ComboFix 12-01-09.03 - Ewa 2012-01-09 21:13:08.2.2 - x64 Microsoft® Windows Vista™ Business 6.0.6002.2.1250.48.1045.18.6142.4546 [GMT 1:00] Uruchomiony z: c:\users\Ewa\Desktop\ComboFix.exe AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5} SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Ewa\AppData\Local\Microsoft\Windows\Temporary Internet Files\plot.log c:\users\Ewa\PDFCreator-1_2_3_setup(dobreprogramy.pl).exe c:\windows\SysWow64\~.inf . ---- Poprzednie uruchomienie ------- . c:\users\Ewa\AppData\Local\Microsoft\Windows\Temporary Internet Files\plot.log . . ((((((((((((((((((((((((( Pliki utworzone od 2011-12-09 do 2012-01-09 ))))))))))))))))))))))))))))))) . . 2012-01-09 20:42 . 2012-01-09 20:42 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FFC1AD35-1F51-4B3D-AD73-605ED82B2068}\offreg.dll 2012-01-09 20:37 . 2012-01-09 20:37 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2012-01-09 20:37 . 2012-01-09 20:37 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-01-06 06:22 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FFC1AD35-1F51-4B3D-AD73-605ED82B2068}\mpengine.dll 2011-12-14 02:57 . 2011-10-25 16:09 85504 ----a-w- c:\windows\system32\csrsrv.dll 2011-12-14 02:57 . 2011-11-08 14:58 2048 ----a-w- c:\windows\system32\tzres.dll 2011-12-14 02:57 . 2011-11-08 14:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2011-12-14 02:57 . 2011-10-14 17:30 559616 ----a-w- c:\windows\system32\EncDec.dll 2011-12-14 02:57 . 2011-10-14 16:02 429056 ----a-w- c:\windows\SysWow64\EncDec.dll 2011-12-14 02:49 . 2011-11-08 12:10 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2011-12-14 02:49 . 2011-11-08 12:10 2409784 ----a-w- c:\program files (x86)\Windows Mail\OESpamFilter.dat . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-12-16 09:02 . 2011-11-30 09:37 212502 ----a-w- c:\windows\SysWow64\~.tmp . . ((((((((((((((((((((((((((((( SnapShot@2011-11-16_01.20.21 ))))))))))))))))))))))))))))))))))))))))) . - 2011-10-13 07:59 . 2011-09-30 23:02 66560 c:\windows\SysWOW64\mshtmled.dll + 2011-12-14 02:56 . 2011-11-03 06:18 66560 c:\windows\SysWOW64\mshtmled.dll - 2011-10-13 07:59 . 2011-09-30 21:29 13312 c:\windows\SysWOW64\msfeedssync.exe + 2011-12-14 02:56 . 2011-11-03 04:44 13312 c:\windows\SysWOW64\msfeedssync.exe - 2011-10-13 07:59 . 2011-09-30 23:02 55296 c:\windows\SysWOW64\msfeedsbs.dll + 2011-12-14 02:56 . 2011-11-03 06:18 55296 c:\windows\SysWOW64\msfeedsbs.dll + 2011-12-14 02:56 . 2011-11-03 06:22 64512 c:\windows\SysWOW64\migration\WininetPlugin.dll - 2011-10-13 07:59 . 2011-09-30 23:06 64512 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2011-12-14 02:56 . 2011-11-03 06:17 43520 c:\windows\SysWOW64\licmgr10.dll - 2011-10-13 07:59 . 2011-09-30 23:02 43520 c:\windows\SysWOW64\licmgr10.dll + 2011-12-14 02:56 . 2011-11-03 06:17 25600 c:\windows\SysWOW64\jsproxy.dll - 2011-10-13 07:59 . 2011-09-30 23:01 25600 c:\windows\SysWOW64\jsproxy.dll - 2011-10-13 07:59 . 2011-09-30 23:01 71680 c:\windows\SysWOW64\iesetup.dll + 2011-12-14 02:56 . 2011-11-03 06:17 71680 c:\windows\SysWOW64\iesetup.dll + 2011-12-14 02:56 . 2011-11-03 06:17 55808 c:\windows\SysWOW64\iernonce.dll - 2011-10-13 07:59 . 2011-09-30 23:01 55808 c:\windows\SysWOW64\iernonce.dll - 2010-04-09 19:52 . 2011-10-09 21:08 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-04-09 19:52 . 2012-01-06 02:16 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-04-09 19:52 . 2011-10-09 21:08 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-04-09 19:52 . 2012-01-06 02:16 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2010-04-09 19:52 . 2011-10-09 21:08 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-04-09 19:52 . 2012-01-06 02:16 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-04-09 18:06 . 2012-01-09 20:44 46332 c:\windows\system32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2006-11-02 15:42 . 2012-01-09 20:44 57726 c:\windows\system32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2011-12-14 02:56 . 2011-11-03 06:50 96768 c:\windows\system32\mshtmled.dll - 2011-10-13 07:59 . 2011-09-30 23:21 96768 c:\windows\system32\mshtmled.dll - 2011-10-13 07:59 . 2011-09-30 21:47 12288 c:\windows\system32\msfeedssync.exe + 2011-12-14 02:56 . 2011-11-03 05:11 12288 c:\windows\system32\msfeedssync.exe - 2011-10-13 07:59 . 2011-09-30 23:21 71680 c:\windows\system32\msfeedsbs.dll + 2011-12-14 02:56 . 2011-11-03 06:50 71680 c:\windows\system32\msfeedsbs.dll + 2011-12-14 02:56 . 2011-11-03 06:55 93184 c:\windows\system32\migration\WininetPlugin.dll - 2011-10-13 07:59 . 2011-09-30 23:25 93184 c:\windows\system32\migration\WininetPlugin.dll - 2011-10-13 07:59 . 2011-09-30 23:21 56832 c:\windows\system32\licmgr10.dll + 2011-12-14 02:56 . 2011-11-03 06:50 56832 c:\windows\system32\licmgr10.dll - 2011-10-13 07:59 . 2011-09-30 23:21 31744 c:\windows\system32\jsproxy.dll + 2011-12-14 02:56 . 2011-11-03 06:50 31744 c:\windows\system32\jsproxy.dll + 2011-12-14 02:56 . 2011-11-03 06:49 77312 c:\windows\system32\iesetup.dll - 2011-10-13 07:59 . 2011-09-30 23:20 77312 c:\windows\system32\iesetup.dll - 2011-10-13 07:59 . 2011-09-30 23:20 72192 c:\windows\system32\iernonce.dll + 2011-12-14 02:56 . 2011-11-03 06:49 72192 c:\windows\system32\iernonce.dll + 2011-12-14 02:56 . 2011-11-03 05:11 70656 c:\windows\system32\ie4uinit.exe - 2011-10-13 07:59 . 2011-09-30 21:47 70656 c:\windows\system32\ie4uinit.exe + 2010-04-09 17:54 . 2012-01-09 19:23 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-04-09 17:54 . 2011-11-15 07:45 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-04-09 17:54 . 2012-01-09 19:23 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2010-04-09 17:54 . 2011-11-15 07:45 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-04-09 17:54 . 2012-01-09 19:23 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-04-09 17:54 . 2011-11-15 07:45 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-06-28 09:37 . 2011-11-15 09:09 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-06-28 09:37 . 2012-01-03 11:38 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-06-28 09:37 . 2011-11-15 09:09 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-06-28 09:37 . 2012-01-03 11:38 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-06-28 09:37 . 2012-01-03 11:38 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-06-28 09:37 . 2011-11-15 09:09 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-04-10 16:31 . 2011-11-14 08:47 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-04-10 16:31 . 2012-01-03 09:13 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-04-10 16:31 . 2012-01-03 09:13 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-04-10 16:31 . 2011-11-14 08:47 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-01-05 07:32 . 2011-12-27 02:51 43280 c:\windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe + 2012-01-05 07:32 . 2011-12-27 02:51 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2012-01-06 02:11 . 2012-01-06 02:11 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll - 2011-10-13 07:58 . 2011-10-13 07:58 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll - 2011-10-13 07:58 . 2011-10-13 07:58 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2012-01-06 02:11 . 2012-01-06 02:11 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2012-01-06 02:11 . 2012-01-06 02:11 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2011-10-13 07:58 . 2011-10-13 07:58 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2011-10-13 07:58 . 2011-10-13 07:58 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll + 2012-01-06 02:11 . 2012-01-06 02:11 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll + 2012-01-06 02:11 . 2012-01-06 02:11 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll - 2011-10-13 07:58 . 2011-10-13 07:58 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll - 2011-10-13 07:58 . 2011-10-13 07:58 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll + 2012-01-06 02:11 . 2012-01-06 02:11 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll + 2012-01-06 02:11 . 2012-01-06 02:11 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll - 2011-10-13 07:57 . 2011-10-13 07:57 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll - 2011-10-13 07:57 . 2011-10-13 07:57 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2012-01-06 02:11 . 2012-01-06 02:11 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2012-01-06 02:11 . 2012-01-06 02:11 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2011-10-13 07:57 . 2011-10-13 07:57 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2011-10-13 07:57 . 2011-10-13 07:57 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2012-01-06 02:11 . 2012-01-06 02:11 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2012-01-06 02:11 . 2012-01-06 02:11 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll - 2011-10-13 07:57 . 2011-10-13 07:57 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll - 2011-10-13 07:57 . 2011-10-13 07:57 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2012-01-06 02:11 . 2012-01-06 02:11 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2011-10-13 07:57 . 2011-10-13 07:57 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll + 2012-01-06 02:11 . 2012-01-06 02:11 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll + 2012-01-06 02:11 . 2012-01-06 02:11 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2011-10-13 07:57 . 2011-10-13 07:57 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2011-10-13 07:57 . 2011-10-13 07:57 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2012-01-06 02:11 . 2012-01-06 02:11 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2012-01-06 02:11 . 2012-01-06 02:11 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll - 2011-10-13 07:57 . 2011-10-13 07:57 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll + 2012-01-06 02:11 . 2012-01-06 02:11 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2011-10-13 07:57 . 2011-10-13 07:57 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2012-01-06 02:11 . 2012-01-06 02:11 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2011-10-13 07:57 . 2011-10-13 07:57 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2012-01-06 02:11 . 2012-01-06 02:11 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2011-10-13 07:57 . 2011-10-13 07:57 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2011-10-13 07:57 . 2011-10-13 07:57 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-01-06 02:11 . 2012-01-06 02:11 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-01-06 02:11 . 2012-01-06 02:11 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-10-13 07:57 . 2011-10-13 07:57 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-10-13 07:55 . 2011-10-13 07:55 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-01-06 02:10 . 2012-01-06 02:10 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2011-10-13 07:56 . 2011-10-13 07:56 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-01-06 02:10 . 2012-01-06 02:10 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2010-06-11 16:18 . 2011-12-15 02:22 35088 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\oisicon.exe - 2010-06-11 16:18 . 2011-10-13 15:42 35088 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\oisicon.exe + 2010-06-11 16:18 . 2011-12-15 02:22 18704 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\mspicons.exe - 2010-06-11 16:18 . 2011-10-13 15:42 18704 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\mspicons.exe + 2010-06-11 16:18 . 2011-12-15 02:22 20240 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\cagicon.exe - 2010-06-11 16:18 . 2011-10-13 15:42 20240 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\cagicon.exe + 2012-01-06 02:54 . 2012-01-06 02:54 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\32988c989fec0b0a6ea7420b687847f0\System.Web.DynamicData.Design.ni.dll + 2012-01-06 03:09 . 2012-01-06 03:09 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\45904e3cf3a3043ade103996f8a89a5b\System.Web.DynamicData.Design.ni.dll + 2010-04-09 20:51 . 2011-12-19 16:06 3416 c:\windows\system32\WDI\ERCQueuedResolutions.dat + 2011-03-29 08:23 . 2012-01-09 20:44 9208 c:\windows\system32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-461052287-753110614-204624192-1003_UserData.bin - 2011-11-16 01:18 . 2011-11-16 01:18 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-01-09 20:42 . 2012-01-09 20:42 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-11-16 01:18 . 2011-11-16 01:18 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-01-09 20:42 . 2012-01-09 20:42 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-12-14 02:56 . 2011-11-03 06:22 916992 c:\windows\SysWOW64\wininet.dll - 2011-10-13 07:59 . 2011-09-30 23:06 105984 c:\windows\SysWOW64\url.dll + 2011-12-14 02:56 . 2011-11-03 06:21 105984 c:\windows\SysWOW64\url.dll - 2011-10-13 07:59 . 2011-09-30 23:04 206848 c:\windows\SysWOW64\occache.dll + 2011-12-14 02:56 . 2011-11-03 06:20 206848 c:\windows\SysWOW64\occache.dll - 2011-10-13 07:59 . 2011-09-30 23:03 611840 c:\windows\SysWOW64\mstime.dll + 2011-12-14 02:56 . 2011-11-03 06:18 611840 c:\windows\SysWOW64\mstime.dll - 2011-10-13 07:59 . 2011-09-30 23:02 602112 c:\windows\SysWOW64\msfeeds.dll + 2011-12-14 02:56 . 2011-11-03 06:18 602112 c:\windows\SysWOW64\msfeeds.dll - 2011-10-13 07:59 . 2011-09-30 21:29 133632 c:\windows\SysWOW64\ieUnatt.exe + 2011-12-14 02:56 . 2011-11-03 04:45 133632 c:\windows\SysWOW64\ieUnatt.exe + 2011-12-14 02:56 . 2011-11-03 06:17 164352 c:\windows\SysWOW64\ieui.dll - 2011-10-13 07:59 . 2011-09-30 23:01 164352 c:\windows\SysWOW64\ieui.dll - 2011-10-13 07:59 . 2011-09-30 23:01 109056 c:\windows\SysWOW64\iesysprep.dll + 2011-12-14 02:56 . 2011-11-03 06:17 109056 c:\windows\SysWOW64\iesysprep.dll + 2011-12-14 02:56 . 2011-11-03 06:17 184320 c:\windows\SysWOW64\iepeers.dll - 2011-10-13 07:59 . 2011-09-30 23:01 184320 c:\windows\SysWOW64\iepeers.dll - 2011-10-13 07:59 . 2011-09-30 23:01 387584 c:\windows\SysWOW64\iedkcs32.dll + 2011-12-14 02:56 . 2011-11-03 06:17 387584 c:\windows\SysWOW64\iedkcs32.dll + 2011-12-14 02:56 . 2011-11-03 04:45 174080 c:\windows\SysWOW64\ie4uinit.exe - 2011-10-13 07:59 . 2011-09-30 21:29 174080 c:\windows\SysWOW64\ie4uinit.exe + 2010-06-14 01:12 . 2011-12-22 15:51 233220 c:\windows\system32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2011-12-14 02:56 . 2011-11-03 06:54 108032 c:\windows\system32\url.dll - 2011-10-13 07:59 . 2011-09-30 23:25 108032 c:\windows\system32\url.dll + 2006-12-05 07:18 . 2012-01-06 02:10 671902 c:\windows\system32\perfh015.dat - 2006-12-05 07:18 . 2011-11-14 08:56 671902 c:\windows\system32\perfh015.dat + 2006-11-02 12:46 . 2012-01-06 02:10 595798 c:\windows\system32\perfh009.dat - 2006-11-02 12:46 . 2011-11-14 08:56 595798 c:\windows\system32\perfh009.dat + 2006-12-05 07:18 . 2012-01-06 02:10 130310 c:\windows\system32\perfc015.dat - 2006-12-05 07:18 . 2011-11-14 08:56 130310 c:\windows\system32\perfc015.dat - 2006-11-02 12:46 . 2011-11-14 08:56 103872 c:\windows\system32\perfc009.dat + 2006-11-02 12:46 . 2012-01-06 02:10 103872 c:\windows\system32\perfc009.dat - 2011-10-13 07:59 . 2011-09-30 23:23 243712 c:\windows\system32\occache.dll + 2011-12-14 02:56 . 2011-11-03 06:53 243712 c:\windows\system32\occache.dll - 2011-10-13 07:59 . 2011-09-30 23:21 710656 c:\windows\system32\msfeeds.dll + 2011-12-14 02:56 . 2011-11-03 06:50 710656 c:\windows\system32\msfeeds.dll + 2011-12-14 02:56 . 2011-11-03 05:11 162816 c:\windows\system32\ieUnatt.exe - 2011-10-13 07:59 . 2011-09-30 21:48 162816 c:\windows\system32\ieUnatt.exe - 2011-10-13 07:59 . 2011-09-30 23:20 219136 c:\windows\system32\ieui.dll + 2011-12-14 02:56 . 2011-11-03 06:49 219136 c:\windows\system32\ieui.dll + 2011-12-14 02:56 . 2011-11-03 06:49 132096 c:\windows\system32\iesysprep.dll - 2011-10-13 07:59 . 2011-09-30 23:20 132096 c:\windows\system32\iesysprep.dll + 2011-12-14 02:56 . 2011-11-03 06:49 252416 c:\windows\system32\iepeers.dll - 2011-10-13 07:59 . 2011-09-30 23:20 252416 c:\windows\system32\iepeers.dll + 2011-12-14 02:56 . 2011-11-03 06:49 459776 c:\windows\system32\iedkcs32.dll - 2011-10-13 07:59 . 2011-09-30 23:20 459776 c:\windows\system32\iedkcs32.dll - 2010-04-12 08:17 . 2011-10-10 07:05 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2010-04-12 08:17 . 2012-01-09 19:23 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2011-02-24 16:53 . 2012-01-09 20:38 518084 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat - 2011-02-24 16:53 . 2011-11-16 01:16 518084 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-12-26 04:47 . 2011-12-26 04:47 261912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe + 2012-01-05 07:32 . 2011-12-27 02:51 744720 c:\windows\Microsoft.NET\Framework64\v2.0.50727\webengine.dll + 2011-12-26 03:39 . 2011-12-26 03:39 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe + 2012-01-05 07:32 . 2011-12-27 02:51 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll - 2011-10-13 07:58 . 2011-10-13 07:58 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll + 2012-01-06 02:11 . 2012-01-06 02:11 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2011-10-13 07:58 . 2011-10-13 07:58 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-01-06 02:11 . 2012-01-06 02:11 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-01-06 02:11 . 2012-01-06 02:11 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2011-10-13 07:57 . 2011-10-13 07:57 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2011-10-13 07:58 . 2011-10-13 07:58 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-01-06 02:11 . 2012-01-06 02:11 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-01-06 02:11 . 2012-01-06 02:11 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2011-10-13 07:57 . 2011-10-13 07:57 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2011-10-13 07:58 . 2011-10-13 07:58 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll + 2012-01-06 02:11 . 2012-01-06 02:11 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2011-10-13 07:57 . 2011-10-13 07:57 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2012-01-06 02:11 . 2012-01-06 02:11 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2011-10-13 07:57 . 2011-10-13 07:57 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-01-06 02:11 . 2012-01-06 02:11 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-01-06 02:11 . 2012-01-06 02:11 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2011-10-13 07:57 . 2011-10-13 07:57 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2011-10-13 07:57 . 2011-10-13 07:57 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-01-06 02:11 . 2012-01-06 02:11 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-01-06 02:11 . 2012-01-06 02:11 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2011-10-13 07:57 . 2011-10-13 07:57 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2011-10-13 07:57 . 2011-10-13 07:57 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-01-06 02:11 . 2012-01-06 02:11 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-01-06 02:11 . 2012-01-06 02:11 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2011-10-13 07:57 . 2011-10-13 07:57 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2011-10-13 07:57 . 2011-10-13 07:57 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2012-01-06 02:11 . 2012-01-06 02:11 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll - 2011-10-13 07:57 . 2011-10-13 07:57 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll + 2012-01-06 02:11 . 2012-01-06 02:11 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll - 2011-10-13 07:57 . 2011-10-13 07:57 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2012-01-06 02:11 . 2012-01-06 02:11 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2011-10-13 07:57 . 2011-10-13 07:57 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2012-01-06 02:11 . 2012-01-06 02:11 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2012-01-06 02:11 . 2012-01-06 02:11 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll - 2011-10-13 07:57 . 2011-10-13 07:57 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll - 2011-10-13 07:57 . 2011-10-13 07:57 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-01-06 02:11 . 2012-01-06 02:11 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-01-06 02:11 . 2012-01-06 02:11 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll - 2011-10-13 07:57 . 2011-10-13 07:57 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-01-06 02:11 . 2012-01-06 02:11 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2011-10-13 07:57 . 2011-10-13 07:57 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2012-01-06 02:11 . 2012-01-06 02:11 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2011-10-13 07:57 . 2011-10-13 07:57 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2011-10-13 07:57 . 2011-10-13 07:57 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-01-06 02:11 . 2012-01-06 02:11 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-01-06 02:11 . 2012-01-06 02:11 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2011-10-13 07:57 . 2011-10-13 07:57 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2011-10-13 07:57 . 2011-10-13 07:57 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2012-01-06 02:11 . 2012-01-06 02:11 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2012-01-06 02:11 . 2012-01-06 02:11 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll - 2011-10-13 07:57 . 2011-10-13 07:57 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll + 2012-01-06 02:11 . 2012-01-06 02:11 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2011-10-13 07:57 . 2011-10-13 07:57 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2012-01-06 02:11 . 2012-01-06 02:11 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2011-10-13 07:57 . 2011-10-13 07:57 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2011-10-13 07:57 . 2011-10-13 07:57 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-01-06 02:11 . 2012-01-06 02:11 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-01-06 02:11 . 2012-01-06 02:11 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll - 2011-10-13 07:57 . 2011-10-13 07:57 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll + 2012-01-06 02:11 . 2012-01-06 02:11 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2011-10-13 07:57 . 2011-10-13 07:57 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2012-01-06 02:11 . 2012-01-06 02:11 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll - 2011-10-13 07:57 . 2011-10-13 07:57 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll - 2011-10-13 07:57 . 2011-10-13 07:57 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll + 2012-01-06 02:11 . 2012-01-06 02:11 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2011-10-13 07:57 . 2011-10-13 07:57 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll + 2012-01-06 02:11 . 2012-01-06 02:11 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll - 2011-10-13 07:57 . 2011-10-13 07:57 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-01-06 02:11 . 2012-01-06 02:11 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll - 2011-10-13 07:57 . 2011-10-13 07:57 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-01-06 02:11 . 2012-01-06 02:11 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-01-06 02:11 . 2012-01-06 02:11 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2011-10-13 07:58 . 2011-10-13 07:58 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2012-01-06 02:11 . 2012-01-06 02:11 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll - 2011-10-13 07:58 . 2011-10-13 07:58 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll - 2011-10-13 07:58 . 2011-10-13 07:58 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2012-01-06 02:11 . 2012-01-06 02:11 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2011-10-13 07:58 . 2011-10-13 07:58 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2012-01-06 02:11 . 2012-01-06 02:11 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2011-10-13 07:58 . 2011-10-13 07:58 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-01-06 02:11 . 2012-01-06 02:11 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll - 2011-10-13 07:58 . 2011-10-13 07:58 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2012-01-06 02:11 . 2012-01-06 02:11 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2011-10-13 07:57 . 2011-10-13 07:57 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2012-01-06 02:11 . 2012-01-06 02:11 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2012-01-06 02:11 . 2012-01-06 02:11 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2011-10-13 07:57 . 2011-10-13 07:57 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-01-06 02:11 . 2012-01-06 02:11 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2011-10-13 07:57 . 2011-10-13 07:57 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2011-10-13 07:57 . 2011-10-13 07:57 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-01-06 02:11 . 2012-01-06 02:11 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-01-06 02:11 . 2012-01-06 02:11 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2011-10-13 07:57 . 2011-10-13 07:57 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2011-10-13 07:57 . 2011-10-13 07:57 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-01-06 02:11 . 2012-01-06 02:11 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2011-10-13 07:58 . 2011-10-13 07:58 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-01-06 02:11 . 2012-01-06 02:11 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-01-06 02:11 . 2012-01-06 02:11 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2011-10-13 07:57 . 2011-10-13 07:57 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-01-06 02:11 . 2012-01-06 02:11 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-10-13 07:57 . 2011-10-13 07:57 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-01-06 02:11 . 2012-01-06 02:11 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2011-10-13 07:57 . 2011-10-13 07:57 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-01-06 02:11 . 2012-01-06 02:11 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2011-10-13 07:57 . 2011-10-13 07:57 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-01-06 02:11 . 2012-01-06 02:11 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2011-10-13 07:57 . 2011-10-13 07:57 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-01-06 02:10 . 2012-01-06 02:10 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2011-10-13 07:56 . 2011-10-13 07:56 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-01-06 02:10 . 2012-01-06 02:10 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-10-13 07:56 . 2011-10-13 07:56 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-01-06 02:10 . 2012-01-06 02:10 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2011-10-13 07:56 . 2011-10-13 07:56 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2010-06-11 16:18 . 2011-10-13 15:42 888080 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\wordicon.exe + 2010-06-11 16:18 . 2011-12-15 02:22 888080 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\wordicon.exe - 2010-06-11 16:18 . 2011-10-13 15:42 272648 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\pubs.exe + 2010-06-11 16:18 . 2011-12-15 02:22 272648 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\pubs.exe + 2010-06-11 16:18 . 2011-12-15 02:22 922384 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\pptico.exe - 2010-06-11 16:18 . 2011-10-13 15:42 922384 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\pptico.exe - 2010-06-11 16:18 . 2011-10-13 15:42 845584 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\outicon.exe + 2010-06-11 16:18 . 2011-12-15 02:22 845584 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\outicon.exe - 2010-06-11 16:18 . 2011-10-13 15:42 217864 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\misc.exe + 2010-06-11 16:18 . 2011-12-15 02:22 217864 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\misc.exe + 2011-11-16 00:03 . 2011-12-19 09:33 334848 c:\windows\Installer\{5783F2D7-8009-0409-0102-0060B0CE6BBA}\Acadlt162_icon.exe - 2011-11-16 00:03 . 2011-11-16 00:11 334848 c:\windows\Installer\{5783F2D7-8009-0409-0102-0060B0CE6BBA}\Acadlt162_icon.exe + 2012-01-06 02:53 . 2012-01-06 02:53 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\305bff6f5396544a7bfc56e84bfa1e87\System.Web.Routing.ni.dll + 2012-01-06 02:54 . 2012-01-06 02:54 449536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\0e0a0efe9ab9642700a8f57a4edbe976\System.Web.Entity.ni.dll + 2012-01-06 02:54 . 2012-01-06 02:54 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\d5d13f24e51a4fa41be09b8d2241f600\System.Web.Entity.Design.ni.dll + 2012-01-06 02:53 . 2012-01-06 02:53 754176 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\86f7d8a68c51823d89921f55ff7e2603\System.Web.DynamicData.ni.dll + 2012-01-06 02:52 . 2012-01-06 02:52 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\40994da02056e19475c5958f64195807\System.Web.Abstractions.ni.dll + 2012-01-06 02:50 . 2012-01-06 02:50 438784 c:\windows\assembly\NativeImages_v2.0.50727_64\ServiceModelReg\6ba06b090714e51e8a92499ade057045\ServiceModelReg.ni.exe + 2012-01-06 02:28 . 2012-01-06 02:28 504320 c:\windows\assembly\NativeImages_v2.0.50727_64\AdWindowsInterop\ae0ffa9395e10f06e352794f14aa6b83\AdWindowsInterop.ni.dll - 2011-10-14 11:15 . 2011-10-14 11:15 504320 c:\windows\assembly\NativeImages_v2.0.50727_64\AdWindowsInterop\ae0ffa9395e10f06e352794f14aa6b83\AdWindowsInterop.ni.dll + 2012-01-06 03:09 . 2012-01-06 03:09 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\1d3da9468a4b3eaf6e2ea9def503d888\System.Web.Routing.ni.dll + 2012-01-06 03:10 . 2012-01-06 03:10 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\dba78af9f778d38117fe4ccf5f4c76f7\System.Web.Extensions.Design.ni.dll + 2012-01-06 03:09 . 2012-01-06 03:09 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\fcd6fda81cab3ace8b9d77887a01e892\System.Web.Entity.ni.dll + 2012-01-06 03:09 . 2012-01-06 03:09 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\337de84cce8fc2bcbbf7900132abbc2f\System.Web.Entity.Design.ni.dll + 2012-01-06 03:09 . 2012-01-06 03:09 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\d8313ac5d702f0ffc0e77ea9d945cfd2\System.Web.DynamicData.ni.dll + 2012-01-06 03:09 . 2012-01-06 03:09 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\0de7bfc89e883f66f872c1158e06d5cb\System.Web.Abstractions.ni.dll + 2012-01-06 02:57 . 2012-01-06 02:57 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\311bc26c3ed83409589eb6bae0eeb86e\System.Runtime.Remoting.ni.dll + 2012-01-06 03:07 . 2012-01-06 03:07 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\c60afe58108cefe6b558996f0d9a1c11\System.Data.Entity.Design.ni.dll + 2012-01-06 03:07 . 2012-01-06 03:07 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\050c7465e7222cdab000294af3131403\ServiceModelReg.ni.exe + 2011-12-15 02:22 . 2011-12-15 02:22 350080 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll - 2011-10-13 07:59 . 2011-09-30 23:06 1212416 c:\windows\SysWOW64\urlmon.dll + 2011-12-14 02:56 . 2011-11-03 06:21 1212416 c:\windows\SysWOW64\urlmon.dll + 2011-12-14 02:56 . 2011-11-03 06:18 5978112 c:\windows\SysWOW64\mshtml.dll + 2011-12-14 02:56 . 2011-11-03 06:17 2000384 c:\windows\SysWOW64\iertutil.dll - 2011-10-13 07:59 . 2011-09-30 23:01 2000384 c:\windows\SysWOW64\iertutil.dll + 2011-12-14 02:56 . 2011-11-03 06:55 1147392 c:\windows\system32\wininet.dll + 2011-12-14 02:56 . 2011-11-23 13:57 2764800 c:\windows\system32\win32k.sys - 2011-10-13 07:59 . 2011-09-30 23:25 1488384 c:\windows\system32\urlmon.dll + 2011-12-14 02:56 . 2011-11-03 06:55 1488384 c:\windows\system32\urlmon.dll + 2011-12-14 02:56 . 2011-11-03 06:51 1062912 c:\windows\system32\mstime.dll - 2011-10-13 07:59 . 2011-09-30 23:22 1062912 c:\windows\system32\mstime.dll + 2011-12-14 02:56 . 2011-11-03 06:50 9292288 c:\windows\system32\mshtml.dll + 2011-12-14 02:56 . 2011-11-03 06:49 2350592 c:\windows\system32\iertutil.dll - 2011-10-13 07:59 . 2011-09-30 23:20 2350592 c:\windows\system32\iertutil.dll + 2006-11-02 15:20 . 2011-12-15 02:45 5270400 c:\windows\system32\FNTCACHE.DAT - 2006-11-02 15:20 . 2011-11-16 00:45 5270400 c:\windows\system32\FNTCACHE.DAT + 2010-04-09 20:22 . 2012-01-09 20:39 4793680 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2012-01-05 07:32 . 2011-12-27 02:51 5259264 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Web.dll + 2012-01-05 07:32 . 2011-12-27 02:51 5251072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2012-01-06 02:11 . 2012-01-06 02:11 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2011-10-13 07:58 . 2011-10-13 07:58 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-01-06 02:11 . 2012-01-06 02:11 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - 2011-10-13 07:57 . 2011-10-13 07:57 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - 2011-10-13 07:57 . 2011-10-13 07:57 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-01-06 02:11 . 2012-01-06 02:11 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-01-06 02:11 . 2012-01-06 02:11 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2011-10-13 07:57 . 2011-10-13 07:57 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2011-10-13 07:57 . 2011-10-13 07:57 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2012-01-06 02:11 . 2012-01-06 02:11 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2012-01-06 02:11 . 2012-01-06 02:11 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2011-10-13 07:57 . 2011-10-13 07:57 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2012-01-06 02:11 . 2012-01-06 02:11 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll - 2011-10-13 07:57 . 2011-10-13 07:57 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2012-01-06 02:11 . 2012-01-06 02:11 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2011-10-13 07:57 . 2011-10-13 07:57 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2011-10-13 07:57 . 2011-10-13 07:57 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll + 2012-01-06 02:11 . 2012-01-06 02:11 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll + 2012-01-06 02:11 . 2012-01-06 02:11 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll - 2011-10-13 07:57 . 2011-10-13 07:57 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll - 2011-10-13 07:57 . 2011-10-13 07:57 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll + 2012-01-06 02:11 . 2012-01-06 02:11 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2011-10-13 07:58 . 2011-10-13 07:58 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-01-06 02:11 . 2012-01-06 02:11 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-01-06 02:11 . 2012-01-06 02:11 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2011-10-13 07:57 . 2011-10-13 07:57 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2011-10-13 07:58 . 2011-10-13 07:58 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-01-06 02:11 . 2012-01-06 02:11 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2011-10-13 07:57 . 2011-10-13 07:57 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-01-06 02:11 . 2012-01-06 02:11 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2011-10-13 07:57 . 2011-10-13 07:57 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-01-06 02:11 . 2012-01-06 02:11 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2011-10-13 07:56 . 2011-10-13 07:56 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-01-06 02:10 . 2012-01-06 02:10 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2011-10-13 07:57 . 2011-10-13 07:57 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-01-06 02:11 . 2012-01-06 02:11 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2011-10-13 07:55 . 2011-10-13 07:55 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-01-06 02:10 . 2012-01-06 02:10 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-01-06 02:10 . 2012-01-06 02:10 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2011-10-13 07:56 . 2011-10-13 07:56 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2011-12-25 04:48 . 2011-12-25 04:48 1505792 c:\windows\Installer\de89b5e.msp + 2011-12-26 05:24 . 2011-12-26 05:24 8835072 c:\windows\Installer\de89b55.msp + 2011-11-01 12:34 . 2011-11-01 12:34 4250112 c:\windows\Installer\da306cf.msp + 2011-11-01 12:34 . 2011-11-01 12:34 2247168 c:\windows\Installer\d90edec.msp + 2011-11-11 15:14 . 2011-11-11 15:14 9096192 c:\windows\Installer\d90edd8.msp + 2011-11-01 12:34 . 2011-11-01 12:34 4225536 c:\windows\Installer\d90edc4.msp + 2011-11-01 12:34 . 2011-11-01 12:34 2531840 c:\windows\Installer\d90edab.msp + 2011-11-11 15:15 . 2011-11-11 15:15 1795584 c:\windows\Installer\d90ed97.msp + 2011-11-11 15:16 . 2011-11-11 15:16 8458240 c:\windows\Installer\d90ed83.msp + 2011-12-13 07:10 . 2011-12-13 07:10 4703232 c:\windows\Installer\212989a8.msp - 2010-06-11 16:18 . 2011-10-13 15:42 1172240 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\xlicons.exe + 2010-06-11 16:18 . 2011-12-15 02:22 1172240 c:\windows\Installer\{91120000-00CA-0000-0000-0000000FF1CE}\xlicons.exe + 2009-04-02 19:44 . 2009-04-02 19:44 2532224 c:\windows\Installer\$PatchCache$\Managed\00002119AC0000000000000000F01FEC\12.0.6425\GRAPH.EXE + 2012-01-06 02:56 . 2012-01-06 02:56 1754112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\4223600dc6133441b1898abaf12031ca\System.WorkflowServices.ni.dll + 2012-01-06 02:13 . 2012-01-06 02:13 2702848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\afbeeaf9c41f39886704cbf181b1feb2\System.Workflow.Runtime.ni.dll + 2012-01-06 02:12 . 2012-01-06 02:12 5956608 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\ac5a3688b743358aa5b24b9efd971d9d\System.Workflow.ComponentModel.ni.dll + 2012-01-06 02:08 . 2012-01-06 02:08 3893248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\007c8c2f4141fd472da7d3558efba598\System.Workflow.Activities.ni.dll + 2012-01-06 02:35 . 2012-01-06 02:35 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\f3222dbcdeebd53ee1c3f88c9ebf6c94\System.Web.Services.ni.dll + 2012-01-06 02:56 . 2012-01-06 02:56 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\525e8846136415d472c2e7ba482ccd54\System.Web.Mobile.ni.dll + 2012-01-06 02:54 . 2012-01-06 02:54 1154560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\cedfd9b90274b017d11ed50abe8634e8\System.Web.Extensions.Design.ni.dll + 2012-01-06 02:53 . 2012-01-06 02:53 3046912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\c0d2bc2e2357ed023b85d18b96e21d60\System.Web.Extensions.ni.dll + 2012-01-06 02:52 . 2012-01-06 02:52 2239488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\cb5200c2d67ebf37333bdd57a06e7a11\System.ServiceModel.Web.ni.dll + 2012-01-06 02:29 . 2012-01-06 02:29 1022464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\a0a442c47ac0b846bb886aa405a10138\System.Runtime.Remoting.ni.dll + 2012-01-06 02:45 . 2012-01-06 02:45 1428992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\74f5ddf803f50c428293fe6115d6eea7\System.IdentityModel.ni.dll + 2012-01-06 02:51 . 2012-01-06 02:51 1845248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\3a35cfdccde13bc82cad2d185cbf499b\System.Data.Services.ni.dll + 2012-01-06 02:50 . 2012-01-06 02:50 1078272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\31ea0ae493a84f5f9fdb53ac2ea0ef5e\System.Data.Entity.Design.ni.dll + 2012-01-06 02:47 . 2012-01-06 02:47 7836672 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\6029a4ca1be3d971d470eb2c1ff627e0\MIGUIControls.ni.dll + 2012-01-06 02:49 . 2012-01-06 02:49 2173952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\7fe40682a4f2f30ddb25da3a8796d282\Microsoft.VisualBasic.ni.dll + 2012-01-06 02:48 . 2012-01-06 02:48 2101248 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\23408f67b7fddc32d03fa6d8deeafcd7\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-01-06 02:48 . 2012-01-06 02:48 2592768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\63575522da8ef0a80b3b5041db2db438\Microsoft.GroupPolicy.Reporting.ni.dll + 2012-01-06 02:28 . 2012-01-06 02:28 5465600 c:\windows\assembly\NativeImages_v2.0.50727_64\AdWindows\cf4512927275b6fdaae0698e833a7544\AdWindows.ni.dll - 2011-10-14 11:15 . 2011-10-14 11:15 5465600 c:\windows\assembly\NativeImages_v2.0.50727_64\AdWindows\cf4512927275b6fdaae0698e833a7544\AdWindows.ni.dll + 2012-01-06 02:27 . 2012-01-06 02:27 2184192 c:\windows\assembly\NativeImages_v2.0.50727_64\AcWindows\38731f50d53aea39a6ba607c742f4093\AcWindows.ni.dll + 2012-01-06 02:26 . 2012-01-06 02:26 7147520 c:\windows\assembly\NativeImages_v2.0.50727_64\acmgd\4526858d1062b9659683b4dcb1836031\acmgd.ni.dll + 2012-01-06 02:24 . 2012-01-06 02:24 1759744 c:\windows\assembly\NativeImages_v2.0.50727_64\AcLayer\cfd0d7603c99495ee25b9352e36b0c6e\AcLayer.ni.dll + 2012-01-06 02:20 . 2012-01-06 02:20 2121216 c:\windows\assembly\NativeImages_v2.0.50727_64\AcCui\0b3ebda872130ee70357e54c34ff6de4\AcCui.ni.dll + 2012-01-06 03:11 . 2012-01-06 03:11 1316864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\32a67054a82cf24c011e116e94d11864\System.WorkflowServices.ni.dll + 2012-01-06 02:15 . 2012-01-06 02:15 1911296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\8bfc3619e3848592a4924cba58a00459\System.Workflow.Runtime.ni.dll + 2012-01-06 02:15 . 2012-01-06 02:15 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\3721ccdfdca60443a32ca9f8a937f315\System.Workflow.ComponentModel.ni.dll + 2012-01-06 02:15 . 2012-01-06 02:15 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\79e0fe6c014999d64e7cf9717624013f\System.Workflow.Activities.ni.dll + 2012-01-06 02:59 . 2012-01-06 02:59 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2cf510e07b605923c496b1ae3c31335f\System.Web.Services.ni.dll + 2012-01-06 03:10 . 2012-01-06 03:10 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\800af0d5c4bcd9b600a229050b22d6bd\System.Web.Mobile.ni.dll + 2012-01-06 03:09 . 2012-01-06 03:09 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c759aa20f1f012c1dc5dd7076d0816f7\System.Web.Extensions.ni.dll + 2012-01-06 03:08 . 2012-01-06 03:08 1651200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\3c93a9b25482a56053eb509a58860dbf\System.ServiceModel.Web.ni.dll + 2012-01-06 03:03 . 2012-01-06 03:03 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\6a1e2938633d08d9d97c6940a537b1ff\System.IdentityModel.ni.dll + 2012-01-06 03:07 . 2012-01-06 03:07 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\d75b561b3c22f68af985785352660022\System.Data.Services.ni.dll + 2012-01-06 03:04 . 2012-01-06 03:04 6340096 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\6e0b0d4d67c760e1e2f6cfd7cd6a8492\MIGUIControls.ni.dll + 2012-01-06 03:06 . 2012-01-06 03:06 1711616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\902ba03598b46f478f3d7561ece592e6\Microsoft.VisualBasic.ni.dll + 2012-01-06 03:05 . 2012-01-06 03:05 1609728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3732b9e409000beda05e878d02da1813\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-01-06 03:05 . 2012-01-06 03:05 2088448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\b56c91fb5ef40af2e9cddcddf5eebeee\Microsoft.GroupPolicy.Reporting.ni.dll + 2012-01-06 02:16 . 2012-01-06 02:16 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll - 2010-10-06 08:19 . 2010-10-06 08:19 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll + 2012-01-05 07:32 . 2011-12-27 02:51 5259264 c:\windows\assembly\GAC_64\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2012-01-05 07:32 . 2011-12-27 02:51 5251072 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2011-12-14 02:56 . 2011-11-03 06:17 11081728 c:\windows\SysWOW64\ieframe.dll - 2011-10-13 07:59 . 2011-09-30 23:01 11081728 c:\windows\SysWOW64\ieframe.dll + 2006-11-02 12:33 . 2012-01-09 20:39 11010048 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT - 2006-11-02 12:33 . 2011-11-14 11:30 11010048 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2006-11-02 12:35 . 2011-12-15 02:15 54867776 c:\windows\system32\mrt.exe + 2011-12-14 02:56 . 2011-11-03 06:49 12476928 c:\windows\system32\ieframe.dll - 2011-10-13 07:59 . 2011-09-30 23:20 12476928 c:\windows\system32\ieframe.dll + 2012-01-09 20:09 . 2012-01-09 20:09 10948608 c:\windows\ERDNT\Hiv-backup\SCHEMA.DAT + 2012-01-06 02:34 . 2012-01-06 02:34 15245824 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\0a2ea7a9a9d9fd9ae47468adbdee2e05\System.Web.ni.dll + 2012-01-06 02:44 . 2012-01-06 02:44 23813632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\efc60b11b649ed506c64172b3373f936\System.ServiceModel.ni.dll + 2012-01-06 02:06 . 2012-01-06 02:06 13718528 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\c41b930b44ddfaef2faf314f690bb35e\System.Design.ni.dll + 2012-01-06 02:24 . 2012-01-06 02:24 12311040 c:\windows\assembly\NativeImages_v2.0.50727_64\acdbmgd\2dfb5e162e67dbcb599a2c406a662817\acdbmgd.ni.dll + 2012-01-06 02:59 . 2012-01-06 02:59 11820032 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\fecd1103dd16dc1192402770caf56575\System.Web.ni.dll + 2012-01-06 03:03 . 2012-01-06 03:03 17404416 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\a2046fbb45b00425d083cc8706b75479\System.ServiceModel.ni.dll + 2012-01-06 02:14 . 2012-01-06 02:14 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\30a87086e78b69d17416bfb74aab355f\System.Design.ni.dll . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-05-06 39408] "AdobeBridge"="" [BU] "Akamai NetSession Interface"="c:\users\Ewa\AppData\Local\Akamai\netsession_win.exe" [2011-12-12 3305760] "WMPNSCFG"="c:\program files (x86)\Windows Media Player\WMPNSCFG.exe" [BU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2009-09-04 417792] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . --- Inne Usługi/Sterowniki w Pamięci --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . Zawartość folderu 'Zaplanowane zadania' . 2012-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-06 10:41] . 2012-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-06 10:41] . 2012-01-09 c:\windows\Tasks\User_Feed_Synchronization-{C1C2ED38-4CFF-4CB3-8E26-2CF43837D8E8}.job - c:\windows\system32\msfeedssync.exe [2011-12-14 04:44] . 2012-01-09 c:\windows\Tasks\User_Feed_Synchronization-{D79B5A4E-1397-4F72-81CF-F0FBEF968ADF}.job - c:\windows\system32\msfeedssync.exe [2011-12-14 04:44] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"="c:\program files (x86)\Windows Defender\MSASCui.exe" [BU] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-07 2839840] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ------- Skan uzupełniający ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com/ mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&ksportuj do programu Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 10.0.0.1 CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll FF - ProfilePath - . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Akamai] "ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_b427739.dll" . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\program files (x86)\Bonjour\mDNSResponder.exe c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe c:\program files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe . ************************************************************************** . Czas ukończenia: 2012-01-09 21:55:22 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2012-01-09 20:55 . Przed: 39 731 597 312 bajtów wolnych Po: 38 988 566 528 bajtów wolnych . - - End Of File - - 51927875C2FCDFE6D47DA56658135392