HJT-logi: Hidas kone, Mozilla avausyrityksestä herjaa

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Mintsu, Dec 18, 2010.

  1. Mintsu

    Mintsu Regular member

    Joined:
    Oct 1, 2006
    Messages:
    161
    Likes Received:
    0
    Trophy Points:
    26
    Tätä konettahan on täälläki tutkailtu jo moneen otteeseen ja ennenki on ollu Firefoxin kans ongelmia (+Exploreria ei saa millään päivitettyä uudempaan versioon..). Nyt kone on ollu tosi vähällä käytölläki, ku on ollu läppäri tuossa näppärästi saatavilla viikonloppusin. Eilen sitte huomasin, että yrittäessäni käynnistää tulikettua, saan vaan seuraavanlaisen herjan:


    Tällä sivulla oleva komentotiedosto on varattuna tai ei enää vastaa kutsuihin. Voit pysäyttää komentotiedoston suorittamisen tai odottaa sen suorituksen valmistumista.

    Komentosarja: file:///C:/Program%Files/Mozilla%20Firefox/components/nsExtensionManager.js:2310

    Eikä avaa myöskään vikasietotilassa

    Tässäpä vielä logi ihmeteltäväksi:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:17:11, on 18.12.2010
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\WINDOWS\ALCXMNTR.EXE
    c:\windows\system\hpsysdrv.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Google\Chrome\Application\chrome.exe
    C:\Program Files\Google\Chrome\Application\chrome.exe
    C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
    C:\Program Files\Google\Chrome\Application\chrome.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.soneraplaza.fi
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxydial.inet.fi:800
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;*.local;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKUS\S-1-5-21-1272536644-464686433-2415924820-1009\..\Run: [Polar Sync] (User 'Everton')
    O4 - HKUS\S-1-5-21-1272536644-464686433-2415924820-1009\..\Run: [TheLionCluster] C:\Program Files\The Lion\skinkers.exe (User 'Everton')
    O4 - HKUS\S-1-5-21-1272536644-464686433-2415924820-1009\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Everton')
    O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
    O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1157211675640
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Automaattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google-päivityspalvelu (gupdate1cad013b13a9826) (gupdate1cad013b13a9826) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
    O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

    --
    End of file - 9226 bytes
     
    Last edited: Dec 18, 2010
    Mintsu, Dec 18, 2010
    #1
  2. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    .
    Sulta näkyy puuttuvan noita päivityksiä enemmänkin.

    Lataa työpöydälle:
    Päivitä IE7 => TÄÄLTÄ

    -------------------------------------------

    Mene Windowsin ControlPaneliin (Ohjauspaneli) ja sieltä Lisää / Poista sovellus
    Vistassa (7) Ohjelmat ja toiminnot
    Etsi ja poista ohjelma jonka nimessä on:

    Mozilla Firefox

    ---------------------------------------------------

    Käynnistä kone uudelleen.

    --------------------------------------------------------

    Poista kansio/t, jos löytyy:
    C:\Program Files\Mozilla Firefox
    C:\Documents and Settings\Käyttäjätunnuksesi\Application Data\Mozilla
    C:\Documents and Settings\Käyttäjätunnuksesi\Local Settings\Application Data\Mozilla

    Asenna Mozilla Firefox uudelleen
    mainitsemasi vika on tyyppi ongelma "Tuliketussa"

    Lähetä uusi HJT logi.
    :)
     
    kalminen, Dec 18, 2010
    #2
  3. Mintsu

    Mintsu Regular member

    Joined:
    Oct 1, 2006
    Messages:
    161
    Likes Received:
    0
    Trophy Points:
    26
    Eipä ollunna apua.. Kummastakaan. Firefox ei edelleenkään käynnisty, eikä Exploreriin tullu päivityksiä. Tuon Explorerin kyllä arvasinki, ku ei siihen viimeksikkään saatu millään ilveellä tuota versiota päivitettyä. Laitoin taas latauksen ajaksi tietoturvatki alas, mutta eipä auttanu. Tulee aina tämmönen ilmoitus:

    Internet Explorerin asennusta ei suoritettu loppuun
    Tietokone täytyy käynnistää uudelleen jotta tehdyt muutokset peruutetaan

    Tässäpä taas tuo logi:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:31:00, on 20.12.2010
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\WINDOWS\system32\svchost.exe
    C:\HP\KBD\KBD.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.soneraplaza.fi
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxydial.inet.fi:800
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;*.local;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
    O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1157211675640
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Automaattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google-päivityspalvelu (gupdate1cad013b13a9826) (gupdate1cad013b13a9826) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
    O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

    --
    End of file - 8476 bytes
     
    Last edited: Dec 20, 2010
    Mintsu, Dec 20, 2010
    #3
  4. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    .
    Ole hyvä ja lataa Combofix yhdestä alla olevista linkeistä:

    Linkki 3

    * TÄRKEÄÄ !!! Tallenna ComboFix.exe työpöydällesi

    * Sulje/ota pois päältä kaikki virustorjunta- ja haittaohjelmien poisto-ohjelmat, jotta ne eivät häiritse ComboFixin ajoa.
    (ei palomuuria)
    * Tuplaklikkaa Combofix.exe ja noudata ohjeita.

    * Osana skannausta Combofix tarkistaa onko palautuskonsoli asennettuna. Nykypäivän haittaohjelmien takia on erittäin suositeltua olla asennettuna palautuskonsoli ennen haittaohjelmien poistoa. Windowsin palautuskonsoli mahdollistaa käynnistyksen erityiseen palautustilaan. Palautuskonsolin kautta voimme auttaa sinua helpommin mikäli haittaohjelmien poiston yhteydessä ilmenee ongelmia.

    * Seuraa ohjeita ja salli Combofixin ladata ja asentaa Microsoftin palautuskonsoli, ja kun pyydetään, hyväksy ohjelman takuuehdot asentaaksesi palautuskonsolin.

    **Huomaa: Jos palautuskonsoli on jo asennettuna, Combofix jatkaa eteenpäin.

    [​IMG]

    Kun Microsoftin palautuskonsoli on asennettu, sinun pitäisi nähdä seuraava viesti:

    [​IMG]

    Klikkaa Kyllä jatkaaksesi skannausta.

    Varoitus: ÄLÄ aja ComboFixia ilman valvontaa. Se ei ole lelu ja sitä ei tule käyttää rutiininomaisesti päivittäin.

    Jos tarvitset apua, katso yksityiskohtaisempi ohje:
    http://www.bleepingcomputer.com/combofix/fi/combofixin-kayttoohje

    Kun ComboFix on valmis, se luo raportin. Ole hyvä ja kopioi/liitä
    seuraavat raportit vastaukseesi:

    C:\ComboFix.txt
    :)
     
    kalminen, Dec 20, 2010
    #4
  5. Mintsu

    Mintsu Regular member

    Joined:
    Oct 1, 2006
    Messages:
    161
    Likes Received:
    0
    Trophy Points:
    26




    Tässäpä tämä:


    ComboFix 10-12-21.05 - HP_Omistaja 22.12.2010 19:47:15.4.1 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.358.1035.18.1534.913 [GMT 2:00]
    Sijainti: c:\documents and settings\HP_Omistaja\Omat tiedostot\Downloads\ComboFix.exe
    AV: Norton Internet Security *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\test.txt
    c:\windows\system32\Oeminfo.ini

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2010-11-22 to 2010-12-22 )))))))))))))))))
    .

    2010-12-20 17:16 . 2010-12-20 17:16 -------- d-----w- C:\1856292378b5fe3d19
    2010-12-13 19:35 . 2010-12-13 19:35 -------- d-----w- c:\program files\AskBardis
    2010-12-13 06:33 . 2010-12-13 06:33 1409 ----a-w- c:\windows\QTFont.for

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-11-18 18:15 . 2004-09-15 04:00 86016 ----a-w- c:\windows\system32\isign32.dll
    2010-11-05 05:01 . 2004-09-15 04:00 667136 ----a-w- c:\windows\system32\wininet.dll
    2010-11-05 05:01 . 2004-09-15 04:00 61952 ----a-w- c:\windows\system32\tdc.ocx
    2010-11-05 05:01 . 2004-09-15 04:00 81920 ----a-w- c:\windows\system32\ieencode.dll
    2010-11-05 04:59 . 2004-09-15 04:00 370688 ----a-w- c:\windows\system32\html.iec
    2010-11-02 15:17 . 2004-09-15 04:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
    2010-10-28 13:08 . 2004-09-15 04:00 290048 ----a-w- c:\windows\system32\atmfd.dll
    2010-10-26 13:58 . 2004-09-15 04:00 1853568 ----a-w- c:\windows\system32\win32k.sys
    2009-04-04 16:14 . 2009-04-04 16:14 2496707 ----a-w- c:\program files\vsoDivxToDVD_setup_v0.5.2b.exe
    2008-08-16 12:25 . 2008-08-16 12:25 9239213 ----a-w- c:\program files\AutoGordianKnot.2.45.Setup.exe
    2008-06-10 18:41 . 2008-06-10 18:41 1495112 ----a-w- c:\program files\install_flash_player.exe
    2007-11-29 17:22 . 2007-11-29 17:20 13793865 ----a-w- c:\program files\acdsee-9-0-108-en-update.exe
    2007-11-29 17:20 . 2007-11-29 17:19 8608465 ----a-w- c:\program files\acdsee-10-0-238-en-update.exe
    2007-09-20 17:36 . 2007-09-20 17:08 51422520 ----a-w- c:\program files\iTunes742Setup.exe
    2007-07-08 00:37 . 2009-10-22 14:49 812344 ----a-w- c:\program files\HJTInstall.exe
    2007-07-06 20:06 . 2007-07-06 20:04 1014730 ----a-w- c:\program files\PowerISO37.exe
    2007-06-24 20:41 . 2007-06-24 20:40 5638544 ----a-w- c:\program files\DVDAuthorGUI_1.013.exe
    2007-04-20 19:54 . 2007-04-20 19:54 0 ----a-w- c:\program files\QuickTimeInstaller.exe
    2007-04-07 14:44 . 2007-04-07 14:44 232592 ----a-w- c:\program files\l3codecx.exe
    2007-04-07 13:03 . 2007-04-07 13:03 2000324 ----a-w- c:\program files\cdex_151.exe
    2007-03-05 14:52 . 2007-03-05 14:53 288640 ----a-w- c:\program files\dxwebsetup.exe
    2007-02-25 13:29 . 2006-11-25 23:04 25754696 ----a-w- c:\program files\wmp11-windowsxp-x86-FI-FI.exe
    2007-02-25 13:18 . 2007-02-25 13:18 878896 ----a-w- c:\program files\WGAPluginInstall.exe
    2007-02-15 16:42 . 2007-02-15 16:42 1727591 ----a-w- c:\program files\on2_vp7_personal_edition.exe
    2007-01-24 17:51 . 2007-01-24 17:50 3513168 ----a-w- c:\program files\sp26752.exe
    2007-01-07 13:51 . 2007-01-07 13:51 6285558 ----a-w- c:\program files\divx-to-dvd-converter.exe
    2006-12-28 19:28 . 2006-12-28 19:26 16198952 ----a-w- c:\program files\Install_Messenger.exe
    2006-12-09 11:14 . 2006-12-09 11:12 12684992 ----a-w- c:\program files\winamp532_full_bundle_emusic-7plus.exe
    2006-11-30 18:17 . 2006-11-30 18:17 2987935 ----a-w- c:\program files\swf2avi.exe
    2006-11-30 18:11 . 2006-11-30 18:11 2388240 ----a-w- c:\program files\RivaFLVPlayerSetup.exe
    2006-11-30 06:46 . 2006-11-30 06:46 3513168 ----a-w- c:\program files\Näppis.exe
    2006-11-25 16:19 . 2006-11-25 16:19 3250296 ----a-w- c:\program files\Ifi-OrderClient-FI.exe
    2006-11-20 19:09 . 2007-02-11 09:17 6326784 ----a-w- c:\program files\DVRMSToolbox1103.msi
    2006-10-20 06:58 . 2007-04-05 21:08 7137 ----a-w- c:\program files\FlashPlayer9.reg
    2006-06-23 22:50 . 2007-04-07 14:19 2434406 ----a-w- c:\program files\cdex_170b2_enu.exe
    2006-03-19 13:37 . 2007-06-24 19:23 8448 ----a-w- c:\program files\ac3.bin
    2005-11-05 08:15 . 2007-04-05 21:08 298 ----a-w- c:\program files\FixAddRemove.reg
    2005-08-25 20:17 . 2006-12-03 16:29 929280 ----a-w- c:\program files\VirtualDubMod.exe
    2005-08-25 20:10 . 2006-12-03 16:29 9804 ----a-w- c:\program files\vdremote.dll
    2005-08-25 20:10 . 2006-12-03 16:29 11340 ----a-w- c:\program files\vdicmdrv.dll
    2005-08-25 20:10 . 2006-12-03 16:29 40960 ----a-w- c:\program files\AuxSetup.exe
    2005-08-25 20:09 . 2006-12-03 16:29 7244 ----a-w- c:\program files\vdsvrlnk.dll
    2004-10-25 16:11 . 2006-12-03 16:20 374340 ----a-w- c:\program files\TMPGEnc.vfp
    2004-10-25 16:10 . 2006-12-03 16:20 155648 ----a-w- c:\program files\Resample.dll
    2004-10-25 16:10 . 2006-12-03 16:20 147543 ----a-w- c:\program files\P4Package.dll
    2004-10-25 16:10 . 2006-12-03 16:20 135255 ----a-w- c:\program files\P3Package.dll
    2004-07-26 00:16 . 2007-06-25 13:28 1117491 ----a-w- c:\program files\dvdshrink32setup.exe
    2004-05-25 23:16 . 2006-09-17 11:41 734160 ----a-w- c:\program files\VobSub_2.23.exe
    2004-04-30 14:52 . 2007-06-12 19:37 1707042 ----a-w- c:\program files\Topfield Windows Applications Setup.exe
    2004-03-22 18:07 . 2007-06-12 19:20 380928 ----a-w- c:\program files\Altair_1.250.exe
    2004-03-22 17:53 . 2007-06-12 19:20 135168 ----a-w- c:\program files\TfDll.dll
    2004-03-19 11:53 . 2006-12-02 15:09 1107022 ----a-w- c:\program files\SubtitleWorkshop251.exe
    2003-08-26 11:11 . 2007-06-12 19:20 41996 ----a-w- c:\program files\TfBulk.sys
    2003-08-06 20:55 . 2007-12-25 17:36 379325 ----a-w- c:\program files\Deathproof.exe
    2003-04-25 22:29 . 2006-12-03 16:29 146944 ----a-w- c:\program files\SciLexer.dll
    2003-03-11 21:50 . 2006-12-03 16:29 48640 ----a-w- c:\program files\vorbis.dll
    2003-03-11 21:10 . 2006-12-03 16:29 20992 ----a-w- c:\program files\ogg.dll
    2003-03-10 15:42 . 2006-12-03 16:29 125440 ----a-w- c:\program files\corona.dll
    2002-11-14 17:55 . 2006-12-03 16:29 56832 ----a-w- c:\program files\AviSynthLexer.lexer
    .

    ((((((((((((((((((((((((((((( SnapShot@2010-01-05_15.05.23 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
    + 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
    + 2010-12-22 17:40 . 2010-12-22 17:40 16384 c:\windows\Temp\Perflib_Perfdata_4c0.dat
    + 2010-02-26 15:27 . 2008-04-14 17:11 53760 c:\windows\system32\vfwwdm32.dll
    + 2010-02-26 15:27 . 2007-07-02 03:40 28672 c:\windows\system32\VendorCmdRW.dll
    - 2007-01-29 08:58 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe
    + 2007-01-29 08:58 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe
    + 2004-09-15 04:00 . 2010-08-27 05:53 99840 c:\windows\system32\srvsvc.dll
    + 2005-01-02 02:35 . 2007-07-27 20:11 26488 c:\windows\system32\spupdsvc.exe
    - 2005-01-02 02:35 . 2007-07-27 07:41 26488 c:\windows\system32\spupdsvc.exe
    + 2004-09-15 04:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
    + 2010-07-01 15:42 . 2008-04-13 18:45 26368 c:\windows\system32\ReinstallBackups\0009\DriverFiles\i386\USBSTOR.SYS
    + 2010-03-30 21:16 . 2010-03-30 21:16 99176 c:\windows\system32\PresentationHostProxy.dll
    + 2004-12-13 15:47 . 2010-11-12 16:24 86460 c:\windows\system32\perfc00B.dat
    + 2004-12-13 15:47 . 2010-11-12 16:24 72304 c:\windows\system32\perfc009.dat
    + 2009-11-06 22:07 . 2009-11-06 22:07 49488 c:\windows\system32\netfxperf.dll
    + 2009-11-05 19:17 . 2009-11-05 19:17 11600 c:\windows\system32\mui\0409\mscorees.dll
    + 2004-09-15 11:00 . 2009-11-27 17:13 17920 c:\windows\system32\msyuv.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 28672 c:\windows\system32\msvidc32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 11264 c:\windows\system32\msrle32.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 11264 c:\windows\system32\msrle32.dll
    + 2009-10-22 16:25 . 2010-01-06 11:59 84507 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    + 2004-09-15 11:00 . 2009-11-27 16:09 48128 c:\windows\system32\iyuv_32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 80384 c:\windows\system32\iccvid.dll
    + 2004-09-15 04:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
    - 2004-09-15 04:00 . 2009-06-16 14:39 81920 c:\windows\system32\fontsub.dll
    + 2004-09-15 04:00 . 2009-10-15 16:32 81920 c:\windows\system32\fontsub.dll
    + 2010-01-13 08:25 . 2008-08-26 07:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
    - 2009-11-18 12:57 . 2008-08-26 07:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 22016 c:\windows\system32\DRVSTORE\ccdcmbo_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\ccdcmbo.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 91136 c:\windows\system32\DRVSTORE\ccdcmb_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\nmwcdcls.dll
    + 2010-01-13 08:24 . 2009-10-06 09:52 17664 c:\windows\system32\DRVSTORE\ccdcmb_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\ccdcmb.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 19200 c:\windows\system32\drivers\WSTCODEC.SYS
    + 2010-02-26 15:28 . 2008-04-13 19:46 15232 c:\windows\system32\drivers\StreamIP.sys
    + 2004-09-15 11:00 . 2008-04-13 19:45 49408 c:\windows\system32\drivers\stream.sys
    - 2004-09-15 11:00 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 11136 c:\windows\system32\drivers\SLIP.sys
    + 2010-01-13 08:25 . 2008-08-26 07:26 18816 c:\windows\system32\drivers\pccsmcfd.sys
    - 2009-11-18 12:57 . 2008-08-26 07:26 18816 c:\windows\system32\drivers\pccsmcfd.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 10880 c:\windows\system32\drivers\NdisIP.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 85248 c:\windows\system32\drivers\NABTSFEC.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 15232 c:\windows\system32\drivers\MPE.sys
    + 2005-01-02 02:42 . 2008-04-13 19:45 60160 c:\windows\system32\drivers\drmk.sys
    - 2005-01-02 02:42 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 17024 c:\windows\system32\drivers\CCDECODE.sys
    - 2009-11-18 12:56 . 2009-10-06 09:52 22016 c:\windows\system32\drivers\ccdcmbo.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 22016 c:\windows\system32\drivers\ccdcmbo.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 17664 c:\windows\system32\drivers\ccdcmb.sys
    - 2009-11-18 12:56 . 2009-10-06 09:52 17664 c:\windows\system32\drivers\ccdcmb.sys
    + 2010-02-26 15:27 . 2008-04-13 19:46 11776 c:\windows\system32\drivers\BdaSup.sys
    - 2009-11-12 19:00 . 2008-04-13 19:46 19200 c:\windows\system32\dllcache\wstcodec.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 19200 c:\windows\system32\dllcache\wstcodec.sys
    - 2009-11-12 18:58 . 2008-04-14 17:11 53760 c:\windows\system32\dllcache\vfwwdm32.dll
    + 2010-02-26 15:27 . 2008-04-14 17:11 53760 c:\windows\system32\dllcache\vfwwdm32.dll
    + 2004-09-15 04:00 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
    - 2009-11-12 18:55 . 2008-04-13 19:46 15232 c:\windows\system32\dllcache\streamip.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 15232 c:\windows\system32\dllcache\streamip.sys
    - 2004-09-15 11:00 . 2008-04-13 18:45 49408 c:\windows\system32\dllcache\stream.sys
    + 2004-09-15 11:00 . 2008-04-13 19:45 49408 c:\windows\system32\dllcache\stream.sys
    + 2004-09-15 04:00 . 2010-08-27 05:53 99840 c:\windows\system32\dllcache\srvsvc.dll
    + 2004-09-15 04:00 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
    + 2010-02-26 15:28 . 2008-04-13 19:46 11136 c:\windows\system32\dllcache\slip.sys
    - 2009-11-12 18:53 . 2008-04-13 19:46 11136 c:\windows\system32\dllcache\slip.sys
    + 2004-09-15 04:00 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 10880 c:\windows\system32\dllcache\ndisip.sys
    - 2009-11-12 18:46 . 2008-04-13 19:46 10880 c:\windows\system32\dllcache\ndisip.sys
    - 2009-11-12 18:46 . 2008-04-13 19:46 85248 c:\windows\system32\dllcache\nabtsfec.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 85248 c:\windows\system32\dllcache\nabtsfec.sys
    + 2004-09-15 11:00 . 2009-11-27 17:13 17920 c:\windows\system32\dllcache\msyuv.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 28672 c:\windows\system32\dllcache\msvidc32.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 11264 c:\windows\system32\dllcache\msrle32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 11264 c:\windows\system32\dllcache\msrle32.dll
    + 2010-02-26 15:28 . 2008-04-13 19:46 15232 c:\windows\system32\dllcache\mpe.sys
    - 2009-11-12 18:45 . 2008-04-13 19:46 15232 c:\windows\system32\dllcache\mpe.sys
    + 2004-09-15 11:00 . 2009-11-27 16:09 48128 c:\windows\system32\dllcache\iyuv_32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 86016 c:\windows\system32\dllcache\isign32.dll
    + 2004-09-15 04:00 . 2010-11-18 18:15 86016 c:\windows\system32\dllcache\isign32.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 81920 c:\windows\system32\dllcache\ieencode.dll
    - 2004-09-15 04:00 . 2009-09-25 05:36 81920 c:\windows\system32\dllcache\ieencode.dll
    + 2004-09-15 04:00 . 2009-10-15 16:32 81920 c:\windows\system32\dllcache\fontsub.dll
    - 2004-09-15 04:00 . 2009-06-16 14:39 81920 c:\windows\system32\dllcache\fontsub.dll
    + 2005-01-02 02:42 . 2008-04-13 19:45 60160 c:\windows\system32\dllcache\drmk.sys
    - 2005-01-02 02:42 . 2008-04-13 18:45 60160 c:\windows\system32\dllcache\drmk.sys
    + 2004-09-15 04:00 . 2009-12-14 07:09 33280 c:\windows\system32\dllcache\csrsrv.dll
    + 2010-02-26 15:28 . 2008-04-13 19:46 17024 c:\windows\system32\dllcache\ccdecode.sys
    - 2009-11-12 18:35 . 2008-04-13 19:46 17024 c:\windows\system32\dllcache\ccdecode.sys
    + 2004-09-15 04:00 . 2010-01-13 14:01 86528 c:\windows\system32\dllcache\cabview.dll
    + 2010-02-26 15:27 . 2008-04-13 19:46 11776 c:\windows\system32\dllcache\bdasup.sys
    - 2009-11-12 18:34 . 2008-04-13 19:46 11776 c:\windows\system32\dllcache\bdasup.sys
    - 2004-09-15 04:00 . 2009-06-10 14:15 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2004-09-15 04:00 . 2010-03-05 14:38 65536 c:\windows\system32\dllcache\asycfilt.dll
    + 2004-09-15 04:00 . 2009-12-14 07:09 33280 c:\windows\system32\csrsrv.dll
    + 2004-09-15 04:00 . 2010-01-13 14:01 86528 c:\windows\system32\cabview.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 84992 c:\windows\system32\avifil32.dll
    - 2004-09-15 04:00 . 2009-06-10 14:15 84992 c:\windows\system32\avifil32.dll
    + 2004-09-15 04:00 . 2010-03-05 14:38 65536 c:\windows\system32\asycfilt.dll
    + 2010-04-07 20:48 . 2010-04-07 20:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    - 2008-07-29 16:16 . 2008-07-29 16:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2010-09-22 06:43 . 2010-09-22 06:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2010-09-23 12:55 . 2010-09-23 12:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    - 2008-05-27 21:49 . 2008-05-27 21:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    - 2008-05-27 21:49 . 2008-05-27 21:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    - 2008-05-27 21:49 . 2008-05-27 21:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2010-09-23 00:17 . 2010-09-23 00:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2008-05-27 22:30 . 2008-05-27 22:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2003-02-21 01:19 . 2003-02-21 01:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2010-09-23 00:17 . 2010-09-23 00:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2010-10-21 13:40 . 2010-10-21 13:40 21504 c:\windows\Installer\e0baa.msi
    + 2010-11-22 09:12 . 2010-11-22 09:12 38400 c:\windows\Installer\83835.msi
    + 2010-03-30 14:24 . 2010-03-30 14:24 20480 c:\windows\Installer\2c3ca7.msi
    + 2010-01-13 08:22 . 2010-01-13 08:22 78336 c:\windows\Installer\164aa0.msi
    + 2006-09-01 14:32 . 2010-12-15 16:56 45056 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\wordicon.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 45056 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\wordicon.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 22528 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\unbndico.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 22528 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\unbndico.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 16384 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\PEicons.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 16384 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\PEicons.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 34304 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\misc.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 34304 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\misc.exe
    - 2008-09-22 05:13 . 2009-12-19 19:13 40960 c:\windows\Installer\{90840409-6000-11D3-8CFE-0150048383C9}\xlvicon.exe
    + 2008-09-22 05:13 . 2010-11-10 17:12 40960 c:\windows\Installer\{90840409-6000-11D3-8CFE-0150048383C9}\xlvicon.exe
    + 2010-11-22 09:13 . 2010-12-18 19:28 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2010-01-13 08:25 . 2010-01-13 08:25 10134 c:\windows\Installer\{4CE6B3C4-D8E2-4A5D-BEF5-5B69AF843B0C}\ARPPRODUCTICON.exe
    + 2009-11-27 17:13 . 2009-11-27 17:13 17920 c:\windows\Driver Cache\i386\msyuv.dll
    + 2009-11-27 16:09 . 2009-11-27 16:09 48128 c:\windows\Driver Cache\i386\iyuv_32.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_b7f53134\System.Drawing.Design.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_c32a0d22\CustomMarshalers.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\70ee6267f7bad40e8707d402277770c3\System.Web.DynamicData.Design.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll
    + 2010-08-12 17:22 . 2010-08-12 17:22 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe
    + 2010-08-12 17:20 . 2010-08-12 17:20 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe
    + 2010-08-13 14:51 . 2010-08-13 14:51 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2009-08-09 23:49 . 2009-08-09 23:49 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2010-06-10 19:12 . 2010-06-10 19:12 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-08-12 17:13 . 2008-04-14 16:11 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll
    + 2010-06-10 19:04 . 2010-02-26 05:42 81920 c:\windows\$NtUninstallKB982381$\ieencode.dll
    + 2010-05-27 17:37 . 2010-01-23 08:11 46080 c:\windows\$NtUninstallKB981793$\tzchange.exe
    + 2010-05-27 17:37 . 2010-04-22 22:23 16896 c:\windows\$NtUninstallKB981793$\spuninst\tzchange.dll
    + 2010-03-31 17:41 . 2009-12-22 05:09 81920 c:\windows\$NtUninstallKB980182$\ieencode.dll
    + 2010-06-10 19:12 . 2008-04-14 16:11 65024 c:\windows\$NtUninstallKB979482$\asycfilt.dll
    + 2010-04-14 18:49 . 2008-04-14 16:11 84992 c:\windows\$NtUninstallKB979309$\cabview.dll
    + 2010-02-25 19:17 . 2009-10-28 15:07 46080 c:\windows\$NtUninstallKB979306$\tzchange.exe
    + 2010-02-25 19:17 . 2010-01-23 10:42 16896 c:\windows\$NtUninstallKB979306$\spuninst\tzchange.dll
    + 2010-01-22 11:15 . 2009-09-25 05:36 81920 c:\windows\$NtUninstallKB978207$\ieencode.dll
    + 2010-02-10 04:25 . 2008-04-14 16:11 32256 c:\windows\$NtUninstallKB978037$\csrsrv.dll
    + 2010-02-10 04:24 . 2004-09-15 04:00 25600 c:\windows\$NtUninstallKB977914$\msvidc32.dll
    + 2010-02-10 04:24 . 2008-04-14 16:11 11264 c:\windows\$NtUninstallKB977914$\msrle32.dll
    + 2010-02-10 04:24 . 2008-04-14 16:11 47616 c:\windows\$NtUninstallKB977914$\iyuv_32.dll
    + 2010-02-10 04:24 . 2009-06-10 14:15 84992 c:\windows\$NtUninstallKB977914$\avifil32.dll
    + 2010-02-10 04:25 . 2008-04-14 16:11 16896 c:\windows\$NtUninstallKB975560$\msyuv.dll
    + 2010-01-13 12:40 . 2009-06-16 14:39 81920 c:\windows\$NtUninstallKB972270$\fontsub.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 81920 c:\windows\$NtUninstallKB2360131$\ieencode.dll
    + 2010-09-16 18:26 . 2008-04-14 16:12 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe
    + 2010-10-15 16:48 . 2008-04-14 16:11 96768 c:\windows\$NtUninstallKB2345886$\srvsvc.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 81920 c:\windows\$NtUninstallKB2183461$\ieencode.dll
    + 2010-10-01 08:23 . 2010-04-21 13:28 46080 c:\windows\$NtUninstallKB2158563$\tzchange.exe
    + 2010-10-01 08:23 . 2010-06-23 00:57 16896 c:\windows\$NtUninstallKB2158563$\spuninst\tzchange.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB982802\spmsg.dll
    + 2010-08-12 17:13 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll
    + 2010-08-12 17:13 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB982665\spmsg.dll
    + 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982381\update\spcustom.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB982381\spmsg.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 81920 c:\windows\$hf_mig$\KB982381\SP3QFE\ieencode.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB982214\spmsg.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982132\update\spcustom.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB982132\spmsg.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981997\spmsg.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB981957\update\spcustom.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB981957\spmsg.dll
    + 2010-08-12 17:20 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll
    + 2010-08-12 15:52 . 2010-06-17 13:47 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll
    + 2010-08-12 17:20 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB981852\spmsg.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981349\update\spcustom.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981349\spmsg.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981322\spmsg.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980436\spmsg.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB980232\update\spcustom.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB980232\spmsg.dll
    + 2010-06-10 19:22 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll
    + 2010-06-10 19:22 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980218\spmsg.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB980195\spmsg.dll
    + 2010-03-31 17:41 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB980182\update\spcustom.dll
    + 2010-03-31 17:41 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB980182\spmsg.dll
    + 2010-02-26 05:39 . 2010-02-26 05:39 81920 c:\windows\$hf_mig$\KB980182\SP3QFE\ieencode.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB979687\update\spcustom.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB979687\spmsg.dll
    + 2010-04-14 18:57 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979683\update\spcustom.dll
    + 2010-04-14 18:13 . 2010-03-05 14:54 16896 c:\windows\$hf_mig$\KB979683\update\mpsyschk.dll
    + 2010-04-14 18:57 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979683\spmsg.dll
    + 2010-06-10 19:19 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979559\update\spcustom.dll
    + 2010-06-10 19:19 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB979559\spmsg.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979482\spmsg.dll
    + 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll
    + 2010-04-14 18:49 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB979309\update\spcustom.dll
    + 2010-04-14 18:49 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB979309\spmsg.dll
    + 2010-01-13 13:49 . 2010-01-13 13:49 86528 c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978706\update\spcustom.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978706\spmsg.dll
    + 2010-04-14 18:50 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB978601\update\spcustom.dll
    + 2010-04-14 18:50 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB978601\spmsg.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978542\update\spcustom.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978542\spmsg.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978338\update\spcustom.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978338\spmsg.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978262\update\spcustom.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978262\spmsg.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978251\update\spcustom.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978251\spmsg.dll
    + 2010-01-22 11:15 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB978207\update\spcustom.dll
    + 2010-01-22 11:15 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB978207\spmsg.dll
    + 2009-12-22 05:06 . 2009-12-22 05:06 81920 c:\windows\$hf_mig$\KB978207\SP3QFE\ieencode.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978037\update\spcustom.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978037\spmsg.dll
    + 2009-12-14 07:11 . 2009-12-14 07:11 33280 c:\windows\$hf_mig$\KB978037\SP3QFE\csrsrv.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977914\update\spcustom.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977914\spmsg.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 28672 c:\windows\$hf_mig$\KB977914\SP3QFE\msvidc32.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 11264 c:\windows\$hf_mig$\KB977914\SP3QFE\msrle32.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 48128 c:\windows\$hf_mig$\KB977914\SP3QFE\iyuv_32.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 84992 c:\windows\$hf_mig$\KB977914\SP3QFE\avifil32.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977816\update\spcustom.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977816\spmsg.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977165\update\spcustom.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977165\spmsg.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975713\update\spcustom.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975713\spmsg.dll
    + 2010-06-10 19:12 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll
    + 2010-06-10 19:12 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB975562\spmsg.dll
    + 2010-03-10 19:50 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB975561\update\spcustom.dll
    + 2010-03-10 19:50 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB975561\spmsg.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975560\update\spcustom.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975560\spmsg.dll
    + 2009-11-27 17:24 . 2009-11-27 17:24 17920 c:\windows\$hf_mig$\KB975560\SP3QFE\msyuv.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB972270\update\spcustom.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB972270\spmsg.dll
    + 2010-01-13 08:17 . 2009-10-15 16:39 81920 c:\windows\$hf_mig$\KB972270\SP3QFE\fontsub.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB971468\update\spcustom.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB971468\spmsg.dll
    + 2010-01-13 12:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB955759\update\spcustom.dll
    + 2010-01-13 12:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB955759\spmsg.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2387149\update\spcustom.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2387149\spmsg.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2360937\update\spcustom.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2360937\spmsg.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2360131\update\spcustom.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2360131\spmsg.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 81920 c:\windows\$hf_mig$\KB2360131\SP3QFE\ieencode.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2347290\spmsg.dll
    + 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
    + 2010-10-15 16:48 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2345886\update\spcustom.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2345886\spmsg.dll
    + 2010-08-27 06:01 . 2010-08-27 06:01 99840 c:\windows\$hf_mig$\KB2345886\SP3QFE\srvsvc.dll
    + 2010-08-04 18:13 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll
    + 2010-08-04 18:13 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2286198\spmsg.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2279986\update\spcustom.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2279986\spmsg.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2259922\spmsg.dll
    + 2010-07-14 09:19 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll
    + 2010-07-14 09:19 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2229593\spmsg.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2183461\update\spcustom.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2183461\spmsg.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 81920 c:\windows\$hf_mig$\KB2183461\SP3QFE\ieencode.dll
    + 2010-08-12 17:16 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2160329\update\spcustom.dll
    + 2010-08-12 17:16 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2160329\spmsg.dll
    + 2010-09-16 18:23 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
    + 2010-09-16 18:23 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2141007\spmsg.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2121546\spmsg.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2115168\spmsg.dll
    + 2010-08-12 17:19 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2079403\update\spcustom.dll
    + 2010-08-12 17:19 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2079403\spmsg.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2008-05-05 04:25 . 2010-08-27 01:43 5120 c:\windows\system32\xpsp4res.dll
    + 2004-09-15 11:00 . 2009-11-27 16:09 8704 c:\windows\system32\tsbyuv.dll
    - 2009-11-18 15:08 . 2009-11-18 15:08 5632 c:\windows\system32\pndx5032.dll
    + 2009-11-18 15:08 . 2010-03-30 14:24 5632 c:\windows\system32\pndx5032.dll
    - 2009-11-18 15:08 . 2009-11-18 15:08 6656 c:\windows\system32\pndx5016.dll
    + 2009-11-18 15:08 . 2010-03-30 14:24 6656 c:\windows\system32\pndx5016.dll
    + 2010-01-13 08:24 . 2009-10-06 09:56 8320 c:\windows\system32\DRVSTORE\nmwcdnsuc_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\nmwcdnsuc.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 7936 c:\windows\system32\DRVSTORE\ccdcmbm_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\usbser_lowerflt.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 7936 c:\windows\system32\DRVSTORE\ccdcmbcj_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\usbser_lowerfltj.sys
    - 2009-11-18 12:56 . 2009-10-06 09:52 7936 c:\windows\system32\drivers\usbser_lowerfltj.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 7936 c:\windows\system32\drivers\usbser_lowerfltj.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 7936 c:\windows\system32\drivers\usbser_lowerflt.sys
    - 2009-11-18 12:56 . 2009-10-06 09:52 7936 c:\windows\system32\drivers\usbser_lowerflt.sys
    + 2010-02-26 15:28 . 2008-04-13 19:39 5504 c:\windows\system32\drivers\MSTEE.sys
    + 2004-09-15 11:00 . 2009-11-27 16:09 8704 c:\windows\system32\dllcache\tsbyuv.dll
    + 2010-02-26 15:28 . 2008-04-13 19:39 5504 c:\windows\system32\dllcache\mstee.sys
    - 2009-11-12 18:45 . 2008-04-13 19:39 5504 c:\windows\system32\dllcache\mstee.sys
    + 2010-01-13 08:24 . 2010-01-13 08:24 3262 c:\windows\Installer\{C50EF365-2898-489A-B6C7-30DAA466E9A2}\ARPPRODUCTICON.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 3584 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\opwicon.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 3584 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\opwicon.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 8192 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\mspicons.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 8192 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\mspicons.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 2560 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\cagicon.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 2560 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\cagicon.exe
    + 2009-11-27 16:09 . 2009-11-27 16:09 8704 c:\windows\Driver Cache\i386\tsbyuv.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2010-09-16 18:26 . 2008-05-05 04:25 3072 c:\windows\$NtUninstallKB982802$\xpsp4res.dll
    + 2010-02-10 04:24 . 2004-09-15 11:00 8192 c:\windows\$NtUninstallKB977914$\tsbyuv.dll
    + 2010-10-15 16:43 . 2010-07-22 06:19 5120 c:\windows\$NtUninstallKB2360937$\xpsp4res.dll
    + 2010-10-15 16:48 . 2010-08-13 15:44 5120 c:\windows\$NtUninstallKB2345886$\xpsp4res.dll
    + 2010-07-22 06:19 . 2010-07-22 06:19 5120 c:\windows\$hf_mig$\KB982802\SP3QFE\sprv040b.dll
    + 2010-07-12 13:19 . 2010-07-12 13:19 5120 c:\windows\$hf_mig$\KB979687\SP3QFE\sprv040b.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 8704 c:\windows\$hf_mig$\KB977914\SP3QFE\tsbyuv.dll
    + 2010-10-15 15:47 . 2010-08-13 15:44 5120 c:\windows\$hf_mig$\KB2360937\SP3QFE\sprv040b.dll
    + 2010-08-27 01:43 . 2010-08-27 01:43 5120 c:\windows\$hf_mig$\KB2345886\SP3QFE\sprv040b.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
    + 2009-07-11 22:05 . 2009-07-11 22:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
    + 2004-09-15 04:00 . 2009-12-24 07:00 177664 c:\windows\system32\wintrust.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 293376 c:\windows\system32\winsrv.dll
    + 2004-09-15 04:00 . 2010-06-18 17:47 293376 c:\windows\system32\winsrv.dll
    - 2004-09-15 04:00 . 2008-05-09 10:55 430080 c:\windows\system32\vbscript.dll
    + 2004-09-15 04:00 . 2010-03-09 11:10 430080 c:\windows\system32\vbscript.dll
    + 2004-09-15 04:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 406016 c:\windows\system32\usp10.dll
    - 2004-09-15 04:00 . 2009-10-29 05:25 627200 c:\windows\system32\urlmon.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 627200 c:\windows\system32\urlmon.dll
    + 2004-09-15 04:00 . 2010-08-27 08:03 119808 c:\windows\system32\t2embed.dll
    - 2004-09-15 04:00 . 2009-06-16 14:39 119808 c:\windows\system32\t2embed.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 474112 c:\windows\system32\shlwapi.dll
    + 2004-09-15 04:00 . 2009-12-08 09:24 474112 c:\windows\system32\shlwapi.dll
    + 2004-09-15 04:00 . 2010-06-30 12:32 149504 c:\windows\system32\schannel.dll
    + 2004-09-15 04:00 . 2010-08-16 08:44 590848 c:\windows\system32\rpcrt4.dll
    + 2009-11-18 15:08 . 2010-03-30 14:24 185920 c:\windows\system32\rmoc3260.dll
    - 2009-11-18 15:08 . 2009-11-18 15:08 185920 c:\windows\system32\rmoc3260.dll
    + 2010-02-26 15:27 . 2008-04-14 17:11 363520 c:\windows\system32\PsisDecd.dll
    + 2010-03-30 21:10 . 2010-03-30 21:10 295264 c:\windows\system32\PresentationHost.exe
    + 2009-11-18 15:08 . 2010-03-30 14:22 278528 c:\windows\system32\pncrt.dll
    - 2009-11-18 15:08 . 2009-11-18 15:08 278528 c:\windows\system32\pncrt.dll
    + 2004-12-13 15:47 . 2010-11-12 16:24 417980 c:\windows\system32\perfh00B.dat
    + 2004-12-13 15:47 . 2010-11-12 16:24 443038 c:\windows\system32\perfh009.dat
    - 2009-11-18 12:56 . 2009-10-06 09:52 660480 c:\windows\system32\nmwcdcocls.dll
    + 2010-01-13 08:24 . 2009-10-06 09:52 660480 c:\windows\system32\nmwcdcocls.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 532480 c:\windows\system32\mstime.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 532480 c:\windows\system32\mstime.dll
    - 2004-09-15 04:00 . 2008-04-14 16:12 344064 c:\windows\system32\mspaint.exe
    + 2004-09-15 04:00 . 2009-12-17 07:41 344064 c:\windows\system32\mspaint.exe
    + 2004-09-15 04:00 . 2010-11-05 05:01 449024 c:\windows\system32\mshtmled.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 449024 c:\windows\system32\mshtmled.dll
    - 2004-09-15 11:00 . 2008-04-14 16:12 294912 c:\windows\system32\msh263.drv
    + 2004-09-15 11:00 . 2008-04-14 17:12 294912 c:\windows\system32\msh263.drv
    + 2009-11-06 22:07 . 2009-11-06 22:07 297808 c:\windows\system32\mscoree.dll
    - 2006-05-09 19:00 . 2006-10-18 19:47 317440 c:\windows\system32\MP4SDECD.dll
    + 2006-05-09 19:00 . 2010-03-30 09:24 317440 c:\windows\system32\mp4sdecd.dll
    + 2004-09-15 04:00 . 2010-09-18 09:22 974848 c:\windows\system32\mfc42u.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 974848 c:\windows\system32\mfc42.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 953856 c:\windows\system32\mfc40u.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 954368 c:\windows\system32\mfc40.dll
    + 2010-10-09 05:53 . 2010-10-09 05:53 232912 c:\windows\system32\Macromed\Flash\FlashUtil10k_Plugin.exe
    + 2009-10-28 03:31 . 2009-10-28 03:31 257440 c:\windows\system32\Macromed\Flash\FlashUtil10d.exe
    + 2010-12-13 05:49 . 2010-09-15 02:50 153376 c:\windows\system32\javaws.exe
    + 2010-12-13 05:49 . 2010-09-15 02:50 145184 c:\windows\system32\javaw.exe
    - 2009-11-19 19:25 . 2009-11-19 19:24 145184 c:\windows\system32\javaw.exe
    - 2009-11-19 19:25 . 2009-11-19 19:24 145184 c:\windows\system32\java.exe
    + 2010-12-13 05:49 . 2010-09-15 02:50 145184 c:\windows\system32\java.exe
    + 2004-09-15 04:00 . 2010-06-09 07:44 692736 c:\windows\system32\inetcomm.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 251392 c:\windows\system32\iepeers.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 251392 c:\windows\system32\iepeers.dll
    + 2008-02-09 13:19 . 2010-04-14 09:00 271704 c:\windows\system32\hpzids01.dll
    + 2010-01-13 08:25 . 2009-05-11 10:30 547840 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\PCCSWpdDriver.dll
    - 2009-11-18 12:57 . 2009-05-11 10:30 547840 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\PCCSWpdDriver.dll
    + 2010-01-13 08:24 . 2009-10-06 09:56 136704 c:\windows\system32\DRVSTORE\nmwcdnsu_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\nmwcdnsu.sys
    + 2010-05-24 17:36 . 2010-04-14 09:00 271704 c:\windows\system32\DRVSTORE\hpohsla_9A3CD9D9B03F3E7B248D94CDEA070410DC9A5547\hpzids01.dll
    + 2010-01-13 08:24 . 2009-10-06 09:52 660480 c:\windows\system32\DRVSTORE\ccdcmb_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\nmwcdcocls.dll
    + 2010-02-26 15:27 . 2007-07-02 03:40 201216 c:\windows\system32\drivers\TridVid.sys
    + 2004-09-15 04:00 . 2010-02-11 12:02 226880 c:\windows\system32\drivers\tcpip6.sys
    + 2004-09-15 04:00 . 2010-08-26 13:39 357248 c:\windows\system32\drivers\srv.sys
    + 2004-03-16 15:58 . 2008-04-13 20:19 146048 c:\windows\system32\drivers\portcls.sys
    - 2004-03-16 15:58 . 2008-04-13 19:19 146048 c:\windows\system32\drivers\portcls.sys
    + 2004-09-15 04:00 . 2010-02-24 13:11 455680 c:\windows\system32\drivers\mrxsmb.sys
    + 2004-09-15 11:00 . 2008-04-13 20:16 141056 c:\windows\system32\drivers\ks.sys
    - 2004-09-15 11:00 . 2008-04-13 19:16 141056 c:\windows\system32\drivers\ks.sys
    + 2004-09-15 04:00 . 2010-07-16 11:58 219648 c:\windows\system32\dllcache\wordpad.exe
    + 2004-09-15 04:00 . 2009-12-24 07:00 177664 c:\windows\system32\dllcache\wintrust.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2004-09-15 04:00 . 2010-06-18 17:47 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 667136 c:\windows\system32\dllcache\wininet.dll
    - 2004-09-15 04:00 . 2009-10-29 05:25 667136 c:\windows\system32\dllcache\wininet.dll
    + 2004-09-15 04:00 . 2010-03-09 11:10 430080 c:\windows\system32\dllcache\vbscript.dll
    - 2004-09-15 04:00 . 2008-05-09 10:55 430080 c:\windows\system32\dllcache\vbscript.dll
    + 2004-09-15 04:00 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 406016 c:\windows\system32\dllcache\usp10.dll
    - 2004-09-15 04:00 . 2009-10-29 05:25 627200 c:\windows\system32\dllcache\urlmon.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 627200 c:\windows\system32\dllcache\urlmon.dll
    + 2004-09-15 04:00 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys
    - 2004-09-15 04:00 . 2009-06-16 14:39 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-09-15 04:00 . 2010-08-27 08:03 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-09-15 04:00 . 2010-08-26 13:39 357248 c:\windows\system32\dllcache\srv.sys
    - 2004-09-15 04:00 . 2008-04-14 16:11 474112 c:\windows\system32\dllcache\shlwapi.dll
    + 2004-09-15 04:00 . 2009-12-08 09:24 474112 c:\windows\system32\dllcache\shlwapi.dll
    + 2004-09-15 04:00 . 2010-06-30 12:32 149504 c:\windows\system32\dllcache\schannel.dll
    + 2004-09-15 04:00 . 2010-08-16 08:44 590848 c:\windows\system32\dllcache\rpcrt4.dll
    + 2010-02-26 15:27 . 2008-04-14 17:11 363520 c:\windows\system32\dllcache\psisdecd.dll
    - 2009-11-12 18:49 . 2008-04-14 17:11 363520 c:\windows\system32\dllcache\psisdecd.dll
    - 2004-03-16 15:58 . 2008-04-13 19:19 146048 c:\windows\system32\dllcache\portcls.sys
    + 2004-03-16 15:58 . 2008-04-13 20:19 146048 c:\windows\system32\dllcache\portcls.sys
    - 2004-09-15 04:00 . 2008-04-14 16:11 532480 c:\windows\system32\dllcache\mstime.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 532480 c:\windows\system32\dllcache\mstime.dll
    - 2004-09-15 04:00 . 2008-04-14 16:12 344064 c:\windows\system32\dllcache\mspaint.exe
    + 2004-09-15 04:00 . 2009-12-17 07:41 344064 c:\windows\system32\dllcache\mspaint.exe
    - 2004-09-15 04:00 . 2008-04-14 16:11 449024 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 449024 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-09-15 04:00 . 2010-02-24 13:11 455680 c:\windows\system32\dllcache\mrxsmb.sys
    + 2010-03-30 09:24 . 2010-03-30 09:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll
    + 2004-09-15 04:00 . 2010-09-18 09:22 974848 c:\windows\system32\dllcache\mfc42u.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 974848 c:\windows\system32\dllcache\mfc42.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 953856 c:\windows\system32\dllcache\mfc40u.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 954368 c:\windows\system32\dllcache\mfc40.dll
    - 2004-09-15 11:00 . 2008-04-13 19:16 141056 c:\windows\system32\dllcache\ks.sys
    + 2004-09-15 11:00 . 2008-04-13 20:16 141056 c:\windows\system32\dllcache\ks.sys
    + 2004-09-15 04:00 . 2010-06-09 07:44 692736 c:\windows\system32\dllcache\inetcomm.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 251392 c:\windows\system32\dllcache\iepeers.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 251392 c:\windows\system32\dllcache\iepeers.dll
    + 2004-09-15 04:00 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
    - 2004-09-15 04:00 . 2008-04-14 16:12 744448 c:\windows\system32\dllcache\helpsvc.exe
    - 2004-09-15 04:00 . 2008-04-14 16:11 617472 c:\windows\system32\dllcache\comctl32.dll
    + 2004-09-15 04:00 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
    + 2004-09-15 04:00 . 2010-10-28 13:08 290048 c:\windows\system32\dllcache\atmfd.dll
    + 2004-09-15 04:00 . 2009-11-21 15:58 471552 c:\windows\system32\dllcache\aclayers.dll
    + 2004-09-15 04:00 . 2010-02-12 04:34 100864 c:\windows\system32\dllcache\6to4svc.dll
    + 2010-06-17 15:46 . 2010-09-15 02:50 472808 c:\windows\system32\deployJava1.dll
    + 2004-09-15 04:00 . 2010-08-23 16:12 617472 c:\windows\system32\comctl32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 617472 c:\windows\system32\comctl32.dll
    + 2010-04-17 07:55 . 2010-02-12 10:03 293376 c:\windows\system32\browserchoice.exe
    + 2004-09-15 04:00 . 2010-02-12 04:34 100864 c:\windows\system32\6to4svc.dll
    - 2004-09-15 04:00 . 2008-04-14 16:12 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    + 2004-09-15 04:00 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    + 2010-03-30 21:16 . 2010-03-30 21:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2010-04-07 20:48 . 2010-04-07 20:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    + 2010-04-07 20:48 . 2010-04-07 20:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    - 2008-07-29 16:16 . 2008-07-29 16:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2010-09-22 06:43 . 2010-09-22 06:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2010-02-09 09:22 . 2010-02-09 09:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    - 2008-07-25 08:17 . 2008-07-25 08:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2010-05-11 03:40 . 2010-05-11 03:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2009-08-07 20:51 . 2009-08-07 20:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2010-05-11 03:40 . 2010-05-11 03:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    - 2008-05-27 21:49 . 2008-05-27 21:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    + 2010-09-22 23:25 . 2010-09-22 23:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    - 2008-05-27 21:48 . 2008-05-27 21:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2010-09-23 00:17 . 2010-09-23 00:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    - 2008-05-27 22:30 . 2008-05-27 22:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    + 2010-06-25 17:23 . 2010-06-25 17:23 908288 c:\windows\Installer\afcc2.msi
    + 2010-02-24 21:14 . 2010-02-24 21:14 543232 c:\windows\Installer\71232f.msp
    + 2010-08-08 08:08 . 2010-08-08 08:08 180224 c:\windows\Installer\6de36.msi
    + 2010-09-23 18:02 . 2010-09-23 18:02 798208 c:\windows\Installer\62a8e1.msp
    + 2010-11-16 11:12 . 2010-11-16 11:12 876544 c:\windows\Installer\2e1ea6.msp
    + 2010-01-13 08:25 . 2010-01-13 08:25 496128 c:\windows\Installer\164af5.msi
    + 2010-01-13 08:24 . 2010-01-13 08:24 331776 c:\windows\Installer\164abe.msi
    + 2010-06-25 17:23 . 2010-06-25 17:23 102400 c:\windows\Installer\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}\NewShortcut1_47F36D92E58E456DB73C3382737E4C42.exe
    + 2008-09-22 05:13 . 2010-11-10 17:12 135168 c:\windows\Installer\{90840409-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2008-09-22 05:13 . 2009-12-19 19:13 135168 c:\windows\Installer\{90840409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2008-11-12 19:04 . 2010-02-24 13:11 455680 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2010-10-08 19:04 . 2010-10-08 19:04 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_cd7da3de\System.Drawing.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_a08f558f\System.Drawing.Design.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_ca8cc13e\CustomMarshalers.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe
    + 2010-08-12 18:44 . 2010-08-12 18:44 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll
    + 2010-08-13 15:00 . 2010-08-13 15:00 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\b1646e54b708b9824f4193f87eb00c0e\System.Web.Extensions.Design.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\504a93e73da77c502ecf98bfdfc1485e\System.Web.Entity.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f22334fbd9497d79448fffef515ae0cc\System.Web.Entity.Design.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af5452305588da228a74e30324681d20\System.Web.DynamicData.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll
    + 2010-08-13 14:56 . 2010-08-13 14:56 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll
    + 2010-08-13 14:56 . 2010-08-13 14:56 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll
    + 2010-08-12 18:42 . 2010-08-12 18:42 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe
    + 2010-08-13 14:57 . 2010-08-13 14:57 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\72d3aacfca2e1ce835c210f5a1decb36\ServiceModelReg.ni.exe
    + 2010-08-12 17:22 . 2010-08-12 17:22 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll
    + 2010-08-12 17:23 . 2010-08-12 17:23 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll
    + 2010-08-12 17:23 . 2010-08-12 17:23 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll
    + 2010-08-12 17:23 . 2010-08-12 17:23 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe
    + 2010-08-13 14:57 . 2010-08-13 14:57 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe
    + 2010-10-09 17:35 . 2010-10-09 17:35 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-06-10 19:11 . 2010-06-10 19:11 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2010-06-10 19:11 . 2010-06-10 19:11 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2010-06-10 19:11 . 2010-06-10 19:11 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    - 2009-08-09 23:49 . 2009-08-09 23:49 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2004-09-15 04:00 . 2009-11-21 15:58 471552 c:\windows\AppPatch\aclayers.dll
    + 2010-09-16 18:26 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe
    + 2010-09-16 18:26 . 2009-04-15 14:53 585216 c:\windows\$NtUninstallKB982802$\rpcrt4.dll
    + 2010-08-12 17:13 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB982665$\spuninst\updspapi.dll
    + 2010-08-12 17:13 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB982665$\spuninst\spuninst.exe
    + 2010-06-10 19:04 . 2010-02-26 05:42 667136 c:\windows\$NtUninstallKB982381$\wininet.dll
    + 2010-06-10 19:04 . 2010-02-26 05:42 627200 c:\windows\$NtUninstallKB982381$\urlmon.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB982381$\spuninst\updspapi.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB982381$\spuninst\spuninst.exe
    + 2010-06-10 19:04 . 2010-02-26 05:42 251392 c:\windows\$NtUninstallKB982381$\iepeers.dll
    + 2010-08-12 17:22 . 2009-12-31 16:50 353792 c:\windows\$NtUninstallKB982214$\srv.sys
    + 2010-08-12 17:22 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB982214$\spuninst\updspapi.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB982214$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2009-10-15 16:32 119808 c:\windows\$NtUninstallKB982132$\t2embed.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB982132$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB982132$\spuninst\spuninst.exe
    + 2010-08-12 17:13 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB981997$\spuninst\updspapi.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB981997$\spuninst\spuninst.exe
    + 2010-10-15 16:43 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB981957$\spuninst\updspapi.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB981957$\spuninst\spuninst.exe
    + 2010-08-12 17:20 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB981852$\spuninst\updspapi.dll
    + 2010-08-12 17:20 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB981852$\spuninst\spuninst.exe
    + 2010-05-27 17:37 . 2009-05-26 09:01 392056 c:\windows\$NtUninstallKB981793$\spuninst\updspapi.dll
    + 2010-05-27 17:37 . 2009-05-26 09:01 232824 c:\windows\$NtUninstallKB981793$\spuninst\spuninst.exe
    + 2010-04-14 18:50 . 2008-05-09 10:55 430080 c:\windows\$NtUninstallKB981349$\vbscript.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB981349$\spuninst\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB981349$\spuninst\spuninst.exe
    + 2010-09-16 18:25 . 2008-04-14 16:11 406016 c:\windows\$NtUninstallKB981322$\usp10.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe
    + 2010-08-12 17:16 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB980436$\spuninst\updspapi.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB980436$\spuninst\spuninst.exe
    + 2010-08-12 17:16 . 2009-06-25 08:26 147456 c:\windows\$NtUninstallKB980436$\schannel.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 392056 c:\windows\$NtUninstallKB980232$\spuninst\updspapi.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 232824 c:\windows\$NtUninstallKB980232$\spuninst\spuninst.exe
    + 2010-04-14 18:57 . 2009-12-04 18:22 455424 c:\windows\$NtUninstallKB980232$\mrxsmb.sys
    + 2010-06-10 19:22 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB980218$\spuninst\updspapi.dll
    + 2010-06-10 19:22 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB980218$\spuninst\spuninst.exe
    + 2010-06-10 19:22 . 2008-04-14 16:09 285696 c:\windows\$NtUninstallKB980218$\atmfd.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 392056 c:\windows\$NtUninstallKB980195$\spuninst\updspapi.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB980195$\spuninst\spuninst.exe
    + 2010-03-31 17:41 . 2009-12-22 05:09 667136 c:\windows\$NtUninstallKB980182$\wininet.dll
    + 2010-03-31 17:41 . 2009-12-22 05:09 627200 c:\windows\$NtUninstallKB980182$\urlmon.dll
    + 2010-03-31 17:41 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB980182$\spuninst\updspapi.dll
    + 2010-03-31 17:41 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB980182$\spuninst\spuninst.exe
    + 2010-03-31 17:41 . 2008-04-14 16:11 251392 c:\windows\$NtUninstallKB980182$\iepeers.dll
    + 2010-10-15 16:47 . 2008-04-21 21:15 217088 c:\windows\$NtUninstallKB979687$\wordpad.exe
    + 2010-10-15 16:47 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB979687$\spuninst\updspapi.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB979687$\spuninst\spuninst.exe
    + 2010-04-14 18:57 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979683$\spuninst\updspapi.dll
    + 2010-04-14 18:57 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB979683$\spuninst\spuninst.exe
    + 2010-06-10 19:19 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979559$\spuninst\updspapi.dll
    + 2010-06-10 19:19 . 2009-05-26 09:01 232824 c:\windows\$NtUninstallKB979559$\spuninst\spuninst.exe
    + 2010-06-10 19:12 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979482$\spuninst\updspapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB979482$\spuninst\spuninst.exe
    + 2010-04-14 18:49 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979309$\spuninst\updspapi.dll
    + 2010-04-14 18:49 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB979309$\spuninst\spuninst.exe
    + 2010-02-25 19:17 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979306$\spuninst\updspapi.dll
    + 2010-02-25 19:17 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB979306$\spuninst\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978706$\spuninst\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978706$\spuninst\spuninst.exe
    + 2010-02-10 04:24 . 2008-04-14 16:12 344064 c:\windows\$NtUninstallKB978706$\mspaint.exe
    + 2010-06-10 19:12 . 2007-07-27 20:11 382840 c:\windows\$NtUninstallKB978695_WM9$\spuninst\updspapi.dll
    + 2010-06-10 19:12 . 2007-07-27 17:58 232824 c:\windows\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe
    + 2010-04-14 18:50 . 2008-04-14 16:11 176640 c:\windows\$NtUninstallKB978601$\wintrust.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978601$\spuninst\updspapi.dll
    + 2010-04-14 18:50 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB978601$\spuninst\spuninst.exe
    + 2010-05-12 17:57 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978542$\spuninst\updspapi.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978542$\spuninst\spuninst.exe
    + 2010-05-12 17:57 . 2008-04-11 19:05 691712 c:\windows\$NtUninstallKB978542$\inetcomm.dll
    + 2010-04-14 18:50 . 2008-06-20 11:08 225856 c:\windows\$NtUninstallKB978338$\tcpip6.sys
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978338$\spuninst\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978338$\spuninst\spuninst.exe
    + 2010-04-14 18:50 . 2008-04-14 16:11 100352 c:\windows\$NtUninstallKB978338$\6to4svc.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978262$\spuninst\updspapi.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978262$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978251$\spuninst\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978251$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2008-10-24 11:21 455296 c:\windows\$NtUninstallKB978251$\mrxsmb.sys
    + 2010-01-22 11:15 . 2009-10-29 05:25 667136 c:\windows\$NtUninstallKB978207$\wininet.dll
    + 2010-01-22 11:15 . 2009-10-29 05:25 627200 c:\windows\$NtUninstallKB978207$\urlmon.dll
    + 2010-01-22 11:15 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978207$\spuninst\updspapi.dll
    + 2010-01-22 11:15 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB978207$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978037$\spuninst\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978037$\spuninst\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB977914$\spuninst\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB977914$\spuninst\spuninst.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB977816$\spuninst\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB977816$\spuninst\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB977165$\spuninst\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB977165$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB975713$\spuninst\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB975713$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2008-04-14 16:11 474112 c:\windows\$NtUninstallKB975713$\shlwapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB975562$\spuninst\updspapi.dll
    + 2010-06-10 19:12 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB975562$\spuninst\spuninst.exe
    + 2010-03-10 19:50 . 2009-05-26 15:10 392056 c:\windows\$NtUninstallKB975561$\spuninst\updspapi.dll
    + 2010-03-10 19:50 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB975561$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB975560$\spuninst\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB975560$\spuninst\spuninst.exe
    + 2010-09-16 18:26 . 2007-07-27 20:11 382840 c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll
    + 2010-09-16 18:26 . 2007-07-27 17:58 232824 c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe
    + 2010-09-16 18:26 . 2006-10-18 19:47 317440 c:\windows\$NtUninstallKB975558_WM8$\mp4sdecd.dll
    + 2010-01-13 12:40 . 2009-06-16 14:39 119808 c:\windows\$NtUninstallKB972270$\t2embed.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 392056 c:\windows\$NtUninstallKB972270$\spuninst\updspapi.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB972270$\spuninst\spuninst.exe
    + 2010-02-10 04:32 . 2008-12-11 10:57 333952 c:\windows\$NtUninstallKB971468$\srv.sys
    + 2010-02-10 04:32 . 2008-07-08 13:03 392056 c:\windows\$NtUninstallKB971468$\spuninst\updspapi.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB971468$\spuninst\spuninst.exe
    + 2010-01-13 12:40 . 2009-05-26 15:10 392056 c:\windows\$NtUninstallKB955759$\spuninst\updspapi.dll
    + 2010-01-13 12:40 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB955759$\spuninst\spuninst.exe
    + 2010-01-13 12:40 . 2008-04-14 16:11 451072 c:\windows\$NtUninstallKB955759$\aclayers.dll
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2387149$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2387149$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2006-10-14 08:13 981760 c:\windows\$NtUninstallKB2387149$\mfc42u.dll
    + 2010-10-15 16:48 . 2008-04-14 16:11 927504 c:\windows\$NtUninstallKB2387149$\mfc40u.dll
    + 2010-10-15 16:48 . 2004-09-15 04:00 924432 c:\windows\$NtUninstallKB2387149$\mfc40.dll
    + 2010-10-15 16:48 . 2007-07-27 20:11 382840 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2007-07-27 17:58 232824 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe
    + 2010-10-15 16:43 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2360937$\spuninst\updspapi.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2360937$\spuninst\spuninst.exe
    + 2010-10-15 16:43 . 2010-07-22 15:46 590848 c:\windows\$NtUninstallKB2360937$\rpcrt4.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 667136 c:\windows\$NtUninstallKB2360131$\wininet.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 627200 c:\windows\$NtUninstallKB2360131$\urlmon.dll
    + 2010-10-15 16:47 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2360131$\spuninst\updspapi.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2360131$\spuninst\spuninst.exe
    + 2010-10-15 16:47 . 2008-04-14 16:11 449024 c:\windows\$NtUninstallKB2360131$\mshtmled.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 251392 c:\windows\$NtUninstallKB2360131$\iepeers.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2010-06-21 15:27 354304 c:\windows\$NtUninstallKB2345886$\srv.sys
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2345886$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2345886$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2296011$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2296011$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2008-04-14 16:11 617472 c:\windows\$NtUninstallKB2296011$\comctl32.dll
    + 2010-08-04 18:13 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2286198$\spuninst\updspapi.dll
    + 2010-08-04 18:13 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2286198$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2279986$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2279986$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2010-04-20 05:31 285696 c:\windows\$NtUninstallKB2279986$\atmfd.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 392056 c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 232824 c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe
    + 2010-07-14 09:19 . 2010-02-22 16:55 392056 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll
    + 2010-07-14 09:19 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe
    + 2010-07-14 09:19 . 2008-04-14 16:12 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe
    + 2010-08-12 17:22 . 2010-04-16 16:07 667136 c:\windows\$NtUninstallKB2183461$\wininet.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 627200 c:\windows\$NtUninstallKB2183461$\urlmon.dll
    + 2010-08-12 17:22 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2183461$\spuninst\updspapi.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2183461$\spuninst\spuninst.exe
    + 2010-08-12 17:22 . 2010-04-16 16:07 251392 c:\windows\$NtUninstallKB2183461$\iepeers.dll
    + 2010-08-12 17:16 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2160329$\spuninst\updspapi.dll
    + 2010-08-12 17:16 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2160329$\spuninst\spuninst.exe
    + 2010-10-01 08:23 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2158563$\spuninst\updspapi.dll
    + 2010-10-01 08:23 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2158563$\spuninst\spuninst.exe
    + 2010-09-16 18:23 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll
    + 2010-09-16 18:23 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe
    + 2010-09-16 18:23 . 2010-01-29 15:00 691712 c:\windows\$NtUninstallKB2141007$\inetcomm.dll
    + 2010-09-16 18:26 . 2008-04-14 16:11 293376 c:\windows\$NtUninstallKB2121546$\winsrv.dll
    + 2010-09-16 18:26 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe
    + 2010-08-12 17:21 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB2115168$\spuninst\updspapi.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB2115168$\spuninst\spuninst.exe
    + 2010-08-12 17:19 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB2079403$\spuninst\updspapi.dll
    + 2010-08-12 17:19 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB2079403$\spuninst\spuninst.exe
    + 2010-09-16 18:26 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB982802\update\updspapi.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB982802\update\update.exe
    + 2010-09-16 18:26 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB982802\spuninst.exe
    + 2010-07-23 06:17 . 2010-07-23 06:17 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll
    + 2010-08-12 17:13 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB982665\update\updspapi.dll
    + 2010-08-12 17:13 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB982665\update\update.exe
    + 2010-08-12 17:13 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB982665\spuninst.exe
    + 2010-06-10 19:04 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB982381\update\updspapi.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB982381\update\update.exe
    + 2010-06-10 19:04 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB982381\spuninst.exe
    + 2010-04-16 16:01 . 2010-04-16 16:01 668672 c:\windows\$hf_mig$\KB982381\SP3QFE\wininet.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 628224 c:\windows\$hf_mig$\KB982381\SP3QFE\urlmon.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 251392 c:\windows\$hf_mig$\KB982381\SP3QFE\iepeers.dll
    + 2010-08-12 17:22 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB982214\update\updspapi.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB982214\update\update.exe
    + 2010-08-12 17:22 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB982214\spuninst.exe
    + 2010-08-12 15:53 . 2010-06-21 14:18 354304 c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys
    + 2010-10-15 16:48 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB982132\update\updspapi.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB982132\update\update.exe
    + 2010-10-15 16:48 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB982132\spuninst.exe
    + 2010-08-27 08:00 . 2010-08-27 08:00 119808 c:\windows\$hf_mig$\KB982132\SP3QFE\t2embed.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB981997\update\updspapi.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB981997\update\update.exe
    + 2010-08-12 17:13 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB981997\spuninst.exe
    + 2010-10-15 16:43 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB981957\update\updspapi.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB981957\update\update.exe
    + 2010-10-15 16:43 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB981957\spuninst.exe
    + 2010-08-12 17:20 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB981852\update\updspapi.dll
    + 2010-08-12 17:20 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB981852\update\update.exe
    + 2010-08-12 17:20 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB981852\spuninst.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB981349\update\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB981349\update\update.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB981349\spuninst.exe
    + 2010-03-09 11:08 . 2010-03-09 11:08 430080 c:\windows\$hf_mig$\KB981349\SP3QFE\vbscript.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB981322\update\updspapi.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB981322\update\update.exe
    + 2010-09-16 18:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB981322\spuninst.exe
    + 2010-04-16 15:30 . 2010-04-16 15:30 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB980436\update\updspapi.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB980436\update\update.exe
    + 2010-08-12 17:16 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB980436\spuninst.exe
    + 2010-06-30 12:24 . 2010-06-30 12:24 149504 c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 392056 c:\windows\$hf_mig$\KB980232\update\updspapi.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 757112 c:\windows\$hf_mig$\KB980232\update\update.exe
    + 2010-04-14 18:57 . 2009-05-26 09:01 232824 c:\windows\$hf_mig$\KB980232\spuninst.exe
    + 2010-04-14 18:13 . 2010-02-24 11:57 457216 c:\windows\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys
    + 2010-06-10 19:22 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB980218\update\updspapi.dll
    + 2010-06-10 19:22 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB980218\update\update.exe
    + 2010-06-10 19:22 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB980218\spuninst.exe
    + 2010-04-20 05:38 . 2010-04-20 05:38 285824 c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB980195\update\updspapi.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB980195\update\update.exe
    + 2010-06-10 19:21 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB980195\spuninst.exe
    + 2010-03-31 17:41 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB980182\update\updspapi.dll
    + 2010-03-31 17:41 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB980182\update\update.exe
    + 2010-03-31 17:41 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB980182\spuninst.exe
    + 2010-02-26 05:39 . 2010-02-26 05:39 668672 c:\windows\$hf_mig$\KB980182\SP3QFE\wininet.dll
    + 2010-02-26 05:39 . 2010-02-26 05:39 628224 c:\windows\$hf_mig$\KB980182\SP3QFE\urlmon.dll
    + 2010-02-26 05:39 . 2010-02-26 05:39 251392 c:\windows\$hf_mig$\KB980182\SP3QFE\iepeers.dll
    + 2010-10-15 16:47 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB979687\update\updspapi.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB979687\update\update.exe
    + 2010-10-15 16:47 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB979687\spuninst.exe
    + 2010-07-16 11:56 . 2010-07-16 11:56 219648 c:\windows\$hf_mig$\KB979687\SP3QFE\wordpad.exe
    + 2010-04-14 18:57 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979683\update\updspapi.dll
    + 2010-04-14 18:57 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979683\update\update.exe
    + 2010-04-14 18:57 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB979683\spuninst.exe
    + 2010-06-10 19:19 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979559\update\updspapi.dll
    + 2010-06-10 19:19 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979559\update\update.exe
    + 2010-06-10 19:19 . 2009-05-26 09:01 232824 c:\windows\$hf_mig$\KB979559\spuninst.exe
    + 2010-06-10 19:12 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979482\update\updspapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979482\update\update.exe
    + 2010-06-10 19:12 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB979482\spuninst.exe
    + 2010-04-14 18:49 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979309\update\updspapi.dll
    + 2010-04-14 18:49 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979309\update\update.exe
    + 2010-04-14 18:49 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB979309\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978706\update\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978706\update\update.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978706\spuninst.exe
    + 2009-12-17 07:38 . 2009-12-17 07:38 344064 c:\windows\$hf_mig$\KB978706\SP3QFE\mspaint.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978601\update\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978601\update\update.exe
    + 2010-04-14 18:50 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB978601\spuninst.exe
    + 2009-12-24 06:43 . 2009-12-24 06:43 178176 c:\windows\$hf_mig$\KB978601\SP3QFE\wintrust.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978542\update\updspapi.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978542\update\update.exe
    + 2010-05-12 17:57 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978542\spuninst.exe
    + 2010-01-29 14:54 . 2010-01-29 14:54 691712 c:\windows\$hf_mig$\KB978542\SP3QFE\inetcomm.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978338\update\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978338\update\update.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978338\spuninst.exe
    + 2010-02-11 11:36 . 2010-02-11 11:36 226880 c:\windows\$hf_mig$\KB978338\SP3QFE\tcpip6.sys
    + 2010-02-12 04:29 . 2010-02-12 04:29 100864 c:\windows\$hf_mig$\KB978338\SP3QFE\6to4svc.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978262\update\updspapi.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978262\update\update.exe
    + 2010-02-10 04:32 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978262\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978251\update\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978251\update\update.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978251\spuninst.exe
    + 2010-02-10 04:06 . 2009-12-04 17:25 456832 c:\windows\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys
    + 2010-01-22 11:15 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978207\update\updspapi.dll
    + 2010-01-22 11:15 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978207\update\update.exe
    + 2010-01-22 11:15 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB978207\spuninst.exe
    + 2009-12-22 05:06 . 2009-12-22 05:06 668672 c:\windows\$hf_mig$\KB978207\SP3QFE\wininet.dll
    + 2009-12-22 05:06 . 2009-12-22 05:06 628224 c:\windows\$hf_mig$\KB978207\SP3QFE\urlmon.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978037\update\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978037\update\update.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978037\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977914\update\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977914\update\update.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977914\spuninst.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977816\update\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977816\update\update.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977816\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977165\update\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977165\update\update.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977165\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975713\update\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975713\update\update.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB975713\spuninst.exe
    + 2009-12-08 09:02 . 2009-12-08 09:02 474112 c:\windows\$hf_mig$\KB975713\SP3QFE\shlwapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975562\update\updspapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975562\update\update.exe
    + 2010-06-10 19:12 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB975562\spuninst.exe
    + 2010-03-10 19:50 . 2009-05-26 15:10 392056 c:\windows\$hf_mig$\KB975561\update\updspapi.dll
    + 2010-03-10 19:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975561\update\update.exe
    + 2010-03-10 19:50 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB975561\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975560\update\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975560\update\update.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB975560\spuninst.exe
    + 2010-01-13 12:40 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB972270\update\updspapi.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB972270\update\update.exe
    + 2010-01-13 12:40 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB972270\spuninst.exe
    + 2010-01-13 08:17 . 2009-10-15 16:39 119808 c:\windows\$hf_mig$\KB972270\SP3QFE\t2embed.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB971468\update\updspapi.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB971468\update\update.exe
    + 2010-02-10 04:32 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB971468\spuninst.exe
    + 2010-02-10 04:07 . 2010-01-01 07:58 353792 c:\windows\$hf_mig$\KB971468\SP3QFE\srv.sys
    + 2010-01-13 12:40 . 2009-05-26 15:10 392056 c:\windows\$hf_mig$\KB955759\update\updspapi.dll
    + 2010-01-13 12:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB955759\update\update.exe
    + 2010-01-13 12:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB955759\spuninst.exe
    + 2010-01-13 08:17 . 2009-11-21 15:46 471552 c:\windows\$hf_mig$\KB955759\SP3QFE\aclayers.dll
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2387149\update\updspapi.dll
    + 2010-10-15 16:48 . 2010-07-05 13:17 757112 c:\windows\$hf_mig$\KB2387149\update\update.exe
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2387149\spuninst.exe
    + 2010-10-15 15:51 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42u.dll
    + 2010-10-15 15:51 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42.dll
    + 2010-10-15 15:51 . 2010-09-18 07:18 953856 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
    + 2010-10-15 15:51 . 2010-09-18 07:18 954368 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40.dll
    + 2010-10-15 16:43 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2360937\update\updspapi.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2360937\update\update.exe
    + 2010-10-15 16:43 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2360937\spuninst.exe
    + 2010-10-15 15:47 . 2010-08-16 08:43 590848 c:\windows\$hf_mig$\KB2360937\SP3QFE\rpcrt4.dll
    + 2010-10-15 16:47 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2360131\update\updspapi.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2360131\update\update.exe
    + 2010-10-15 16:47 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2360131\spuninst.exe
    + 2010-09-09 14:24 . 2010-09-09 14:24 668672 c:\windows\$hf_mig$\KB2360131\SP3QFE\wininet.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 628224 c:\windows\$hf_mig$\KB2360131\SP3QFE\urlmon.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 449024 c:\windows\$hf_mig$\KB2360131\SP3QFE\mshtmled.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 251392 c:\windows\$hf_mig$\KB2360131\SP3QFE\iepeers.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB2347290\update\update.exe
    + 2010-09-16 18:26 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2347290\spuninst.exe
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2345886\update\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2345886\update\update.exe
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2345886\spuninst.exe
    + 2010-08-26 13:37 . 2010-08-26 13:37 357248 c:\windows\$hf_mig$\KB2345886\SP3QFE\srv.sys
    + 2010-08-04 18:13 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll
    + 2010-08-04 18:13 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2286198\update\update.exe
    + 2010-08-04 18:13 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2286198\spuninst.exe
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2279986\update\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2279986\update\update.exe
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2279986\spuninst.exe
    + 2010-09-01 11:49 . 2010-09-01 11:49 285824 c:\windows\$hf_mig$\KB2279986\SP3QFE\atmfd.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 392056 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 757112 c:\windows\$hf_mig$\KB2259922\update\update.exe
    + 2010-09-16 18:27 . 2009-05-26 09:01 232824 c:\windows\$hf_mig$\KB2259922\spuninst.exe
    + 2010-07-14 09:19 . 2010-02-22 16:55 392056 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll
    + 2010-07-14 09:19 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2229593\update\update.exe
    + 2010-07-14 09:19 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2229593\spuninst.exe
    + 2010-07-14 08:18 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe
    + 2010-08-12 17:22 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2183461\update\updspapi.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2183461\update\update.exe
    + 2010-08-12 17:22 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2183461\spuninst.exe
    + 2010-06-24 12:12 . 2010-06-24 12:12 668672 c:\windows\$hf_mig$\KB2183461\SP3QFE\wininet.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 628224 c:\windows\$hf_mig$\KB2183461\SP3QFE\urlmon.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 251392 c:\windows\$hf_mig$\KB2183461\SP3QFE\iepeers.dll
    + 2010-08-12 17:16 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2160329\update\updspapi.dll
    + 2010-08-12 17:16 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2160329\update\update.exe
    + 2010-08-12 17:16 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2160329\spuninst.exe
    + 2010-09-16 18:23 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
    + 2010-09-16 18:23 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2141007\update\update.exe
    + 2010-09-16 18:23 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2141007\spuninst.exe
    + 2010-06-09 07:42 . 2010-06-09 07:42 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
    + 2010-09-16 18:26 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2121546\update\update.exe
    + 2010-09-16 18:26 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2121546\spuninst.exe
    + 2010-06-18 17:46 . 2010-06-18 17:46 293376 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB2115168\update\update.exe
    + 2010-08-12 17:21 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2115168\spuninst.exe
    + 2010-08-12 17:19 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB2079403\update\updspapi.dll
    + 2010-08-12 17:19 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB2079403\update\update.exe
    + 2010-08-12 17:19 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2079403\spuninst.exe
    + 2010-10-15 15:50 . 2010-08-23 16:12 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
    + 2004-09-15 04:00 . 2010-04-06 01:52 2462720 c:\windows\system32\WMVCore.dll
    - 2009-11-18 12:56 . 2009-10-06 09:55 1112288 c:\windows\system32\wdfcoinstaller01007.dll
    + 2010-01-13 08:24 . 2009-10-06 09:55 1112288 c:\windows\system32\wdfcoinstaller01007.dll
    + 2008-02-09 13:19 . 2009-02-27 09:23 3292160 c:\windows\system32\spool\drivers\w32x86\hpphotosmart_c5200_sc56c\hpzui5ha.dll
    - 2008-02-09 13:19 . 2007-03-15 13:16 8602112 c:\windows\system32\spool\drivers\w32x86\hpphotosmart_c5200_sc56c\hpzst5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 12:55 8602112 c:\windows\system32\spool\drivers\w32x86\hpphotosmart_c5200_sc56c\hpzst5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 09:03 1734144 c:\windows\system32\spool\drivers\w32x86\hpphotosmart_c5200_sc56c\hpz3r5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 09:23 3292160 c:\windows\system32\spool\drivers\w32x86\3\hpzui5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 12:55 8602112 c:\windows\system32\spool\drivers\w32x86\3\hpzst5ha.dll
    - 2008-02-09 13:19 . 2007-03-15 13:16 8602112 c:\windows\system32\spool\drivers\w32x86\3\hpzst5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 09:03 1734144 c:\windows\system32\spool\drivers\w32x86\3\hpz3r5ha.dll
    + 2004-09-15 04:00 . 2010-07-27 06:30 8466432 c:\windows\system32\shell32.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 1509888 c:\windows\system32\shdocvw.dll
    + 2004-09-15 04:00 . 2010-02-05 18:26 1292288 c:\windows\system32\quartz.dll
    + 2004-09-15 04:00 . 2010-07-16 12:00 1287680 c:\windows\system32\ole32.dll
    + 2004-09-15 04:00 . 2010-04-28 18:13 2192256 c:\windows\system32\ntoskrnl.exe
    + 2004-09-15 11:00 . 2010-04-28 05:43 2069120 c:\windows\system32\ntkrnlpa.exe
    + 2004-09-15 04:00 . 2010-06-14 07:42 1172480 c:\windows\system32\msxml3.dll
    - 2004-09-15 04:00 . 2009-07-31 04:34 1172480 c:\windows\system32\msxml3.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 3097088 c:\windows\system32\mshtml.dll
    + 2010-01-27 01:07 . 2010-10-09 05:53 5969360 c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2004-12-13 15:45 . 2010-12-16 11:19 1534552 c:\windows\system32\FNTCACHE.DAT
    - 2009-11-18 12:57 . 2009-05-11 09:47 1302600 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\WUDFUpdate_01007.dll
    + 2010-01-13 08:25 . 2009-05-11 09:47 1302600 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\WUDFUpdate_01007.dll
    + 2010-01-13 08:24 . 2009-10-06 09:55 1112288 c:\windows\system32\DRVSTORE\ccdcmb_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\wdfcoinstaller01007.dll
    + 2004-09-15 04:00 . 2010-04-06 01:52 2462720 c:\windows\system32\dllcache\WMVCore.dll
    + 2004-09-15 04:00 . 2010-10-26 13:58 1853568 c:\windows\system32\dllcache\win32k.sys
    + 2004-09-15 04:00 . 2010-07-27 06:30 8466432 c:\windows\system32\dllcache\shell32.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 1509888 c:\windows\system32\dllcache\shdocvw.dll
    + 2004-09-15 04:00 . 2010-02-05 18:26 1292288 c:\windows\system32\dllcache\quartz.dll
    + 2004-09-15 04:00 . 2010-07-16 12:00 1287680 c:\windows\system32\dllcache\ole32.dll
    + 2004-09-15 04:00 . 2010-04-28 18:13 2192256 c:\windows\system32\dllcache\ntoskrnl.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2004-09-15 11:00 . 2010-04-28 05:43 2069120 c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2004-09-15 04:00 . 2010-06-14 07:42 1172480 c:\windows\system32\dllcache\msxml3.dll
    - 2004-09-15 04:00 . 2009-07-31 04:34 1172480 c:\windows\system32\dllcache\msxml3.dll
    + 2004-09-15 04:00 . 2010-01-29 15:00 1315328 c:\windows\system32\dllcache\msoe.dll
    - 2004-09-15 04:00 . 2009-07-10 13:28 1315328 c:\windows\system32\dllcache\msoe.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 3097088 c:\windows\system32\dllcache\mshtml.dll
    + 2004-09-15 04:00 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
    - 2004-09-15 04:00 . 2008-04-14 16:12 3558912 c:\windows\system32\dllcache\moviemk.exe
    - 2004-09-15 04:00 . 2008-04-14 16:11 1025024 c:\windows\system32\dllcache\browseui.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 1025024 c:\windows\system32\dllcache\browseui.dll
    + 2009-11-06 22:06 . 2009-11-06 22:06 1130824 c:\windows\system32\dfshim.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 1025024 c:\windows\system32\browseui.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 1025024 c:\windows\system32\browseui.dll
    + 2010-04-07 20:48 . 2010-04-07 20:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    - 2008-11-25 01:59 . 2008-11-25 01:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2010-09-22 06:44 . 2010-09-22 06:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2010-03-23 02:32 . 2010-03-23 02:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2010-05-11 03:40 . 2010-05-11 03:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2009-08-07 20:51 . 2009-08-07 20:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2010-05-11 03:40 . 2010-05-11 03:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2008-05-27 22:35 . 2008-05-27 22:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2010-09-23 12:55 . 2010-09-23 12:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2010-09-23 12:55 . 2010-09-23 12:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    - 2008-05-27 22:35 . 2008-05-27 22:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    - 2008-05-27 21:48 . 2008-05-27 21:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    + 2010-09-22 23:25 . 2010-09-22 23:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    - 2008-05-27 21:48 . 2008-05-27 21:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    + 2010-09-23 12:55 . 2010-09-23 12:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    - 2008-05-27 21:43 . 2008-05-27 21:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2010-02-26 03:09 . 2010-02-26 03:09 8300544 c:\windows\Installer\f37714.msp
    + 2009-11-08 21:25 . 2009-11-08 21:25 1935360 c:\windows\Installer\78d061.msp
    + 2010-04-11 19:17 . 2010-04-11 19:17 2607104 c:\windows\Installer\71233d.msp
    + 2010-04-11 19:17 . 2010-04-11 19:17 4210688 c:\windows\Installer\71233c.msp
    + 2010-09-23 04:39 . 2010-09-23 04:39 4265472 c:\windows\Installer\62a8d8.msp
    + 2010-06-29 13:01 . 2010-06-29 13:01 8404992 c:\windows\Installer\54ccb7.msp
    + 2010-08-18 07:19 . 2010-08-18 07:19 8400896 c:\windows\Installer\36097e.msp
    + 2010-10-04 11:59 . 2010-10-04 11:59 8300032 c:\windows\Installer\2e1eb5.msp
    + 2010-08-09 13:44 . 2010-08-09 13:44 3778048 c:\windows\Installer\2d4c01.msp
    + 2010-10-04 14:00 . 2010-10-04 14:00 7973888 c:\windows\Installer\29b7ed.msp
    + 2009-12-01 13:52 . 2009-12-01 13:52 7970816 c:\windows\Installer\152302.msp
    + 2010-01-11 13:35 . 2010-01-11 13:35 4480000 c:\windows\Installer\14395d.msp
    + 2010-06-25 17:21 . 2010-06-25 17:21 1817600 c:\windows\Hewlett-Packard\Setup Files\HP Software Update\{6EDE20CD-178C-4D5C-A9D1-9B356B2E4EDD}\HP Update.msi
    + 2010-01-13 19:13 . 2010-01-13 19:13 1729024 c:\windows\Hewlett-Packard\Setup Files\HP Software Update\{2CA9E997-73DA-4996-BEF1-58DABC19657C}\HP Update.msi
    + 2008-10-16 12:52 . 2010-04-28 18:13 2192256 c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2010-10-08 19:04 . 2010-10-08 19:04 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_b0d05ab3\System.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_0e339a9a\System.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_720dde62\System.Xml.dll
    + 2010-10-08 19:05 . 2010-10-08 19:05 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_6f39210c\System.Xml.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_fddb7692\System.Windows.Forms.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_333276eb\System.Windows.Forms.dll
    + 2010-10-08 19:05 . 2010-10-08 19:05 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_7b8dac07\System.Drawing.dll
    + 2010-10-08 19:05 . 2010-10-08 19:05 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_795e35b1\System.Design.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_458d4663\System.Design.dll
    + 2010-10-08 19:05 . 2010-10-08 19:05 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_de582565\mscorlib.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_ba58b412\mscorlib.dll
    + 2010-08-12 17:21 . 2010-08-12 17:21 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll
    + 2010-08-12 17:20 . 2010-08-12 17:20 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bec60fe2e934a6284224ab45b0e981e2\System.WorkflowServices.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\09da139c48e2f5e76994a5c0f2e5b19e\System.Workflow.Runtime.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6809417da74ff937e18b3034f1eac2f2\System.Workflow.ComponentModel.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\da367bc2ecf2c9c5b4f858b6dba9e2ea\System.Web.Extensions.ni.dll
    + 2010-08-12 18:43 . 2010-08-12 18:43 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8e34e273d036b7468fc4e951a1fde437\System.ServiceModel.Web.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll
    + 2010-08-12 18:43 . 2010-08-12 18:43 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll
    + 2010-10-09 17:35 . 2010-10-09 17:35 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\095bb4f033374647b6d66c51f16bb886\System.IdentityModel.ni.dll
    + 2010-08-12 18:42 . 2010-08-12 18:42 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll
    + 2010-08-12 18:40 . 2010-08-12 18:40 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\b8c9267d87b7358e1a5f00bf1572c313\System.Data.Services.ni.dll
    + 2010-08-12 18:40 . 2010-08-12 18:40 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll
    + 2010-08-12 18:39 . 2010-08-12 18:39 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll
    + 2010-08-12 18:39 . 2010-08-12 18:39 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll
    + 2010-08-12 17:23 . 2010-08-12 17:23 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll
    + 2010-08-12 17:20 . 2010-08-12 17:20 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a27783547338dbebf84101a685ba641b\Microsoft.VisualBasic.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll
    + 2010-06-22 19:23 . 2010-06-22 19:23 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2009-08-09 23:54 . 2009-08-09 23:54 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2010-10-08 19:10 . 2010-10-08 19:10 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2010-06-10 19:11 . 2010-06-10 19:12 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2010-06-22 19:23 . 2010-06-22 19:23 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2010-06-22 19:23 . 2010-06-22 19:23 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2009-08-09 23:49 . 2009-08-09 23:49 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2009-10-15 19:02 . 2009-10-15 19:02 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2009-10-15 19:02 . 2009-10-15 19:02 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-06-10 19:04 . 2010-03-10 04:43 1509376 c:\windows\$NtUninstallKB982381$\shdocvw.dll
    + 2010-06-10 19:04 . 2010-02-26 05:42 3094016 c:\windows\$NtUninstallKB982381$\mshtml.dll
    + 2010-06-10 19:04 . 2010-03-10 04:43 1025024 c:\windows\$NtUninstallKB982381$\browseui.dll
    + 2010-08-12 17:13 . 2009-10-23 15:28 3558912 c:\windows\$NtUninstallKB981997$\moviemk.exe
    + 2010-10-15 16:43 . 2010-06-24 09:02 1852160 c:\windows\$NtUninstallKB981957$\win32k.sys
    + 2010-08-12 17:20 . 2010-02-17 11:08 2192256 c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
    + 2010-08-12 17:20 . 2010-02-16 19:08 2027008 c:\windows\$NtUninstallKB981852$\ntkrpamp.exe
    + 2010-08-12 17:20 . 2010-02-16 19:08 2069120 c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
    + 2010-08-12 17:20 . 2010-02-16 19:08 2148864 c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe
    + 2010-03-31 17:41 . 2009-12-22 05:09 1509376 c:\windows\$NtUninstallKB980182$\shdocvw.dll
    + 2010-03-31 17:41 . 2009-12-22 05:09 3092480 c:\windows\$NtUninstallKB980182$\mshtml.dll
    + 2010-03-31 17:41 . 2008-04-14 16:11 1025024 c:\windows\$NtUninstallKB980182$\browseui.dll
    + 2010-10-15 16:47 . 2008-04-14 16:11 1287168 c:\windows\$NtUninstallKB979687$\ole32.dll
    + 2010-04-14 18:57 . 2009-12-09 10:09 2191488 c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
    + 2010-04-14 18:57 . 2009-12-09 10:09 2026496 c:\windows\$NtUninstallKB979683$\ntkrpamp.exe
    + 2010-04-14 18:57 . 2009-12-09 10:10 2068352 c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
    + 2010-04-14 18:57 . 2009-12-09 10:09 2147840 c:\windows\$NtUninstallKB979683$\ntkrnlmp.exe
    + 2010-06-10 19:19 . 2009-08-14 15:15 1850880 c:\windows\$NtUninstallKB979559$\win32k.sys
    + 2010-06-10 19:12 . 2009-05-20 01:56 2458112 c:\windows\$NtUninstallKB978695_WM9$\wmvcore.dll
    + 2010-05-12 17:57 . 2009-07-10 13:28 1315328 c:\windows\$NtUninstallKB978542$\msoe.dll
    + 2010-01-22 11:15 . 2009-10-29 05:25 1509376 c:\windows\$NtUninstallKB978207$\shdocvw.dll
    + 2010-01-22 11:15 . 2009-10-29 18:55 3091968 c:\windows\$NtUninstallKB978207$\mshtml.dll
    + 2010-02-10 04:24 . 2009-08-04 19:59 2191488 c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
    + 2010-02-10 04:24 . 2009-08-04 17:28 2026496 c:\windows\$NtUninstallKB977165$\ntkrpamp.exe
    + 2010-02-10 04:24 . 2009-08-04 17:28 2068352 c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
    + 2010-02-10 04:24 . 2009-08-04 17:28 2147840 c:\windows\$NtUninstallKB977165$\ntkrnlmp.exe
    + 2010-06-10 19:12 . 2009-11-27 17:13 1292288 c:\windows\$NtUninstallKB975562$\quartz.dll
    + 2010-03-10 19:50 . 2008-04-14 16:12 3558912 c:\windows\$NtUninstallKB975561$\moviemk.exe
    + 2010-02-10 04:25 . 2009-06-03 19:10 1291776 c:\windows\$NtUninstallKB975560$\quartz.dll
    + 2010-10-15 16:48 . 2008-04-14 16:11 1028096 c:\windows\$NtUninstallKB2387149$\mfc42.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 1509376 c:\windows\$NtUninstallKB2360131$\shdocvw.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 3094016 c:\windows\$NtUninstallKB2360131$\mshtml.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 1025024 c:\windows\$NtUninstallKB2360131$\browseui.dll
    + 2010-08-04 18:13 . 2008-06-17 19:02 8465408 c:\windows\$NtUninstallKB2286198$\shell32.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 1509376 c:\windows\$NtUninstallKB2183461$\shdocvw.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 3094016 c:\windows\$NtUninstallKB2183461$\mshtml.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 1025024 c:\windows\$NtUninstallKB2183461$\browseui.dll
    + 2010-08-12 17:16 . 2010-05-02 08:09 1851520 c:\windows\$NtUninstallKB2160329$\win32k.sys
    + 2010-08-12 17:19 . 2009-07-31 04:34 1172480 c:\windows\$NtUninstallKB2079403$\msxml3.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 1509376 c:\windows\$hf_mig$\KB982381\SP3QFE\shdocvw.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 3094528 c:\windows\$hf_mig$\KB982381\SP3QFE\mshtml.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 1025024 c:\windows\$hf_mig$\KB982381\SP3QFE\browseui.dll
    + 2010-08-12 15:52 . 2010-06-18 13:43 3558912 c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe
    + 2010-09-01 07:57 . 2010-09-01 07:57 1862144 c:\windows\$hf_mig$\KB981957\SP3QFE\win32k.sys
    + 2010-08-12 15:52 . 2010-04-28 05:18 2192384 c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
    + 2010-08-12 15:52 . 2010-04-28 05:18 2027008 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe
    + 2010-04-28 20:18 . 2010-04-28 20:18 2069248 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
    + 2010-08-12 15:52 . 2010-04-28 05:18 2148864 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe
    + 2010-03-10 04:55 . 2010-03-10 04:55 1509376 c:\windows\$hf_mig$\KB980182\SP3QFE\shdocvw.dll
    + 2010-02-26 05:39 . 2010-02-26 05:39 3094528 c:\windows\$hf_mig$\KB980182\SP3QFE\mshtml.dll
    + 2010-03-10 04:55 . 2010-03-10 04:55 1025024 c:\windows\$hf_mig$\KB980182\SP3QFE\browseui.dll
    + 2010-07-16 11:59 . 2010-07-16 11:59 1288704 c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
    + 2010-04-14 18:13 . 2010-02-16 19:01 2192384 c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
    + 2010-04-14 18:13 . 2010-02-16 19:01 2027008 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrpamp.exe
    + 2010-04-14 18:13 . 2010-02-16 19:01 2069248 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
    + 2010-04-14 18:13 . 2010-02-16 19:01 2148864 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlmp.exe
    + 2010-05-02 08:02 . 2010-05-02 08:02 1860608 c:\windows\$hf_mig$\KB979559\SP3QFE\win32k.sys
    + 2010-01-29 14:54 . 2010-01-29 14:54 1315328 c:\windows\$hf_mig$\KB978542\SP3QFE\msoe.dll
    + 2009-12-22 05:06 . 2009-12-22 05:06 1509376 c:\windows\$hf_mig$\KB978207\SP3QFE\shdocvw.dll
    + 2009-12-22 05:06 . 2009-12-22 05:06 3094528 c:\windows\$hf_mig$\KB978207\SP3QFE\mshtml.dll
    + 2009-12-09 13:33 . 2009-12-09 13:33 2191616 c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
    + 2010-02-10 04:05 . 2009-12-09 10:03 2026496 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrpamp.exe
    + 2009-12-09 13:33 . 2009-12-09 13:33 2068480 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
    + 2010-02-10 04:05 . 2009-12-09 10:03 2147840 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlmp.exe
    + 2010-02-05 18:28 . 2010-02-05 18:28 1292288 c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll
    + 2010-03-10 19:24 . 2009-10-23 14:53 3558912 c:\windows\$hf_mig$\KB975561\SP3QFE\moviemk.exe
    + 2009-11-27 17:24 . 2009-11-27 17:24 1292288 c:\windows\$hf_mig$\KB975560\SP3QFE\quartz.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 1509888 c:\windows\$hf_mig$\KB2360131\SP3QFE\shdocvw.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 3095552 c:\windows\$hf_mig$\KB2360131\SP3QFE\mshtml.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 1025024 c:\windows\$hf_mig$\KB2360131\SP3QFE\browseui.dll
    + 2010-07-27 06:29 . 2010-07-27 06:29 8467456 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 1509376 c:\windows\$hf_mig$\KB2183461\SP3QFE\shdocvw.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 3094528 c:\windows\$hf_mig$\KB2183461\SP3QFE\mshtml.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 1025024 c:\windows\$hf_mig$\KB2183461\SP3QFE\browseui.dll
    + 2010-06-24 21:29 . 2010-06-24 21:29 1861376 c:\windows\$hf_mig$\KB2160329\SP3QFE\win32k.sys
    + 2010-06-14 07:40 . 2010-06-14 07:40 1172480 c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll
    - 2004-09-15 04:00 . 2009-07-13 20:43 10841088 c:\windows\system32\wmp.dll
    + 2004-09-15 04:00 . 2010-08-25 20:36 10841088 c:\windows\system32\wmp.dll
    + 2006-09-02 15:38 . 2010-12-15 16:52 37366216 c:\windows\system32\MRT.exe
    + 2004-09-15 04:00 . 2010-08-25 20:36 10841088 c:\windows\system32\dllcache\wmp.dll
    - 2004-09-15 04:00 . 2009-07-13 20:43 10841088 c:\windows\system32\dllcache\wmp.dll
    + 2010-04-02 16:29 . 2010-04-02 16:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp
    + 2010-09-24 11:08 . 2010-09-24 11:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
    + 2010-11-22 09:13 . 2010-11-22 09:13 20303872 c:\windows\Installer\8383d.msp
    + 2010-03-30 22:23 . 2010-03-30 22:23 15638528 c:\windows\Installer\78d06f.msp
    + 2010-05-11 08:30 . 2010-05-11 08:30 11194880 c:\windows\Installer\712378.msp
    + 2010-04-02 09:30 . 2010-04-02 09:30 17456640 c:\windows\Installer\71236e.msp
    + 2010-04-11 19:17 . 2010-04-11 19:17 14599680 c:\windows\Installer\71234d.msp
    + 2010-09-24 04:08 . 2010-09-24 04:08 17518080 c:\windows\Installer\62a8cd.msp
    + 2010-05-19 10:08 . 2010-05-19 10:08 11408896 c:\windows\Installer\54cca7.msp
    + 2010-10-14 14:57 . 2010-10-14 14:57 11189248 c:\windows\Installer\29b7f8.msp
    + 2010-12-18 19:28 . 2010-12-18 19:28 20304384 c:\windows\Installer\2468bff.msp
    + 2010-08-12 18:43 . 2010-08-12 18:43 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\75aeb590008d6e166f7be18f935c52d2\System.ServiceModel.ni.dll
    + 2010-10-09 05:52 . 2010-10-09 05:52 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\fdc42078fd10e4dc8b05087900c63977\System.Design.ni.dll
    + 2010-08-12 17:22 . 2010-08-12 17:22 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll
    + 2010-08-12 17:21 . 2010-08-12 17:21 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll
    + 2010-08-12 17:19 . 2010-08-12 17:19 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll
    + 2010-10-15 16:48 . 2009-07-13 20:43 10841088 c:\windows\$NtUninstallKB2378111_WM9$\wmp.dll
    .
    -- Snapshot nollattu tähän hetkeen --
    .
    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
    "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-11-10 249856]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
    "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
    "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]
    "osCheck"="c:\program files\Norton Internet Security\osCheck.exe" [2007-08-24 714608]
    "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
    "QuickTime Task"="c:\program files\QuickTime Alternative\qttask.exe" [2007-10-19 286720]
    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-30 202256]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

    c:\documents and settings\Default User\K„ynnist„-valikko\Ohjelmat\K„ynnistys\
    Pin.lnk - c:\hp\bin\CLOAKER.EXE [2005-1-2 27136]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Vuze\\Azureus.exe"=
    "c:\\Documents and Settings\\Everton\\Työpöytä\\spotify.exe"=

    R2 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [24.8.2007 23:07 149352]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [27.5.2010 19:28 102448]
    S2 Automaattinen LiveUpdate-ajastustoiminto;Automaattinen LiveUpdate-ajastustoiminto;c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe [23.8.2007 14:35 243064]
    S2 gupdate1cad013b13a9826;Google-päivityspalvelu (gupdate1cad013b13a9826);c:\program files\Google\Update\GoogleUpdate.exe [30.3.2010 16:16 133104]
    S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [29.5.2007 14:55 23888]
    S3 stusb2ir;USB 2.0 IrDA Bridge;c:\windows\system32\drivers\stusb2ir.sys [1.12.2007 23:03 40856]
    S3 TFBULK;Topfield USB client driver;c:\windows\system32\drivers\TfBulk.sys [26.8.2003 7:11 41996]
    S3 TridVid;Trident Analog Video;c:\windows\system32\drivers\TridVid.sys [26.2.2010 17:27 201216]
    S4 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe --> c:\program files\AskBarDis\bar\bin\AskService.exe [?]
    S4 ASKUpgrade;ASKUpgrade;c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe --> c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe [?]
    S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [4.12.2009 19:17 691696]

    --- Muut muistissa olevat ajurit/palvelut ---

    *NewlyCreated* - COMHOST
    .
    'Ajoitetut tehtävät'-kansion sisältö

    2010-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 11:57]

    2010-12-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-30 14:16]

    2010-12-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-30 14:16]

    2010-12-20 c:\windows\Tasks\Norton Internet Security - Suorita täysi järjestelmäntarkistus - Everton.job
    - c:\program files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2007-08-26 17:19]

    2010-12-22 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1008.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 19:09]

    2010-12-22 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1009.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 19:09]

    2010-11-12 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1008.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 19:09]

    2010-12-18 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1009.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 19:09]
    .
    .
    ------- Täydentävä tarkistus -------
    .
    uStart Page = hxxp://www.soneraplaza.fi
    uInternet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;*.local;<local>
    uInternet Settings,ProxyServer = proxydial.inet.fi:800
    FF - ProfilePath - c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q=
    FF - Ext: Ask Toolbar for Firefox: {E9A1DEE0-C623-4439-8932-001E7D17607D} - %profile%\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
    FF - Ext: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - %profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-12-22 19:53
    Windows 5.1.2600 Service Pack 3 NTFS

    tarkistaa piilotettuja prosesseja ...

    tarkistaa piilotettuja käynnistysarvoja ...

    tarkistaa piilotettuja tiedostoja ...

    tarkistus on valmis
    piilotetut tiedostot: 0

    **************************************************************************
    .
    --------------------- LUKITUT REKISTERIAVAIMET ---------------------

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\EN]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\FR]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Services en ligne"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\MX]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Servicios en línea"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\NL]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\NW]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online tjenster"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\SP]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Servicios en línea"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\SW]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online tjänster"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\UK]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\US]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\ADE]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\Columns]
    @DACL=(02 0000)
    "ColCount"=dword:00000007
    "SortFieldTag"=dword:00000004
    "Sort00"=dword:00000000
    "Column00Tag"=dword:00000004
    "Column00Group"=dword:00000001
    "Column00Width"=dword:00000064
    "Sort01"=dword:00000001
    "Column01Tag"=dword:00000009
    "Column01Group"=dword:00000001
    "Column01Width"=dword:00000064
    "Sort02"=dword:00000002
    "Column02Tag"=dword:00000028
    "Column02Group"=dword:00000003
    "Column02Width"=dword:00000064
    "Sort03"=dword:00000003
    "Column03Tag"=dword:0000000a
    "Column03Group"=dword:00000001
    "Column03Width"=dword:00000064
    "Sort04"=dword:00000004
    "Column04Tag"=dword:0000002b
    "Column04Group"=dword:00000003
    "Column04Width"=dword:00000064
    "Sort05"=dword:00000005
    "Column05Tag"=dword:00000013
    "Column05Group"=dword:00000002
    "Column05Width"=dword:00000064
    "Sort06"=dword:00000006
    "Column06Tag"=dword:00000015
    "Column06Group"=dword:00000002
    "Column06Width"=dword:00000064

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\Editors]
    @DACL=(02 0000)
    @="ACDSee"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\en]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\QuickView]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\TPColumns]
    @DACL=(02 0000)
    "Column00Width"=dword:00000064
    "Column01Width"=dword:00000064
    "Column02Width"=dword:00000064
    "Column03Width"=dword:00000064
    "Column04Width"=dword:00000064
    "Column05Width"=dword:00000064
    "Column06Width"=dword:00000064

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Google\NavClient]
    @DACL=(02 0000)
    @SACL=

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\EqualizerSettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\HME]
    @DACL=(02 0000)
    "LocalLibraryID"="{994CA114-33AD-4F2B-AB99-C03D9382466D}"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\ProxySettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\VideoSettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\{7aa92cfa-39c3-11db-9ab0-806d6172696f}]
    @DACL=(02 0000)
    "CDReadRate"=hex:c8,ac,e1,40

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop]
    @DACL=(02 0000)
    @SACL=
    "Toolbars"=hex:11,00,00,00,00,00,00,00
    "TaskbarWinXP"=hex:0c,00,00,00,08,00,00,00,02,00,00,00,00,00,00,00,aa,4f,28,68,
    48,6a,d0,11,8c,78,00,c0,4f,d9,18,b4,18,02,00,00,60,0d,00,00,00,00,00,00,16,\
    "Upgrade"=dword:00000001

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\Windows\Shell\Bags\1]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Classes\adc\Shell]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92}\InprocServer32]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Classes\dchub\Shell]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Cygnus Solutions\Cygwin]
    @Class="cygnus"
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\Browser]
    @DACL=(02 0000)
    @SACL=
    "IE"="0"
    "Netscape"="0"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\BWOPT]
    @DACL=(02 0000)
    @SACL=
    "bwsupport"="1"
    "bwoffers"="0"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\HPSU]
    @DACL=(02 0000)
    @SACL=
    "OptInPath"="c:\\hp\\bin\\cloaker.exe"
    "OptInCmdLine"="c:\\hp\\drivers\\hpsu\\HPSU_optin.bat"
    "OptOutPath"="c:\\hp\\bin\\cloaker.exe"
    "OptOutCmdLine"="c:\\hp\\drivers\\hpsu\\HPSU_optout.bat"
    "hpsulaunch"="1"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\NIS]
    @DACL=(02 0000)
    @SACL=
    "NISRun"="0"
    "NISPath"="c:\\windows\\system32\\pcintro\\autorun.exe"
    "NISCmdLine"="security.cmd"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IEHomePageInfo\RegBackup]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\10.0]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\7.0]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\services]
    @DACL=(02 0000)
    @SACL=
    "NoServices"=dword:00000000

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\Settings]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\�•€|ÿÿÿÿ"•€|þ»Ów*]
    "b049C053C7D38EE4AB9A00CB3B5D2472"="C?\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\PUBPLACE.HTT"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwFlash]
    @DACL=(02 0000)
    @SACL=
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\Nullsoft\Winamp]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Realtek\AlcMonitor]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Answer]
    @DACL=(02 0000)
    "1"="ATA<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Hangup]
    @DACL=(02 0000)
    "1"="ATH<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Init]
    @DACL=(02 0000)
    "1"="ATQ0E0V1<cr>"
    "2"="AT&C1&D2<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Monitor]
    @DACL=(02 0000)
    "1"="ATS0=0<cr>"
    "2"="None"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Settings]
    @DACL=(02 0000)
    "Prefix"="AT"
    "Terminator"="<cr>"
    "DialPrefix"="D"
    "Pulse"="P"
    "Tone"="T"
    "FlowControl_Off"=""
    "FlowControl_Hard"=""
    "FlowControl_Soft"=""
    .
    --------------------- Prosesseihin ladatut DLLt ---------------------

    - - - - - - - > 'winlogon.exe'(688)
    c:\windows\system32\Ati2evxx.dll
    .
    Valmistumisajankohta: 2010-12-22 19:55:21
    ComboFix-quarantined-files.txt 2010-12-22 17:55
    ComboFix2.txt 2010-01-05 15:07
    ComboFix3.txt 2009-10-27 15:27

    Ennen ajoa: 113 062 793 216 tavua vapaana
    Ajon jälkeen: 114 264 469 504 tavua vapaana

    - - End Of File - - 17CA8BB2BD43D7718ED1D65CAB6C5930
     
    Mintsu, Dec 22, 2010
    #5
  6. Mintsu

    Mintsu Regular member

    Joined:
    Oct 1, 2006
    Messages:
    161
    Likes Received:
    0
    Trophy Points:
    26
    Tässäpä tämä:

    ComboFix 10-12-21.05 - HP_Omistaja 22.12.2010 19:47:15.4.1 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.358.1035.18.1534.913 [GMT 2:00]
    Sijainti: c:\documents and settings\HP_Omistaja\Omat tiedostot\Downloads\ComboFix.exe
    AV: Norton Internet Security *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\test.txt
    c:\windows\system32\Oeminfo.ini

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2010-11-22 to 2010-12-22 )))))))))))))))))
    .

    2010-12-20 17:16 . 2010-12-20 17:16 -------- d-----w- C:\1856292378b5fe3d19
    2010-12-13 19:35 . 2010-12-13 19:35 -------- d-----w- c:\program files\AskBardis
    2010-12-13 06:33 . 2010-12-13 06:33 1409 ----a-w- c:\windows\QTFont.for

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-11-18 18:15 . 2004-09-15 04:00 86016 ----a-w- c:\windows\system32\isign32.dll
    2010-11-05 05:01 . 2004-09-15 04:00 667136 ----a-w- c:\windows\system32\wininet.dll
    2010-11-05 05:01 . 2004-09-15 04:00 61952 ----a-w- c:\windows\system32\tdc.ocx
    2010-11-05 05:01 . 2004-09-15 04:00 81920 ----a-w- c:\windows\system32\ieencode.dll
    2010-11-05 04:59 . 2004-09-15 04:00 370688 ----a-w- c:\windows\system32\html.iec
    2010-11-02 15:17 . 2004-09-15 04:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
    2010-10-28 13:08 . 2004-09-15 04:00 290048 ----a-w- c:\windows\system32\atmfd.dll
    2010-10-26 13:58 . 2004-09-15 04:00 1853568 ----a-w- c:\windows\system32\win32k.sys
    2009-04-04 16:14 . 2009-04-04 16:14 2496707 ----a-w- c:\program files\vsoDivxToDVD_setup_v0.5.2b.exe
    2008-08-16 12:25 . 2008-08-16 12:25 9239213 ----a-w- c:\program files\AutoGordianKnot.2.45.Setup.exe
    2008-06-10 18:41 . 2008-06-10 18:41 1495112 ----a-w- c:\program files\install_flash_player.exe
    2007-11-29 17:22 . 2007-11-29 17:20 13793865 ----a-w- c:\program files\acdsee-9-0-108-en-update.exe
    2007-11-29 17:20 . 2007-11-29 17:19 8608465 ----a-w- c:\program files\acdsee-10-0-238-en-update.exe
    2007-09-20 17:36 . 2007-09-20 17:08 51422520 ----a-w- c:\program files\iTunes742Setup.exe
    2007-07-08 00:37 . 2009-10-22 14:49 812344 ----a-w- c:\program files\HJTInstall.exe
    2007-07-06 20:06 . 2007-07-06 20:04 1014730 ----a-w- c:\program files\PowerISO37.exe
    2007-06-24 20:41 . 2007-06-24 20:40 5638544 ----a-w- c:\program files\DVDAuthorGUI_1.013.exe
    2007-04-20 19:54 . 2007-04-20 19:54 0 ----a-w- c:\program files\QuickTimeInstaller.exe
    2007-04-07 14:44 . 2007-04-07 14:44 232592 ----a-w- c:\program files\l3codecx.exe
    2007-04-07 13:03 . 2007-04-07 13:03 2000324 ----a-w- c:\program files\cdex_151.exe
    2007-03-05 14:52 . 2007-03-05 14:53 288640 ----a-w- c:\program files\dxwebsetup.exe
    2007-02-25 13:29 . 2006-11-25 23:04 25754696 ----a-w- c:\program files\wmp11-windowsxp-x86-FI-FI.exe
    2007-02-25 13:18 . 2007-02-25 13:18 878896 ----a-w- c:\program files\WGAPluginInstall.exe
    2007-02-15 16:42 . 2007-02-15 16:42 1727591 ----a-w- c:\program files\on2_vp7_personal_edition.exe
    2007-01-24 17:51 . 2007-01-24 17:50 3513168 ----a-w- c:\program files\sp26752.exe
    2007-01-07 13:51 . 2007-01-07 13:51 6285558 ----a-w- c:\program files\divx-to-dvd-converter.exe
    2006-12-28 19:28 . 2006-12-28 19:26 16198952 ----a-w- c:\program files\Install_Messenger.exe
    2006-12-09 11:14 . 2006-12-09 11:12 12684992 ----a-w- c:\program files\winamp532_full_bundle_emusic-7plus.exe
    2006-11-30 18:17 . 2006-11-30 18:17 2987935 ----a-w- c:\program files\swf2avi.exe
    2006-11-30 18:11 . 2006-11-30 18:11 2388240 ----a-w- c:\program files\RivaFLVPlayerSetup.exe
    2006-11-30 06:46 . 2006-11-30 06:46 3513168 ----a-w- c:\program files\Näppis.exe
    2006-11-25 16:19 . 2006-11-25 16:19 3250296 ----a-w- c:\program files\Ifi-OrderClient-FI.exe
    2006-11-20 19:09 . 2007-02-11 09:17 6326784 ----a-w- c:\program files\DVRMSToolbox1103.msi
    2006-10-20 06:58 . 2007-04-05 21:08 7137 ----a-w- c:\program files\FlashPlayer9.reg
    2006-06-23 22:50 . 2007-04-07 14:19 2434406 ----a-w- c:\program files\cdex_170b2_enu.exe
    2006-03-19 13:37 . 2007-06-24 19:23 8448 ----a-w- c:\program files\ac3.bin
    2005-11-05 08:15 . 2007-04-05 21:08 298 ----a-w- c:\program files\FixAddRemove.reg
    2005-08-25 20:17 . 2006-12-03 16:29 929280 ----a-w- c:\program files\VirtualDubMod.exe
    2005-08-25 20:10 . 2006-12-03 16:29 9804 ----a-w- c:\program files\vdremote.dll
    2005-08-25 20:10 . 2006-12-03 16:29 11340 ----a-w- c:\program files\vdicmdrv.dll
    2005-08-25 20:10 . 2006-12-03 16:29 40960 ----a-w- c:\program files\AuxSetup.exe
    2005-08-25 20:09 . 2006-12-03 16:29 7244 ----a-w- c:\program files\vdsvrlnk.dll
    2004-10-25 16:11 . 2006-12-03 16:20 374340 ----a-w- c:\program files\TMPGEnc.vfp
    2004-10-25 16:10 . 2006-12-03 16:20 155648 ----a-w- c:\program files\Resample.dll
    2004-10-25 16:10 . 2006-12-03 16:20 147543 ----a-w- c:\program files\P4Package.dll
    2004-10-25 16:10 . 2006-12-03 16:20 135255 ----a-w- c:\program files\P3Package.dll
    2004-07-26 00:16 . 2007-06-25 13:28 1117491 ----a-w- c:\program files\dvdshrink32setup.exe
    2004-05-25 23:16 . 2006-09-17 11:41 734160 ----a-w- c:\program files\VobSub_2.23.exe
    2004-04-30 14:52 . 2007-06-12 19:37 1707042 ----a-w- c:\program files\Topfield Windows Applications Setup.exe
    2004-03-22 18:07 . 2007-06-12 19:20 380928 ----a-w- c:\program files\Altair_1.250.exe
    2004-03-22 17:53 . 2007-06-12 19:20 135168 ----a-w- c:\program files\TfDll.dll
    2004-03-19 11:53 . 2006-12-02 15:09 1107022 ----a-w- c:\program files\SubtitleWorkshop251.exe
    2003-08-26 11:11 . 2007-06-12 19:20 41996 ----a-w- c:\program files\TfBulk.sys
    2003-08-06 20:55 . 2007-12-25 17:36 379325 ----a-w- c:\program files\Deathproof.exe
    2003-04-25 22:29 . 2006-12-03 16:29 146944 ----a-w- c:\program files\SciLexer.dll
    2003-03-11 21:50 . 2006-12-03 16:29 48640 ----a-w- c:\program files\vorbis.dll
    2003-03-11 21:10 . 2006-12-03 16:29 20992 ----a-w- c:\program files\ogg.dll
    2003-03-10 15:42 . 2006-12-03 16:29 125440 ----a-w- c:\program files\corona.dll
    2002-11-14 17:55 . 2006-12-03 16:29 56832 ----a-w- c:\program files\AviSynthLexer.lexer
    .

    ((((((((((((((((((((((((((((( SnapShot@2010-01-05_15.05.23 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
    + 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
    + 2010-12-22 17:40 . 2010-12-22 17:40 16384 c:\windows\Temp\Perflib_Perfdata_4c0.dat
    + 2010-02-26 15:27 . 2008-04-14 17:11 53760 c:\windows\system32\vfwwdm32.dll
    + 2010-02-26 15:27 . 2007-07-02 03:40 28672 c:\windows\system32\VendorCmdRW.dll
    - 2007-01-29 08:58 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe
    + 2007-01-29 08:58 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe
    + 2004-09-15 04:00 . 2010-08-27 05:53 99840 c:\windows\system32\srvsvc.dll
    + 2005-01-02 02:35 . 2007-07-27 20:11 26488 c:\windows\system32\spupdsvc.exe
    - 2005-01-02 02:35 . 2007-07-27 07:41 26488 c:\windows\system32\spupdsvc.exe
    + 2004-09-15 04:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
    + 2010-07-01 15:42 . 2008-04-13 18:45 26368 c:\windows\system32\ReinstallBackups\0009\DriverFiles\i386\USBSTOR.SYS
    + 2010-03-30 21:16 . 2010-03-30 21:16 99176 c:\windows\system32\PresentationHostProxy.dll
    + 2004-12-13 15:47 . 2010-11-12 16:24 86460 c:\windows\system32\perfc00B.dat
    + 2004-12-13 15:47 . 2010-11-12 16:24 72304 c:\windows\system32\perfc009.dat
    + 2009-11-06 22:07 . 2009-11-06 22:07 49488 c:\windows\system32\netfxperf.dll
    + 2009-11-05 19:17 . 2009-11-05 19:17 11600 c:\windows\system32\mui\0409\mscorees.dll
    + 2004-09-15 11:00 . 2009-11-27 17:13 17920 c:\windows\system32\msyuv.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 28672 c:\windows\system32\msvidc32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 11264 c:\windows\system32\msrle32.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 11264 c:\windows\system32\msrle32.dll
    + 2009-10-22 16:25 . 2010-01-06 11:59 84507 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    + 2004-09-15 11:00 . 2009-11-27 16:09 48128 c:\windows\system32\iyuv_32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 80384 c:\windows\system32\iccvid.dll
    + 2004-09-15 04:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
    - 2004-09-15 04:00 . 2009-06-16 14:39 81920 c:\windows\system32\fontsub.dll
    + 2004-09-15 04:00 . 2009-10-15 16:32 81920 c:\windows\system32\fontsub.dll
    + 2010-01-13 08:25 . 2008-08-26 07:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
    - 2009-11-18 12:57 . 2008-08-26 07:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 22016 c:\windows\system32\DRVSTORE\ccdcmbo_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\ccdcmbo.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 91136 c:\windows\system32\DRVSTORE\ccdcmb_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\nmwcdcls.dll
    + 2010-01-13 08:24 . 2009-10-06 09:52 17664 c:\windows\system32\DRVSTORE\ccdcmb_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\ccdcmb.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 19200 c:\windows\system32\drivers\WSTCODEC.SYS
    + 2010-02-26 15:28 . 2008-04-13 19:46 15232 c:\windows\system32\drivers\StreamIP.sys
    + 2004-09-15 11:00 . 2008-04-13 19:45 49408 c:\windows\system32\drivers\stream.sys
    - 2004-09-15 11:00 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 11136 c:\windows\system32\drivers\SLIP.sys
    + 2010-01-13 08:25 . 2008-08-26 07:26 18816 c:\windows\system32\drivers\pccsmcfd.sys
    - 2009-11-18 12:57 . 2008-08-26 07:26 18816 c:\windows\system32\drivers\pccsmcfd.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 10880 c:\windows\system32\drivers\NdisIP.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 85248 c:\windows\system32\drivers\NABTSFEC.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 15232 c:\windows\system32\drivers\MPE.sys
    + 2005-01-02 02:42 . 2008-04-13 19:45 60160 c:\windows\system32\drivers\drmk.sys
    - 2005-01-02 02:42 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 17024 c:\windows\system32\drivers\CCDECODE.sys
    - 2009-11-18 12:56 . 2009-10-06 09:52 22016 c:\windows\system32\drivers\ccdcmbo.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 22016 c:\windows\system32\drivers\ccdcmbo.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 17664 c:\windows\system32\drivers\ccdcmb.sys
    - 2009-11-18 12:56 . 2009-10-06 09:52 17664 c:\windows\system32\drivers\ccdcmb.sys
    + 2010-02-26 15:27 . 2008-04-13 19:46 11776 c:\windows\system32\drivers\BdaSup.sys
    - 2009-11-12 19:00 . 2008-04-13 19:46 19200 c:\windows\system32\dllcache\wstcodec.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 19200 c:\windows\system32\dllcache\wstcodec.sys
    - 2009-11-12 18:58 . 2008-04-14 17:11 53760 c:\windows\system32\dllcache\vfwwdm32.dll
    + 2010-02-26 15:27 . 2008-04-14 17:11 53760 c:\windows\system32\dllcache\vfwwdm32.dll
    + 2004-09-15 04:00 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
    - 2009-11-12 18:55 . 2008-04-13 19:46 15232 c:\windows\system32\dllcache\streamip.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 15232 c:\windows\system32\dllcache\streamip.sys
    - 2004-09-15 11:00 . 2008-04-13 18:45 49408 c:\windows\system32\dllcache\stream.sys
    + 2004-09-15 11:00 . 2008-04-13 19:45 49408 c:\windows\system32\dllcache\stream.sys
    + 2004-09-15 04:00 . 2010-08-27 05:53 99840 c:\windows\system32\dllcache\srvsvc.dll
    + 2004-09-15 04:00 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
    + 2010-02-26 15:28 . 2008-04-13 19:46 11136 c:\windows\system32\dllcache\slip.sys
    - 2009-11-12 18:53 . 2008-04-13 19:46 11136 c:\windows\system32\dllcache\slip.sys
    + 2004-09-15 04:00 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 10880 c:\windows\system32\dllcache\ndisip.sys
    - 2009-11-12 18:46 . 2008-04-13 19:46 10880 c:\windows\system32\dllcache\ndisip.sys
    - 2009-11-12 18:46 . 2008-04-13 19:46 85248 c:\windows\system32\dllcache\nabtsfec.sys
    + 2010-02-26 15:28 . 2008-04-13 19:46 85248 c:\windows\system32\dllcache\nabtsfec.sys
    + 2004-09-15 11:00 . 2009-11-27 17:13 17920 c:\windows\system32\dllcache\msyuv.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 28672 c:\windows\system32\dllcache\msvidc32.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 11264 c:\windows\system32\dllcache\msrle32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 11264 c:\windows\system32\dllcache\msrle32.dll
    + 2010-02-26 15:28 . 2008-04-13 19:46 15232 c:\windows\system32\dllcache\mpe.sys
    - 2009-11-12 18:45 . 2008-04-13 19:46 15232 c:\windows\system32\dllcache\mpe.sys
    + 2004-09-15 11:00 . 2009-11-27 16:09 48128 c:\windows\system32\dllcache\iyuv_32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 86016 c:\windows\system32\dllcache\isign32.dll
    + 2004-09-15 04:00 . 2010-11-18 18:15 86016 c:\windows\system32\dllcache\isign32.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 81920 c:\windows\system32\dllcache\ieencode.dll
    - 2004-09-15 04:00 . 2009-09-25 05:36 81920 c:\windows\system32\dllcache\ieencode.dll
    + 2004-09-15 04:00 . 2009-10-15 16:32 81920 c:\windows\system32\dllcache\fontsub.dll
    - 2004-09-15 04:00 . 2009-06-16 14:39 81920 c:\windows\system32\dllcache\fontsub.dll
    + 2005-01-02 02:42 . 2008-04-13 19:45 60160 c:\windows\system32\dllcache\drmk.sys
    - 2005-01-02 02:42 . 2008-04-13 18:45 60160 c:\windows\system32\dllcache\drmk.sys
    + 2004-09-15 04:00 . 2009-12-14 07:09 33280 c:\windows\system32\dllcache\csrsrv.dll
    + 2010-02-26 15:28 . 2008-04-13 19:46 17024 c:\windows\system32\dllcache\ccdecode.sys
    - 2009-11-12 18:35 . 2008-04-13 19:46 17024 c:\windows\system32\dllcache\ccdecode.sys
    + 2004-09-15 04:00 . 2010-01-13 14:01 86528 c:\windows\system32\dllcache\cabview.dll
    + 2010-02-26 15:27 . 2008-04-13 19:46 11776 c:\windows\system32\dllcache\bdasup.sys
    - 2009-11-12 18:34 . 2008-04-13 19:46 11776 c:\windows\system32\dllcache\bdasup.sys
    - 2004-09-15 04:00 . 2009-06-10 14:15 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2004-09-15 04:00 . 2010-03-05 14:38 65536 c:\windows\system32\dllcache\asycfilt.dll
    + 2004-09-15 04:00 . 2009-12-14 07:09 33280 c:\windows\system32\csrsrv.dll
    + 2004-09-15 04:00 . 2010-01-13 14:01 86528 c:\windows\system32\cabview.dll
    + 2004-09-15 04:00 . 2009-11-27 16:09 84992 c:\windows\system32\avifil32.dll
    - 2004-09-15 04:00 . 2009-06-10 14:15 84992 c:\windows\system32\avifil32.dll
    + 2004-09-15 04:00 . 2010-03-05 14:38 65536 c:\windows\system32\asycfilt.dll
    + 2010-04-07 20:48 . 2010-04-07 20:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    - 2008-07-29 16:16 . 2008-07-29 16:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2010-09-22 06:43 . 2010-09-22 06:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2010-09-23 12:55 . 2010-09-23 12:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    - 2008-05-27 21:49 . 2008-05-27 21:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    - 2008-05-27 21:49 . 2008-05-27 21:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    - 2008-05-27 21:49 . 2008-05-27 21:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2010-09-23 00:17 . 2010-09-23 00:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2008-05-27 22:30 . 2008-05-27 22:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2003-02-21 01:19 . 2003-02-21 01:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2010-09-23 00:17 . 2010-09-23 00:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
    + 2009-11-06 22:07 . 2009-11-06 22:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2010-10-21 13:40 . 2010-10-21 13:40 21504 c:\windows\Installer\e0baa.msi
    + 2010-11-22 09:12 . 2010-11-22 09:12 38400 c:\windows\Installer\83835.msi
    + 2010-03-30 14:24 . 2010-03-30 14:24 20480 c:\windows\Installer\2c3ca7.msi
    + 2010-01-13 08:22 . 2010-01-13 08:22 78336 c:\windows\Installer\164aa0.msi
    + 2006-09-01 14:32 . 2010-12-15 16:56 45056 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\wordicon.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 45056 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\wordicon.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 22528 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\unbndico.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 22528 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\unbndico.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 16384 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\PEicons.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 16384 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\PEicons.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 34304 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\misc.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 34304 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\misc.exe
    - 2008-09-22 05:13 . 2009-12-19 19:13 40960 c:\windows\Installer\{90840409-6000-11D3-8CFE-0150048383C9}\xlvicon.exe
    + 2008-09-22 05:13 . 2010-11-10 17:12 40960 c:\windows\Installer\{90840409-6000-11D3-8CFE-0150048383C9}\xlvicon.exe
    + 2010-11-22 09:13 . 2010-12-18 19:28 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2010-01-13 08:25 . 2010-01-13 08:25 10134 c:\windows\Installer\{4CE6B3C4-D8E2-4A5D-BEF5-5B69AF843B0C}\ARPPRODUCTICON.exe
    + 2009-11-27 17:13 . 2009-11-27 17:13 17920 c:\windows\Driver Cache\i386\msyuv.dll
    + 2009-11-27 16:09 . 2009-11-27 16:09 48128 c:\windows\Driver Cache\i386\iyuv_32.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_b7f53134\System.Drawing.Design.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_c32a0d22\CustomMarshalers.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\70ee6267f7bad40e8707d402277770c3\System.Web.DynamicData.Design.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll
    + 2010-08-12 17:22 . 2010-08-12 17:22 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe
    + 2010-08-12 17:20 . 2010-08-12 17:20 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe
    + 2010-08-13 14:51 . 2010-08-13 14:51 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2009-08-09 23:49 . 2009-08-09 23:49 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2010-06-10 19:12 . 2010-06-10 19:12 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-08-12 17:13 . 2008-04-14 16:11 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll
    + 2010-06-10 19:04 . 2010-02-26 05:42 81920 c:\windows\$NtUninstallKB982381$\ieencode.dll
    + 2010-05-27 17:37 . 2010-01-23 08:11 46080 c:\windows\$NtUninstallKB981793$\tzchange.exe
    + 2010-05-27 17:37 . 2010-04-22 22:23 16896 c:\windows\$NtUninstallKB981793$\spuninst\tzchange.dll
    + 2010-03-31 17:41 . 2009-12-22 05:09 81920 c:\windows\$NtUninstallKB980182$\ieencode.dll
    + 2010-06-10 19:12 . 2008-04-14 16:11 65024 c:\windows\$NtUninstallKB979482$\asycfilt.dll
    + 2010-04-14 18:49 . 2008-04-14 16:11 84992 c:\windows\$NtUninstallKB979309$\cabview.dll
    + 2010-02-25 19:17 . 2009-10-28 15:07 46080 c:\windows\$NtUninstallKB979306$\tzchange.exe
    + 2010-02-25 19:17 . 2010-01-23 10:42 16896 c:\windows\$NtUninstallKB979306$\spuninst\tzchange.dll
    + 2010-01-22 11:15 . 2009-09-25 05:36 81920 c:\windows\$NtUninstallKB978207$\ieencode.dll
    + 2010-02-10 04:25 . 2008-04-14 16:11 32256 c:\windows\$NtUninstallKB978037$\csrsrv.dll
    + 2010-02-10 04:24 . 2004-09-15 04:00 25600 c:\windows\$NtUninstallKB977914$\msvidc32.dll
    + 2010-02-10 04:24 . 2008-04-14 16:11 11264 c:\windows\$NtUninstallKB977914$\msrle32.dll
    + 2010-02-10 04:24 . 2008-04-14 16:11 47616 c:\windows\$NtUninstallKB977914$\iyuv_32.dll
    + 2010-02-10 04:24 . 2009-06-10 14:15 84992 c:\windows\$NtUninstallKB977914$\avifil32.dll
    + 2010-02-10 04:25 . 2008-04-14 16:11 16896 c:\windows\$NtUninstallKB975560$\msyuv.dll
    + 2010-01-13 12:40 . 2009-06-16 14:39 81920 c:\windows\$NtUninstallKB972270$\fontsub.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 81920 c:\windows\$NtUninstallKB2360131$\ieencode.dll
    + 2010-09-16 18:26 . 2008-04-14 16:12 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe
    + 2010-10-15 16:48 . 2008-04-14 16:11 96768 c:\windows\$NtUninstallKB2345886$\srvsvc.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 81920 c:\windows\$NtUninstallKB2183461$\ieencode.dll
    + 2010-10-01 08:23 . 2010-04-21 13:28 46080 c:\windows\$NtUninstallKB2158563$\tzchange.exe
    + 2010-10-01 08:23 . 2010-06-23 00:57 16896 c:\windows\$NtUninstallKB2158563$\spuninst\tzchange.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB982802\spmsg.dll
    + 2010-08-12 17:13 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll
    + 2010-08-12 17:13 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB982665\spmsg.dll
    + 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982381\update\spcustom.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB982381\spmsg.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 81920 c:\windows\$hf_mig$\KB982381\SP3QFE\ieencode.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB982214\spmsg.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982132\update\spcustom.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB982132\spmsg.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981997\spmsg.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB981957\update\spcustom.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB981957\spmsg.dll
    + 2010-08-12 17:20 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll
    + 2010-08-12 15:52 . 2010-06-17 13:47 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll
    + 2010-08-12 17:20 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB981852\spmsg.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981349\update\spcustom.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981349\spmsg.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981322\spmsg.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980436\spmsg.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB980232\update\spcustom.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB980232\spmsg.dll
    + 2010-06-10 19:22 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll
    + 2010-06-10 19:22 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980218\spmsg.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB980195\spmsg.dll
    + 2010-03-31 17:41 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB980182\update\spcustom.dll
    + 2010-03-31 17:41 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB980182\spmsg.dll
    + 2010-02-26 05:39 . 2010-02-26 05:39 81920 c:\windows\$hf_mig$\KB980182\SP3QFE\ieencode.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB979687\update\spcustom.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB979687\spmsg.dll
    + 2010-04-14 18:57 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979683\update\spcustom.dll
    + 2010-04-14 18:13 . 2010-03-05 14:54 16896 c:\windows\$hf_mig$\KB979683\update\mpsyschk.dll
    + 2010-04-14 18:57 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979683\spmsg.dll
    + 2010-06-10 19:19 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979559\update\spcustom.dll
    + 2010-06-10 19:19 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB979559\spmsg.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979482\spmsg.dll
    + 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll
    + 2010-04-14 18:49 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB979309\update\spcustom.dll
    + 2010-04-14 18:49 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB979309\spmsg.dll
    + 2010-01-13 13:49 . 2010-01-13 13:49 86528 c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978706\update\spcustom.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978706\spmsg.dll
    + 2010-04-14 18:50 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB978601\update\spcustom.dll
    + 2010-04-14 18:50 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB978601\spmsg.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978542\update\spcustom.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978542\spmsg.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978338\update\spcustom.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978338\spmsg.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978262\update\spcustom.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978262\spmsg.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978251\update\spcustom.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978251\spmsg.dll
    + 2010-01-22 11:15 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB978207\update\spcustom.dll
    + 2010-01-22 11:15 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB978207\spmsg.dll
    + 2009-12-22 05:06 . 2009-12-22 05:06 81920 c:\windows\$hf_mig$\KB978207\SP3QFE\ieencode.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978037\update\spcustom.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978037\spmsg.dll
    + 2009-12-14 07:11 . 2009-12-14 07:11 33280 c:\windows\$hf_mig$\KB978037\SP3QFE\csrsrv.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977914\update\spcustom.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977914\spmsg.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 28672 c:\windows\$hf_mig$\KB977914\SP3QFE\msvidc32.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 11264 c:\windows\$hf_mig$\KB977914\SP3QFE\msrle32.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 48128 c:\windows\$hf_mig$\KB977914\SP3QFE\iyuv_32.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 84992 c:\windows\$hf_mig$\KB977914\SP3QFE\avifil32.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977816\update\spcustom.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977816\spmsg.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977165\update\spcustom.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977165\spmsg.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975713\update\spcustom.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975713\spmsg.dll
    + 2010-06-10 19:12 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll
    + 2010-06-10 19:12 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB975562\spmsg.dll
    + 2010-03-10 19:50 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB975561\update\spcustom.dll
    + 2010-03-10 19:50 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB975561\spmsg.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975560\update\spcustom.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975560\spmsg.dll
    + 2009-11-27 17:24 . 2009-11-27 17:24 17920 c:\windows\$hf_mig$\KB975560\SP3QFE\msyuv.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB972270\update\spcustom.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB972270\spmsg.dll
    + 2010-01-13 08:17 . 2009-10-15 16:39 81920 c:\windows\$hf_mig$\KB972270\SP3QFE\fontsub.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB971468\update\spcustom.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 17272 c:\windows\$hf_mig$\KB971468\spmsg.dll
    + 2010-01-13 12:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB955759\update\spcustom.dll
    + 2010-01-13 12:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB955759\spmsg.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2387149\update\spcustom.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2387149\spmsg.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2360937\update\spcustom.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2360937\spmsg.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2360131\update\spcustom.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2360131\spmsg.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 81920 c:\windows\$hf_mig$\KB2360131\SP3QFE\ieencode.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2347290\spmsg.dll
    + 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
    + 2010-10-15 16:48 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2345886\update\spcustom.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2345886\spmsg.dll
    + 2010-08-27 06:01 . 2010-08-27 06:01 99840 c:\windows\$hf_mig$\KB2345886\SP3QFE\srvsvc.dll
    + 2010-08-04 18:13 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll
    + 2010-08-04 18:13 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2286198\spmsg.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2279986\update\spcustom.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2279986\spmsg.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2259922\spmsg.dll
    + 2010-07-14 09:19 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll
    + 2010-07-14 09:19 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2229593\spmsg.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2183461\update\spcustom.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2183461\spmsg.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 81920 c:\windows\$hf_mig$\KB2183461\SP3QFE\ieencode.dll
    + 2010-08-12 17:16 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2160329\update\spcustom.dll
    + 2010-08-12 17:16 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2160329\spmsg.dll
    + 2010-09-16 18:23 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
    + 2010-09-16 18:23 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2141007\spmsg.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 17272 c:\windows\$hf_mig$\KB2121546\spmsg.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2115168\spmsg.dll
    + 2010-08-12 17:19 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2079403\update\spcustom.dll
    + 2010-08-12 17:19 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2079403\spmsg.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2008-05-05 04:25 . 2010-08-27 01:43 5120 c:\windows\system32\xpsp4res.dll
    + 2004-09-15 11:00 . 2009-11-27 16:09 8704 c:\windows\system32\tsbyuv.dll
    - 2009-11-18 15:08 . 2009-11-18 15:08 5632 c:\windows\system32\pndx5032.dll
    + 2009-11-18 15:08 . 2010-03-30 14:24 5632 c:\windows\system32\pndx5032.dll
    - 2009-11-18 15:08 . 2009-11-18 15:08 6656 c:\windows\system32\pndx5016.dll
    + 2009-11-18 15:08 . 2010-03-30 14:24 6656 c:\windows\system32\pndx5016.dll
    + 2010-01-13 08:24 . 2009-10-06 09:56 8320 c:\windows\system32\DRVSTORE\nmwcdnsuc_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\nmwcdnsuc.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 7936 c:\windows\system32\DRVSTORE\ccdcmbm_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\usbser_lowerflt.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 7936 c:\windows\system32\DRVSTORE\ccdcmbcj_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\usbser_lowerfltj.sys
    - 2009-11-18 12:56 . 2009-10-06 09:52 7936 c:\windows\system32\drivers\usbser_lowerfltj.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 7936 c:\windows\system32\drivers\usbser_lowerfltj.sys
    + 2010-01-13 08:24 . 2009-10-06 09:52 7936 c:\windows\system32\drivers\usbser_lowerflt.sys
    - 2009-11-18 12:56 . 2009-10-06 09:52 7936 c:\windows\system32\drivers\usbser_lowerflt.sys
    + 2010-02-26 15:28 . 2008-04-13 19:39 5504 c:\windows\system32\drivers\MSTEE.sys
    + 2004-09-15 11:00 . 2009-11-27 16:09 8704 c:\windows\system32\dllcache\tsbyuv.dll
    + 2010-02-26 15:28 . 2008-04-13 19:39 5504 c:\windows\system32\dllcache\mstee.sys
    - 2009-11-12 18:45 . 2008-04-13 19:39 5504 c:\windows\system32\dllcache\mstee.sys
    + 2010-01-13 08:24 . 2010-01-13 08:24 3262 c:\windows\Installer\{C50EF365-2898-489A-B6C7-30DAA466E9A2}\ARPPRODUCTICON.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 3584 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\opwicon.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 3584 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\opwicon.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 8192 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\mspicons.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 8192 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\mspicons.exe
    + 2006-09-01 14:32 . 2010-12-15 16:56 2560 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\cagicon.exe
    - 2006-09-01 14:32 . 2009-12-09 18:11 2560 c:\windows\Installer\{911B040B-6000-11D3-8CFE-0050048383C9}\cagicon.exe
    + 2009-11-27 16:09 . 2009-11-27 16:09 8704 c:\windows\Driver Cache\i386\tsbyuv.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2010-09-16 18:26 . 2008-05-05 04:25 3072 c:\windows\$NtUninstallKB982802$\xpsp4res.dll
    + 2010-02-10 04:24 . 2004-09-15 11:00 8192 c:\windows\$NtUninstallKB977914$\tsbyuv.dll
    + 2010-10-15 16:43 . 2010-07-22 06:19 5120 c:\windows\$NtUninstallKB2360937$\xpsp4res.dll
    + 2010-10-15 16:48 . 2010-08-13 15:44 5120 c:\windows\$NtUninstallKB2345886$\xpsp4res.dll
    + 2010-07-22 06:19 . 2010-07-22 06:19 5120 c:\windows\$hf_mig$\KB982802\SP3QFE\sprv040b.dll
    + 2010-07-12 13:19 . 2010-07-12 13:19 5120 c:\windows\$hf_mig$\KB979687\SP3QFE\sprv040b.dll
    + 2009-11-27 16:29 . 2009-11-27 16:29 8704 c:\windows\$hf_mig$\KB977914\SP3QFE\tsbyuv.dll
    + 2010-10-15 15:47 . 2010-08-13 15:44 5120 c:\windows\$hf_mig$\KB2360937\SP3QFE\sprv040b.dll
    + 2010-08-27 01:43 . 2010-08-27 01:43 5120 c:\windows\$hf_mig$\KB2345886\SP3QFE\sprv040b.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
    + 2009-07-11 22:05 . 2009-07-11 22:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
    + 2004-09-15 04:00 . 2009-12-24 07:00 177664 c:\windows\system32\wintrust.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 293376 c:\windows\system32\winsrv.dll
    + 2004-09-15 04:00 . 2010-06-18 17:47 293376 c:\windows\system32\winsrv.dll
    - 2004-09-15 04:00 . 2008-05-09 10:55 430080 c:\windows\system32\vbscript.dll
    + 2004-09-15 04:00 . 2010-03-09 11:10 430080 c:\windows\system32\vbscript.dll
    + 2004-09-15 04:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 406016 c:\windows\system32\usp10.dll
    - 2004-09-15 04:00 . 2009-10-29 05:25 627200 c:\windows\system32\urlmon.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 627200 c:\windows\system32\urlmon.dll
    + 2004-09-15 04:00 . 2010-08-27 08:03 119808 c:\windows\system32\t2embed.dll
    - 2004-09-15 04:00 . 2009-06-16 14:39 119808 c:\windows\system32\t2embed.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 474112 c:\windows\system32\shlwapi.dll
    + 2004-09-15 04:00 . 2009-12-08 09:24 474112 c:\windows\system32\shlwapi.dll
    + 2004-09-15 04:00 . 2010-06-30 12:32 149504 c:\windows\system32\schannel.dll
    + 2004-09-15 04:00 . 2010-08-16 08:44 590848 c:\windows\system32\rpcrt4.dll
    + 2009-11-18 15:08 . 2010-03-30 14:24 185920 c:\windows\system32\rmoc3260.dll
    - 2009-11-18 15:08 . 2009-11-18 15:08 185920 c:\windows\system32\rmoc3260.dll
    + 2010-02-26 15:27 . 2008-04-14 17:11 363520 c:\windows\system32\PsisDecd.dll
    + 2010-03-30 21:10 . 2010-03-30 21:10 295264 c:\windows\system32\PresentationHost.exe
    + 2009-11-18 15:08 . 2010-03-30 14:22 278528 c:\windows\system32\pncrt.dll
    - 2009-11-18 15:08 . 2009-11-18 15:08 278528 c:\windows\system32\pncrt.dll
    + 2004-12-13 15:47 . 2010-11-12 16:24 417980 c:\windows\system32\perfh00B.dat
    + 2004-12-13 15:47 . 2010-11-12 16:24 443038 c:\windows\system32\perfh009.dat
    - 2009-11-18 12:56 . 2009-10-06 09:52 660480 c:\windows\system32\nmwcdcocls.dll
    + 2010-01-13 08:24 . 2009-10-06 09:52 660480 c:\windows\system32\nmwcdcocls.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 532480 c:\windows\system32\mstime.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 532480 c:\windows\system32\mstime.dll
    - 2004-09-15 04:00 . 2008-04-14 16:12 344064 c:\windows\system32\mspaint.exe
    + 2004-09-15 04:00 . 2009-12-17 07:41 344064 c:\windows\system32\mspaint.exe
    + 2004-09-15 04:00 . 2010-11-05 05:01 449024 c:\windows\system32\mshtmled.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 449024 c:\windows\system32\mshtmled.dll
    - 2004-09-15 11:00 . 2008-04-14 16:12 294912 c:\windows\system32\msh263.drv
    + 2004-09-15 11:00 . 2008-04-14 17:12 294912 c:\windows\system32\msh263.drv
    + 2009-11-06 22:07 . 2009-11-06 22:07 297808 c:\windows\system32\mscoree.dll
    - 2006-05-09 19:00 . 2006-10-18 19:47 317440 c:\windows\system32\MP4SDECD.dll
    + 2006-05-09 19:00 . 2010-03-30 09:24 317440 c:\windows\system32\mp4sdecd.dll
    + 2004-09-15 04:00 . 2010-09-18 09:22 974848 c:\windows\system32\mfc42u.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 974848 c:\windows\system32\mfc42.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 953856 c:\windows\system32\mfc40u.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 954368 c:\windows\system32\mfc40.dll
    + 2010-10-09 05:53 . 2010-10-09 05:53 232912 c:\windows\system32\Macromed\Flash\FlashUtil10k_Plugin.exe
    + 2009-10-28 03:31 . 2009-10-28 03:31 257440 c:\windows\system32\Macromed\Flash\FlashUtil10d.exe
    + 2010-12-13 05:49 . 2010-09-15 02:50 153376 c:\windows\system32\javaws.exe
    + 2010-12-13 05:49 . 2010-09-15 02:50 145184 c:\windows\system32\javaw.exe
    - 2009-11-19 19:25 . 2009-11-19 19:24 145184 c:\windows\system32\javaw.exe
    - 2009-11-19 19:25 . 2009-11-19 19:24 145184 c:\windows\system32\java.exe
    + 2010-12-13 05:49 . 2010-09-15 02:50 145184 c:\windows\system32\java.exe
    + 2004-09-15 04:00 . 2010-06-09 07:44 692736 c:\windows\system32\inetcomm.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 251392 c:\windows\system32\iepeers.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 251392 c:\windows\system32\iepeers.dll
    + 2008-02-09 13:19 . 2010-04-14 09:00 271704 c:\windows\system32\hpzids01.dll
    + 2010-01-13 08:25 . 2009-05-11 10:30 547840 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\PCCSWpdDriver.dll
    - 2009-11-18 12:57 . 2009-05-11 10:30 547840 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\PCCSWpdDriver.dll
    + 2010-01-13 08:24 . 2009-10-06 09:56 136704 c:\windows\system32\DRVSTORE\nmwcdnsu_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\nmwcdnsu.sys
    + 2010-05-24 17:36 . 2010-04-14 09:00 271704 c:\windows\system32\DRVSTORE\hpohsla_9A3CD9D9B03F3E7B248D94CDEA070410DC9A5547\hpzids01.dll
    + 2010-01-13 08:24 . 2009-10-06 09:52 660480 c:\windows\system32\DRVSTORE\ccdcmb_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\nmwcdcocls.dll
    + 2010-02-26 15:27 . 2007-07-02 03:40 201216 c:\windows\system32\drivers\TridVid.sys
    + 2004-09-15 04:00 . 2010-02-11 12:02 226880 c:\windows\system32\drivers\tcpip6.sys
    + 2004-09-15 04:00 . 2010-08-26 13:39 357248 c:\windows\system32\drivers\srv.sys
    + 2004-03-16 15:58 . 2008-04-13 20:19 146048 c:\windows\system32\drivers\portcls.sys
    - 2004-03-16 15:58 . 2008-04-13 19:19 146048 c:\windows\system32\drivers\portcls.sys
    + 2004-09-15 04:00 . 2010-02-24 13:11 455680 c:\windows\system32\drivers\mrxsmb.sys
    + 2004-09-15 11:00 . 2008-04-13 20:16 141056 c:\windows\system32\drivers\ks.sys
    - 2004-09-15 11:00 . 2008-04-13 19:16 141056 c:\windows\system32\drivers\ks.sys
    + 2004-09-15 04:00 . 2010-07-16 11:58 219648 c:\windows\system32\dllcache\wordpad.exe
    + 2004-09-15 04:00 . 2009-12-24 07:00 177664 c:\windows\system32\dllcache\wintrust.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2004-09-15 04:00 . 2010-06-18 17:47 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 667136 c:\windows\system32\dllcache\wininet.dll
    - 2004-09-15 04:00 . 2009-10-29 05:25 667136 c:\windows\system32\dllcache\wininet.dll
    + 2004-09-15 04:00 . 2010-03-09 11:10 430080 c:\windows\system32\dllcache\vbscript.dll
    - 2004-09-15 04:00 . 2008-05-09 10:55 430080 c:\windows\system32\dllcache\vbscript.dll
    + 2004-09-15 04:00 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 406016 c:\windows\system32\dllcache\usp10.dll
    - 2004-09-15 04:00 . 2009-10-29 05:25 627200 c:\windows\system32\dllcache\urlmon.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 627200 c:\windows\system32\dllcache\urlmon.dll
    + 2004-09-15 04:00 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys
    - 2004-09-15 04:00 . 2009-06-16 14:39 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-09-15 04:00 . 2010-08-27 08:03 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-09-15 04:00 . 2010-08-26 13:39 357248 c:\windows\system32\dllcache\srv.sys
    - 2004-09-15 04:00 . 2008-04-14 16:11 474112 c:\windows\system32\dllcache\shlwapi.dll
    + 2004-09-15 04:00 . 2009-12-08 09:24 474112 c:\windows\system32\dllcache\shlwapi.dll
    + 2004-09-15 04:00 . 2010-06-30 12:32 149504 c:\windows\system32\dllcache\schannel.dll
    + 2004-09-15 04:00 . 2010-08-16 08:44 590848 c:\windows\system32\dllcache\rpcrt4.dll
    + 2010-02-26 15:27 . 2008-04-14 17:11 363520 c:\windows\system32\dllcache\psisdecd.dll
    - 2009-11-12 18:49 . 2008-04-14 17:11 363520 c:\windows\system32\dllcache\psisdecd.dll
    - 2004-03-16 15:58 . 2008-04-13 19:19 146048 c:\windows\system32\dllcache\portcls.sys
    + 2004-03-16 15:58 . 2008-04-13 20:19 146048 c:\windows\system32\dllcache\portcls.sys
    - 2004-09-15 04:00 . 2008-04-14 16:11 532480 c:\windows\system32\dllcache\mstime.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 532480 c:\windows\system32\dllcache\mstime.dll
    - 2004-09-15 04:00 . 2008-04-14 16:12 344064 c:\windows\system32\dllcache\mspaint.exe
    + 2004-09-15 04:00 . 2009-12-17 07:41 344064 c:\windows\system32\dllcache\mspaint.exe
    - 2004-09-15 04:00 . 2008-04-14 16:11 449024 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 449024 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-09-15 04:00 . 2010-02-24 13:11 455680 c:\windows\system32\dllcache\mrxsmb.sys
    + 2010-03-30 09:24 . 2010-03-30 09:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll
    + 2004-09-15 04:00 . 2010-09-18 09:22 974848 c:\windows\system32\dllcache\mfc42u.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 974848 c:\windows\system32\dllcache\mfc42.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 953856 c:\windows\system32\dllcache\mfc40u.dll
    + 2004-09-15 04:00 . 2010-09-18 06:52 954368 c:\windows\system32\dllcache\mfc40.dll
    - 2004-09-15 11:00 . 2008-04-13 19:16 141056 c:\windows\system32\dllcache\ks.sys
    + 2004-09-15 11:00 . 2008-04-13 20:16 141056 c:\windows\system32\dllcache\ks.sys
    + 2004-09-15 04:00 . 2010-06-09 07:44 692736 c:\windows\system32\dllcache\inetcomm.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 251392 c:\windows\system32\dllcache\iepeers.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 251392 c:\windows\system32\dllcache\iepeers.dll
    + 2004-09-15 04:00 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
    - 2004-09-15 04:00 . 2008-04-14 16:12 744448 c:\windows\system32\dllcache\helpsvc.exe
    - 2004-09-15 04:00 . 2008-04-14 16:11 617472 c:\windows\system32\dllcache\comctl32.dll
    + 2004-09-15 04:00 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
    + 2004-09-15 04:00 . 2010-10-28 13:08 290048 c:\windows\system32\dllcache\atmfd.dll
    + 2004-09-15 04:00 . 2009-11-21 15:58 471552 c:\windows\system32\dllcache\aclayers.dll
    + 2004-09-15 04:00 . 2010-02-12 04:34 100864 c:\windows\system32\dllcache\6to4svc.dll
    + 2010-06-17 15:46 . 2010-09-15 02:50 472808 c:\windows\system32\deployJava1.dll
    + 2004-09-15 04:00 . 2010-08-23 16:12 617472 c:\windows\system32\comctl32.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 617472 c:\windows\system32\comctl32.dll
    + 2010-04-17 07:55 . 2010-02-12 10:03 293376 c:\windows\system32\browserchoice.exe
    + 2004-09-15 04:00 . 2010-02-12 04:34 100864 c:\windows\system32\6to4svc.dll
    - 2004-09-15 04:00 . 2008-04-14 16:12 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    + 2004-09-15 04:00 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    + 2010-03-30 21:16 . 2010-03-30 21:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2010-04-07 20:48 . 2010-04-07 20:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    + 2010-04-07 20:48 . 2010-04-07 20:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    - 2008-07-29 16:16 . 2008-07-29 16:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2010-09-22 06:43 . 2010-09-22 06:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2010-02-09 09:22 . 2010-02-09 09:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    - 2008-07-25 08:17 . 2008-07-25 08:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2010-05-11 03:40 . 2010-05-11 03:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2009-08-07 20:51 . 2009-08-07 20:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2010-05-11 03:40 . 2010-05-11 03:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    - 2008-05-27 21:49 . 2008-05-27 21:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    + 2010-09-22 23:25 . 2010-09-22 23:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    - 2008-05-27 21:48 . 2008-05-27 21:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2010-09-23 00:17 . 2010-09-23 00:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    - 2008-05-27 22:30 . 2008-05-27 22:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    + 2010-06-25 17:23 . 2010-06-25 17:23 908288 c:\windows\Installer\afcc2.msi
    + 2010-02-24 21:14 . 2010-02-24 21:14 543232 c:\windows\Installer\71232f.msp
    + 2010-08-08 08:08 . 2010-08-08 08:08 180224 c:\windows\Installer\6de36.msi
    + 2010-09-23 18:02 . 2010-09-23 18:02 798208 c:\windows\Installer\62a8e1.msp
    + 2010-11-16 11:12 . 2010-11-16 11:12 876544 c:\windows\Installer\2e1ea6.msp
    + 2010-01-13 08:25 . 2010-01-13 08:25 496128 c:\windows\Installer\164af5.msi
    + 2010-01-13 08:24 . 2010-01-13 08:24 331776 c:\windows\Installer\164abe.msi
    + 2010-06-25 17:23 . 2010-06-25 17:23 102400 c:\windows\Installer\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}\NewShortcut1_47F36D92E58E456DB73C3382737E4C42.exe
    + 2008-09-22 05:13 . 2010-11-10 17:12 135168 c:\windows\Installer\{90840409-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2008-09-22 05:13 . 2009-12-19 19:13 135168 c:\windows\Installer\{90840409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2008-11-12 19:04 . 2010-02-24 13:11 455680 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2010-10-08 19:04 . 2010-10-08 19:04 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_cd7da3de\System.Drawing.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_a08f558f\System.Drawing.Design.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_ca8cc13e\CustomMarshalers.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe
    + 2010-08-12 18:44 . 2010-08-12 18:44 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll
    + 2010-08-13 15:00 . 2010-08-13 15:00 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\b1646e54b708b9824f4193f87eb00c0e\System.Web.Extensions.Design.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\504a93e73da77c502ecf98bfdfc1485e\System.Web.Entity.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f22334fbd9497d79448fffef515ae0cc\System.Web.Entity.Design.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af5452305588da228a74e30324681d20\System.Web.DynamicData.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll
    + 2010-08-13 14:56 . 2010-08-13 14:56 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll
    + 2010-08-13 14:56 . 2010-08-13 14:56 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll
    + 2010-08-12 18:42 . 2010-08-12 18:42 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe
    + 2010-08-13 14:57 . 2010-08-13 14:57 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\72d3aacfca2e1ce835c210f5a1decb36\ServiceModelReg.ni.exe
    + 2010-08-12 17:22 . 2010-08-12 17:22 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll
    + 2010-08-12 17:23 . 2010-08-12 17:23 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll
    + 2010-08-12 17:23 . 2010-08-12 17:23 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll
    + 2010-08-12 17:23 . 2010-08-12 17:23 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe
    + 2010-08-13 14:57 . 2010-08-13 14:57 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe
    + 2010-10-09 17:35 . 2010-10-09 17:35 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-06-10 19:11 . 2010-06-10 19:11 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2010-06-10 19:11 . 2010-06-10 19:11 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2010-06-10 19:11 . 2010-06-10 19:11 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    - 2009-08-09 23:49 . 2009-08-09 23:49 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2004-09-15 04:00 . 2009-11-21 15:58 471552 c:\windows\AppPatch\aclayers.dll
    + 2010-09-16 18:26 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB982802$\spuninst\updspapi.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB982802$\spuninst\spuninst.exe
    + 2010-09-16 18:26 . 2009-04-15 14:53 585216 c:\windows\$NtUninstallKB982802$\rpcrt4.dll
    + 2010-08-12 17:13 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB982665$\spuninst\updspapi.dll
    + 2010-08-12 17:13 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB982665$\spuninst\spuninst.exe
    + 2010-06-10 19:04 . 2010-02-26 05:42 667136 c:\windows\$NtUninstallKB982381$\wininet.dll
    + 2010-06-10 19:04 . 2010-02-26 05:42 627200 c:\windows\$NtUninstallKB982381$\urlmon.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB982381$\spuninst\updspapi.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB982381$\spuninst\spuninst.exe
    + 2010-06-10 19:04 . 2010-02-26 05:42 251392 c:\windows\$NtUninstallKB982381$\iepeers.dll
    + 2010-08-12 17:22 . 2009-12-31 16:50 353792 c:\windows\$NtUninstallKB982214$\srv.sys
    + 2010-08-12 17:22 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB982214$\spuninst\updspapi.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB982214$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2009-10-15 16:32 119808 c:\windows\$NtUninstallKB982132$\t2embed.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB982132$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB982132$\spuninst\spuninst.exe
    + 2010-08-12 17:13 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB981997$\spuninst\updspapi.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB981997$\spuninst\spuninst.exe
    + 2010-10-15 16:43 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB981957$\spuninst\updspapi.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB981957$\spuninst\spuninst.exe
    + 2010-08-12 17:20 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB981852$\spuninst\updspapi.dll
    + 2010-08-12 17:20 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB981852$\spuninst\spuninst.exe
    + 2010-05-27 17:37 . 2009-05-26 09:01 392056 c:\windows\$NtUninstallKB981793$\spuninst\updspapi.dll
    + 2010-05-27 17:37 . 2009-05-26 09:01 232824 c:\windows\$NtUninstallKB981793$\spuninst\spuninst.exe
    + 2010-04-14 18:50 . 2008-05-09 10:55 430080 c:\windows\$NtUninstallKB981349$\vbscript.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB981349$\spuninst\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB981349$\spuninst\spuninst.exe
    + 2010-09-16 18:25 . 2008-04-14 16:11 406016 c:\windows\$NtUninstallKB981322$\usp10.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB981322$\spuninst\updspapi.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB981322$\spuninst\spuninst.exe
    + 2010-08-12 17:16 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB980436$\spuninst\updspapi.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB980436$\spuninst\spuninst.exe
    + 2010-08-12 17:16 . 2009-06-25 08:26 147456 c:\windows\$NtUninstallKB980436$\schannel.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 392056 c:\windows\$NtUninstallKB980232$\spuninst\updspapi.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 232824 c:\windows\$NtUninstallKB980232$\spuninst\spuninst.exe
    + 2010-04-14 18:57 . 2009-12-04 18:22 455424 c:\windows\$NtUninstallKB980232$\mrxsmb.sys
    + 2010-06-10 19:22 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB980218$\spuninst\updspapi.dll
    + 2010-06-10 19:22 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB980218$\spuninst\spuninst.exe
    + 2010-06-10 19:22 . 2008-04-14 16:09 285696 c:\windows\$NtUninstallKB980218$\atmfd.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 392056 c:\windows\$NtUninstallKB980195$\spuninst\updspapi.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB980195$\spuninst\spuninst.exe
    + 2010-03-31 17:41 . 2009-12-22 05:09 667136 c:\windows\$NtUninstallKB980182$\wininet.dll
    + 2010-03-31 17:41 . 2009-12-22 05:09 627200 c:\windows\$NtUninstallKB980182$\urlmon.dll
    + 2010-03-31 17:41 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB980182$\spuninst\updspapi.dll
    + 2010-03-31 17:41 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB980182$\spuninst\spuninst.exe
    + 2010-03-31 17:41 . 2008-04-14 16:11 251392 c:\windows\$NtUninstallKB980182$\iepeers.dll
    + 2010-10-15 16:47 . 2008-04-21 21:15 217088 c:\windows\$NtUninstallKB979687$\wordpad.exe
    + 2010-10-15 16:47 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB979687$\spuninst\updspapi.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB979687$\spuninst\spuninst.exe
    + 2010-04-14 18:57 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979683$\spuninst\updspapi.dll
    + 2010-04-14 18:57 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB979683$\spuninst\spuninst.exe
    + 2010-06-10 19:19 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979559$\spuninst\updspapi.dll
    + 2010-06-10 19:19 . 2009-05-26 09:01 232824 c:\windows\$NtUninstallKB979559$\spuninst\spuninst.exe
    + 2010-06-10 19:12 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979482$\spuninst\updspapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB979482$\spuninst\spuninst.exe
    + 2010-04-14 18:49 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979309$\spuninst\updspapi.dll
    + 2010-04-14 18:49 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB979309$\spuninst\spuninst.exe
    + 2010-02-25 19:17 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB979306$\spuninst\updspapi.dll
    + 2010-02-25 19:17 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB979306$\spuninst\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978706$\spuninst\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978706$\spuninst\spuninst.exe
    + 2010-02-10 04:24 . 2008-04-14 16:12 344064 c:\windows\$NtUninstallKB978706$\mspaint.exe
    + 2010-06-10 19:12 . 2007-07-27 20:11 382840 c:\windows\$NtUninstallKB978695_WM9$\spuninst\updspapi.dll
    + 2010-06-10 19:12 . 2007-07-27 17:58 232824 c:\windows\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe
    + 2010-04-14 18:50 . 2008-04-14 16:11 176640 c:\windows\$NtUninstallKB978601$\wintrust.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978601$\spuninst\updspapi.dll
    + 2010-04-14 18:50 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB978601$\spuninst\spuninst.exe
    + 2010-05-12 17:57 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978542$\spuninst\updspapi.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978542$\spuninst\spuninst.exe
    + 2010-05-12 17:57 . 2008-04-11 19:05 691712 c:\windows\$NtUninstallKB978542$\inetcomm.dll
    + 2010-04-14 18:50 . 2008-06-20 11:08 225856 c:\windows\$NtUninstallKB978338$\tcpip6.sys
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978338$\spuninst\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978338$\spuninst\spuninst.exe
    + 2010-04-14 18:50 . 2008-04-14 16:11 100352 c:\windows\$NtUninstallKB978338$\6to4svc.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978262$\spuninst\updspapi.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978262$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978251$\spuninst\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978251$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2008-10-24 11:21 455296 c:\windows\$NtUninstallKB978251$\mrxsmb.sys
    + 2010-01-22 11:15 . 2009-10-29 05:25 667136 c:\windows\$NtUninstallKB978207$\wininet.dll
    + 2010-01-22 11:15 . 2009-10-29 05:25 627200 c:\windows\$NtUninstallKB978207$\urlmon.dll
    + 2010-01-22 11:15 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978207$\spuninst\updspapi.dll
    + 2010-01-22 11:15 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB978207$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB978037$\spuninst\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB978037$\spuninst\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB977914$\spuninst\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB977914$\spuninst\spuninst.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB977816$\spuninst\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB977816$\spuninst\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB977165$\spuninst\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB977165$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB975713$\spuninst\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB975713$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2008-04-14 16:11 474112 c:\windows\$NtUninstallKB975713$\shlwapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB975562$\spuninst\updspapi.dll
    + 2010-06-10 19:12 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB975562$\spuninst\spuninst.exe
    + 2010-03-10 19:50 . 2009-05-26 15:10 392056 c:\windows\$NtUninstallKB975561$\spuninst\updspapi.dll
    + 2010-03-10 19:50 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB975561$\spuninst\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB975560$\spuninst\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB975560$\spuninst\spuninst.exe
    + 2010-09-16 18:26 . 2007-07-27 20:11 382840 c:\windows\$NtUninstallKB975558_WM8$\spuninst\updspapi.dll
    + 2010-09-16 18:26 . 2007-07-27 17:58 232824 c:\windows\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe
    + 2010-09-16 18:26 . 2006-10-18 19:47 317440 c:\windows\$NtUninstallKB975558_WM8$\mp4sdecd.dll
    + 2010-01-13 12:40 . 2009-06-16 14:39 119808 c:\windows\$NtUninstallKB972270$\t2embed.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 392056 c:\windows\$NtUninstallKB972270$\spuninst\updspapi.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB972270$\spuninst\spuninst.exe
    + 2010-02-10 04:32 . 2008-12-11 10:57 333952 c:\windows\$NtUninstallKB971468$\srv.sys
    + 2010-02-10 04:32 . 2008-07-08 13:03 392056 c:\windows\$NtUninstallKB971468$\spuninst\updspapi.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 232824 c:\windows\$NtUninstallKB971468$\spuninst\spuninst.exe
    + 2010-01-13 12:40 . 2009-05-26 15:10 392056 c:\windows\$NtUninstallKB955759$\spuninst\updspapi.dll
    + 2010-01-13 12:40 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB955759$\spuninst\spuninst.exe
    + 2010-01-13 12:40 . 2008-04-14 16:11 451072 c:\windows\$NtUninstallKB955759$\aclayers.dll
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2387149$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2387149$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2006-10-14 08:13 981760 c:\windows\$NtUninstallKB2387149$\mfc42u.dll
    + 2010-10-15 16:48 . 2008-04-14 16:11 927504 c:\windows\$NtUninstallKB2387149$\mfc40u.dll
    + 2010-10-15 16:48 . 2004-09-15 04:00 924432 c:\windows\$NtUninstallKB2387149$\mfc40.dll
    + 2010-10-15 16:48 . 2007-07-27 20:11 382840 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2007-07-27 17:58 232824 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe
    + 2010-10-15 16:43 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2360937$\spuninst\updspapi.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2360937$\spuninst\spuninst.exe
    + 2010-10-15 16:43 . 2010-07-22 15:46 590848 c:\windows\$NtUninstallKB2360937$\rpcrt4.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 667136 c:\windows\$NtUninstallKB2360131$\wininet.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 627200 c:\windows\$NtUninstallKB2360131$\urlmon.dll
    + 2010-10-15 16:47 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2360131$\spuninst\updspapi.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2360131$\spuninst\spuninst.exe
    + 2010-10-15 16:47 . 2008-04-14 16:11 449024 c:\windows\$NtUninstallKB2360131$\mshtmled.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 251392 c:\windows\$NtUninstallKB2360131$\iepeers.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB2347290$\spuninst\updspapi.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB2347290$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2010-06-21 15:27 354304 c:\windows\$NtUninstallKB2345886$\srv.sys
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2345886$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2345886$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2296011$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2296011$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2008-04-14 16:11 617472 c:\windows\$NtUninstallKB2296011$\comctl32.dll
    + 2010-08-04 18:13 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2286198$\spuninst\updspapi.dll
    + 2010-08-04 18:13 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2286198$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2279986$\spuninst\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2279986$\spuninst\spuninst.exe
    + 2010-10-15 16:48 . 2010-04-20 05:31 285696 c:\windows\$NtUninstallKB2279986$\atmfd.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 392056 c:\windows\$NtUninstallKB2259922$\spuninst\updspapi.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 232824 c:\windows\$NtUninstallKB2259922$\spuninst\spuninst.exe
    + 2010-07-14 09:19 . 2010-02-22 16:55 392056 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll
    + 2010-07-14 09:19 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe
    + 2010-07-14 09:19 . 2008-04-14 16:12 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe
    + 2010-08-12 17:22 . 2010-04-16 16:07 667136 c:\windows\$NtUninstallKB2183461$\wininet.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 627200 c:\windows\$NtUninstallKB2183461$\urlmon.dll
    + 2010-08-12 17:22 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2183461$\spuninst\updspapi.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2183461$\spuninst\spuninst.exe
    + 2010-08-12 17:22 . 2010-04-16 16:07 251392 c:\windows\$NtUninstallKB2183461$\iepeers.dll
    + 2010-08-12 17:16 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2160329$\spuninst\updspapi.dll
    + 2010-08-12 17:16 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2160329$\spuninst\spuninst.exe
    + 2010-10-01 08:23 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2158563$\spuninst\updspapi.dll
    + 2010-10-01 08:23 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2158563$\spuninst\spuninst.exe
    + 2010-09-16 18:23 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2141007$\spuninst\updspapi.dll
    + 2010-09-16 18:23 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2141007$\spuninst\spuninst.exe
    + 2010-09-16 18:23 . 2010-01-29 15:00 691712 c:\windows\$NtUninstallKB2141007$\inetcomm.dll
    + 2010-09-16 18:26 . 2008-04-14 16:11 293376 c:\windows\$NtUninstallKB2121546$\winsrv.dll
    + 2010-09-16 18:26 . 2010-02-22 14:25 392056 c:\windows\$NtUninstallKB2121546$\spuninst\updspapi.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 232824 c:\windows\$NtUninstallKB2121546$\spuninst\spuninst.exe
    + 2010-08-12 17:21 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB2115168$\spuninst\updspapi.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB2115168$\spuninst\spuninst.exe
    + 2010-08-12 17:19 . 2009-05-26 11:40 392056 c:\windows\$NtUninstallKB2079403$\spuninst\updspapi.dll
    + 2010-08-12 17:19 . 2009-05-26 11:40 232824 c:\windows\$NtUninstallKB2079403$\spuninst\spuninst.exe
    + 2010-09-16 18:26 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB982802\update\updspapi.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB982802\update\update.exe
    + 2010-09-16 18:26 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB982802\spuninst.exe
    + 2010-07-23 06:17 . 2010-07-23 06:17 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll
    + 2010-08-12 17:13 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB982665\update\updspapi.dll
    + 2010-08-12 17:13 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB982665\update\update.exe
    + 2010-08-12 17:13 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB982665\spuninst.exe
    + 2010-06-10 19:04 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB982381\update\updspapi.dll
    + 2010-06-10 19:04 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB982381\update\update.exe
    + 2010-06-10 19:04 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB982381\spuninst.exe
    + 2010-04-16 16:01 . 2010-04-16 16:01 668672 c:\windows\$hf_mig$\KB982381\SP3QFE\wininet.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 628224 c:\windows\$hf_mig$\KB982381\SP3QFE\urlmon.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 251392 c:\windows\$hf_mig$\KB982381\SP3QFE\iepeers.dll
    + 2010-08-12 17:22 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB982214\update\updspapi.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB982214\update\update.exe
    + 2010-08-12 17:22 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB982214\spuninst.exe
    + 2010-08-12 15:53 . 2010-06-21 14:18 354304 c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys
    + 2010-10-15 16:48 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB982132\update\updspapi.dll
    + 2010-10-15 16:48 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB982132\update\update.exe
    + 2010-10-15 16:48 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB982132\spuninst.exe
    + 2010-08-27 08:00 . 2010-08-27 08:00 119808 c:\windows\$hf_mig$\KB982132\SP3QFE\t2embed.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB981997\update\updspapi.dll
    + 2010-08-12 17:13 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB981997\update\update.exe
    + 2010-08-12 17:13 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB981997\spuninst.exe
    + 2010-10-15 16:43 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB981957\update\updspapi.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB981957\update\update.exe
    + 2010-10-15 16:43 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB981957\spuninst.exe
    + 2010-08-12 17:20 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB981852\update\updspapi.dll
    + 2010-08-12 17:20 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB981852\update\update.exe
    + 2010-08-12 17:20 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB981852\spuninst.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB981349\update\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB981349\update\update.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB981349\spuninst.exe
    + 2010-03-09 11:08 . 2010-03-09 11:08 430080 c:\windows\$hf_mig$\KB981349\SP3QFE\vbscript.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB981322\update\updspapi.dll
    + 2010-09-16 18:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB981322\update\update.exe
    + 2010-09-16 18:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB981322\spuninst.exe
    + 2010-04-16 15:30 . 2010-04-16 15:30 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB980436\update\updspapi.dll
    + 2010-08-12 17:16 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB980436\update\update.exe
    + 2010-08-12 17:16 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB980436\spuninst.exe
    + 2010-06-30 12:24 . 2010-06-30 12:24 149504 c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 392056 c:\windows\$hf_mig$\KB980232\update\updspapi.dll
    + 2010-04-14 18:57 . 2009-05-26 09:01 757112 c:\windows\$hf_mig$\KB980232\update\update.exe
    + 2010-04-14 18:57 . 2009-05-26 09:01 232824 c:\windows\$hf_mig$\KB980232\spuninst.exe
    + 2010-04-14 18:13 . 2010-02-24 11:57 457216 c:\windows\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys
    + 2010-06-10 19:22 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB980218\update\updspapi.dll
    + 2010-06-10 19:22 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB980218\update\update.exe
    + 2010-06-10 19:22 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB980218\spuninst.exe
    + 2010-04-20 05:38 . 2010-04-20 05:38 285824 c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB980195\update\updspapi.dll
    + 2010-06-10 19:21 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB980195\update\update.exe
    + 2010-06-10 19:21 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB980195\spuninst.exe
    + 2010-03-31 17:41 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB980182\update\updspapi.dll
    + 2010-03-31 17:41 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB980182\update\update.exe
    + 2010-03-31 17:41 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB980182\spuninst.exe
    + 2010-02-26 05:39 . 2010-02-26 05:39 668672 c:\windows\$hf_mig$\KB980182\SP3QFE\wininet.dll
    + 2010-02-26 05:39 . 2010-02-26 05:39 628224 c:\windows\$hf_mig$\KB980182\SP3QFE\urlmon.dll
    + 2010-02-26 05:39 . 2010-02-26 05:39 251392 c:\windows\$hf_mig$\KB980182\SP3QFE\iepeers.dll
    + 2010-10-15 16:47 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB979687\update\updspapi.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB979687\update\update.exe
    + 2010-10-15 16:47 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB979687\spuninst.exe
    + 2010-07-16 11:56 . 2010-07-16 11:56 219648 c:\windows\$hf_mig$\KB979687\SP3QFE\wordpad.exe
    + 2010-04-14 18:57 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979683\update\updspapi.dll
    + 2010-04-14 18:57 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979683\update\update.exe
    + 2010-04-14 18:57 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB979683\spuninst.exe
    + 2010-06-10 19:19 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979559\update\updspapi.dll
    + 2010-06-10 19:19 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979559\update\update.exe
    + 2010-06-10 19:19 . 2009-05-26 09:01 232824 c:\windows\$hf_mig$\KB979559\spuninst.exe
    + 2010-06-10 19:12 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979482\update\updspapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979482\update\update.exe
    + 2010-06-10 19:12 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB979482\spuninst.exe
    + 2010-04-14 18:49 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB979309\update\updspapi.dll
    + 2010-04-14 18:49 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB979309\update\update.exe
    + 2010-04-14 18:49 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB979309\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978706\update\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978706\update\update.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978706\spuninst.exe
    + 2009-12-17 07:38 . 2009-12-17 07:38 344064 c:\windows\$hf_mig$\KB978706\SP3QFE\mspaint.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978601\update\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978601\update\update.exe
    + 2010-04-14 18:50 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB978601\spuninst.exe
    + 2009-12-24 06:43 . 2009-12-24 06:43 178176 c:\windows\$hf_mig$\KB978601\SP3QFE\wintrust.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978542\update\updspapi.dll
    + 2010-05-12 17:57 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978542\update\update.exe
    + 2010-05-12 17:57 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978542\spuninst.exe
    + 2010-01-29 14:54 . 2010-01-29 14:54 691712 c:\windows\$hf_mig$\KB978542\SP3QFE\inetcomm.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978338\update\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978338\update\update.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978338\spuninst.exe
    + 2010-02-11 11:36 . 2010-02-11 11:36 226880 c:\windows\$hf_mig$\KB978338\SP3QFE\tcpip6.sys
    + 2010-02-12 04:29 . 2010-02-12 04:29 100864 c:\windows\$hf_mig$\KB978338\SP3QFE\6to4svc.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978262\update\updspapi.dll
    + 2010-02-10 04:32 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978262\update\update.exe
    + 2010-02-10 04:32 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978262\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978251\update\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978251\update\update.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978251\spuninst.exe
    + 2010-02-10 04:06 . 2009-12-04 17:25 456832 c:\windows\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys
    + 2010-01-22 11:15 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978207\update\updspapi.dll
    + 2010-01-22 11:15 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978207\update\update.exe
    + 2010-01-22 11:15 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB978207\spuninst.exe
    + 2009-12-22 05:06 . 2009-12-22 05:06 668672 c:\windows\$hf_mig$\KB978207\SP3QFE\wininet.dll
    + 2009-12-22 05:06 . 2009-12-22 05:06 628224 c:\windows\$hf_mig$\KB978207\SP3QFE\urlmon.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB978037\update\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB978037\update\update.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB978037\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977914\update\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977914\update\update.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977914\spuninst.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977816\update\updspapi.dll
    + 2010-04-14 18:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977816\update\update.exe
    + 2010-04-14 18:50 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977816\spuninst.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB977165\update\updspapi.dll
    + 2010-02-10 04:24 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB977165\update\update.exe
    + 2010-02-10 04:24 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB977165\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975713\update\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975713\update\update.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB975713\spuninst.exe
    + 2009-12-08 09:02 . 2009-12-08 09:02 474112 c:\windows\$hf_mig$\KB975713\SP3QFE\shlwapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975562\update\updspapi.dll
    + 2010-06-10 19:12 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975562\update\update.exe
    + 2010-06-10 19:12 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB975562\spuninst.exe
    + 2010-03-10 19:50 . 2009-05-26 15:10 392056 c:\windows\$hf_mig$\KB975561\update\updspapi.dll
    + 2010-03-10 19:50 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975561\update\update.exe
    + 2010-03-10 19:50 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB975561\spuninst.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB975560\update\updspapi.dll
    + 2010-02-10 04:25 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB975560\update\update.exe
    + 2010-02-10 04:25 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB975560\spuninst.exe
    + 2010-01-13 12:40 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB972270\update\updspapi.dll
    + 2010-01-13 12:40 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB972270\update\update.exe
    + 2010-01-13 12:40 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB972270\spuninst.exe
    + 2010-01-13 08:17 . 2009-10-15 16:39 119808 c:\windows\$hf_mig$\KB972270\SP3QFE\t2embed.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 392056 c:\windows\$hf_mig$\KB971468\update\updspapi.dll
    + 2010-02-10 04:32 . 2008-07-08 13:03 757112 c:\windows\$hf_mig$\KB971468\update\update.exe
    + 2010-02-10 04:32 . 2008-07-08 13:03 232824 c:\windows\$hf_mig$\KB971468\spuninst.exe
    + 2010-02-10 04:07 . 2010-01-01 07:58 353792 c:\windows\$hf_mig$\KB971468\SP3QFE\srv.sys
    + 2010-01-13 12:40 . 2009-05-26 15:10 392056 c:\windows\$hf_mig$\KB955759\update\updspapi.dll
    + 2010-01-13 12:40 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB955759\update\update.exe
    + 2010-01-13 12:40 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB955759\spuninst.exe
    + 2010-01-13 08:17 . 2009-11-21 15:46 471552 c:\windows\$hf_mig$\KB955759\SP3QFE\aclayers.dll
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2387149\update\updspapi.dll
    + 2010-10-15 16:48 . 2010-07-05 13:17 757112 c:\windows\$hf_mig$\KB2387149\update\update.exe
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2387149\spuninst.exe
    + 2010-10-15 15:51 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42u.dll
    + 2010-10-15 15:51 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42.dll
    + 2010-10-15 15:51 . 2010-09-18 07:18 953856 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
    + 2010-10-15 15:51 . 2010-09-18 07:18 954368 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40.dll
    + 2010-10-15 16:43 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2360937\update\updspapi.dll
    + 2010-10-15 16:43 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2360937\update\update.exe
    + 2010-10-15 16:43 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2360937\spuninst.exe
    + 2010-10-15 15:47 . 2010-08-16 08:43 590848 c:\windows\$hf_mig$\KB2360937\SP3QFE\rpcrt4.dll
    + 2010-10-15 16:47 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2360131\update\updspapi.dll
    + 2010-10-15 16:47 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2360131\update\update.exe
    + 2010-10-15 16:47 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2360131\spuninst.exe
    + 2010-09-09 14:24 . 2010-09-09 14:24 668672 c:\windows\$hf_mig$\KB2360131\SP3QFE\wininet.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 628224 c:\windows\$hf_mig$\KB2360131\SP3QFE\urlmon.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 449024 c:\windows\$hf_mig$\KB2360131\SP3QFE\mshtmled.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 251392 c:\windows\$hf_mig$\KB2360131\SP3QFE\iepeers.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
    + 2010-09-16 18:26 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB2347290\update\update.exe
    + 2010-09-16 18:26 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2347290\spuninst.exe
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2345886\update\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2345886\update\update.exe
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2345886\spuninst.exe
    + 2010-08-26 13:37 . 2010-08-26 13:37 357248 c:\windows\$hf_mig$\KB2345886\SP3QFE\srv.sys
    + 2010-08-04 18:13 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll
    + 2010-08-04 18:13 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2286198\update\update.exe
    + 2010-08-04 18:13 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2286198\spuninst.exe
    + 2010-10-15 16:48 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2279986\update\updspapi.dll
    + 2010-10-15 16:48 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2279986\update\update.exe
    + 2010-10-15 16:48 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2279986\spuninst.exe
    + 2010-09-01 11:49 . 2010-09-01 11:49 285824 c:\windows\$hf_mig$\KB2279986\SP3QFE\atmfd.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 392056 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll
    + 2010-09-16 18:27 . 2009-05-26 09:01 757112 c:\windows\$hf_mig$\KB2259922\update\update.exe
    + 2010-09-16 18:27 . 2009-05-26 09:01 232824 c:\windows\$hf_mig$\KB2259922\spuninst.exe
    + 2010-07-14 09:19 . 2010-02-22 16:55 392056 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll
    + 2010-07-14 09:19 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2229593\update\update.exe
    + 2010-07-14 09:19 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2229593\spuninst.exe
    + 2010-07-14 08:18 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe
    + 2010-08-12 17:22 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2183461\update\updspapi.dll
    + 2010-08-12 17:22 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2183461\update\update.exe
    + 2010-08-12 17:22 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2183461\spuninst.exe
    + 2010-06-24 12:12 . 2010-06-24 12:12 668672 c:\windows\$hf_mig$\KB2183461\SP3QFE\wininet.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 628224 c:\windows\$hf_mig$\KB2183461\SP3QFE\urlmon.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 251392 c:\windows\$hf_mig$\KB2183461\SP3QFE\iepeers.dll
    + 2010-08-12 17:16 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2160329\update\updspapi.dll
    + 2010-08-12 17:16 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2160329\update\update.exe
    + 2010-08-12 17:16 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2160329\spuninst.exe
    + 2010-09-16 18:23 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
    + 2010-09-16 18:23 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2141007\update\update.exe
    + 2010-09-16 18:23 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2141007\spuninst.exe
    + 2010-06-09 07:42 . 2010-06-09 07:42 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
    + 2010-09-16 18:26 . 2010-02-22 14:25 392056 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
    + 2010-09-16 18:26 . 2010-02-22 14:24 757112 c:\windows\$hf_mig$\KB2121546\update\update.exe
    + 2010-09-16 18:26 . 2010-02-22 14:24 232824 c:\windows\$hf_mig$\KB2121546\spuninst.exe
    + 2010-06-18 17:46 . 2010-06-18 17:46 293376 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll
    + 2010-08-12 17:21 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB2115168\update\update.exe
    + 2010-08-12 17:21 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2115168\spuninst.exe
    + 2010-08-12 17:19 . 2009-05-26 11:40 392056 c:\windows\$hf_mig$\KB2079403\update\updspapi.dll
    + 2010-08-12 17:19 . 2009-05-26 11:40 757112 c:\windows\$hf_mig$\KB2079403\update\update.exe
    + 2010-08-12 17:19 . 2009-05-26 11:40 232824 c:\windows\$hf_mig$\KB2079403\spuninst.exe
    + 2010-10-15 15:50 . 2010-08-23 16:12 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
    + 2009-07-11 22:02 . 2009-07-11 22:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
    + 2004-09-15 04:00 . 2010-04-06 01:52 2462720 c:\windows\system32\WMVCore.dll
    - 2009-11-18 12:56 . 2009-10-06 09:55 1112288 c:\windows\system32\wdfcoinstaller01007.dll
    + 2010-01-13 08:24 . 2009-10-06 09:55 1112288 c:\windows\system32\wdfcoinstaller01007.dll
    + 2008-02-09 13:19 . 2009-02-27 09:23 3292160 c:\windows\system32\spool\drivers\w32x86\hpphotosmart_c5200_sc56c\hpzui5ha.dll
    - 2008-02-09 13:19 . 2007-03-15 13:16 8602112 c:\windows\system32\spool\drivers\w32x86\hpphotosmart_c5200_sc56c\hpzst5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 12:55 8602112 c:\windows\system32\spool\drivers\w32x86\hpphotosmart_c5200_sc56c\hpzst5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 09:03 1734144 c:\windows\system32\spool\drivers\w32x86\hpphotosmart_c5200_sc56c\hpz3r5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 09:23 3292160 c:\windows\system32\spool\drivers\w32x86\3\hpzui5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 12:55 8602112 c:\windows\system32\spool\drivers\w32x86\3\hpzst5ha.dll
    - 2008-02-09 13:19 . 2007-03-15 13:16 8602112 c:\windows\system32\spool\drivers\w32x86\3\hpzst5ha.dll
    + 2008-02-09 13:19 . 2009-02-27 09:03 1734144 c:\windows\system32\spool\drivers\w32x86\3\hpz3r5ha.dll
    + 2004-09-15 04:00 . 2010-07-27 06:30 8466432 c:\windows\system32\shell32.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 1509888 c:\windows\system32\shdocvw.dll
    + 2004-09-15 04:00 . 2010-02-05 18:26 1292288 c:\windows\system32\quartz.dll
    + 2004-09-15 04:00 . 2010-07-16 12:00 1287680 c:\windows\system32\ole32.dll
    + 2004-09-15 04:00 . 2010-04-28 18:13 2192256 c:\windows\system32\ntoskrnl.exe
    + 2004-09-15 11:00 . 2010-04-28 05:43 2069120 c:\windows\system32\ntkrnlpa.exe
    + 2004-09-15 04:00 . 2010-06-14 07:42 1172480 c:\windows\system32\msxml3.dll
    - 2004-09-15 04:00 . 2009-07-31 04:34 1172480 c:\windows\system32\msxml3.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 3097088 c:\windows\system32\mshtml.dll
    + 2010-01-27 01:07 . 2010-10-09 05:53 5969360 c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2004-12-13 15:45 . 2010-12-16 11:19 1534552 c:\windows\system32\FNTCACHE.DAT
    - 2009-11-18 12:57 . 2009-05-11 09:47 1302600 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\WUDFUpdate_01007.dll
    + 2010-01-13 08:25 . 2009-05-11 09:47 1302600 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\WUDFUpdate_01007.dll
    + 2010-01-13 08:24 . 2009-10-06 09:55 1112288 c:\windows\system32\DRVSTORE\ccdcmb_40BC39A62FCDF7FB9E872CE08AFC5F75B82C3181\wdfcoinstaller01007.dll
    + 2004-09-15 04:00 . 2010-04-06 01:52 2462720 c:\windows\system32\dllcache\WMVCore.dll
    + 2004-09-15 04:00 . 2010-10-26 13:58 1853568 c:\windows\system32\dllcache\win32k.sys
    + 2004-09-15 04:00 . 2010-07-27 06:30 8466432 c:\windows\system32\dllcache\shell32.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 1509888 c:\windows\system32\dllcache\shdocvw.dll
    + 2004-09-15 04:00 . 2010-02-05 18:26 1292288 c:\windows\system32\dllcache\quartz.dll
    + 2004-09-15 04:00 . 2010-07-16 12:00 1287680 c:\windows\system32\dllcache\ole32.dll
    + 2004-09-15 04:00 . 2010-04-28 18:13 2192256 c:\windows\system32\dllcache\ntoskrnl.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2004-09-15 11:00 . 2010-04-28 05:43 2069120 c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2004-09-15 04:00 . 2010-06-14 07:42 1172480 c:\windows\system32\dllcache\msxml3.dll
    - 2004-09-15 04:00 . 2009-07-31 04:34 1172480 c:\windows\system32\dllcache\msxml3.dll
    + 2004-09-15 04:00 . 2010-01-29 15:00 1315328 c:\windows\system32\dllcache\msoe.dll
    - 2004-09-15 04:00 . 2009-07-10 13:28 1315328 c:\windows\system32\dllcache\msoe.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 3097088 c:\windows\system32\dllcache\mshtml.dll
    + 2004-09-15 04:00 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
    - 2004-09-15 04:00 . 2008-04-14 16:12 3558912 c:\windows\system32\dllcache\moviemk.exe
    - 2004-09-15 04:00 . 2008-04-14 16:11 1025024 c:\windows\system32\dllcache\browseui.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 1025024 c:\windows\system32\dllcache\browseui.dll
    + 2009-11-06 22:06 . 2009-11-06 22:06 1130824 c:\windows\system32\dfshim.dll
    - 2004-09-15 04:00 . 2008-04-14 16:11 1025024 c:\windows\system32\browseui.dll
    + 2004-09-15 04:00 . 2010-11-05 05:01 1025024 c:\windows\system32\browseui.dll
    + 2010-04-07 20:48 . 2010-04-07 20:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    - 2008-11-25 01:59 . 2008-11-25 01:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2010-09-22 06:44 . 2010-09-22 06:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2010-03-23 02:32 . 2010-03-23 02:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2010-05-11 03:40 . 2010-05-11 03:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2009-08-07 20:51 . 2009-08-07 20:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2010-05-11 03:40 . 2010-05-11 03:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2008-05-27 22:35 . 2008-05-27 22:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2010-09-23 12:55 . 2010-09-23 12:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2010-09-23 12:55 . 2010-09-23 12:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    - 2008-05-27 22:35 . 2008-05-27 22:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    + 2010-09-22 23:26 . 2010-09-22 23:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    - 2008-05-27 21:48 . 2008-05-27 21:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    + 2010-09-22 23:25 . 2010-09-22 23:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    - 2008-05-27 21:48 . 2008-05-27 21:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    + 2010-09-23 12:55 . 2010-09-23 12:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    - 2008-05-27 21:43 . 2008-05-27 21:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2010-02-26 03:09 . 2010-02-26 03:09 8300544 c:\windows\Installer\f37714.msp
    + 2009-11-08 21:25 . 2009-11-08 21:25 1935360 c:\windows\Installer\78d061.msp
    + 2010-04-11 19:17 . 2010-04-11 19:17 2607104 c:\windows\Installer\71233d.msp
    + 2010-04-11 19:17 . 2010-04-11 19:17 4210688 c:\windows\Installer\71233c.msp
    + 2010-09-23 04:39 . 2010-09-23 04:39 4265472 c:\windows\Installer\62a8d8.msp
    + 2010-06-29 13:01 . 2010-06-29 13:01 8404992 c:\windows\Installer\54ccb7.msp
    + 2010-08-18 07:19 . 2010-08-18 07:19 8400896 c:\windows\Installer\36097e.msp
    + 2010-10-04 11:59 . 2010-10-04 11:59 8300032 c:\windows\Installer\2e1eb5.msp
    + 2010-08-09 13:44 . 2010-08-09 13:44 3778048 c:\windows\Installer\2d4c01.msp
    + 2010-10-04 14:00 . 2010-10-04 14:00 7973888 c:\windows\Installer\29b7ed.msp
    + 2009-12-01 13:52 . 2009-12-01 13:52 7970816 c:\windows\Installer\152302.msp
    + 2010-01-11 13:35 . 2010-01-11 13:35 4480000 c:\windows\Installer\14395d.msp
    + 2010-06-25 17:21 . 2010-06-25 17:21 1817600 c:\windows\Hewlett-Packard\Setup Files\HP Software Update\{6EDE20CD-178C-4D5C-A9D1-9B356B2E4EDD}\HP Update.msi
    + 2010-01-13 19:13 . 2010-01-13 19:13 1729024 c:\windows\Hewlett-Packard\Setup Files\HP Software Update\{2CA9E997-73DA-4996-BEF1-58DABC19657C}\HP Update.msi
    + 2008-10-16 12:52 . 2010-04-28 18:13 2192256 c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-10-16 12:52 . 2010-04-28 05:43 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2010-10-08 19:04 . 2010-10-08 19:04 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_b0d05ab3\System.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_0e339a9a\System.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_720dde62\System.Xml.dll
    + 2010-10-08 19:05 . 2010-10-08 19:05 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_6f39210c\System.Xml.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_fddb7692\System.Windows.Forms.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_333276eb\System.Windows.Forms.dll
    + 2010-10-08 19:05 . 2010-10-08 19:05 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_7b8dac07\System.Drawing.dll
    + 2010-10-08 19:05 . 2010-10-08 19:05 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_795e35b1\System.Design.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_458d4663\System.Design.dll
    + 2010-10-08 19:05 . 2010-10-08 19:05 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_de582565\mscorlib.dll
    + 2010-10-08 19:04 . 2010-10-08 19:04 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_ba58b412\mscorlib.dll
    + 2010-08-12 17:21 . 2010-08-12 17:21 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll
    + 2010-08-12 17:20 . 2010-08-12 17:20 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll
    + 2010-08-12 18:44 . 2010-08-12 18:44 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bec60fe2e934a6284224ab45b0e981e2\System.WorkflowServices.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\09da139c48e2f5e76994a5c0f2e5b19e\System.Workflow.Runtime.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6809417da74ff937e18b3034f1eac2f2\System.Workflow.ComponentModel.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
    + 2010-10-09 17:37 . 2010-10-09 17:37 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\da367bc2ecf2c9c5b4f858b6dba9e2ea\System.Web.Extensions.ni.dll
    + 2010-08-12 18:43 . 2010-08-12 18:43 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8e34e273d036b7468fc4e951a1fde437\System.ServiceModel.Web.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll
    + 2010-08-12 18:43 . 2010-08-12 18:43 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll
    + 2010-10-09 17:35 . 2010-10-09 17:35 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\095bb4f033374647b6d66c51f16bb886\System.IdentityModel.ni.dll
    + 2010-08-12 18:42 . 2010-08-12 18:42 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll
    + 2010-08-12 18:40 . 2010-08-12 18:40 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\b8c9267d87b7358e1a5f00bf1572c313\System.Data.Services.ni.dll
    + 2010-08-12 18:40 . 2010-08-12 18:40 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
    + 2010-08-13 14:58 . 2010-08-13 14:58 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll
    + 2010-08-12 18:39 . 2010-08-12 18:39 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll
    + 2010-08-12 18:39 . 2010-08-12 18:39 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll
    + 2010-08-12 17:23 . 2010-08-12 17:23 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll
    + 2010-08-12 17:20 . 2010-08-12 17:20 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a27783547338dbebf84101a685ba641b\Microsoft.VisualBasic.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll
    + 2010-08-13 14:59 . 2010-08-13 14:59 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2010-08-13 14:57 . 2010-08-13 14:57 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll
    + 2010-06-22 19:23 . 2010-06-22 19:23 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2009-08-09 23:54 . 2009-08-09 23:54 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2010-10-08 19:10 . 2010-10-08 19:10 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2010-06-10 19:11 . 2010-06-10 19:12 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2010-06-22 19:23 . 2010-06-22 19:23 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2009-10-15 19:09 . 2009-10-15 19:09 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2009-10-15 19:10 . 2009-10-15 19:10 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2010-06-22 19:23 . 2010-06-22 19:23 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2009-08-09 23:49 . 2009-08-09 23:49 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2010-10-08 19:08 . 2010-10-08 19:08 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2009-10-15 19:02 . 2009-10-15 19:02 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2009-10-15 19:02 . 2009-10-15 19:02 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-10-08 19:03 . 2010-10-08 19:03 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-06-10 19:04 . 2010-03-10 04:43 1509376 c:\windows\$NtUninstallKB982381$\shdocvw.dll
    + 2010-06-10 19:04 . 2010-02-26 05:42 3094016 c:\windows\$NtUninstallKB982381$\mshtml.dll
    + 2010-06-10 19:04 . 2010-03-10 04:43 1025024 c:\windows\$NtUninstallKB982381$\browseui.dll
    + 2010-08-12 17:13 . 2009-10-23 15:28 3558912 c:\windows\$NtUninstallKB981997$\moviemk.exe
    + 2010-10-15 16:43 . 2010-06-24 09:02 1852160 c:\windows\$NtUninstallKB981957$\win32k.sys
    + 2010-08-12 17:20 . 2010-02-17 11:08 2192256 c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
    + 2010-08-12 17:20 . 2010-02-16 19:08 2027008 c:\windows\$NtUninstallKB981852$\ntkrpamp.exe
    + 2010-08-12 17:20 . 2010-02-16 19:08 2069120 c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
    + 2010-08-12 17:20 . 2010-02-16 19:08 2148864 c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe
    + 2010-03-31 17:41 . 2009-12-22 05:09 1509376 c:\windows\$NtUninstallKB980182$\shdocvw.dll
    + 2010-03-31 17:41 . 2009-12-22 05:09 3092480 c:\windows\$NtUninstallKB980182$\mshtml.dll
    + 2010-03-31 17:41 . 2008-04-14 16:11 1025024 c:\windows\$NtUninstallKB980182$\browseui.dll
    + 2010-10-15 16:47 . 2008-04-14 16:11 1287168 c:\windows\$NtUninstallKB979687$\ole32.dll
    + 2010-04-14 18:57 . 2009-12-09 10:09 2191488 c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
    + 2010-04-14 18:57 . 2009-12-09 10:09 2026496 c:\windows\$NtUninstallKB979683$\ntkrpamp.exe
    + 2010-04-14 18:57 . 2009-12-09 10:10 2068352 c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
    + 2010-04-14 18:57 . 2009-12-09 10:09 2147840 c:\windows\$NtUninstallKB979683$\ntkrnlmp.exe
    + 2010-06-10 19:19 . 2009-08-14 15:15 1850880 c:\windows\$NtUninstallKB979559$\win32k.sys
    + 2010-06-10 19:12 . 2009-05-20 01:56 2458112 c:\windows\$NtUninstallKB978695_WM9$\wmvcore.dll
    + 2010-05-12 17:57 . 2009-07-10 13:28 1315328 c:\windows\$NtUninstallKB978542$\msoe.dll
    + 2010-01-22 11:15 . 2009-10-29 05:25 1509376 c:\windows\$NtUninstallKB978207$\shdocvw.dll
    + 2010-01-22 11:15 . 2009-10-29 18:55 3091968 c:\windows\$NtUninstallKB978207$\mshtml.dll
    + 2010-02-10 04:24 . 2009-08-04 19:59 2191488 c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
    + 2010-02-10 04:24 . 2009-08-04 17:28 2026496 c:\windows\$NtUninstallKB977165$\ntkrpamp.exe
    + 2010-02-10 04:24 . 2009-08-04 17:28 2068352 c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
    + 2010-02-10 04:24 . 2009-08-04 17:28 2147840 c:\windows\$NtUninstallKB977165$\ntkrnlmp.exe
    + 2010-06-10 19:12 . 2009-11-27 17:13 1292288 c:\windows\$NtUninstallKB975562$\quartz.dll
    + 2010-03-10 19:50 . 2008-04-14 16:12 3558912 c:\windows\$NtUninstallKB975561$\moviemk.exe
    + 2010-02-10 04:25 . 2009-06-03 19:10 1291776 c:\windows\$NtUninstallKB975560$\quartz.dll
    + 2010-10-15 16:48 . 2008-04-14 16:11 1028096 c:\windows\$NtUninstallKB2387149$\mfc42.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 1509376 c:\windows\$NtUninstallKB2360131$\shdocvw.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 3094016 c:\windows\$NtUninstallKB2360131$\mshtml.dll
    + 2010-10-15 16:47 . 2010-06-24 12:10 1025024 c:\windows\$NtUninstallKB2360131$\browseui.dll
    + 2010-08-04 18:13 . 2008-06-17 19:02 8465408 c:\windows\$NtUninstallKB2286198$\shell32.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 1509376 c:\windows\$NtUninstallKB2183461$\shdocvw.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 3094016 c:\windows\$NtUninstallKB2183461$\mshtml.dll
    + 2010-08-12 17:22 . 2010-04-16 16:07 1025024 c:\windows\$NtUninstallKB2183461$\browseui.dll
    + 2010-08-12 17:16 . 2010-05-02 08:09 1851520 c:\windows\$NtUninstallKB2160329$\win32k.sys
    + 2010-08-12 17:19 . 2009-07-31 04:34 1172480 c:\windows\$NtUninstallKB2079403$\msxml3.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 1509376 c:\windows\$hf_mig$\KB982381\SP3QFE\shdocvw.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 3094528 c:\windows\$hf_mig$\KB982381\SP3QFE\mshtml.dll
    + 2010-04-16 16:01 . 2010-04-16 16:01 1025024 c:\windows\$hf_mig$\KB982381\SP3QFE\browseui.dll
    + 2010-08-12 15:52 . 2010-06-18 13:43 3558912 c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe
    + 2010-09-01 07:57 . 2010-09-01 07:57 1862144 c:\windows\$hf_mig$\KB981957\SP3QFE\win32k.sys
    + 2010-08-12 15:52 . 2010-04-28 05:18 2192384 c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
    + 2010-08-12 15:52 . 2010-04-28 05:18 2027008 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe
    + 2010-04-28 20:18 . 2010-04-28 20:18 2069248 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
    + 2010-08-12 15:52 . 2010-04-28 05:18 2148864 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe
    + 2010-03-10 04:55 . 2010-03-10 04:55 1509376 c:\windows\$hf_mig$\KB980182\SP3QFE\shdocvw.dll
    + 2010-02-26 05:39 . 2010-02-26 05:39 3094528 c:\windows\$hf_mig$\KB980182\SP3QFE\mshtml.dll
    + 2010-03-10 04:55 . 2010-03-10 04:55 1025024 c:\windows\$hf_mig$\KB980182\SP3QFE\browseui.dll
    + 2010-07-16 11:59 . 2010-07-16 11:59 1288704 c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
    + 2010-04-14 18:13 . 2010-02-16 19:01 2192384 c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
    + 2010-04-14 18:13 . 2010-02-16 19:01 2027008 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrpamp.exe
    + 2010-04-14 18:13 . 2010-02-16 19:01 2069248 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
    + 2010-04-14 18:13 . 2010-02-16 19:01 2148864 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlmp.exe
    + 2010-05-02 08:02 . 2010-05-02 08:02 1860608 c:\windows\$hf_mig$\KB979559\SP3QFE\win32k.sys
    + 2010-01-29 14:54 . 2010-01-29 14:54 1315328 c:\windows\$hf_mig$\KB978542\SP3QFE\msoe.dll
    + 2009-12-22 05:06 . 2009-12-22 05:06 1509376 c:\windows\$hf_mig$\KB978207\SP3QFE\shdocvw.dll
    + 2009-12-22 05:06 . 2009-12-22 05:06 3094528 c:\windows\$hf_mig$\KB978207\SP3QFE\mshtml.dll
    + 2009-12-09 13:33 . 2009-12-09 13:33 2191616 c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
    + 2010-02-10 04:05 . 2009-12-09 10:03 2026496 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrpamp.exe
    + 2009-12-09 13:33 . 2009-12-09 13:33 2068480 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
    + 2010-02-10 04:05 . 2009-12-09 10:03 2147840 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlmp.exe
    + 2010-02-05 18:28 . 2010-02-05 18:28 1292288 c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll
    + 2010-03-10 19:24 . 2009-10-23 14:53 3558912 c:\windows\$hf_mig$\KB975561\SP3QFE\moviemk.exe
    + 2009-11-27 17:24 . 2009-11-27 17:24 1292288 c:\windows\$hf_mig$\KB975560\SP3QFE\quartz.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 1509888 c:\windows\$hf_mig$\KB2360131\SP3QFE\shdocvw.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 3095552 c:\windows\$hf_mig$\KB2360131\SP3QFE\mshtml.dll
    + 2010-09-09 14:24 . 2010-09-09 14:24 1025024 c:\windows\$hf_mig$\KB2360131\SP3QFE\browseui.dll
    + 2010-07-27 06:29 . 2010-07-27 06:29 8467456 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 1509376 c:\windows\$hf_mig$\KB2183461\SP3QFE\shdocvw.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 3094528 c:\windows\$hf_mig$\KB2183461\SP3QFE\mshtml.dll
    + 2010-06-24 12:12 . 2010-06-24 12:12 1025024 c:\windows\$hf_mig$\KB2183461\SP3QFE\browseui.dll
    + 2010-06-24 21:29 . 2010-06-24 21:29 1861376 c:\windows\$hf_mig$\KB2160329\SP3QFE\win32k.sys
    + 2010-06-14 07:40 . 2010-06-14 07:40 1172480 c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll
    - 2004-09-15 04:00 . 2009-07-13 20:43 10841088 c:\windows\system32\wmp.dll
    + 2004-09-15 04:00 . 2010-08-25 20:36 10841088 c:\windows\system32\wmp.dll
    + 2006-09-02 15:38 . 2010-12-15 16:52 37366216 c:\windows\system32\MRT.exe
    + 2004-09-15 04:00 . 2010-08-25 20:36 10841088 c:\windows\system32\dllcache\wmp.dll
    - 2004-09-15 04:00 . 2009-07-13 20:43 10841088 c:\windows\system32\dllcache\wmp.dll
    + 2010-04-02 16:29 . 2010-04-02 16:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp
    + 2010-09-24 11:08 . 2010-09-24 11:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
    + 2010-11-22 09:13 . 2010-11-22 09:13 20303872 c:\windows\Installer\8383d.msp
    + 2010-03-30 22:23 . 2010-03-30 22:23 15638528 c:\windows\Installer\78d06f.msp
    + 2010-05-11 08:30 . 2010-05-11 08:30 11194880 c:\windows\Installer\712378.msp
    + 2010-04-02 09:30 . 2010-04-02 09:30 17456640 c:\windows\Installer\71236e.msp
    + 2010-04-11 19:17 . 2010-04-11 19:17 14599680 c:\windows\Installer\71234d.msp
    + 2010-09-24 04:08 . 2010-09-24 04:08 17518080 c:\windows\Installer\62a8cd.msp
    + 2010-05-19 10:08 . 2010-05-19 10:08 11408896 c:\windows\Installer\54cca7.msp
    + 2010-10-14 14:57 . 2010-10-14 14:57 11189248 c:\windows\Installer\29b7f8.msp
    + 2010-12-18 19:28 . 2010-12-18 19:28 20304384 c:\windows\Installer\2468bff.msp
    + 2010-08-12 18:43 . 2010-08-12 18:43 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
    + 2010-10-09 17:36 . 2010-10-09 17:36 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\75aeb590008d6e166f7be18f935c52d2\System.ServiceModel.ni.dll
    + 2010-10-09 05:52 . 2010-10-09 05:52 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\fdc42078fd10e4dc8b05087900c63977\System.Design.ni.dll
    + 2010-08-12 17:22 . 2010-08-12 17:22 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll
    + 2010-08-12 17:21 . 2010-08-12 17:21 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll
    + 2010-08-12 17:19 . 2010-08-12 17:19 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll
    + 2010-10-15 16:48 . 2009-07-13 20:43 10841088 c:\windows\$NtUninstallKB2378111_WM9$\wmp.dll
    .
    -- Snapshot nollattu tähän hetkeen --
    .
    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
    "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-11-10 249856]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
    "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
    "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]
    "osCheck"="c:\program files\Norton Internet Security\osCheck.exe" [2007-08-24 714608]
    "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
    "QuickTime Task"="c:\program files\QuickTime Alternative\qttask.exe" [2007-10-19 286720]
    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-30 202256]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

    c:\documents and settings\Default User\K„ynnist„-valikko\Ohjelmat\K„ynnistys\
    Pin.lnk - c:\hp\bin\CLOAKER.EXE [2005-1-2 27136]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Vuze\\Azureus.exe"=
    "c:\\Documents and Settings\\Everton\\Työpöytä\\spotify.exe"=

    R2 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [24.8.2007 23:07 149352]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [27.5.2010 19:28 102448]
    S2 Automaattinen LiveUpdate-ajastustoiminto;Automaattinen LiveUpdate-ajastustoiminto;c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe [23.8.2007 14:35 243064]
    S2 gupdate1cad013b13a9826;Google-päivityspalvelu (gupdate1cad013b13a9826);c:\program files\Google\Update\GoogleUpdate.exe [30.3.2010 16:16 133104]
    S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [29.5.2007 14:55 23888]
    S3 stusb2ir;USB 2.0 IrDA Bridge;c:\windows\system32\drivers\stusb2ir.sys [1.12.2007 23:03 40856]
    S3 TFBULK;Topfield USB client driver;c:\windows\system32\drivers\TfBulk.sys [26.8.2003 7:11 41996]
    S3 TridVid;Trident Analog Video;c:\windows\system32\drivers\TridVid.sys [26.2.2010 17:27 201216]
    S4 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe --> c:\program files\AskBarDis\bar\bin\AskService.exe [?]
    S4 ASKUpgrade;ASKUpgrade;c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe --> c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe [?]
    S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [4.12.2009 19:17 691696]

    --- Muut muistissa olevat ajurit/palvelut ---

    *NewlyCreated* - COMHOST
    .
    'Ajoitetut tehtävät'-kansion sisältö

    2010-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 11:57]

    2010-12-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-30 14:16]

    2010-12-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-30 14:16]

    2010-12-20 c:\windows\Tasks\Norton Internet Security - Suorita täysi järjestelmäntarkistus - Everton.job
    - c:\program files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2007-08-26 17:19]

    2010-12-22 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1008.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 19:09]

    2010-12-22 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1009.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 19:09]

    2010-11-12 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1008.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 19:09]

    2010-12-18 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1009.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 19:09]
    .
    .
    ------- Täydentävä tarkistus -------
    .
    uStart Page = hxxp://www.soneraplaza.fi
    uInternet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;*.local;<local>
    uInternet Settings,ProxyServer = proxydial.inet.fi:800
    FF - ProfilePath - c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q=
    FF - Ext: Ask Toolbar for Firefox: {E9A1DEE0-C623-4439-8932-001E7D17607D} - %profile%\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
    FF - Ext: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - %profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-12-22 19:53
    Windows 5.1.2600 Service Pack 3 NTFS

    tarkistaa piilotettuja prosesseja ...

    tarkistaa piilotettuja käynnistysarvoja ...

    tarkistaa piilotettuja tiedostoja ...

    tarkistus on valmis
    piilotetut tiedostot: 0

    **************************************************************************
    .
    --------------------- LUKITUT REKISTERIAVAIMET ---------------------

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\EN]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\FR]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Services en ligne"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\MX]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Servicios en línea"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\NL]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\NW]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online tjenster"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\SP]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Servicios en línea"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\SW]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online tjänster"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\UK]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\US]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\ADE]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\Columns]
    @DACL=(02 0000)
    "ColCount"=dword:00000007
    "SortFieldTag"=dword:00000004
    "Sort00"=dword:00000000
    "Column00Tag"=dword:00000004
    "Column00Group"=dword:00000001
    "Column00Width"=dword:00000064
    "Sort01"=dword:00000001
    "Column01Tag"=dword:00000009
    "Column01Group"=dword:00000001
    "Column01Width"=dword:00000064
    "Sort02"=dword:00000002
    "Column02Tag"=dword:00000028
    "Column02Group"=dword:00000003
    "Column02Width"=dword:00000064
    "Sort03"=dword:00000003
    "Column03Tag"=dword:0000000a
    "Column03Group"=dword:00000001
    "Column03Width"=dword:00000064
    "Sort04"=dword:00000004
    "Column04Tag"=dword:0000002b
    "Column04Group"=dword:00000003
    "Column04Width"=dword:00000064
    "Sort05"=dword:00000005
    "Column05Tag"=dword:00000013
    "Column05Group"=dword:00000002
    "Column05Width"=dword:00000064
    "Sort06"=dword:00000006
    "Column06Tag"=dword:00000015
    "Column06Group"=dword:00000002
    "Column06Width"=dword:00000064

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\Editors]
    @DACL=(02 0000)
    @="ACDSee"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\en]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\QuickView]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\TPColumns]
    @DACL=(02 0000)
    "Column00Width"=dword:00000064
    "Column01Width"=dword:00000064
    "Column02Width"=dword:00000064
    "Column03Width"=dword:00000064
    "Column04Width"=dword:00000064
    "Column05Width"=dword:00000064
    "Column06Width"=dword:00000064

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Google\NavClient]
    @DACL=(02 0000)
    @SACL=

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\EqualizerSettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\HME]
    @DACL=(02 0000)
    "LocalLibraryID"="{994CA114-33AD-4F2B-AB99-C03D9382466D}"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\ProxySettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\VideoSettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\{7aa92cfa-39c3-11db-9ab0-806d6172696f}]
    @DACL=(02 0000)
    "CDReadRate"=hex:c8,ac,e1,40

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop]
    @DACL=(02 0000)
    @SACL=
    "Toolbars"=hex:11,00,00,00,00,00,00,00
    "TaskbarWinXP"=hex:0c,00,00,00,08,00,00,00,02,00,00,00,00,00,00,00,aa,4f,28,68,
    48,6a,d0,11,8c,78,00,c0,4f,d9,18,b4,18,02,00,00,60,0d,00,00,00,00,00,00,16,\
    "Upgrade"=dword:00000001

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\Windows\Shell\Bags\1]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Classes\adc\Shell]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92}\InprocServer32]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Classes\dchub\Shell]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Cygnus Solutions\Cygwin]
    @Class="cygnus"
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\Browser]
    @DACL=(02 0000)
    @SACL=
    "IE"="0"
    "Netscape"="0"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\BWOPT]
    @DACL=(02 0000)
    @SACL=
    "bwsupport"="1"
    "bwoffers"="0"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\HPSU]
    @DACL=(02 0000)
    @SACL=
    "OptInPath"="c:\\hp\\bin\\cloaker.exe"
    "OptInCmdLine"="c:\\hp\\drivers\\hpsu\\HPSU_optin.bat"
    "OptOutPath"="c:\\hp\\bin\\cloaker.exe"
    "OptOutCmdLine"="c:\\hp\\drivers\\hpsu\\HPSU_optout.bat"
    "hpsulaunch"="1"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\NIS]
    @DACL=(02 0000)
    @SACL=
    "NISRun"="0"
    "NISPath"="c:\\windows\\system32\\pcintro\\autorun.exe"
    "NISCmdLine"="security.cmd"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IEHomePageInfo\RegBackup]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\10.0]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\7.0]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\services]
    @DACL=(02 0000)
    @SACL=
    "NoServices"=dword:00000000

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\Settings]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\�•€|ÿÿÿÿ"•€|þ»Ów*]
    "b049C053C7D38EE4AB9A00CB3B5D2472"="C?\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\PUBPLACE.HTT"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwFlash]
    @DACL=(02 0000)
    @SACL=
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\Nullsoft\Winamp]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Realtek\AlcMonitor]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Answer]
    @DACL=(02 0000)
    "1"="ATA<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Hangup]
    @DACL=(02 0000)
    "1"="ATH<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Init]
    @DACL=(02 0000)
    "1"="ATQ0E0V1<cr>"
    "2"="AT&C1&D2<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Monitor]
    @DACL=(02 0000)
    "1"="ATS0=0<cr>"
    "2"="None"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Settings]
    @DACL=(02 0000)
    "Prefix"="AT"
    "Terminator"="<cr>"
    "DialPrefix"="D"
    "Pulse"="P"
    "Tone"="T"
    "FlowControl_Off"=""
    "FlowControl_Hard"=""
    "FlowControl_Soft"=""
    .
    --------------------- Prosesseihin ladatut DLLt ---------------------

    - - - - - - - > 'winlogon.exe'(688)
    c:\windows\system32\Ati2evxx.dll
    .
    Valmistumisajankohta: 2010-12-22 19:55:21
    ComboFix-quarantined-files.txt 2010-12-22 17:55
    ComboFix2.txt 2010-01-05 15:07
    ComboFix3.txt 2009-10-27 15:27

    Ennen ajoa: 113 062 793 216 tavua vapaana
    Ajon jälkeen: 114 264 469 504 tavua vapaana

    - - End Of File - - 17CA8BB2BD43D7718ED1D65CAB6C5930
     
    Mintsu, Dec 22, 2010
    #6
  7. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    .
    Se Firefoxin herja =>

    Katso onko koneellasi tuo tiedosto allaolevan kokoisena (kerro) ???
    C:/Program Files/Mozilla Firefox/components/nsExtensionManager.js
    Onko koneellasi vielä StarOffice ohjelmisto ???

    nsExtensionManager.js
    Tuote: StarOffice
    Koko: 173.12 KB (177271 bytes)
    MD5: 930CAF4EF70B615C511DCD9F5D8B86D9

    ----------------------------------------------------------------

    Avaa Muistio ja kopioi/liitä Lainaus: laatikon sisältö sinne:

    Code:
    File::
c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1008.job
c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1009.job 
c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1008.job 
c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1009.job
Folder::
c:\program files\AskBardis
Firefox::
FF - ProfilePath - c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\ 
FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q=
FF - Ext: Ask Toolbar for Firefox: {E9A1DEE0-C623-4439-8932-001E7D17607D} - %profile%\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
FF - Ext: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - %profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    Tallenna nimellä CFScript (itse asiassa combofix tunnistaa tuon vaikka tiedostopääte ei olisi
    edes .txt).

    * Sulje/ota pois päältä kaikki virustorjunta- ja haittaohjelmien poisto-ohjelmat, jotta ne eivät häiritse ComboFixin ajoa.
    * Ei palomuuria.

    Sitten raahaa ja pudota CFScript ComboFix.exeen kuten alla.(Älä klikkaa)

    [​IMG]

    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
    Käynnistä kone uudelleen, jos niin pyydetään ja lähetä combofix.txt-tiedoston sisältö tänne.

    Lähetä =>
    (C:\ComboFix.txt)
    Mitä nyt herjailee ???
    :)
     
    kalminen, Dec 23, 2010
    #7
  8. Mintsu

    Mintsu Regular member

    Joined:
    Oct 1, 2006
    Messages:
    161
    Likes Received:
    0
    Trophy Points:
    26
    Elikkäs..

    Jos nyt tajusin oikein mitä piti tarkistaa, niin tuon C:/Program Files/Mozilla Firefox/components/nsExtensionManager.js koko näyttää olevan 311 kt

    "Onko koneellasi vielä StarOffice ohjelmisto ???" Eikä koneella ole tämmöstä ohjelmistoa (tai en ainakaan löydä sitä..)

    Ja tässä tämä file taas:

    ComboFix 10-12-21.05 - HP_Omistaja 23.12.2010 21:09:23.5.1 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.358.1035.18.1534.1019 [GMT 2:00]
    Sijainti: c:\documents and settings\HP_Omistaja\Omat tiedostot\Downloads\ComboFix.exe
    Käytetyt komentorivivalitsimet :: c:\documents and settings\HP_Omistaja\Työpöytä\CFScript.txt
    AV: Norton Internet Security *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *Disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

    FILE ::
    "c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1008.job"
    "c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1009.job"
    "c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1008.job"
    "c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1009.job"
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\chrome.manifest
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\chrome\vuze_remote.jar
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\ConduitAutoCompleteSearch.js
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\ConduitAutoCompleteSearch.xpt
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\ConduitToolbar.idl
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\ConduitToolbar.js
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\ConduitToolbar.xpt
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\FFExternalAlert.dll
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\FFExternalAlert.xpt
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCore.dll
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCore.xpt
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\defaults\default_radio_skin.xml
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\defaults\fbAlert.js
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\install.rdf
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\lib\xpcom.js
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\META-INF\manifest.mf
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\META-INF\zigbert.rsa
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\META-INF\zigbert.sf
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\searchplugin\conduit.gif
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\searchplugin\conduit.ico
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\searchplugin\conduit.PNG
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\searchplugin\conduit.src
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\searchplugin\conduit.xml
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\setup.ini
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\version.txt
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest.dev
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome\ajtoolbar.jar
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.gif
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.src
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat.bak
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\contents.rdf
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\snipit.js
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf.bak
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\manifest.mf
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.rsa
    c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.sf
    c:\program files\AskBardis
    c:\program files\AskBardis\bar\Settings\prevCfg2.htm
    c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\icon.png
    c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\install.rdf
    c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\preview.png
    c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1008.job
    c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1272536644-464686433-2415924820-1009.job
    c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1008.job
    c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1272536644-464686433-2415924820-1009.job

    .
    ((((((((((((((((((((((((((((((((((((((( Ajurit/Palvelut )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_ASKService
    -------\Legacy_ASKUpgrade
    -------\Service_ASKService
    -------\Service_ASKUpgrade


    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2010-11-23 to 2010-12-23 )))))))))))))))))
    .

    2010-12-20 17:16 . 2010-12-20 17:16 -------- d-----w- C:\1856292378b5fe3d19
    2010-12-13 06:33 . 2010-12-13 06:33 1409 ----a-w- c:\windows\QTFont.for

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-11-18 18:15 . 2004-09-15 04:00 86016 ----a-w- c:\windows\system32\isign32.dll
    2010-11-05 05:01 . 2004-09-15 04:00 667136 ----a-w- c:\windows\system32\wininet.dll
    2010-11-05 05:01 . 2004-09-15 04:00 61952 ----a-w- c:\windows\system32\tdc.ocx
    2010-11-05 05:01 . 2004-09-15 04:00 81920 ----a-w- c:\windows\system32\ieencode.dll
    2010-11-05 04:59 . 2004-09-15 04:00 370688 ----a-w- c:\windows\system32\html.iec
    2010-11-02 15:17 . 2004-09-15 04:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
    2010-10-28 13:08 . 2004-09-15 04:00 290048 ----a-w- c:\windows\system32\atmfd.dll
    2010-10-26 13:58 . 2004-09-15 04:00 1853568 ----a-w- c:\windows\system32\win32k.sys
    2009-04-04 16:14 . 2009-04-04 16:14 2496707 ----a-w- c:\program files\vsoDivxToDVD_setup_v0.5.2b.exe
    2008-08-16 12:25 . 2008-08-16 12:25 9239213 ----a-w- c:\program files\AutoGordianKnot.2.45.Setup.exe
    2008-06-10 18:41 . 2008-06-10 18:41 1495112 ----a-w- c:\program files\install_flash_player.exe
    2007-11-29 17:22 . 2007-11-29 17:20 13793865 ----a-w- c:\program files\acdsee-9-0-108-en-update.exe
    2007-11-29 17:20 . 2007-11-29 17:19 8608465 ----a-w- c:\program files\acdsee-10-0-238-en-update.exe
    2007-09-20 17:36 . 2007-09-20 17:08 51422520 ----a-w- c:\program files\iTunes742Setup.exe
    2007-07-08 00:37 . 2009-10-22 14:49 812344 ----a-w- c:\program files\HJTInstall.exe
    2007-07-06 20:06 . 2007-07-06 20:04 1014730 ----a-w- c:\program files\PowerISO37.exe
    2007-06-24 20:41 . 2007-06-24 20:40 5638544 ----a-w- c:\program files\DVDAuthorGUI_1.013.exe
    2007-04-20 19:54 . 2007-04-20 19:54 0 ----a-w- c:\program files\QuickTimeInstaller.exe
    2007-04-07 14:44 . 2007-04-07 14:44 232592 ----a-w- c:\program files\l3codecx.exe
    2007-04-07 13:03 . 2007-04-07 13:03 2000324 ----a-w- c:\program files\cdex_151.exe
    2007-03-05 14:52 . 2007-03-05 14:53 288640 ----a-w- c:\program files\dxwebsetup.exe
    2007-02-25 13:29 . 2006-11-25 23:04 25754696 ----a-w- c:\program files\wmp11-windowsxp-x86-FI-FI.exe
    2007-02-25 13:18 . 2007-02-25 13:18 878896 ----a-w- c:\program files\WGAPluginInstall.exe
    2007-02-15 16:42 . 2007-02-15 16:42 1727591 ----a-w- c:\program files\on2_vp7_personal_edition.exe
    2007-01-24 17:51 . 2007-01-24 17:50 3513168 ----a-w- c:\program files\sp26752.exe
    2007-01-07 13:51 . 2007-01-07 13:51 6285558 ----a-w- c:\program files\divx-to-dvd-converter.exe
    2006-12-28 19:28 . 2006-12-28 19:26 16198952 ----a-w- c:\program files\Install_Messenger.exe
    2006-12-09 11:14 . 2006-12-09 11:12 12684992 ----a-w- c:\program files\winamp532_full_bundle_emusic-7plus.exe
    2006-11-30 18:17 . 2006-11-30 18:17 2987935 ----a-w- c:\program files\swf2avi.exe
    2006-11-30 18:11 . 2006-11-30 18:11 2388240 ----a-w- c:\program files\RivaFLVPlayerSetup.exe
    2006-11-30 06:46 . 2006-11-30 06:46 3513168 ----a-w- c:\program files\Näppis.exe
    2006-11-25 16:19 . 2006-11-25 16:19 3250296 ----a-w- c:\program files\Ifi-OrderClient-FI.exe
    2006-11-20 19:09 . 2007-02-11 09:17 6326784 ----a-w- c:\program files\DVRMSToolbox1103.msi
    2006-10-20 06:58 . 2007-04-05 21:08 7137 ----a-w- c:\program files\FlashPlayer9.reg
    2006-06-23 22:50 . 2007-04-07 14:19 2434406 ----a-w- c:\program files\cdex_170b2_enu.exe
    2006-03-19 13:37 . 2007-06-24 19:23 8448 ----a-w- c:\program files\ac3.bin
    2005-11-05 08:15 . 2007-04-05 21:08 298 ----a-w- c:\program files\FixAddRemove.reg
    2005-08-25 20:17 . 2006-12-03 16:29 929280 ----a-w- c:\program files\VirtualDubMod.exe
    2005-08-25 20:10 . 2006-12-03 16:29 9804 ----a-w- c:\program files\vdremote.dll
    2005-08-25 20:10 . 2006-12-03 16:29 11340 ----a-w- c:\program files\vdicmdrv.dll
    2005-08-25 20:10 . 2006-12-03 16:29 40960 ----a-w- c:\program files\AuxSetup.exe
    2005-08-25 20:09 . 2006-12-03 16:29 7244 ----a-w- c:\program files\vdsvrlnk.dll
    2004-10-25 16:11 . 2006-12-03 16:20 374340 ----a-w- c:\program files\TMPGEnc.vfp
    2004-10-25 16:10 . 2006-12-03 16:20 155648 ----a-w- c:\program files\Resample.dll
    2004-10-25 16:10 . 2006-12-03 16:20 147543 ----a-w- c:\program files\P4Package.dll
    2004-10-25 16:10 . 2006-12-03 16:20 135255 ----a-w- c:\program files\P3Package.dll
    2004-07-26 00:16 . 2007-06-25 13:28 1117491 ----a-w- c:\program files\dvdshrink32setup.exe
    2004-05-25 23:16 . 2006-09-17 11:41 734160 ----a-w- c:\program files\VobSub_2.23.exe
    2004-04-30 14:52 . 2007-06-12 19:37 1707042 ----a-w- c:\program files\Topfield Windows Applications Setup.exe
    2004-03-22 18:07 . 2007-06-12 19:20 380928 ----a-w- c:\program files\Altair_1.250.exe
    2004-03-22 17:53 . 2007-06-12 19:20 135168 ----a-w- c:\program files\TfDll.dll
    2004-03-19 11:53 . 2006-12-02 15:09 1107022 ----a-w- c:\program files\SubtitleWorkshop251.exe
    2003-08-26 11:11 . 2007-06-12 19:20 41996 ----a-w- c:\program files\TfBulk.sys
    2003-08-06 20:55 . 2007-12-25 17:36 379325 ----a-w- c:\program files\Deathproof.exe
    2003-04-25 22:29 . 2006-12-03 16:29 146944 ----a-w- c:\program files\SciLexer.dll
    2003-03-11 21:50 . 2006-12-03 16:29 48640 ----a-w- c:\program files\vorbis.dll
    2003-03-11 21:10 . 2006-12-03 16:29 20992 ----a-w- c:\program files\ogg.dll
    2003-03-10 15:42 . 2006-12-03 16:29 125440 ----a-w- c:\program files\corona.dll
    2002-11-14 17:55 . 2006-12-03 16:29 56832 ----a-w- c:\program files\AviSynthLexer.lexer
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
    "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-11-10 249856]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
    "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
    "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]
    "osCheck"="c:\program files\Norton Internet Security\osCheck.exe" [2007-08-24 714608]
    "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
    "QuickTime Task"="c:\program files\QuickTime Alternative\qttask.exe" [2007-10-19 286720]
    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-30 202256]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

    c:\documents and settings\Default User\K„ynnist„-valikko\Ohjelmat\K„ynnistys\
    Pin.lnk - c:\hp\bin\CLOAKER.EXE [2005-1-2 27136]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Vuze\\Azureus.exe"=
    "c:\\Documents and Settings\\Everton\\Työpöytä\\spotify.exe"=

    R2 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [24.8.2007 23:07 149352]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [27.5.2010 19:28 102448]
    S2 Automaattinen LiveUpdate-ajastustoiminto;Automaattinen LiveUpdate-ajastustoiminto;c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe [23.8.2007 14:35 243064]
    S2 gupdate1cad013b13a9826;Google-päivityspalvelu (gupdate1cad013b13a9826);c:\program files\Google\Update\GoogleUpdate.exe [30.3.2010 16:16 133104]
    S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [29.5.2007 14:55 23888]
    S3 stusb2ir;USB 2.0 IrDA Bridge;c:\windows\system32\drivers\stusb2ir.sys [1.12.2007 23:03 40856]
    S3 TFBULK;Topfield USB client driver;c:\windows\system32\drivers\TfBulk.sys [26.8.2003 7:11 41996]
    S3 TridVid;Trident Analog Video;c:\windows\system32\drivers\TridVid.sys [26.2.2010 17:27 201216]
    S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [4.12.2009 19:17 691696]

    --- Muut muistissa olevat ajurit/palvelut ---

    *NewlyCreated* - COMHOST
    .
    'Ajoitetut tehtävät'-kansion sisältö

    2010-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 11:57]

    2010-12-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-30 14:16]

    2010-12-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-30 14:16]

    2010-12-20 c:\windows\Tasks\Norton Internet Security - Suorita täysi järjestelmäntarkistus - Everton.job
    - c:\program files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2007-08-26 17:19]
    .
    .
    ------- Täydentävä tarkistus -------
    .
    uStart Page = hxxp://www.soneraplaza.fi
    uInternet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;;*.local;<local>
    uInternet Settings,ProxyServer = proxydial.inet.fi:800
    FF - ProfilePath - c:\documents and settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\70s58afo.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-12-23 21:17
    Windows 5.1.2600 Service Pack 3 NTFS

    tarkistaa piilotettuja prosesseja ...

    tarkistaa piilotettuja käynnistysarvoja ...

    tarkistaa piilotettuja tiedostoja ...

    tarkistus on valmis
    piilotetut tiedostot: 0

    **************************************************************************
    .
    --------------------- LUKITUT REKISTERIAVAIMET ---------------------

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\EN]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\FR]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Services en ligne"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\MX]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Servicios en línea"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\NL]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\NW]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online tjenster"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\SP]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Servicios en línea"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\SW]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online tjänster"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\UK]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online services"

    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\HP\US]
    @DACL=(02 0000)
    "OnLineServicesDirName"="Online Services"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\ADE]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\Columns]
    @DACL=(02 0000)
    "ColCount"=dword:00000007
    "SortFieldTag"=dword:00000004
    "Sort00"=dword:00000000
    "Column00Tag"=dword:00000004
    "Column00Group"=dword:00000001
    "Column00Width"=dword:00000064
    "Sort01"=dword:00000001
    "Column01Tag"=dword:00000009
    "Column01Group"=dword:00000001
    "Column01Width"=dword:00000064
    "Sort02"=dword:00000002
    "Column02Tag"=dword:00000028
    "Column02Group"=dword:00000003
    "Column02Width"=dword:00000064
    "Sort03"=dword:00000003
    "Column03Tag"=dword:0000000a
    "Column03Group"=dword:00000001
    "Column03Width"=dword:00000064
    "Sort04"=dword:00000004
    "Column04Tag"=dword:0000002b
    "Column04Group"=dword:00000003
    "Column04Width"=dword:00000064
    "Sort05"=dword:00000005
    "Column05Tag"=dword:00000013
    "Column05Group"=dword:00000002
    "Column05Width"=dword:00000064
    "Sort06"=dword:00000006
    "Column06Tag"=dword:00000015
    "Column06Group"=dword:00000002
    "Column06Width"=dword:00000064

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\Editors]
    @DACL=(02 0000)
    @="ACDSee"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\en]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\QuickView]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\ACD Systems\ACDSee\90\TPColumns]
    @DACL=(02 0000)
    "Column00Width"=dword:00000064
    "Column01Width"=dword:00000064
    "Column02Width"=dword:00000064
    "Column03Width"=dword:00000064
    "Column04Width"=dword:00000064
    "Column05Width"=dword:00000064
    "Column06Width"=dword:00000064

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Google\NavClient]
    @DACL=(02 0000)
    @SACL=

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\EqualizerSettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\HME]
    @DACL=(02 0000)
    "LocalLibraryID"="{994CA114-33AD-4F2B-AB99-C03D9382466D}"

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\ProxySettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\VideoSettings]
    @DACL=(02 0000)

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\MediaPlayer\Preferences\{7aa92cfa-39c3-11db-9ab0-806d6172696f}]
    @DACL=(02 0000)
    "CDReadRate"=hex:c8,ac,e1,40

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop]
    @DACL=(02 0000)
    @SACL=
    "Toolbars"=hex:11,00,00,00,00,00,00,00
    "TaskbarWinXP"=hex:0c,00,00,00,08,00,00,00,02,00,00,00,00,00,00,00,aa,4f,28,68,
    48,6a,d0,11,8c,78,00,c0,4f,d9,18,b4,18,02,00,00,60,0d,00,00,00,00,00,00,16,\
    "Upgrade"=dword:00000001

    [HKEY_USERS\S-1-5-21-1272536644-464686433-2415924820-1008\Software\Microsoft\Windows\Shell\Bags\1]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Classes\adc\Shell]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92}\InprocServer32]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Classes\dchub\Shell]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Cygnus Solutions\Cygwin]
    @Class="cygnus"
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\Browser]
    @DACL=(02 0000)
    @SACL=
    "IE"="0"
    "Netscape"="0"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\BWOPT]
    @DACL=(02 0000)
    @SACL=
    "bwsupport"="1"
    "bwoffers"="0"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\HPSU]
    @DACL=(02 0000)
    @SACL=
    "OptInPath"="c:\\hp\\bin\\cloaker.exe"
    "OptInCmdLine"="c:\\hp\\drivers\\hpsu\\HPSU_optin.bat"
    "OptOutPath"="c:\\hp\\bin\\cloaker.exe"
    "OptOutCmdLine"="c:\\hp\\drivers\\hpsu\\HPSU_optout.bat"
    "hpsulaunch"="1"

    [HKEY_LOCAL_MACHINE\software\Hewlett-Packard\cpc\PCINTRO\NIS]
    @DACL=(02 0000)
    @SACL=
    "NISRun"="0"
    "NISPath"="c:\\windows\\system32\\pcintro\\autorun.exe"
    "NISCmdLine"="security.cmd"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IEHomePageInfo\RegBackup]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
    @DACL=(02 0000)
    @SACL=
    "WMPlayer.exe"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\10.0]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\7.0]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\services]
    @DACL=(02 0000)
    @SACL=
    "NoServices"=dword:00000000

    [HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\Settings]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\�•€|ÿÿÿÿ"•€|þ»Ów*]
    "b049C053C7D38EE4AB9A00CB3B5D2472"="C?\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\PUBPLACE.HTT"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwFlash]
    @DACL=(02 0000)
    @SACL=
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\Nullsoft\Winamp]
    @DACL=(02 0000)

    [HKEY_LOCAL_MACHINE\software\Realtek\AlcMonitor]
    @DACL=(02 0000)
    @SACL=

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Answer]
    @DACL=(02 0000)
    "1"="ATA<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Hangup]
    @DACL=(02 0000)
    "1"="ATH<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Init]
    @DACL=(02 0000)
    "1"="ATQ0E0V1<cr>"
    "2"="AT&C1&D2<cr>"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Monitor]
    @DACL=(02 0000)
    "1"="ATS0=0<cr>"
    "2"="None"

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\Settings]
    @DACL=(02 0000)
    "Prefix"="AT"
    "Terminator"="<cr>"
    "DialPrefix"="D"
    "Pulse"="P"
    "Tone"="T"
    "FlowControl_Off"=""
    "FlowControl_Hard"=""
    "FlowControl_Soft"=""
    .
    --------------------- Prosesseihin ladatut DLLt ---------------------

    - - - - - - - > 'winlogon.exe'(692)
    c:\windows\system32\Ati2evxx.dll

    - - - - - - - > 'explorer.exe'(1052)
    c:\windows\system32\WPDShServiceObj.dll
    c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
    c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
    c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_fin.nlr
    c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Muut prosessit ------------------------
    .
    c:\windows\system32\Ati2evxx.exe
    c:\windows\system32\Ati2evxx.exe
    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\windows\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    c:\program files\Canon\CAL\CALMAIN.exe
    c:\windows\system32\wbem\wmiapsrv.exe
    .
    **************************************************************************
    .
    Valmistumisajankohta: 2010-12-23 21:21:17 - kone käynnistettiin uudelleen
    ComboFix-quarantined-files.txt 2010-12-23 19:21
    ComboFix2.txt 2010-12-22 17:55
    ComboFix3.txt 2010-01-05 15:07
    ComboFix4.txt 2009-10-27 15:27

    Ennen ajoa: 114 217 607 168 tavua vapaana
    Ajon jälkeen: 114 111 164 416 tavua vapaana

    - - End Of File - - DA285F23571F862738121D94A8F2438D
     
    Last edited: Dec 23, 2010
    Mintsu, Dec 23, 2010
    #8
  9. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    .
    ************************************************************************

    Kirjoita windowsin käynnistävalikon suorita-kenttään Combofix /uninstall paina OK

    ********************************************************

    Siinä tapauksessa tuon voit käydä poistamassa =>
    C:/Program Files/Mozilla Firefox/components/nsExtensionManager.js

    Vieläkö Mozilla Urputtaa ???
    :)
     
    kalminen, Dec 24, 2010
    #9
  10. Mintsu

    Mintsu Regular member

    Joined:
    Oct 1, 2006
    Messages:
    161
    Likes Received:
    0
    Trophy Points:
    26
    Tehty :) Mozilla ei urputa, mutta ei myöskään avaudu, kun klikkaa kuvaketta..


     
    Mintsu, Dec 26, 2010
    #10
  11. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    .
    Asenna Mozilla uudelleen vanhan päälle
    Tiedot pitäisi säilyä silti.
    :)
     
    kalminen, Dec 26, 2010
    #11
  12. Mintsu

    Mintsu Regular member

    Joined:
    Oct 1, 2006
    Messages:
    161
    Likes Received:
    0
    Trophy Points:
    26
    Ei aukene, vaikka asensin uudelleen =/ Vikasietotilassa ilmeisesti aukenis, tai ainaki siihen tulee tuo aloitusikkuna, missä saa ruksia eri vaihtoehtoja.. Pitääköhän taas poistaa kaikki "ylimääräinen sälä" Tuliketusta? Siilä se joskus tais lähtee toimimaan uudelleen.
     
    Mintsu, Dec 27, 2010
    #12
  13. kalminen

    kalminen Regular member

    Joined:
    May 4, 2007
    Messages:
    3,915
    Likes Received:
    0
    Trophy Points:
    46
    .
    Nämä kasiot pois viimeisenä ennen uuden asennusta

    C:\Program Files\Mozilla Firefox
    C:\Documents and Settings\Käyttäjätunnuksesi\Application Data\Mozilla
    C:\Documents and Settings\Käyttäjätunnuksesi\Local Settings\Application Data\Mozilla

    Tästä vois olla jatkossa apuva =>

    http://www.download.fi/tietoturva/varmuuskopiointi/mozbackup.cfm

    :)
     
    kalminen, Dec 28, 2010
    #13

Share This Page