותק גורו
    תאריך הצטרפות
    26/07/05
    שם פרטי
    אושרי
    הודעות
    2,480
    קיבל לייק
    1 פעמים
    FILE ::
    "c:\windows\system32\drivers\orxakowk.sys"
    "c:\windows\system32\ozy.dll"
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\config.md
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\ipdata.md
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090808-223859.921.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090808-224909.921.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090808-224950.218.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090808-225238.875.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090808-230051.671.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-114350.328.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-115331.296.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-125448.437.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-130108.203.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-144347.625.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-144717.593.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-170243.843.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-172353.281.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-205305.531.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-210315.484.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090809-231215.687.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-105752.453.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-121557.234.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-122026.421.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-133616.484.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-134036.890.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-150846.500.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-153459.328.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-153729.828.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-154011.171.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-184206.500.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-184408.562.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-190354.781.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-191502.218.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-201236.906.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-205743.312.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090810-214746.406.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090811-171919.096.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090811-185012.517.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090811-191657.908.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090811-215420.455.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090811-215613.187.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090811-232049.549.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090811-232220.378.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090812-123328.531.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090812-123415.343.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090812-135553.625.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090812-150859.078.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\NP_20090812-210131.593.log
    c:\documents and settings\oshri\Local Settings\Application Data\Internet Saving Optimizer\3.6.0.4470\rstatus.md
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\config.md
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090808-223809.109.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090808-223859.468.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090808-224909.437.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090808-224950.062.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090808-225238.468.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090808-230051.609.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-114350.187.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-115330.703.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-125448.265.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-130107.984.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-144347.312.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-144717.546.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-170243.796.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-172353.234.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-205305.484.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-210315.421.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090809-231215.531.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-105752.421.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-121557.203.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-122026.390.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-133616.171.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-134036.859.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-150846.218.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-153458.765.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-153729.484.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-154011.140.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-184206.468.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-184408.531.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-190354.765.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-191502.140.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-201236.875.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-205743.281.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090810-214746.359.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090811-171919.034.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090811-185012.486.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090811-191657.799.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090811-215420.392.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090811-215613.015.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090811-232049.518.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090811-232220.331.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090812-123328.484.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090812-123415.312.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090812-135553.593.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090812-150859.015.log
    c:\documents and settings\oshri\Local Settings\Application Data\Media Access Startup\1.5.3.850\HJHP_20090812-210131.562.log
    c:\windows\system32\drivers\orxakowk.sys
    c:\windows\system32\ozy.dll
    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    -------\Legacy_ORXAKOWK
    -------\Service_orxakowk

    ((((((((((((((((((((((((( Files Created from 2009-07-20 to 2009-08-20 )))))))))))))))))))))))))))))))
    .
    2009-08-15 01:09 . 2009-08-15 01:10 -------- d-----w- C:\cdedcc39ba9ed6caaeaf12fa6339
    2009-08-15 01:00 . 2009-08-15 01:00 -------- d-----w- c:\windows\ServicePackFiles
    2009-08-08 20:37 . 2009-08-08 20:37 -------- d-----w- c:\program files\System Search Dispatcher
    2009-08-08 20:35 . 2009-08-08 20:35 -------- d-----w- c:\program files\DoubleD
    2009-08-08 20:34 . 2009-08-08 20:34 -------- d-----w- c:\documents and settings\oshri\Local Settings\Application Data\DoubleD
    2009-07-23 12:10 . 2009-07-23 12:10 -------- d-----w- c:\program files\RoeiBajayo
    2009-07-23 12:09 . 2009-08-15 01:10 -------- d-----w- c:\windows\system32\XPSViewer
    2009-07-23 12:08 . 2009-07-23 12:08 -------- d-----w- c:\program files\Reference Assemblies
    2009-07-23 12:07 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
    2009-07-23 12:02 . 2009-07-23 12:02 -------- d-----w- c:\program files\MSXML 6.0
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-08-20 13:39 . 2009-04-14 21:27 97272 ----a-w- c:\documents and settings\oshri\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-08-15 01:03 . 2009-04-19 01:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2009-08-12 19:01 . 2009-04-16 05:22 -------- d-----w- c:\program files\ICQToolbar
    2009-08-12 10:05 . 2009-04-16 05:16 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-08-08 20:59 . 2009-05-16 13:18 -------- d-----w- c:\program files\Google
    2009-08-05 09:11 . 2004-08-03 22:56 204800 ----a-w- c:\windows\system32\mswebdvd.dll
    2009-07-30 19:57 . 2009-06-18 15:06 -------- d-----w- c:\documents and settings\oshri\Application Data\Winamp
    2009-07-23 12:09 . 2009-05-23 18:06 -------- d-----w- c:\program files\MSBuild
    2009-07-21 07:29 . 2009-07-17 15:42 -------- d-----w- c:\program files\AVIConverter
    2009-07-17 18:55 . 2004-08-03 22:56 58880 ----a-w- c:\windows\system32\atl.dll
    2009-07-13 00:18 . 2004-08-03 22:56 233472 ----a-w- c:\windows\system32\wmpdxm.dll
    2009-07-04 19:42 . 2009-04-16 16:36 -------- d-----w- c:\program files\Common Files\InstallShield
    2009-07-04 19:08 . 2009-07-04 19:08 -------- d-----w- c:\documents and settings\oshri\Application Data\teamspeak2
    2009-06-28 11:13 . 2009-06-28 11:13 4608 ----a-w- c:\windows\system32\w95inf32.dll
    2009-06-28 11:13 . 2009-06-28 11:13 2272 ----a-w- c:\windows\system32\w95inf16.dll
    2009-06-28 10:59 . 2009-06-28 10:59 -------- d-----w- c:\program files\directx
    2009-06-26 16:18 . 2004-08-03 22:56 659456 ----a-w- c:\windows\system32\wininet.dll
    2009-06-26 16:18 . 2004-08-03 22:56 81920 ----a-w- c:\windows\system32\ieencode.dll
    2009-06-25 18:36 . 2004-08-03 22:56 95744 ----a-w- c:\windows\system32\mqsec.dll
    2009-06-25 18:36 . 2004-08-03 22:56 661504 ----a-w- c:\windows\system32\mqqm.dll
    2009-06-25 18:36 . 2004-08-03 22:56 517120 ----a-w- c:\windows\system32\mqsnap.dll
    2009-06-25 18:36 . 2004-08-03 22:56 48640 ----a-w- c:\windows\system32\mqupgrd.dll
    2009-06-25 18:36 . 2004-08-03 22:56 471552 ----a-w- c:\windows\system32\mqutil.dll
    2009-06-25 18:36 . 2004-08-03 22:56 47104 ----a-w- c:\windows\system32\mqdscli.dll
    2009-06-25 18:36 . 2004-08-03 22:56 225280 ----a-w- c:\windows\system32\mqoa.dll
    2009-06-25 18:36 . 2004-08-03 22:56 186880 ----a-w- c:\windows\system32\mqtrig.dll
    2009-06-25 18:36 . 2004-08-03 22:56 177152 ----a-w- c:\windows\system32\mqrt.dll
    2009-06-25 18:36 . 2004-08-03 22:56 16896 ----a-w- c:\windows\system32\mqise.dll
    2009-06-25 18:36 . 2004-08-03 22:56 138240 ----a-w- c:\windows\system32\mqad.dll
    2009-06-25 18:36 . 2004-08-03 22:56 123392 ----a-w- c:\windows\system32\mqrtdep.dll
    2009-06-25 08:44 . 2004-08-03 22:56 59392 ----a-w- c:\windows\system32\wdigest.dll
    2009-06-25 08:44 . 2004-08-03 22:56 56320 ----a-w- c:\windows\system32\secur32.dll
    2009-06-25 08:44 . 2004-08-03 22:56 168448 ----a-w- c:\windows\system32\schannel.dll
    2009-06-25 08:44 . 2004-08-03 22:56 724480 ----a-w- c:\windows\system32\lsasrv.dll
    2009-06-25 08:44 . 2004-08-03 22:56 298496 ----a-w- c:\windows\system32\kerberos.dll
    2009-06-25 08:44 . 2004-08-03 22:56 133632 ----a-w- c:\windows\system32\msv1_0.dll
    2009-06-22 11:49 . 2004-08-03 22:56 19968 ----a-w- c:\windows\system32\mqbkup.exe
    2009-06-22 11:49 . 2004-08-03 22:56 117248 ----a-w- c:\windows\system32\mqtgsvc.exe
    2009-06-22 11:49 . 2004-08-03 22:56 4608 ----a-w- c:\windows\system32\mqsvc.exe
    2009-06-22 11:48 . 2004-08-03 20:58 91776 ----a-w- c:\windows\system32\drivers\mqac.sys
    2009-06-22 11:34 . 2004-08-03 20:59 92544 ----a-w- c:\windows\system32\drivers\ksecdd.sys
    2009-06-16 14:55 . 2004-08-03 22:56 119808 ----a-w- c:\windows\system32\t2embed.dll
    2009-06-16 14:55 . 2001-08-23 12:00 82432 ----a-w- c:\windows\system32\fontsub.dll
    2009-06-12 11:50 . 2004-08-03 22:56 80896 ----a-w- c:\windows\system32\tlntsess.exe
    2009-06-12 11:50 . 2004-08-03 22:56 76288 ----a-w- c:\windows\system32\telnet.exe
    2009-06-10 14:21 . 2004-08-03 22:56 84992 ----a-w- c:\windows\system32\avifil32.dll
    2009-06-10 06:32 . 2004-08-03 22:56 132096 ----a-w- c:\windows\system32\wkssvc.dll
    2009-06-05 07:42 . 2009-04-14 19:54 655872 ----a-w- c:\windows\system32\mstscax.dll
    2009-06-03 19:27 . 2004-08-03 22:56 1290752 ----a-w- c:\windows\system32\quartz.dll
    2009-05-26 13:21 . 2009-05-26 13:21 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
    2009-05-26 13:06 . 2009-05-26 13:06 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
    .
    ((((((((((((((((((((((((((((( SnapShot@2009-08-14_17.31.08 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2004-08-03 22:56 . 2004-08-03 22:56 50176 c:\windows\system32\utilman.exe
    + 2004-08-03 22:56 . 2006-10-04 08:48 50176 c:\windows\system32\utilman.exe
    - 2004-08-03 22:56 . 2004-08-03 22:56 35840 c:\windows\system32\umandlg.dll
    + 2004-08-03 22:56 . 2006-10-04 13:33 35840 c:\windows\system32\umandlg.dll
    + 2009-04-17 01:00 . 2007-11-30 11:18 26488 c:\windows\system32\spupdsvc.exe
    - 2009-04-17 01:00 . 2008-07-09 07:38 26488 c:\windows\system32\spupdsvc.exe
    + 2009-07-23 12:08 . 2008-07-06 12:06 89088 c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
    - 2009-04-17 01:00 . 2008-07-08 13:02 17272 c:\windows\system32\spmsg.dll
    + 2009-04-17 01:00 . 2007-11-30 11:18 17272 c:\windows\system32\spmsg.dll
    + 2008-07-29 17:59 . 2008-07-29 17:59 43544 c:\windows\system32\PresentationHostProxy.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 39424 c:\windows\system32\pngfilt.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 39424 c:\windows\system32\pngfilt.dll
    + 2001-08-23 12:00 . 2009-08-15 01:15 68360 c:\windows\system32\perfc009.dat
    + 2004-08-03 22:56 . 2006-10-04 08:48 53760 c:\windows\system32\narrator.exe
    - 2004-08-03 22:56 . 2004-08-03 22:56 53760 c:\windows\system32\narrator.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 15360 c:\windows\system32\mui\0409\mscorees.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 15360 c:\windows\system32\mui\0409\mscorees.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 83968 c:\windows\system32\mscories.dll
    + 2004-08-03 22:56 . 2006-10-04 08:48 72704 c:\windows\system32\magnify.exe
    - 2004-08-03 22:56 . 2004-08-03 22:56 72704 c:\windows\system32\magnify.exe
    + 2004-08-03 22:56 . 2009-06-26 16:18 16384 c:\windows\system32\jsproxy.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 16384 c:\windows\system32\jsproxy.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 96256 c:\windows\system32\inseng.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 96256 c:\windows\system32\inseng.dll
    + 2008-07-29 17:24 . 2008-07-29 17:24 97800 c:\windows\system32\infocardapi.dll
    + 2008-07-29 17:24 . 2008-07-29 17:24 11264 c:\windows\system32\icardres.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 55808 c:\windows\system32\extmgr.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 55808 c:\windows\system32\extmgr.dll
    + 2004-08-03 22:56 . 2009-06-25 08:44 59392 c:\windows\system32\dllcache\wdigest.dll
    + 2004-08-03 22:56 . 2006-10-04 08:48 50176 c:\windows\system32\dllcache\utilman.exe
    - 2004-08-03 22:56 . 2004-08-03 22:56 50176 c:\windows\system32\dllcache\utilman.exe
    + 2004-08-03 22:56 . 2006-10-04 13:33 35840 c:\windows\system32\dllcache\umandlg.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 35840 c:\windows\system32\dllcache\umandlg.dll
    + 2004-08-03 22:56 . 2009-06-12 11:50 80896 c:\windows\system32\dllcache\tlntsess.exe
    + 2004-08-03 22:56 . 2009-06-12 11:50 76288 c:\windows\system32\dllcache\telnet.exe
    + 2004-08-03 22:56 . 2009-06-25 08:44 56320 c:\windows\system32\dllcache\secur32.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 39424 c:\windows\system32\dllcache\pngfilt.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 39424 c:\windows\system32\dllcache\pngfilt.dll
    + 2004-08-03 22:56 . 2006-10-04 08:48 53760 c:\windows\system32\dllcache\narrator.exe
    - 2004-08-03 22:56 . 2004-08-03 22:56 53760 c:\windows\system32\dllcache\narrator.exe
    + 2004-08-03 22:56 . 2009-06-25 18:36 48640 c:\windows\system32\dllcache\mqupgrd.dll
    - 2004-08-03 22:56 . 2007-07-06 12:46 48640 c:\windows\system32\dllcache\mqupgrd.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 95744 c:\windows\system32\dllcache\mqsec.dll
    - 2004-08-03 22:56 . 2007-07-06 12:46 95744 c:\windows\system32\dllcache\mqsec.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 16896 c:\windows\system32\dllcache\mqise.dll
    - 2004-08-03 22:56 . 2007-07-06 12:46 16896 c:\windows\system32\dllcache\mqise.dll
    - 2004-08-03 22:56 . 2007-07-06 12:46 47104 c:\windows\system32\dllcache\mqdscli.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 47104 c:\windows\system32\dllcache\mqdscli.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 19968 c:\windows\system32\dllcache\mqbkup.exe
    + 2004-08-03 22:56 . 2009-06-22 11:49 19968 c:\windows\system32\dllcache\mqbkup.exe
    + 2004-08-03 20:58 . 2009-06-22 11:48 91776 c:\windows\system32\dllcache\mqac.sys
    - 2004-08-03 22:56 . 2004-08-03 22:56 72704 c:\windows\system32\dllcache\magnify.exe
    + 2004-08-03 22:56 . 2006-10-04 08:48 72704 c:\windows\system32\dllcache\magnify.exe
    + 2004-08-03 20:59 . 2009-06-22 11:34 92544 c:\windows\system32\dllcache\ksecdd.sys
    - 2004-08-03 22:56 . 2009-04-29 04:52 16384 c:\windows\system32\dllcache\jsproxy.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 16384 c:\windows\system32\dllcache\jsproxy.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 96256 c:\windows\system32\dllcache\inseng.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 96256 c:\windows\system32\dllcache\inseng.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 81920 c:\windows\system32\dllcache\ieencode.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 81920 c:\windows\system32\dllcache\ieencode.dll
    + 2009-04-14 19:56 . 2009-06-22 11:38 18432 c:\windows\system32\dllcache\iedw.exe
    - 2009-04-14 19:56 . 2009-04-27 09:17 18432 c:\windows\system32\dllcache\iedw.exe
    + 2007-03-22 18:24 . 2008-07-06 12:06 89088 c:\windows\system32\dllcache\filterpipelineprintproc.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 55808 c:\windows\system32\dllcache\extmgr.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 55808 c:\windows\system32\dllcache\extmgr.dll
    + 2004-08-03 22:56 . 2009-06-10 14:21 84992 c:\windows\system32\dllcache\avifil32.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2004-08-03 22:56 . 2009-07-17 18:55 58880 c:\windows\system32\dllcache\atl.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 58880 c:\windows\system32\dllcache\atl.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 96760 c:\windows\system32\dfshim.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 96760 c:\windows\system32\dfshim.dll
    + 2009-08-19 12:00 . 2009-08-20 10:30 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2009-04-14 20:04 . 2009-08-20 10:30 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2009-04-14 20:04 . 2009-08-14 08:25 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-04-14 20:04 . 2009-08-20 10:30 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2009-04-14 20:04 . 2009-08-14 08:25 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2008-07-29 21:40 . 2008-07-29 21:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
    + 2008-07-29 21:40 . 2008-07-29 21:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
    + 2008-07-29 21:40 . 2008-07-29 21:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
    + 2008-07-29 21:40 . 2008-07-29 21:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
    + 2008-07-29 21:40 . 2008-07-29 21:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
    + 2008-07-29 21:40 . 2008-07-29 21:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
    + 2008-07-29 21:40 . 2008-07-29 21:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
    + 2008-07-29 21:40 . 2008-07-29 21:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
    + 2008-07-29 21:40 . 2008-07-29 21:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
    + 2008-07-29 19:10 . 2008-07-29 19:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
    + 2008-07-29 17:59 . 2008-07-29 17:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
    - 2007-10-09 10:58 . 2007-10-09 10:58 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
    + 2008-07-29 19:10 . 2008-07-29 19:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
    + 2008-07-29 17:32 . 2008-07-29 17:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
    + 2008-07-29 17:16 . 2008-07-29 17:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    - 2007-10-11 07:55 . 2007-10-11 07:55 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2008-07-29 17:16 . 2008-07-29 17:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    + 2008-07-29 17:16 . 2008-07-29 17:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
    + 2008-07-29 17:16 . 2008-07-29 17:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2008-07-25 09:17 . 2008-07-25 09:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2008-07-25 09:17 . 2008-07-25 09:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2008-11-25 02:59 . 2008-11-25 02:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2008-07-29 19:07 . 2008-07-29 19:07 23040 c:\windows\Installer\1a508e1.msp
    + 2009-08-15 01:07 . 2009-08-15 01:07 88576 c:\windows\Installer\1a071ce.msi
    - 2009-05-23 18:09 . 2009-07-17 01:03 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    + 2009-08-15 01:09 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\i386\filterpipelineprintproc.dll
    + 2009-08-15 01:23 . 2009-08-15 01:23 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa442ef87ae99b3ade185599249d \UIAutomationProvider.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794d1f4ed6e120fbb02e436491cb \System.Windows.Presentation.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca1747c1ea18a3b639b302bca8df93 \System.Web.DynamicData.Design.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e2acfcadc469a4d468c51f8451 \System.ComponentModel.DataAnnotations.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e1b053d6a510cfe033c07a63e6 \System.AddIn.Contract.ni.dll
    + 2009-08-15 01:18 . 2009-08-15 01:18 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a0232f2e2efd0d7adf5dfa733a \PresentationFontCache.ni.exe
    + 2009-08-15 01:18 . 2009-08-15 01:18 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9233f8ea3031fb16f697635231 \PresentationCFFRasterizer.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee41b59be62ecbd59613b\Micros oft.Vsa.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2eab90d647356f65e66053da02b \Microsoft.Build.Framework.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d470d992f169ca0e7cdb3cc3117 \Microsoft.Build.Framework.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d6543b9fcc6\dfsvc.ni.exe
    + 2009-08-15 01:34 . 2009-08-15 01:34 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01e5128805759121ea6c\Access ibility.ni.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegrati on.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Pr esentation.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.Regu larExpressions.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.Dyna micData.Design.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractio ns.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.Service Model.WasHosting.dll
    - 2009-07-23 12:09 . 2009-07-23 12:09 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.Service Model.WasHosting.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceMod el.Install.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.d ll
    + 2009-08-15 01:15 . 2009-08-15 01:15 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.d ll
    + 2009-08-15 01:12 . 2009-08-15 01:12 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.Dat aSetExtensions.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configura tion.Install.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configura tion.Install.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System. ComponentModel.DataAnnotations.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.d ll
    + 2009-08-15 01:10 . 2009-08-15 01:10 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.e xe
    + 2009-08-15 01:10 . 2009-08-15 01:10 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRast erizer.dll
    - 2009-07-23 12:09 . 2009-07-23 12:09 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRast erizer.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.V sa.Vb.CodeDOMProcessor.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.V sa.Vb.CodeDOMProcessor.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.ST LCLR.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBas ic.Vsa.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBas ic.Vsa.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Uti lities.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Uti lities.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Buil d.Utilities.v3.5.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Fra mework.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Fra mework.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Fra mework.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 4608 c:\windows\system32\dllcache\mqsvc.exe
    + 2004-08-03 22:56 . 2009-06-22 11:49 4608 c:\windows\system32\dllcache\mqsvc.exe
    + 2008-07-29 21:40 . 2008-07-29 21:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2008-07-25 09:16 . 2008-07-25 09:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2009-08-15 01:12 . 2009-08-15 01:12 5632 c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
    + 2008-07-29 19:26 . 2008-07-29 19:26 301568 c:\windows\system32\XPSViewer\XPSViewer.exe
    + 2007-03-23 04:07 . 2008-07-06 12:06 575488 c:\windows\system32\xpsshhdr.dll
    + 2009-04-17 01:02 . 2009-06-22 11:26 352768 c:\windows\system32\xpsp3res.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 616448 c:\windows\system32\urlmon.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 616448 c:\windows\system32\urlmon.dll
    + 2009-07-23 12:08 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll
    + 2009-07-23 12:08 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
    + 2009-07-23 12:08 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll
    + 2009-07-23 12:08 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
    + 2009-07-23 12:08 . 2008-07-06 12:06 147456 c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
    + 2007-03-22 18:25 . 2008-07-06 10:50 597504 c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
    - 2007-03-22 19:03 . 2007-03-22 19:03 761344 c:\windows\system32\spool\drivers\w32x86\3\unires.dll
    + 2007-03-22 19:03 . 2008-03-13 04:52 761344 c:\windows\system32\spool\drivers\w32x86\3\unires.dll
    + 2007-03-22 19:03 . 2008-07-06 12:06 744960 c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
    + 2007-03-22 18:24 . 2008-07-06 12:06 373248 c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
    + 2007-03-22 18:24 . 2008-07-06 12:06 198656 c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll
    + 2007-03-22 18:24 . 2008-07-06 12:06 765440 c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 474112 c:\windows\system32\shlwapi.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 474112 c:\windows\system32\shlwapi.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 169472 c:\windows\system32\Setup\msmqocm.dll
    + 2007-03-22 18:25 . 2008-07-06 12:06 117760 c:\windows\system32\prntvpt.dll
    + 2008-07-29 17:59 . 2008-07-29 17:59 781344 c:\windows\system32\PresentationNative_v0300.dll
    + 2008-07-29 18:35 . 2008-07-29 18:35 326160 c:\windows\system32\PresentationHost.exe
    + 2008-07-29 17:59 . 2008-07-29 17:59 105016 c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
    + 2001-08-23 12:00 . 2009-08-15 01:15 435590 c:\windows\system32\perfh009.dat
    - 2004-08-03 22:56 . 2004-08-03 22:56 215552 c:\windows\system32\osk.exe
    + 2004-08-03 22:56 . 2006-10-04 08:48 215552 c:\windows\system32\osk.exe
    - 2004-08-03 22:56 . 2009-04-29 04:52 532480 c:\windows\system32\mstime.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 532480 c:\windows\system32\mstime.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 146432 c:\windows\system32\msrating.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 146432 c:\windows\system32\msrating.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 449024 c:\windows\system32\mshtmled.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 449024 c:\windows\system32\mshtmled.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 158720 c:\windows\system32\mscorier.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 158720 c:\windows\system32\mscorier.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 282112 c:\windows\system32\mscoree.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 282112 c:\windows\system32\mscoree.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 251392 c:\windows\system32\iepeers.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 251392 c:\windows\system32\iepeers.dll
    + 2008-07-29 17:24 . 2008-07-29 17:24 622080 c:\windows\system32\icardagt.exe
    - 2009-04-14 12:41 . 2009-07-23 12:54 368096 c:\windows\system32\FNTCACHE.DAT
    + 2009-04-14 12:41 . 2009-08-15 01:25 368096 c:\windows\system32\FNTCACHE.DAT
    - 2004-08-03 22:56 . 2009-04-29 04:52 205312 c:\windows\system32\dxtrans.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 205312 c:\windows\system32\dxtrans.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 357888 c:\windows\system32\dxtmsft.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 357888 c:\windows\system32\dxtmsft.dll
    + 2007-03-23 04:07 . 2008-07-06 12:06 575488 c:\windows\system32\dllcache\xpsshhdr.dll
    + 2004-08-03 22:56 . 2009-07-13 00:18 233472 c:\windows\system32\dllcache\wmpdxm.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 233472 c:\windows\system32\dllcache\wmpdxm.dll
    - 2004-08-03 22:56 . 2006-08-17 12:28 132096 c:\windows\system32\dllcache\wkssvc.dll
    + 2004-08-03 22:56 . 2009-06-10 06:32 132096 c:\windows\system32\dllcache\wkssvc.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 659456 c:\windows\system32\dllcache\wininet.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 659456 c:\windows\system32\dllcache\wininet.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 616448 c:\windows\system32\dllcache\urlmon.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 616448 c:\windows\system32\dllcache\urlmon.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 474112 c:\windows\system32\dllcache\shlwapi.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 474112 c:\windows\system32\dllcache\shlwapi.dll
    + 2004-08-03 22:56 . 2009-06-25 08:44 168448 c:\windows\system32\dllcache\schannel.dll
    + 2007-03-22 18:25 . 2008-07-06 10:50 597504 c:\windows\system32\dllcache\printfilterpipelinesvc.exe
    - 2004-08-03 22:56 . 2004-08-03 22:56 215552 c:\windows\system32\dllcache\osk.exe
    + 2004-08-03 22:56 . 2006-10-04 08:48 215552 c:\windows\system32\dllcache\osk.exe
    + 2004-08-03 22:56 . 2009-08-05 09:11 204800 c:\windows\system32\dllcache\mswebdvd.dll
    + 2004-08-03 22:56 . 2009-06-25 08:44 133632 c:\windows\system32\dllcache\msv1_0.dll
    + 2009-04-14 19:54 . 2009-06-05 07:42 655872 c:\windows\system32\dllcache\mstscax.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 532480 c:\windows\system32\dllcache\mstime.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 532480 c:\windows\system32\dllcache\mstime.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 146432 c:\windows\system32\dllcache\msrating.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 146432 c:\windows\system32\dllcache\msrating.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 169472 c:\windows\system32\dllcache\msmqocm.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 449024 c:\windows\system32\dllcache\mshtmled.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 449024 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 471552 c:\windows\system32\dllcache\mqutil.dll
    - 2004-08-03 22:56 . 2007-07-06 12:46 471552 c:\windows\system32\dllcache\mqutil.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 186880 c:\windows\system32\dllcache\mqtrig.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 186880 c:\windows\system32\dllcache\mqtrig.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 117248 c:\windows\system32\dllcache\mqtgsvc.exe
    + 2004-08-03 22:56 . 2009-06-22 11:49 117248 c:\windows\system32\dllcache\mqtgsvc.exe
    + 2004-08-03 22:56 . 2009-06-25 18:36 517120 c:\windows\system32\dllcache\mqsnap.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 123392 c:\windows\system32\dllcache\mqrtdep.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 123392 c:\windows\system32\dllcache\mqrtdep.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 177152 c:\windows\system32\dllcache\mqrt.dll
    - 2004-08-03 22:56 . 2007-07-06 12:46 177152 c:\windows\system32\dllcache\mqrt.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 661504 c:\windows\system32\dllcache\mqqm.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 225280 c:\windows\system32\dllcache\mqoa.dll
    - 2004-08-03 22:56 . 2004-08-03 22:56 225280 c:\windows\system32\dllcache\mqoa.dll
    + 2004-08-03 22:56 . 2009-06-25 18:36 138240 c:\windows\system32\dllcache\mqad.dll
    - 2004-08-03 22:56 . 2007-07-06 12:46 138240 c:\windows\system32\dllcache\mqad.dll
    + 2004-08-03 22:56 . 2009-06-25 08:44 724480 c:\windows\system32\dllcache\lsasrv.dll
    + 2004-08-03 22:56 . 2009-06-25 08:44 298496 c:\windows\system32\dllcache\kerberos.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 251392 c:\windows\system32\dllcache\iepeers.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 251392 c:\windows\system32\dllcache\iepeers.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 205312 c:\windows\system32\dllcache\dxtrans.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 205312 c:\windows\system32\dllcache\dxtrans.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 357888 c:\windows\system32\dllcache\dxtmsft.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 357888 c:\windows\system32\dllcache\dxtmsft.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 151040 c:\windows\system32\dllcache\cdfview.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 151040 c:\windows\system32\dllcache\cdfview.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 151040 c:\windows\system32\cdfview.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 151040 c:\windows\system32\cdfview.dll
    + 2008-07-29 21:40 . 2008-07-29 21:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
    + 2008-07-29 21:40 . 2008-07-29 21:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
    + 2009-08-15 01:11 . 2009-08-15 01:11 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
    + 2008-07-29 16:47 . 2008-07-29 16:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
    + 2008-07-29 16:47 . 2008-07-29 16:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
    + 2008-07-29 21:15 . 2008-07-29 21:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
    + 2008-07-29 21:40 . 2008-07-29 21:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
    + 2008-07-29 21:40 . 2008-07-29 21:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
    + 2008-07-29 18:35 . 2008-07-29 18:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
    + 2008-07-29 17:59 . 2008-07-29 17:59 132120 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2008-07-29 17:16 . 2008-07-29 17:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
    + 2008-07-29 17:16 . 2008-07-29 17:16 966656 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    + 2008-07-29 17:16 . 2008-07-29 17:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
    + 2008-07-29 17:16 . 2008-07-29 17:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2008-07-29 17:16 . 2008-07-29 17:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
    + 2008-07-29 17:16 . 2008-07-29 17:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
    + 2008-07-29 17:16 . 2008-07-29 17:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
    - 2007-10-11 07:55 . 2007-10-11 07:55 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
    + 2008-07-29 17:24 . 2008-07-29 17:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
    + 2008-07-29 17:16 . 2008-07-29 17:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
    + 2008-11-25 02:59 . 2008-11-25 02:59 436040 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2008-11-25 02:59 . 2008-11-25 02:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 392184 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2008-11-25 02:59 . 2008-11-25 02:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2008-11-25 02:59 . 2008-11-25 02:59 990032 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    - 2007-10-23 23:47 . 2007-10-23 23:47 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    + 2008-12-13 07:58 . 2008-12-13 07:58 754688 c:\windows\Installer\1a6ac75.msp
    + 2009-08-15 01:12 . 2009-08-15 01:12 648192 c:\windows\Installer\1a6ac4f.msi
    + 2008-07-29 19:23 . 2008-07-29 19:23 250880 c:\windows\Installer\1a508ea.msp
    + 2008-07-29 19:28 . 2008-07-29 19:28 278016 c:\windows\Installer\1a508e8.msp
    + 2008-07-29 17:40 . 2008-07-29 17:40 291840 c:\windows\Installer\1a508e6.msp
    + 2009-08-15 01:10 . 2009-08-15 01:10 137728 c:\windows\Installer\1a508e0.msi
    + 2008-07-29 15:35 . 2008-07-29 15:35 553472 c:\windows\Installer\1a071d3.msp
    + 2008-07-29 15:33 . 2008-07-29 15:33 506368 c:\windows\Installer\1a071d1.msp
    + 2008-07-29 15:37 . 2008-07-29 15:37 911360 c:\windows\Installer\1a071d0.msp
    + 2009-08-15 01:03 . 2009-08-15 01:03 972800 c:\windows\Installer\19e926c.msi
    - 2009-05-23 18:09 . 2009-07-17 01:03 888080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 888080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 272648 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 272648 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 922384 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 922384 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 845584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 845584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 217864 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 217864 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 184080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 184080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 159504 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 159504 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    + 2009-08-15 01:09 . 2008-03-13 04:52 761344 c:\windows\Driver Cache\i386\unires.dll
    + 2009-08-15 01:09 . 2008-07-06 12:06 744960 c:\windows\Driver Cache\i386\unidrvui.dll
    + 2009-08-15 01:09 . 2008-07-06 12:06 373248 c:\windows\Driver Cache\i386\unidrv.dll
    + 2009-08-15 01:09 . 2008-07-06 12:06 198656 c:\windows\Driver Cache\i386\mxdwdui.dll
    + 2009-08-15 01:09 . 2008-07-06 12:06 765440 c:\windows\Driver Cache\i386\mxdwdrv.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2ef5bc3a2edd7570bb23886a4f32294a\WsatConfi g.ni.exe
    + 2009-08-15 01:23 . 2009-08-15 01:23 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6a818099f0386e2356ae94f886a2196f \WindowsFormsIntegration.ni.dll
    + 2009-08-15 01:23 . 2009-08-15 01:23 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\a6d9503962d47c722231c1478f180695\UI AutomationTypes.ni.dll
    + 2009-08-15 01:23 . 2009-08-15 01:23 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\5c028c3d8db6c0f0277673ea4a2d89fb\U IAutomationClient.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c338a470b14851ce5987bb0f0869c310\Syst em.Xml.Linq.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\bb77ea11f46ab438b2b7ed7c180011a1\S ystem.Web.Routing.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6ee255220d90dcbe80c990e443051cc5 \System.Web.RegularExpressions.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\58f62044fa702ea6f936071aa5520baa \System.Web.Extensions.Design.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\79c29ac85dd57dd485ab60118ac292ff\Sy stem.Web.Entity.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d3d65e34fa60f0b6c72ca0d12ec89933 \System.Web.Entity.Design.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\b7891f5659db299dbd1b3c72db7edb9f \System.Web.DynamicData.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\00ec08741a765c707bd9169346064a81 \System.Web.Abstractions.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5a555c9ae6984c40157cf940bb519f7c\ System.Transactions.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ea3366939280c1715f1c620e33ee3c8a \System.ServiceProcess.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\1c8df2da33222c048d683017f2095f04\Syst em.Security.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bfd6e16d8c3589cd2bd3f8d46f0a5402 \System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\519d9c618341b136f9b963ffb7495308\System.Ne t.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\8642fdfbf02a6cb6f01169fe6fdb5d11\Sy stem.Management.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1d3fbbd23ce1e8637ef4f40a8d23cd32 \System.Management.Instrumentation.ni.dll
    + 2009-08-15 01:33 . 2009-08-15 01:33 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7c367a96b10d626ec8cbf8149272d845\System .IO.Log.ni.dll
    + 2009-08-15 01:33 . 2009-08-15 01:33 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\68e71147704ef0d34d9a4bece7767fc5 \System.IdentityModel.Selectors.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7 \System.EnterpriseServices.Wrapper.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7 \System.EnterpriseServices.ni.dll
    + 2009-08-15 01:23 . 2009-08-15 01:23 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\18bbe2b6717e7f1d1dd672526e9889ee \System.Drawing.Design.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c434a07332ce490711c27fd0edb7562f \System.DirectoryServices.Protocols.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8b3bb7a2c2f3ffe94c866283f1cd5957 \System.DirectoryServices.AccountManagement.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a4b887f476fa4b8746a93a9fc2208560 \System.Data.Services.Client.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1cf3acad6553d6c59df576794f4e8bd6 \System.Data.Services.Design.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\392de34573f9f8ec885714f2f3e7f07f \System.Data.Entity.Design.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\1db495ff00bbd14df4af6680c4de0653 \System.Data.DataSetExtensions.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\b82c00e2d24305ad6cb08556e3779b75 \System.Configuration.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\de514e484e49b04b016949d57ffac03e \System.Configuration.Install.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ce984d754e3c0b6be4504b785cc43574\System. AddIn.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\045dd501b7257b1cc26083538ae69045\SMSvcHost. ni.exe
    + 2009-08-15 01:34 . 2009-08-15 01:34 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9790551187e294b4ed3aaa1c221891c7\SMDiag nostics.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\10a0c9707876fc1f65e64b811a28b020\Serv iceModelReg.ni.exe
    + 2009-08-15 01:22 . 2009-08-15 01:22 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f475294d8c7dc2dd4febeef27bc0417e \PresentationFramework.Classic.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8003abaf6bcf70f7eb620d06837e897b \PresentationFramework.Luna.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\59a67874d8d8475faa5be1d993083d12 \PresentationFramework.Aero.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c980c9a5051d723c6ec2a78a3d0e2b3 \PresentationFramework.Royale.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\6d38e317128608bc4516ea46ab94590e\MSBuild.ni.e xe
    + 2009-08-15 01:34 . 2009-08-15 01:34 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1820d6a012fc0e16c3e1d29d973cd2d0 \Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\55b9eff9e23359faed4351386c062238 \Microsoft.Build.Utilities.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4217124db1ea5de5f1a1f3eea75e8d32 \Microsoft.Build.Utilities.v3.5.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\96825c34d7e1f7df1923ff2123bed8da \Microsoft.Build.Engine.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\9b321ebf67587237f576df6104a32588 \Microsoft.Build.Conversion.v3.5.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9bea05938bee3555c5aa8763d89a68f9\Cus tomMarshalers.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\12629e2f3e315459bee67cbbaac85cb2\ComSvcC onfig.ni.exe
    + 2009-08-15 01:34 . 2009-08-15 01:34 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b5b2feadc3943e3976daebc0bcd2b5e2\AspNetM MCExt.ni.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 385024 c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationC lientsideProviders.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 167936 c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 139264 c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 507904 c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServic es.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 540672 c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runti me.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 335872 c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Exten sions.Design.dll
    + 2009-08-15 01:17 . 2009-08-15 01:17 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 131072 c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.De sign.dll
    + 2009-08-15 01:17 . 2009-08-15 01:17 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData .dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.d ll
    - 2009-07-23 12:05 . 2009-07-23 12:05 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.d ll
    + 2009-08-15 01:12 . 2009-08-15 01:12 569344 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.W eb.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 966656 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.S erialization.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\ System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\ System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoti ng.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 233472 c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 143360 c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Mana gement.Instrumentation.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2009-07-23 12:09 . 2009-07-23 12:09 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2009-07-23 12:09 . 2009-07-23 12:09 430080 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 430080 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2009-07-23 12:09 . 2009-07-23 12:09 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.Identit yModel.Selectors.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.Identit yModel.Selectors.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServ ices.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServ ices.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.Dir ectoryServices.Protocols.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.Dir ectoryServices.Protocols.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 286720 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\Sy stem.DirectoryServices.AccountManagement.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2009-08-15 01:17 . 2009-08-15 01:17 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 114688 c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Servi ces.Design.dll
    + 2009-08-15 01:17 . 2009-08-15 01:17 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Servi ces.Client.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 684032 c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 229376 c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity. Design.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 667648 c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    - 2009-07-23 12:09 . 2009-07-23 12:09 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 864256 c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 163840 c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFram ework.Royale.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 397312 c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramew ork.Luna.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 139264 c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFra mework.Classic.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 196608 c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramew ork.Aero.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 598016 c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks .dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.d ll
    + 2009-08-15 01:15 . 2009-08-15 01:15 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft .VisualBasic.Compatibility.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft .VisualBasic.Compatibility.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Micr osoft.VisualBasic.Compatibility.Data.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Micr osoft.VisualBasic.Compatibility.Data.dll
    - 2009-07-23 12:09 . 2009-07-23 12:09 397312 c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Trans actions.Bridge.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 397312 c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Trans actions.Bridge.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.d ll
    - 2009-07-23 12:05 . 2009-07-23 12:05 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.d ll
    + 2009-08-15 01:12 . 2009-08-15 01:12 802816 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Ta sks.v3.5.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 733184 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine .dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine .dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine .dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 106496 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Bui ld.Conversion.v3.5.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.Wrapper.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.Wrapper.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.dll
    - 2009-07-23 12:05 . 2009-07-23 12:05 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClie nt.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 163840 c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Tra nsactions.Bridge.Dtc.dll
    + 2007-03-23 04:07 . 2008-07-06 12:06 1676288 c:\windows\system32\xpssvcs.dll
    + 2004-08-03 22:56 . 2009-07-13 00:18 4960256 c:\windows\system32\wmp.dll
    + 2009-07-23 12:08 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
    + 2009-07-23 12:08 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
    + 2009-07-23 12:08 . 2008-07-06 15:36 2936832 c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
    + 2009-07-23 12:08 . 2008-07-06 15:36 2936832 c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
    + 2007-03-23 04:07 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
    + 2004-08-03 22:56 . 2009-07-18 16:20 1506304 c:\windows\system32\shdocvw.dll
    + 2008-08-29 18:06 . 2008-08-29 18:06 1350664 c:\windows\system32\msxml6.dll
    + 2004-08-03 22:56 . 2009-07-18 16:20 3062272 c:\windows\system32\mshtml.dll
    + 2007-03-23 04:07 . 2008-07-06 12:06 1676288 c:\windows\system32\dllcache\xpssvcs.dll
    + 2004-08-03 22:56 . 2009-07-13 00:18 4960256 c:\windows\system32\dllcache\wmp.dll
    + 2004-08-03 22:56 . 2009-07-18 16:20 1506304 c:\windows\system32\dllcache\shdocvw.dll
    + 2009-04-14 19:56 . 2009-07-10 13:42 1315328 c:\windows\system32\dllcache\msoe.dll
    + 2004-08-03 22:56 . 2009-07-18 16:20 3062272 c:\windows\system32\dllcache\mshtml.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 1054208 c:\windows\system32\dllcache\danim.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 1054208 c:\windows\system32\dllcache\danim.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 1023488 c:\windows\system32\dllcache\browseui.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 1023488 c:\windows\system32\dllcache\browseui.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 1054208 c:\windows\system32\danim.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 1054208 c:\windows\system32\danim.dll
    + 2004-08-03 22:56 . 2009-06-26 16:18 1023488 c:\windows\system32\browseui.dll
    - 2004-08-03 22:56 . 2009-04-29 04:52 1023488 c:\windows\system32\browseui.dll
    + 2008-07-29 21:40 . 2008-07-29 21:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
    + 2008-07-29 16:47 . 2008-07-29 16:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
    + 2008-07-29 16:47 . 2008-07-29 16:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
    + 2008-07-29 21:40 . 2008-07-29 21:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
    + 2008-12-05 17:35 . 2008-12-05 17:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
    + 2008-12-05 18:12 . 2008-12-05 18:12 5931008 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    - 2007-10-23 23:47 . 2007-10-23 23:47 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2008-07-25 09:17 . 2008-07-25 09:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2008-11-25 02:59 . 2008-11-25 02:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2008-11-25 02:59 . 2008-11-25 02:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 3149824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2008-07-25 09:17 . 2008-07-25 09:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2008-11-25 02:59 . 2008-11-25 02:59 5813576 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2008-11-25 02:59 . 2008-11-25 02:59 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2008-07-25 09:16 . 2008-07-25 09:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    + 2008-12-13 07:57 . 2008-12-13 07:57 8397824 c:\windows\Installer\1a6ac5e.msp
    + 2008-07-29 17:26 . 2008-07-29 17:26 1043456 c:\windows\Installer\1a508e9.msp
    + 2008-07-29 18:37 . 2008-07-29 18:37 2679808 c:\windows\Installer\1a508e7.msp
    + 2008-07-29 19:15 . 2008-07-29 19:15 3697664 c:\windows\Installer\1a508e5.msp
    + 2008-07-29 17:34 . 2008-07-29 17:34 1448448 c:\windows\Installer\1a508e4.msp
    + 2008-07-29 18:22 . 2008-07-29 18:22 4137984 c:\windows\Installer\1a508e3.msp
    + 2008-07-29 17:18 . 2008-07-29 17:18 3376640 c:\windows\Installer\1a508e2.msp
    + 2008-07-29 15:45 . 2008-07-29 15:45 2543616 c:\windows\Installer\1a071d7.msp
    + 2008-07-29 15:29 . 2008-07-29 15:29 2926080 c:\windows\Installer\1a071d6.msp
    + 2008-07-29 15:41 . 2008-07-29 15:41 6487040 c:\windows\Installer\1a071d5.msp
    + 2008-07-29 15:39 . 2008-07-29 15:39 3403264 c:\windows\Installer\1a071d4.msp
    + 2008-07-29 15:43 . 2008-07-29 15:43 1013248 c:\windows\Installer\1a071d2.msp
    + 2008-07-29 15:31 . 2008-07-29 15:31 6083072 c:\windows\Installer\1a071cf.msp
    + 2009-07-27 02:32 . 2009-07-27 02:32 5028352 c:\windows\Installer\19e9264.msp
    - 2009-05-23 18:09 . 2009-07-17 01:03 1172240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 1172240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    - 2009-05-23 18:09 . 2009-07-17 01:03 1165584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-05-23 18:09 . 2009-08-15 01:03 1165584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-08-15 01:18 . 2009-08-15 01:18 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\14cd5f4b61d35f9b76327d6be9853755\WindowsB ase.ni.dll
    + 2009-08-15 01:23 . 2009-08-15 01:23 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\f3c7957351aec85f526a3350c9718b1e \UIAutomationClientsideProviders.ni.dll
    + 2009-08-15 01:18 . 2009-08-15 01:18 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\System\80978a322d7dd39f0a71be1251ae395a\System.ni.dll
    + 2009-08-15 01:23 . 2009-08-15 01:23 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\773a9786013451d3baaeff003dc4230f\System.Xm l.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\ac1750e78d79520dcf19195772eff1b6 \System.WorkflowServices.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\d265da36954fcb4cb7ad5adc693ea0f2 \System.Workflow.Runtime.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\693a8fbe6f7ad6e4e429052da4317e59 \System.Workflow.ComponentModel.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\cc99fbbac0b6e4e9ca62093e49b0c16b \System.Workflow.Activities.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b57bb002a655920cbfa2bee29d1e22b7\ System.Web.Services.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\81197e32ec931f439b3114e9031b65d6\Sy stem.Web.Mobile.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\7f64c9d25471b72e1e957bdfe67947c8 \System.Web.Extensions.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\63cf639b6e0a3c25c1643c85016e7422\System .Speech.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\340cad17fe57947eacbc8fa2cea780da \System.ServiceModel.Web.ni.dll
    + 2009-08-15 01:33 . 2009-08-15 01:33 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\034c91b133dee73d452652c52767b5ea \System.Runtime.Serialization.ni.dll
    + 2009-08-15 01:23 . 2009-08-15 01:23 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\646ab52eef343380aa002c220dc31e13\Syst em.Printing.ni.dll
    + 2009-08-15 01:33 . 2009-08-15 01:33 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c2de8479e54852f56996f79bc93acb13 \System.IdentityModel.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3da96ee075bab9202626ae44c18d226c\Syste m.Drawing.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\543aced762f6b0c3f8e037955941afc6 \System.DirectoryServices.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\a6b58624486714fa71e5e35186850ff0\Sy stem.Deployment.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c70731047b0022638b3f9fb158948a03\System.D ata.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\826b09ab0d0e36f4d631b4cd335df511\S ystem.Data.SqlXml.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\956a513dcbd44d5a6801840ef2b0b47b \System.Data.Services.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\0bbec79460b1137df5313f9baf7b246f\Sys tem.Data.Linq.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6479f975b105808a8d9e7a7fdc762551\S ystem.Data.Entity.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\47d87251e93256c635eb73403b8db33e\System.C ore.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4bfb3048bf200a6a8592d1b4ba861a7f\Reach Framework.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\6bafb1a2a73794ddb9761cb321c9e7e2\Prese ntationUI.ni.dll
    + 2009-08-15 01:18 . 2009-08-15 01:18 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\e634bc4c4a00635a0a254febab0e2e2c \PresentationBuildTasks.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\1c86afc399d0fdd8e069266ffbe748d1 \Microsoft.VisualBasic.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6b2f62f5e981913fce1d223f645d9ddf \Microsoft.Transactions.Bridge.ni.dll
    + 2009-08-15 01:36 . 2009-08-15 01:36 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b261961046545831aa60963e84905968\Mi crosoft.JScript.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\bd241492d96db39f20e758c13c845033 \Microsoft.Build.Tasks.ni.dll
    + 2009-08-15 01:35 . 2009-08-15 01:35 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a47100d8f4574bed2d49d83d0ab8964e \Microsoft.Build.Tasks.v3.5.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6cfe582681724965fb817e8ece5f0909 \Microsoft.Build.Engine.ni.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 1245184 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 1630208 c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflo w.ComponentModel.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 1138688 c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Ac tivities.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-08-15 01:17 . 2009-08-15 01:17 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.d ll
    + 2009-08-15 01:16 . 2009-08-15 01:16 5931008 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-08-15 01:12 . 2009-08-15 01:12 2879488 c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
    + 2009-08-15 01:16 . 2009-08-15 01:16 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.d ll
    + 2009-08-15 01:15 . 2009-08-15 01:15 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2009-08-15 01:10 . 2009-08-15 01:10 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2009-08-15 01:15 . 2009-08-15 01:15 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-04-17 02:35 . 2009-07-30 00:49 24281536 c:\windows\system32\MRT.exe
    + 2008-12-13 08:21 . 2008-12-13 08:21 10473472 c:\windows\Installer\1a6ac69.msp
    + 2009-08-15 01:14 . 2009-08-15 01:14 11485184 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP23D.tmp\mscorlib.dll
    + 2009-08-15 01:23 . 2009-08-15 01:23 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\63406259e94d5c0ff5b79401dfe113ce \System.Windows.Forms.ni.dll
    + 2009-08-15 01:37 . 2009-08-15 01:37 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\3963ce03d445a8619abbf388d590134b\System.We b.ni.dll
    + 2009-08-15 01:34 . 2009-08-15 01:34 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\4146033013edebd7e0cb604e504ebfee\ System.ServiceModel.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8ee220bc3cce4f7bbd7818946519ed7f\System .Design.ni.dll
    + 2009-08-15 01:22 . 2009-08-15 01:22 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96e710f47c601cba3f2348a8d11ddede \PresentationFramework.ni.dll
    + 2009-08-15 01:19 . 2009-08-15 01:19 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\956375d487cbef36165b3250030e3574\Pre sentationCore.ni.dll
    + 2009-08-15 01:17 . 2009-08-15 01:17 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6d667f19d687361886990f3ca0f49816\mscorlib.ni .dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk *\0aswBoot.exe /A:* /L:English /KBD:2
    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
    "c:\\Program Files\\ICQ6.5\\ICQ.exe"=
    "c:\\ijji\\ENGLISH\\u_gunz.exe"=
    "c:\\WINDOWS\\Downloaded Program Files\\PLauncher.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "d:\\Ketamine-v10[1] Rc2\\Ketamine-v10.RC2\\emule.exe"=
    "d:\\eMule_0.47c_-_TCMatic_v3dUPLODED.PINI_A.OR.BLAUGRANA\\eMule 0.47c - TCMatic v3dUPLODED.PINI_A.OR.BLAUGRANA\\emule.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
    "d:\\Ketamine-v10[1] Rc2\\Ketamine-v10[1] Rc2\\Ketamine-v10.RC2\\emule.exe"=
    "c:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
    "d:\\TacticalOps.By.ONmyS3LF.Www.Satla-Zone.Com\\TacticalOps\\TacticalOps\\System\\TacticalOps.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    .
    Contents of the 'Scheduled Tasks' folder
    2009-08-20 c:\windows\Tasks\WGASetup.job
    - c:\windows\system32\KB905474\wgasetup.exe [2009-05-08 20:18]
    .
    - - - - ORPHANS REMOVED - - - -
    SafeBoot-orxakowk.sys

    .
    ------- Supplementary Scan -------
    .
    uStart Page = about:blank
    uInternet Connection Wizard,ShellNext = iexplore
    IE: &????? ?? Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    TCP: {0353F056-2EA8-4DA5-A09B-0A7052CF07B7} = 194.90.1.5 212.143.212.143
    .
    **************************************************************************
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-08-20 22:57
    Windows 5.1.2600 Service Pack 2 NTFS
    scanning hidden processes ...
    scanning hidden autostart entries ...
    scanning hidden files ...
    scan completed successfully
    hidden files: 0
    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    [HKEY_USERS\S-1-5-21-436374069-879983540-839522115-1003\Software\Microsoft\  M*i*c*r*o*s*o*f*t* *M*a*n*a*g*e*m*e*n*t* *C*o*n*s*o*l*e*\Recent File List]
    "File1"="c:\\WINDOWS\\system32\\devmgmt.msc"
    "File2"="c:\\WINDOWS\\system32\\compmgmt.msc"
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    - - - - - - - > 'explorer.exe'(2708)
    c:\windows\system32\msi.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\nvsvc32.exe
    c:\program files\Analog Devices\SoundMAX\SMAgent.exe
    c:\windows\system32\wdfmgr.exe
    .
    **************************************************************************
    .
    Completion time: 2009-08-20 23:00 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-08-20 21:00
    ComboFix2.txt 2009-08-14 17:34
    Pre-Run: 4,477,853,696 bytes free
    Post-Run: 4,903,534,592 bytes free
    1091 --- E O F --- 2009-08-16 10:25
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  15. 28/08/09, 16:49 #15
    ProJecT^X ProJecT^X מנותק גורו
    תאריך הצטרפות
    26/07/05
    שם פרטי
    אושרי
    הודעות
    2,480
    קיבל לייק
    1 פעמים
    יש תשובה עידן?
    הירשם כדי להגיב הירשם כדי להגיב לנושא
  16. 28/08/09, 17:47 #16
    הסמל האישי של Idan
    Idan Idan מנותק מנהל האתר
    תאריך הצטרפות
    22/12/04
    שם פרטי
    עידן
    הודעות
    10,019
    קיבל לייק
    573 פעמים
    לא הבנתי איך הדבר הזה קשור אבל שיהיה..
    תשמע אי אפשר להתחיל כלום בלי לנקות הזבל שהיה לך על המחשב, היה לך וירוסים וטרויאנים שיכלו בקלות לגרום לכל הבעיות האלה.
    עכשיו המצב נראה קצת יותר טוב.

    טוב עכשיו בוא נמשיך בזה שתעדכן את המערכת הפעלה שלך ל-Service Pack 3:
    www.windowsupdate.com

    תכנס לאתר הזה ותעדכן את כל מה שצריך, תתקין את כל העדכונים בעדיפות גבוהה (עדכוני אבטחה). יש מצב שזה גם מה שיפתור לך את הבעיה. (למרות שאני עדיין חושב שזה בגלל ה-Ad-Aware שיש לך)
    אם יש לך בעיה של מקוריות של הווינדוס תעבור בנושא הזה: http://www.szf.co.il/f192/t29647/

    אחרי שעידכנת ל-SP3 תביא לפה לוג חדש של התוכנה HijackThis כמו שהבאת לי בהתחלה.
    הירשם כדי להגיב הירשם כדי להגיב לנושא
« הנושא הקודם | הנושא הבא »

נושאים דומים

  1. מחר מזמין אופנוע, תמונה בפנים
    על ידי DaNz` בפורום מה שבראש
    תגובות: 19
    הודעה אחרונה: 07/08/10, 00:17
  2. על מה לעזאזל קיבלתי באן ESE? יש תמונה
    על ידי Lac0sTe בפורום TO תמיכה טכנית
    תגובות: 8
    הודעה אחרונה: 06/07/10, 22:16
  3. על מה לעזאזל קיבלתי באן ESE??? יש תמונה
    על ידי Lac0sTe בפורום Tactical Ops
    תגובות: 16
    הודעה אחרונה: 01/07/10, 15:23
  4. בעיה| ese יש תמונה !
    על ידי StyleeSt בפורום TO תמיכה טכנית
    תגובות: 2
    הודעה אחרונה: 27/01/10, 11:55
  5. ESE Problem| (פרטים בפנים)
    על ידי .CoBrA. בפורום TO תמיכה טכנית
    תגובות: 3
    הודעה אחרונה: 15/10/08, 22:13
eXTReMe Tracker