ComboFix 12-03-29.02 - Majki 2012-03-30 7:31.2.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1045.18.3069.1695 [GMT 2:00] Running from: c:\users\Majki\Downloads\ComboFix.exe Command switches used :: c:\users\Majki\Desktop\CFScript.txt.txt AV: ESET Smart Security 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} FW: Zapora osobista *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} SP: ESET Smart Security 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Resident AV is active . . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . . --------------- FCopy --------------- . c:\windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll --> c:\windows\SysWOW64\ws2_32.dll . ((((((((((((((((((((((((( Files Created from 2012-02-28 to 2012-03-30 ))))))))))))))))))))))))))))))) . . 2012-03-30 05:42 . 2012-03-30 05:42 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2012-03-30 05:42 . 2012-03-30 05:42 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-03-30 05:19 . 2012-03-30 05:19 27936 ----a-w- c:\windows\system32\drivers\hitmanpro36.sys 2012-03-29 21:08 . 2012-03-29 21:08 -------- d-----w- C:\46ecb1a14a1c3ef0daa846425d15e3 2012-03-29 13:27 . 2012-03-29 13:27 -------- d-----w- c:\program files\ESET 2012-03-29 12:49 . 2012-03-29 12:49 5632 ----a-w- c:\windows\SysWow64\rjlb.dll 2012-03-29 12:23 . 2012-03-29 12:23 -------- d-----w- c:\program files\HitmanPro 2012-03-29 11:53 . 2012-03-29 12:40 -------- d-----w- c:\programdata\HitmanPro 2012-03-29 11:53 . 2012-03-29 11:53 -------- d-----w- c:\programdata\Hitman Pro 2012-03-29 11:11 . 2012-03-29 12:24 -------- d-----w- c:\program files (x86)\PC Tools 2012-03-29 11:05 . 2012-03-29 12:24 -------- d-----w- c:\program files (x86)\Common Files\PC Tools 2012-03-29 11:05 . 2012-02-24 08:36 230952 ----a-w- c:\windows\system32\drivers\PCTSD64.sys 2012-03-29 11:04 . 2012-03-29 12:22 -------- d-----w- c:\programdata\PC Tools 2012-03-29 11:04 . 2012-03-29 11:04 -------- d-----w- c:\users\Majki\AppData\Roaming\TestApp 2012-03-29 10:55 . 2012-03-20 01:51 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8D67F47A-CFDF-4F56-93AF-AA30979F8202}\mpengine.dll 2012-03-29 10:12 . 2012-03-29 10:12 -------- d-----w- C:\System Recovery Files 2012-03-29 07:42 . 2012-03-29 10:45 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files 2012-03-26 06:07 . 2012-03-29 10:45 -------- d-----w- c:\program files (x86)\Tibian 2012-03-24 16:16 . 2012-03-29 10:45 -------- d-----w- c:\users\Majki\AppData\Roaming\DBH 2012-03-23 19:01 . 2012-03-29 10:45 -------- d-----w- c:\users\Majki\AppData\Roaming\Tibia 2012-03-23 19:01 . 2012-03-29 12:50 -------- d-----w- C:\Tibia 2012-03-22 08:01 . 2012-03-22 08:01 -------- d-----w- c:\users\Majki\AppData\Roaming\Malwarebytes 2012-03-22 08:01 . 2012-03-22 08:01 -------- d-----w- c:\programdata\Malwarebytes 2012-03-15 14:30 . 2011-11-19 15:20 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-03-15 14:30 . 2011-11-19 14:50 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe 2012-03-15 14:29 . 2011-11-19 14:50 3913584 ----a-w- c:\windows\SysWow64\ntoskrnl.exe 2012-03-15 08:48 . 2012-02-03 04:34 3145728 ----a-w- c:\windows\system32\win32k.sys 2012-03-15 08:48 . 2012-02-10 06:36 1544192 ----a-w- c:\windows\system32\DWrite.dll 2012-03-15 08:48 . 2012-02-10 05:38 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll 2012-03-15 08:48 . 2012-01-25 06:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll 2012-03-15 08:48 . 2012-01-25 06:33 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe 2012-03-15 08:48 . 2012-01-25 06:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll 2012-03-15 08:46 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll 2012-03-15 08:46 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll 2012-03-15 08:46 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-03-15 08:46 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys 2012-03-09 12:05 . 2012-03-09 12:05 -------- d-----w- c:\program files (x86)\Remere's Map Editor 2012-03-02 13:36 . 2012-03-02 13:36 -------- d-----w- c:\program files\CCleaner 2012-03-01 14:36 . 2012-03-13 09:32 -------- d-----w- c:\users\Majki\AppData\Local\ElevatedDiagnostics 2012-03-01 08:03 . 2012-03-01 08:03 -------- d-----w- c:\program files (x86)\v9Soft . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-03-07 00:15 . 2012-02-17 13:53 258520 ----a-w- c:\windows\system32\aswBoot.exe 2012-02-25 20:38 . 2011-07-27 07:58 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-02-23 07:18 . 2011-05-22 07:29 279656 ------w- c:\windows\system32\MpSigStub.exe 2012-02-10 04:13 . 2012-02-21 15:30 68928 ----a-w- c:\windows\system32\OpenCL.dll 2012-02-10 04:13 . 2012-02-21 15:30 61248 ----a-w- c:\windows\SysWow64\OpenCL.dll 2012-02-10 04:13 . 2012-02-21 15:30 7713088 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2012-02-10 04:13 . 2012-02-21 15:30 25541952 ----a-w- c:\windows\system32\nvoglv64.dll 2012-02-10 04:13 . 2012-02-21 15:30 19443520 ----a-w- c:\windows\SysWow64\nvoglv32.dll 2012-02-10 04:13 . 2012-02-21 15:30 13624128 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2012-02-10 04:13 . 2012-02-21 15:30 8008000 ----a-w- c:\windows\system32\nvcuda.dll 2012-02-10 04:13 . 2012-02-21 15:30 5892928 ----a-w- c:\windows\SysWow64\nvcuda.dll 2012-02-10 04:13 . 2012-02-21 15:30 2872640 ----a-w- c:\windows\system32\nvcuvenc.dll 2012-02-10 04:13 . 2012-02-21 15:30 2672448 ----a-w- c:\windows\system32\nvcuvid.dll 2012-02-10 04:13 . 2012-02-21 15:30 25222976 ----a-w- c:\windows\system32\nvcompiler.dll 2012-02-10 04:13 . 2012-02-21 15:30 2517312 ----a-w- c:\windows\SysWow64\nvcuvid.dll 2012-02-10 04:13 . 2012-02-21 15:30 2437440 ----a-w- c:\windows\SysWow64\nvcuvenc.dll 2012-02-10 04:13 . 2012-02-21 15:30 2301248 ----a-w- c:\windows\SysWow64\nvapi.dll 2012-02-10 04:13 . 2012-02-21 15:30 17642816 ----a-w- c:\windows\system32\nvd3dumx.dll 2012-02-10 04:13 . 2012-02-21 15:30 17543488 ----a-w- c:\windows\SysWow64\nvcompiler.dll 2012-02-10 04:13 . 2012-02-21 15:30 15009600 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2012-02-10 04:13 . 2011-11-12 18:02 2660160 ----a-w- c:\windows\system32\nvapi64.dll 2012-02-10 04:13 . 2011-11-12 18:02 1737536 ----a-w- c:\windows\system32\nvdispco64.dll 2012-02-10 04:13 . 2011-11-12 18:02 1466176 ----a-w- c:\windows\system32\nvgenco64.dll 2012-02-10 04:13 . 2010-10-17 00:55 9717568 ----a-w- c:\windows\system32\nvwgf2umx.dll 2012-02-10 03:14 . 2011-11-12 18:03 6074176 ----a-w- c:\windows\system32\nvcpl.dll 2012-02-10 03:14 . 2011-11-12 18:03 3089728 ----a-w- c:\windows\system32\nvsvc64.dll 2012-02-10 03:07 . 2011-11-12 18:03 2561856 ----a-w- c:\windows\system32\nvsvcr.dll 2012-02-10 03:07 . 2011-11-12 18:03 889664 ----a-w- c:\windows\system32\nvvsvc.exe 2012-02-10 03:07 . 2011-11-12 18:03 63296 ----a-w- c:\windows\system32\nvshext.dll 2012-02-10 03:07 . 2011-11-12 18:03 118080 ----a-w- c:\windows\system32\nvmctray.dll 2012-01-17 12:46 . 2012-02-21 15:30 31040 ----a-w- c:\windows\system32\nvhdap64.dll 2012-01-17 12:45 . 2012-02-21 15:30 72512 ----a-w- c:\windows\system32\nvapo64v.dll 2012-01-17 12:45 . 2012-02-21 15:30 188224 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2012-01-17 12:45 . 2012-02-21 15:30 1451840 ----a-w- c:\windows\system32\nvhdagenco6420103.dll 2012-01-10 09:07 . 2012-01-10 09:07 21712 ----a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS 2012-01-09 21:04 . 2012-01-09 21:05 750488 ----a-w- c:\windows\system32\npdeployJava1.dll 2012-01-09 21:04 . 2011-05-31 13:44 660368 ----a-w- c:\windows\system32\deployJava1.dll 2012-01-09 14:10 . 2012-01-03 16:25 165232 ---ha-w- c:\users\Majki\AppData\Roaming\Microsoft\Virtual PC\VPCKeyboard.dll 2012-01-05 17:54 . 2012-01-05 17:54 294232 ----a-w- c:\windows\system32\drivers\VMM.sys 2012-01-04 10:44 . 2012-02-16 14:07 509952 ----a-w- c:\windows\system32\ntshrui.dll 2012-01-04 08:58 . 2012-02-16 14:07 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll 2011-07-01 19:28 . 2011-07-06 13:56 697856 ----a-w- c:\program files\RPGVXENU.dll 2008-12-19 12:19 . 2011-07-06 13:56 1467680 ----a-w- c:\program files\PSIKey_2.dll 2008-02-24 22:00 . 2011-07-06 13:56 1070080 ----a-w- c:\program files\RPGVX.exe 2007-11-27 22:00 . 2011-07-06 13:56 407552 ----a-w- c:\program files\SciLexer.dll . . ((((((((((((((((((((((((((((( SnapShot@2012-03-29_14.50.57 ))))))))))))))))))))))))))))))))))))))))) . + 2011-05-20 16:53 . 2012-03-30 05:45 46360 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2012-03-30 05:45 48470 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2011-05-20 14:46 . 2012-03-30 05:45 18470 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4156280028-2125676101-1870945796-1000_UserData.bin + 2011-05-20 14:08 . 2012-03-29 15:49 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-05-20 14:08 . 2012-03-29 09:49 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-05-20 14:08 . 2012-03-29 09:49 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2011-05-20 14:08 . 2012-03-29 15:49 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2012-03-29 09:49 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2012-03-29 15:49 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-11-21 21:57 . 2011-11-21 21:57 68880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll + 2011-11-21 20:31 . 2011-11-21 20:31 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll + 2012-03-29 21:13 . 2010-03-18 11:16 50552 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Data.DataSetExtensions.dll + 2012-03-29 21:12 . 2010-03-18 11:16 81784 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Configuration.Install.dll + 2012-03-29 21:13 . 2010-03-18 11:16 81800 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.ComponentModel.DataAnnotations.dll + 2012-03-29 21:13 . 2010-03-18 11:16 39784 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.AddIn.Contract.dll + 2012-03-29 21:12 . 2010-03-18 11:16 12128 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\Microsoft.VisualC.Dll + 2012-03-29 21:11 . 2010-03-18 11:16 78168 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\ISymWrapper.dll + 2012-03-29 21:12 . 2010-03-18 11:16 81248 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\CustomMarshalers.dll + 2012-03-29 21:12 . 2010-03-18 11:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\Accessibility.dll - 2012-02-17 18:36 . 2012-02-17 18:36 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-03-30 05:28 . 2012-03-30 05:28 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-03-30 05:28 . 2012-03-30 05:28 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2012-02-17 18:36 . 2012-02-17 18:36 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2012-03-30 05:28 . 2012-03-30 05:28 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2012-02-17 18:36 . 2012-02-17 18:36 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2012-02-17 18:36 . 2012-02-17 18:36 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll + 2012-03-30 05:28 . 2012-03-30 05:28 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll - 2012-02-17 18:36 . 2012-02-17 18:36 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-03-30 05:28 . 2012-03-30 05:28 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll - 2012-02-17 18:36 . 2012-02-17 18:36 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll + 2012-03-30 05:28 . 2012-03-30 05:28 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-02-17 18:35 . 2012-02-17 18:35 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-03-30 05:28 . 2012-03-30 05:28 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-03-30 05:28 . 2012-03-30 05:28 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll - 2012-02-17 18:35 . 2012-02-17 18:35 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2012-03-30 05:28 . 2012-03-30 05:28 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2012-02-17 18:35 . 2012-02-17 18:35 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2012-02-17 18:35 . 2012-02-17 18:35 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2012-03-30 05:28 . 2012-03-30 05:28 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll - 2012-02-17 18:35 . 2012-02-17 18:35 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2012-03-30 05:28 . 2012-03-30 05:28 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll - 2012-02-17 18:35 . 2012-02-17 18:35 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2012-03-30 05:27 . 2012-03-30 05:27 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2012-03-30 05:28 . 2012-03-30 05:28 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll - 2012-02-17 18:35 . 2012-02-17 18:35 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll - 2012-02-17 18:35 . 2012-02-17 18:35 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2012-03-30 05:28 . 2012-03-30 05:28 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2012-02-17 18:35 . 2012-02-17 18:35 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2012-03-30 05:28 . 2012-03-30 05:28 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2012-03-30 05:27 . 2012-03-30 05:27 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2012-02-17 18:35 . 2012-02-17 18:35 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2012-03-30 05:28 . 2012-03-30 05:28 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2012-02-17 18:35 . 2012-02-17 18:35 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2012-03-30 05:27 . 2012-03-30 05:27 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2012-02-17 18:35 . 2012-02-17 18:35 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2012-02-17 18:35 . 2012-02-17 18:35 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-03-30 05:27 . 2012-03-30 05:27 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-02-17 18:35 . 2012-02-17 18:35 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-03-30 05:27 . 2012-03-30 05:27 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-03-30 05:24 . 2012-03-30 05:24 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-02-17 18:33 . 2012-02-17 18:33 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-02-17 18:33 . 2012-02-17 18:33 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-03-30 05:25 . 2012-03-30 05:25 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2012-03-29 14:49 . 2012-03-29 14:49 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-03-30 05:43 . 2012-03-30 05:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2012-03-29 14:49 . 2012-03-29 14:49 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-03-30 05:43 . 2012-03-30 05:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2009-07-14 17:55 . 2012-03-30 05:24 699848 c:\windows\system32\perfh015.dat - 2009-07-14 17:55 . 2012-03-29 12:47 699848 c:\windows\system32\perfh015.dat + 2009-07-14 02:36 . 2012-03-30 05:24 626130 c:\windows\system32\perfh009.dat - 2009-07-14 02:36 . 2012-03-29 12:47 626130 c:\windows\system32\perfh009.dat + 2009-07-14 17:55 . 2012-03-30 05:24 135966 c:\windows\system32\perfc015.dat - 2009-07-14 17:55 . 2012-03-29 12:47 135966 c:\windows\system32\perfc015.dat - 2009-07-14 02:36 . 2012-03-29 12:47 107514 c:\windows\system32\perfc009.dat + 2009-07-14 02:36 . 2012-03-30 05:24 107514 c:\windows\system32\perfc009.dat - 2009-07-14 05:01 . 2012-03-29 14:48 239208 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2009-07-14 05:01 . 2012-03-30 05:42 239208 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-11-21 21:57 . 2011-11-21 21:57 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll + 2011-11-21 20:31 . 2011-11-21 20:31 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll + 2011-11-21 20:31 . 2011-11-21 20:31 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll + 2012-03-29 21:12 . 2010-03-18 11:16 113512 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.ServiceProcess.dll + 2012-03-29 21:12 . 2010-03-18 11:16 261472 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Security.dll + 2012-03-29 21:12 . 2010-03-18 11:16 378720 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Management.dll + 2012-03-29 21:12 . 2010-03-17 22:51 109568 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.EnterpriseServices.Wrapper.dll + 2012-03-29 21:12 . 2010-03-18 11:16 246128 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.EnterpriseServices.dll + 2012-03-29 21:12 . 2010-03-18 11:16 120152 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Dynamic.dll + 2012-03-29 21:12 . 2010-03-18 11:16 607064 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Drawing.dll + 2012-03-29 21:12 . 2010-03-18 11:16 182144 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.DirectoryServices.Protocols.dll + 2012-03-29 21:12 . 2010-03-18 11:16 395120 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.DirectoryServices.dll + 2012-03-29 21:12 . 2010-03-18 11:16 285072 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.DirectoryServices.AccountManagement.dll + 2012-03-29 21:12 . 2010-03-18 11:16 829280 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Deployment.dll + 2012-03-29 21:12 . 2010-03-18 11:16 747360 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Data.SqlXml.dll + 2012-03-29 21:12 . 2010-03-18 11:16 409448 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.configuration.dll + 2012-03-29 21:13 . 2010-03-18 11:16 210816 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.ComponentModel.Composition.dll + 2012-03-29 21:13 . 2010-03-18 11:16 149848 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.AddIn.dll + 2012-03-29 21:12 . 2010-03-18 11:16 112976 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\sysglobl.dll + 2012-03-29 21:12 . 2010-03-18 11:16 661352 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\Microsoft.VisualBasic.dll + 2012-03-29 21:12 . 2010-03-18 11:16 746336 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\Microsoft.JScript.dll + 2012-03-29 21:12 . 2010-03-18 11:16 505184 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\Microsoft.CSharp.dll + 2012-03-30 05:28 . 2012-03-30 05:28 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2012-02-17 18:36 . 2012-02-17 18:36 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2012-02-17 18:36 . 2012-02-17 18:36 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-03-30 05:28 . 2012-03-30 05:28 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-03-30 05:28 . 2012-03-30 05:28 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2012-02-17 18:35 . 2012-02-17 18:35 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll + 2012-03-30 05:28 . 2012-03-30 05:28 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - 2012-02-17 18:36 . 2012-02-17 18:36 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - 2012-02-17 18:36 . 2012-02-17 18:36 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-03-30 05:28 . 2012-03-30 05:28 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2012-02-17 18:36 . 2012-02-17 18:36 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll + 2012-03-30 05:28 . 2012-03-30 05:28 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll + 2012-03-30 05:28 . 2012-03-30 05:28 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2012-02-17 18:35 . 2012-02-17 18:35 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2012-02-17 18:35 . 2012-02-17 18:35 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-03-30 05:28 . 2012-03-30 05:28 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-03-30 05:28 . 2012-03-30 05:28 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2012-02-17 18:35 . 2012-02-17 18:35 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll + 2012-03-30 05:28 . 2012-03-30 05:28 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll - 2012-02-17 18:35 . 2012-02-17 18:35 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-03-30 05:28 . 2012-03-30 05:28 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2012-02-17 18:35 . 2012-02-17 18:35 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2012-02-17 18:35 . 2012-02-17 18:35 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-03-30 05:28 . 2012-03-30 05:28 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-03-30 05:28 . 2012-03-30 05:28 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2012-02-17 18:35 . 2012-02-17 18:35 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2012-02-17 18:35 . 2012-02-17 18:35 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2012-03-30 05:28 . 2012-03-30 05:28 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll - 2012-02-17 18:35 . 2012-02-17 18:35 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll + 2012-03-30 05:28 . 2012-03-30 05:28 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll - 2012-02-17 18:35 . 2012-02-17 18:35 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2012-03-30 05:28 . 2012-03-30 05:28 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2012-02-17 18:35 . 2012-02-17 18:35 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2012-03-30 05:28 . 2012-03-30 05:28 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2012-02-17 18:35 . 2012-02-17 18:35 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2012-03-30 05:28 . 2012-03-30 05:28 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2012-03-30 05:28 . 2012-03-30 05:28 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll - 2012-02-17 18:35 . 2012-02-17 18:35 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-03-30 05:28 . 2012-03-30 05:28 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll - 2012-02-17 18:35 . 2012-02-17 18:35 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-03-30 05:28 . 2012-03-30 05:28 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2012-02-17 18:35 . 2012-02-17 18:35 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2012-02-17 18:35 . 2012-02-17 18:35 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll + 2012-03-30 05:27 . 2012-03-30 05:27 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2012-02-17 18:35 . 2012-02-17 18:35 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-03-30 05:28 . 2012-03-30 05:28 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-03-30 05:28 . 2012-03-30 05:28 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2012-02-17 18:35 . 2012-02-17 18:35 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2012-03-30 05:28 . 2012-03-30 05:28 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2012-02-17 18:35 . 2012-02-17 18:35 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2012-02-17 18:35 . 2012-02-17 18:35 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll + 2012-03-30 05:28 . 2012-03-30 05:28 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll - 2012-02-17 18:35 . 2012-02-17 18:35 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2012-03-30 05:28 . 2012-03-30 05:28 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2012-02-17 18:35 . 2012-02-17 18:35 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2012-03-30 05:28 . 2012-03-30 05:28 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2012-02-17 18:35 . 2012-02-17 18:35 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-03-30 05:28 . 2012-03-30 05:28 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll - 2012-02-17 18:35 . 2012-02-17 18:35 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll + 2012-03-30 05:28 . 2012-03-30 05:28 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll + 2012-03-30 05:27 . 2012-03-30 05:27 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2012-02-17 18:35 . 2012-02-17 18:35 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2012-03-30 05:28 . 2012-03-30 05:28 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll - 2012-02-17 18:35 . 2012-02-17 18:35 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll + 2012-03-30 05:28 . 2012-03-30 05:28 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2012-02-17 18:35 . 2012-02-17 18:35 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2012-02-17 18:35 . 2012-02-17 18:35 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll + 2012-03-30 05:28 . 2012-03-30 05:28 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll - 2012-02-17 18:35 . 2012-02-17 18:35 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-03-30 05:28 . 2012-03-30 05:28 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-03-30 05:27 . 2012-03-30 05:27 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2012-02-17 18:35 . 2012-02-17 18:35 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2012-02-17 18:36 . 2012-02-17 18:36 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2012-03-30 05:28 . 2012-03-30 05:28 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2012-02-17 18:36 . 2012-02-17 18:36 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2012-03-30 05:28 . 2012-03-30 05:28 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2012-03-30 05:28 . 2012-03-30 05:28 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2012-02-17 18:36 . 2012-02-17 18:36 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2012-02-17 18:36 . 2012-02-17 18:36 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2012-03-30 05:28 . 2012-03-30 05:28 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2012-02-17 18:36 . 2012-02-17 18:36 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-03-30 05:28 . 2012-03-30 05:28 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-03-30 05:28 . 2012-03-30 05:28 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2012-02-17 18:36 . 2012-02-17 18:36 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2012-02-17 18:35 . 2012-02-17 18:35 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2012-03-30 05:27 . 2012-03-30 05:27 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2012-02-17 18:35 . 2012-02-17 18:35 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-03-30 05:28 . 2012-03-30 05:28 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-03-30 05:28 . 2012-03-30 05:28 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2012-02-17 18:35 . 2012-02-17 18:35 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2012-02-17 18:35 . 2012-02-17 18:35 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-03-30 05:27 . 2012-03-30 05:27 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2012-02-17 18:35 . 2012-02-17 18:35 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll + 2012-03-30 05:27 . 2012-03-30 05:27 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2012-02-17 18:35 . 2012-02-17 18:35 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-03-30 05:28 . 2012-03-30 05:28 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-03-30 05:28 . 2012-03-30 05:28 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-02-17 18:36 . 2012-02-17 18:36 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-03-30 05:27 . 2012-03-30 05:27 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-02-17 18:35 . 2012-02-17 18:35 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-03-30 05:27 . 2012-03-30 05:27 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-02-17 18:35 . 2012-02-17 18:35 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-03-30 05:28 . 2012-03-30 05:28 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2012-02-17 18:35 . 2012-02-17 18:35 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-03-30 05:27 . 2012-03-30 05:27 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-02-17 18:34 . 2012-02-17 18:34 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-03-30 05:27 . 2012-03-30 05:27 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-02-17 18:34 . 2012-02-17 18:34 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-02-17 18:33 . 2012-02-17 18:33 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-03-30 05:25 . 2012-03-30 05:25 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-02-17 18:33 . 2012-02-17 18:33 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-03-30 05:25 . 2012-03-30 05:25 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-02-17 18:34 . 2012-02-17 18:34 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-03-30 05:26 . 2012-03-30 05:26 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2011-04-19 02:21 . 2011-04-19 02:21 235520 c:\windows\Installer\7dde8.msi + 2012-03-30 05:32 . 2012-03-30 05:32 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\c1127f26363bea39c40707b9ddb6bbb9\System.Security.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\3ce3d5b8126cda36b3dbd3535f249890\System.Numerics.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\cbb6e9a9b075d9f6fa303e3eef4c0ffd\System.Dynamic.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bab886a18699bab842769c5ce486c332\System.Configuration.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\a92c1bd4d32fbbc54134fc40d2f97389\System.ComponentModel.Composition.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\94d89db071d382d9ba0bc6381669b85f\PresentationFramework.Classic.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\8b8a5c194aacfb2102d4e26b75a84e03\PresentationFramework.Aero.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\443c3fae1f6f0588a542ddc1c02c1be1\PresentationFramework.Royale.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\273034086c19b92034c9f2896724ac33\PresentationFramework.Luna.ni.dll + 2011-11-21 20:31 . 2011-11-21 20:31 3512072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll + 2011-11-21 21:57 . 2011-11-21 21:57 4970768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll + 2011-11-21 21:57 . 2011-11-21 21:57 1455376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll + 2011-11-21 21:57 . 2011-11-21 21:57 1515792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll + 2011-11-21 21:57 . 2011-11-21 21:57 9793280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll + 2011-11-21 20:31 . 2011-11-21 20:31 3512072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll + 2011-11-21 20:31 . 2011-11-21 20:31 5201168 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll + 2011-11-21 20:31 . 2011-11-21 20:31 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll + 2012-03-29 21:13 . 2011-04-06 14:48 2207568 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.XML.dll + 2012-03-29 21:12 . 2011-04-12 13:11 5028200 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Windows.Forms.dll + 2012-03-29 21:12 . 2010-03-18 11:16 1711496 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Windows.Forms.DataVisualization.dll + 2012-03-29 21:12 . 2011-10-26 13:46 3511880 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.dll + 2012-03-29 21:12 . 2011-05-17 07:27 2975064 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Data.dll + 2012-03-29 21:13 . 2011-04-06 14:48 1354584 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\System.Core.dll + 2012-03-29 21:11 . 2011-07-09 07:30 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC12103\mscorlib.dll + 2011-11-21 20:31 . 2011-11-21 20:31 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll + 2012-03-30 05:28 . 2012-03-30 05:28 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2012-02-17 18:36 . 2012-02-17 18:36 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-03-30 05:28 . 2012-03-30 05:28 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - 2012-02-17 18:35 . 2012-02-17 18:35 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-03-30 05:28 . 2012-03-30 05:28 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - 2012-02-17 18:35 . 2012-02-17 18:35 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-03-30 05:28 . 2012-03-30 05:28 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2012-02-17 18:35 . 2012-02-17 18:35 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2012-03-30 05:28 . 2012-03-30 05:28 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2012-03-30 05:28 . 2012-03-30 05:28 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2012-02-17 18:35 . 2012-02-17 18:35 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2012-02-17 18:35 . 2012-02-17 18:35 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2012-03-30 05:28 . 2012-03-30 05:28 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2012-03-30 05:28 . 2012-03-30 05:28 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2012-02-17 18:35 . 2012-02-17 18:35 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll + 2012-03-30 05:28 . 2012-03-30 05:28 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2012-02-17 18:35 . 2012-02-17 18:35 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2012-02-17 18:35 . 2012-02-17 18:35 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2012-03-30 05:28 . 2012-03-30 05:28 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll - 2012-02-17 18:35 . 2012-02-17 18:35 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll + 2012-03-30 05:28 . 2012-03-30 05:28 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2012-02-17 18:36 . 2012-02-17 18:36 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-03-30 05:28 . 2012-03-30 05:28 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-03-30 05:27 . 2012-03-30 05:27 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-02-17 18:35 . 2012-02-17 18:35 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-03-30 05:28 . 2012-03-30 05:28 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-02-17 18:36 . 2012-02-17 18:36 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-03-30 05:27 . 2012-03-30 05:27 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-03-30 05:28 . 2012-03-30 05:28 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-02-17 18:35 . 2012-02-17 18:35 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-03-30 05:25 . 2012-03-30 05:25 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-02-17 18:33 . 2012-02-17 18:33 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-03-30 05:27 . 2012-03-30 05:27 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-02-17 18:34 . 2012-02-17 18:34 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-03-30 05:24 . 2012-03-30 05:24 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-03-30 05:26 . 2012-03-30 05:26 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-02-17 18:34 . 2012-02-17 18:34 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-03-30 05:32 . 2012-03-30 05:32 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\ef8c44c3c8766f219f576faab54c8dc7\WindowsBase.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 9091584 c:\windows\assembly\NativeImages_v4.0.30319_32\System\2c59490afc22def906d3ca96e1207ff9\System.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\19e79fc0f95c93b0244c7b287e254871\System.Xml.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 1653248 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\aa90407cafb9b4a0dc5e3fdff170fee9\System.Drawing.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\4a1e0e4ec906686357466a5881de605e\System.Data.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 2549760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\67ccf8c95fb30e4dcbe3f1eae1f72d00\System.Data.SqlXml.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\f5cc7fbaadd22a9278512102cd30eb3a\System.Data.Linq.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 7069696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\7292b3e639a6202cf7eaf1f7ed271249\System.Core.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\a263b12a7f89cd41ef8ea216dcd1e854\Microsoft.CSharp.ni.dll + 2011-11-21 22:42 . 2011-11-21 22:42 33189888 c:\windows\Installer\decf06.msp + 2011-11-21 22:42 . 2011-11-21 22:42 33189888 c:\windows\Installer\7dde1.msp + 2012-03-30 05:31 . 2012-03-30 05:31 11880448 c:\windows\assembly\NativeImages_v4.0.30319_64\System\a9e29e892ad68ac0b88f0480746a0d0b\System.ni.dll + 2012-03-30 05:30 . 2012-03-30 05:30 19355648 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\d9d8d4f8fc868d07be41d4ffb46d7364\mscorlib.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 13138944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\7390d789557549200e474b9bbeca3d1a\System.Windows.Forms.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 18000384 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e48a8a41e50ee180c6ca9c50e4575f42\PresentationFramework.ni.dll + 2012-03-30 05:33 . 2012-03-30 05:33 11450880 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\9dee5fd0cf53fc233a7fc20edf8e66ed\PresentationCore.ni.dll + 2012-03-30 05:32 . 2012-03-30 05:32 14413824 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\44ae9f9afb2373055136d57ac6db3f96\mscorlib.ni.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2011-06-30 273544] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . R2 gupdate;Usluga Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-25 136176] R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2012-01-10 21712] R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x] R3 gupdatem;Usluga Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-25 136176] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] R3 WatAdminSvc;Usluga Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 X6va005;X6va005;c:\users\Majki\AppData\Local\Temp\00575F1.tmp [x] S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x] S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x] S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944] S2 HitmanProScheduler;HitmanPro Scheduler;c:\program files\HitmanPro\hmpsched.exe [2012-03-29 96072] S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x] . . --- Other Services/Drivers In Memory --- . *Deregistered* - hitmanpro35 . Contents of the 'Scheduled Tasks' folder . 2012-03-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-25 20:23] . 2012-03-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-25 20:23] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-03-23 487424] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] "egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-22 4035152] . ------- Supplementary Scan ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 192.168.1.1 . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va005] "ImagePath"="\??\c:\users\Majki\AppData\Local\Temp\00575F1.tmp" . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Other Running Processes ------------------------ . c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe . ************************************************************************** . Completion time: 2012-03-30 07:51:06 - machine was rebooted ComboFix-quarantined-files.txt 2012-03-30 05:51 ComboFix2.txt 2012-03-29 14:59 . Pre-Run: 24 362 754 048 bajtów wolnych Post-Run: 24 955 842 560 bajtów wolnych . - - End Of File - - DC6B6DD155F4FE2CD1CEF948D0FE0A19