Ga naar inhoud

Trojaans Paard PSW.Generic9

Erikm
 Delen

Aanbevolen berichten

kape Grootmeester

kape

Geplaatst:
Geplaatst: (aangepast)

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

Folder::

c:\users\Erik\AppData\Roaming\Rowoda

c:\users\Erik\AppData\Roaming\Yhzal

Firefox::

FF - ProfilePath - c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\

FF - prefs.js: browser.search.defaulturl –

FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com

FF - Ext: Bandoo for Firefox: firefox@bandoo.com - %profile%\extensions\firefox@bandoo.com

FF - Ext: Ask Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com

FF - Ext: uTorrentBar_NL Community Toolbar: {87775fdb-6972-41f9-ae51-8326e38cb206} - %profile%\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}

Sla dit bestand op je bureaublad op als CFScript.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht.

aangepast door kape
Link naar reactie
Delen op andere sites
  • Reacties 25
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Populaire dagen

Beste reacties in dit topic

Populaire dagen

Erikm Bijdrager

Erikm

Geplaatst:
  • Auteur
Geplaatst:

Hierbij de nieuwe log van ComboFix. Hij lijkt mij niet heel erg veranderd te zijn...

ComboFix 12-06-14.01 - Erik 14-06-2012 15:56:22.2.2 - x64

Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.4092.2251 [GMT 2:00]

Gestart vanuit: c:\users\Erik\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Erik\Desktop\CFScript.txt

AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

FW: AVG Internet Security 2012 *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}

SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\chrome.manifest

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\chrome\utorrentbar_nl.jar

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitAutoCompleteSearch.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitAutoCompleteSearch.xpt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitToolbar.idl

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitToolbar.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\ConduitToolbar.xpt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\RadioWMPCore.dll

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\RadioWMPCore.xpt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\components\RadioWMPCoreGecko19.dll

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\alertSettingsComponent.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\appContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\engineContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\engineSettings.json

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\fbAlert.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\getAppsContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\postAppsContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\toolbarContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\defaults\unsharedAppsContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\install.rdf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\lib\xpcom.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\META-INF\manifest.mf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\META-INF\zigbert.rsa

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\META-INF\zigbert.sf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.gif

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.ico

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.PNG

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.src

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\searchplugin\conduit.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\setup.ini

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}\version.txt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\chrome.manifest

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\chrome\conduitengine.jar

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitAutoCompleteSearch.xpt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitToolbar.idl

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitToolbar.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\ConduitToolbar.xpt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\RadioWMPCore.dll

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\RadioWMPCore.xpt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\alertSettingsComponent.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\appContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\engineContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\engineSettings.json

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\fbAlert.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\getAppsContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\postAppsContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\toolbarContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\defaults\unsharedAppsContextMenu.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\DualPackage\install.rdf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\install.rdf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\lib\xpcom.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\META-INF\manifest.mf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\META-INF\zigbert.rsa

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\META-INF\zigbert.sf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.gif

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.ico

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.PNG

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.src

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\searchplugin\conduit.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\setup.ini

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\engine@conduit.com\version.txt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\chrome.manifest

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\components\FFPlugin.dll

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\components\FFUtilities.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\components\IFFPlugin.xpt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\components\IFFUtilities.xpt

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\bandoo.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\BandooComponent.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\ComponentContener.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\Events.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\logo.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\overlay.xul

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\content\tools.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\firefox@bandoo.com\install.rdf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome.manifest

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\about.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\about.xul

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\bindings.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\button-bindings.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\cache.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\constants.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\core.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\custom-command-listener.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\dynamic-button-manager.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\dynamic-button.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\events.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\feeds.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\http-headers.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\json.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\lifecycle.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\listeners.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\locale.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\logger.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\network.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\newtab-manager.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\newtab-overlay.xul

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\newtab.html

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\newtab.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\notification-popup-controller.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\notification-popup-ff3.xul

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\notification-popup.xul

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\notification.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\observer.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\options.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\options.xul

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\preferences.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\prefetch.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\ss-popup-bindings.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\suggestions.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\update.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\utilities.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\webframe-bindings.xml

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\webframe-manager.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\widget-controller.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\widget-popup.xul

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\content\widgets.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\ask_16x16.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\ask_32x32.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\ask_browser_ff_chrome.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\asklogo.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\b-p.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\b.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\bg.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\bl-pbl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\bl-pbr.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\bl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\blogs.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\br-pbl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\br-pbr.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\br.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\chevron.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\dictionary.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\globe_18x.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\gripper.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\highlighter_off.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\highlighter_on.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\images.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\l.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-de.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-en.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-es.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-fr.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-it.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-nl.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-pt.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\labels-ru.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-BR.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-DE.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-ES.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-EU.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-FR.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-IT.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-NL.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-RU.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-UK.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\links-US.properties

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\logo_32x32.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\magnify_search.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\maps.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\news.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\newtab.css

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\newtab_bkg.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\newtab_search_bkg.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\notification.css

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\preferences.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\r.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_de.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_es.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_fr.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_it.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_nl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_pl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_pt.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ask_ru.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_cobrand.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_current_site.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_de.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_es.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_fr.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_grey_73x24.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_it.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_nl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_pl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_pt.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\search_ru.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\shopping.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\stocks.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\t-p.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\t.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tl-ptl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tl-ptr.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\toolbar.css

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\toolbar.xul

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tr-ptl.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tr-ptr.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\tr.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\weather.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\web.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\skin\zoomall.png

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\temp\askToolbar.exe

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-09-Jul-2010-09-42-32-GMT\ff-config.zip

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-15-Dec-2010-13-27-23-GMT\ff-config.zip

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\datastore\cache.sqlite

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\defaults.js.bak

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js.bak

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\install.rdf

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1278668551896.html

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1278668557319.html

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1292419637958.html

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1292419642632.html

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\logs\asktb-log-1306767005746.html

c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\extensions\toolbar@ask.com\searchplugins\askcom.xml

c:\users\Erik\AppData\Roaming\Rowoda

c:\users\Erik\AppData\Roaming\Yhzal

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-05-14 to 2012-06-14 ))))))))))))))))))))))))))))))

.

.

2012-06-14 14:06 . 2012-06-14 14:06 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-06-14 14:06 . 2012-06-14 14:06 -------- d-----w- c:\users\Administrator\AppData\Local\temp

2012-06-13 14:41 . 2012-06-13 14:41 -------- d-----w- c:\users\Erik\AppData\Roaming\Malwarebytes

2012-06-13 14:40 . 2012-06-13 14:40 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2012-06-13 14:40 . 2012-06-13 14:40 -------- d-----w- c:\programdata\Malwarebytes

2012-06-13 14:40 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-06-13 13:29 . 2012-06-13 13:29 388096 ----a-r- c:\users\Erik\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-06-13 13:29 . 2012-06-13 13:29 -------- d-----w- c:\program files (x86)\Trend Micro

2012-06-13 13:23 . 2012-06-13 13:23 -------- d-----w- c:\programdata\GFI Software

2012-06-13 13:17 . 2012-04-26 05:34 76288 ----a-w- c:\windows\system32\rdpwsx.dll

2012-06-13 13:17 . 2012-04-26 05:34 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll

2012-06-13 13:17 . 2012-04-26 05:28 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe

2012-06-13 13:16 . 2012-05-04 10:52 5505392 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-06-13 13:16 . 2012-05-04 10:08 3902320 ----a-w- c:\windows\SysWow64\ntoskrnl.exe

2012-06-13 13:16 . 2012-05-04 10:08 3958128 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe

2012-06-13 13:16 . 2012-05-02 05:32 208896 ----a-w- c:\windows\system32\profsvc.dll

2012-06-13 13:16 . 2012-05-15 01:32 3144192 ----a-w- c:\windows\system32\win32k.sys

2012-06-13 13:16 . 2012-04-28 03:50 204800 ----a-w- c:\windows\system32\drivers\rdpwd.sys

2012-06-13 13:16 . 2012-04-07 12:18 3213824 ----a-w- c:\windows\system32\msi.dll

2012-06-13 13:16 . 2012-04-07 11:34 2342400 ----a-w- c:\windows\SysWow64\msi.dll

2012-06-13 13:16 . 2012-04-24 05:59 1460224 ----a-w- c:\windows\system32\crypt32.dll

2012-06-13 13:16 . 2012-04-24 04:47 1156608 ----a-w- c:\windows\SysWow64\crypt32.dll

2012-06-13 13:16 . 2012-04-24 05:59 182272 ----a-w- c:\windows\system32\cryptsvc.dll

2012-06-13 13:15 . 2012-04-24 05:59 140288 ----a-w- c:\windows\system32\cryptnet.dll

2012-06-13 13:15 . 2012-04-24 04:47 139264 ----a-w- c:\windows\SysWow64\cryptsvc.dll

2012-06-13 13:15 . 2012-04-24 04:47 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll

2012-06-11 12:59 . 2012-06-11 12:59 -------- d-----w- c:\users\Erik\AppData\Roaming\AVG2012

2012-06-11 12:59 . 2012-06-11 12:59 -------- d-----w- c:\users\Erik\AppData\Local\AVG Secure Search

2012-06-11 12:58 . 2012-06-11 12:59 -------- d-----w- c:\programdata\AVG Secure Search

2012-06-11 12:58 . 2012-06-11 12:58 -------- d-----w- c:\program files (x86)\Common Files\AVG Secure Search

2012-06-11 12:58 . 2012-06-11 12:59 -------- d-----w- c:\program files (x86)\AVG Secure Search

2012-06-11 12:56 . 2012-06-14 13:49 -------- d-----w- c:\windows\system32\drivers\AVG

2012-06-11 12:56 . 2012-06-11 13:14 -------- d-----w- c:\programdata\AVG2012

2012-06-11 12:37 . 2012-06-14 13:50 -------- d-----w- c:\programdata\MFAData

2012-06-10 18:26 . 2012-06-10 18:26 -------- d-----w- c:\users\Erik\AppData\Local\adaware

2012-06-10 18:24 . 2012-06-10 18:24 -------- d-----w- c:\programdata\Lavasoft

2012-06-10 18:23 . 2012-06-13 13:23 -------- d-----w- c:\program files (x86)\Ad-Aware Antivirus

2012-06-10 18:22 . 2012-06-10 18:26 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection

2012-06-10 18:22 . 2012-06-10 18:22 -------- d-----w- c:\program files (x86)\Toolbar Cleaner

2012-06-10 18:22 . 2012-06-10 18:22 -------- d-----w- c:\program files (x86)\adawaretb

2012-06-10 18:19 . 2012-06-10 22:24 -------- d-----w- c:\users\Erik\AppData\Roaming\Ad-Aware Antivirus

2012-06-09 10:14 . 2012-06-09 10:16 -------- d-----w- c:\users\Erik\AppData\Roaming\matrixCache11

2012-06-08 14:59 . 2012-05-08 17:02 8955792 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{39AAABF1-2C9B-49D1-A41B-9E05587D2894}\mpengine.dll

2012-06-02 18:41 . 2012-06-02 18:41 -------- d-----w- c:\program files (x86)\Microsoft Games

2012-06-01 14:58 . 2012-06-01 14:58 -------- d-----w- c:\program files (x86)\Common Files\Java

2012-06-01 14:58 . 2012-06-01 14:58 -------- d-----w- c:\program files (x86)\Oracle

2012-06-01 14:57 . 2012-04-04 16:47 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2012-05-25 14:21 . 2012-05-25 14:21 -------- d-----w- c:\program files (x86)\Common Files\Skype

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-04-19 02:50 . 2012-04-19 02:50 28480 ----a-w- c:\windows\system32\drivers\avgidsha.sys

2012-04-04 16:47 . 2010-04-30 06:48 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll

2012-03-30 11:09 . 2012-05-09 18:32 1895280 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-03-19 03:17 . 2012-03-19 03:17 383808 ----a-w- c:\windows\system32\drivers\avgtdia.sys

2012-03-17 07:55 . 2012-05-09 18:32 75632 ----a-w- c:\windows\system32\drivers\partmgr.sys

2012-03-16 14:54 . 2011-12-14 15:37 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2011-03-24 13:51 . 2011-03-24 13:51 40445 ----a-w- c:\program files (x86)\uninstall.exe

2010-06-15 01:54 . 2010-06-15 01:54 153008 ----a-w- c:\program files (x86)\fraps64.dll

2010-06-15 01:54 . 2010-06-15 01:54 206768 ----a-w- c:\program files (x86)\fraps32.dll

2010-06-15 01:54 . 2010-06-15 01:54 74672 ----a-w- c:\program files (x86)\fraps64.dat

2010-06-15 01:54 . 2010-06-15 01:54 2320304 ----a-w- c:\program files (x86)\fraps.exe

2010-06-15 01:46 . 2010-06-15 01:46 163840 ----a-w- c:\program files (x86)\frapslcd.dll

.

.

((((((((((((((((((((((((((((( SnapShot@2012-06-13_17.40.13 )))))))))))))))))))))))))))))))))))))))))

.

+ 2012-06-13 19:58 . 2012-05-17 22:25 73216 c:\windows\SysWOW64\mshtmled.dll

+ 2012-06-13 19:58 . 2012-05-17 22:31 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll

- 2012-04-11 19:09 . 2012-02-28 01:08 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll

- 2012-04-11 19:09 . 2012-02-28 01:08 65024 c:\windows\SysWOW64\jsproxy.dll

+ 2012-06-13 19:58 . 2012-05-17 22:31 65024 c:\windows\SysWOW64\jsproxy.dll

+ 2009-07-14 04:54 . 2012-06-14 13:45 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2009-07-14 04:54 . 2012-06-13 13:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2009-07-14 04:54 . 2012-06-13 13:04 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2009-07-14 04:54 . 2012-06-14 13:45 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-07-14 04:54 . 2012-06-13 13:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2009-07-14 04:54 . 2012-06-14 13:45 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2009-11-27 20:57 . 2012-06-14 14:10 83342 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2009-07-14 05:10 . 2012-06-14 14:10 67568 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

+ 2010-02-04 23:26 . 2012-06-14 13:48 30886 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3138168355-341146757-651766743-1001_UserData.bin

+ 2012-06-13 19:58 . 2012-05-18 01:51 96768 c:\windows\system32\mshtmled.dll

+ 2012-06-13 19:58 . 2012-05-18 01:56 86528 c:\windows\system32\migration\WininetPlugin.dll

- 2012-04-11 19:09 . 2012-02-28 06:47 86528 c:\windows\system32\migration\WininetPlugin.dll

+ 2012-06-13 19:58 . 2012-05-18 01:56 85504 c:\windows\system32\jsproxy.dll

- 2012-04-11 19:09 . 2012-02-28 06:47 85504 c:\windows\system32\jsproxy.dll

+ 2009-07-14 04:46 . 2012-06-14 13:48 78344 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat

- 2012-05-09 20:08 . 2012-05-09 20:08 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

- 2012-05-09 20:08 . 2012-05-09 20:08 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

+ 2012-06-14 14:01 . 2012-06-14 14:01 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\86b25cd3802c2b6b36ed86d5c0500505\WindowsLiveWriter.ni.exe

+ 2012-06-14 14:02 . 2012-06-14 14:02 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\febee1108905a882d857ac65c80d41f3\WindowsLive.Writer.Api.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\f5c5517bf252bf6c4d8de833d2111309\System.Web.DynamicData.Design.ni.dll

- 2012-06-13 17:39 . 2012-06-13 17:39 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2012-06-14 14:08 . 2012-06-14 14:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2012-06-14 14:08 . 2012-06-14 14:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

- 2012-06-13 17:39 . 2012-06-13 17:39 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2012-06-13 19:58 . 2012-05-17 22:33 231936 c:\windows\SysWOW64\url.dll

- 2012-04-11 19:09 . 2012-02-28 01:09 231936 c:\windows\SysWOW64\url.dll

+ 2012-06-13 19:58 . 2012-05-17 22:29 716800 c:\windows\SysWOW64\jscript.dll

- 2012-04-11 19:09 . 2012-02-28 01:06 716800 c:\windows\SysWOW64\jscript.dll

+ 2012-06-13 19:58 . 2012-05-17 22:29 142848 c:\windows\SysWOW64\ieUnatt.exe

- 2012-03-02 20:14 . 2012-03-02 20:14 142848 c:\windows\SysWOW64\ieUnatt.exe

- 2012-04-11 19:09 . 2012-02-28 00:59 176640 c:\windows\SysWOW64\ieui.dll

+ 2012-06-13 19:58 . 2012-05-17 22:20 176640 c:\windows\SysWOW64\ieui.dll

- 2012-04-11 19:09 . 2012-02-28 06:48 237056 c:\windows\system32\url.dll

+ 2012-06-13 19:58 . 2012-05-18 01:58 237056 c:\windows\system32\url.dll

- 2009-11-28 05:38 . 2012-06-10 22:32 711900 c:\windows\system32\perfh013.dat

+ 2009-11-28 05:38 . 2012-06-13 20:08 711900 c:\windows\system32\perfh013.dat

- 2009-07-14 02:36 . 2012-06-10 22:32 625010 c:\windows\system32\perfh009.dat

+ 2009-07-14 02:36 . 2012-06-13 20:08 625010 c:\windows\system32\perfh009.dat

- 2009-11-28 05:38 . 2012-06-10 22:32 138718 c:\windows\system32\perfc013.dat

+ 2009-11-28 05:38 . 2012-06-13 20:08 138718 c:\windows\system32\perfc013.dat

+ 2009-07-14 02:36 . 2012-06-13 20:08 110648 c:\windows\system32\perfc009.dat

- 2009-07-14 02:36 . 2012-06-10 22:32 110648 c:\windows\system32\perfc009.dat

+ 2012-06-13 19:58 . 2012-05-18 01:55 818688 c:\windows\system32\jscript.dll

- 2012-04-11 19:09 . 2012-02-28 06:45 818688 c:\windows\system32\jscript.dll

+ 2012-06-13 19:58 . 2012-05-18 01:55 173056 c:\windows\system32\ieUnatt.exe

- 2012-03-02 20:14 . 2012-03-02 20:14 173056 c:\windows\system32\ieUnatt.exe

- 2012-04-11 19:09 . 2012-02-28 06:39 248320 c:\windows\system32\ieui.dll

+ 2012-06-13 19:58 . 2012-05-18 01:47 248320 c:\windows\system32\ieui.dll

+ 2009-07-14 04:45 . 2012-06-14 13:45 440584 c:\windows\system32\FNTCACHE.DAT

- 2009-07-14 04:45 . 2012-06-03 08:49 440584 c:\windows\system32\FNTCACHE.DAT

- 2009-07-14 05:01 . 2012-06-13 17:38 401944 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2009-07-14 05:01 . 2012-06-14 14:07 401944 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2012-04-21 09:03 . 2012-04-21 09:03 616024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll

+ 2012-06-13 13:17 . 2012-04-23 22:38 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll

- 2012-04-11 12:35 . 2012-01-26 23:32 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll

+ 2012-04-21 09:03 . 2012-04-21 09:03 616024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll

+ 2012-06-13 13:17 . 2012-04-23 22:37 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll

- 2012-04-11 12:35 . 2012-01-26 23:35 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\84cf60f1e403f10f44055b3d319aa79c\System.ServiceProcess.ni.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\5f4314268d576f7c0052b9008a6830d9\System.Messaging.ni.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\52792a7ce63196551c29f5201562c1ae\System.Configuration.Install.ni.dll

+ 2012-06-13 20:07 . 2012-06-13 20:07 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\58441b4216f3051caa7041fa1cd9476d\Microsoft.VisualBasic.Compatibility.Data.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\44752ffa92ebb7170951a41898d8b9c6\WindowsFormsIntegration.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\5552b27237c3dbe4f21a10e97adf2edc\System.ServiceProcess.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\a730931e386537e3c229e049c9a6d271\System.Messaging.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c7d60a49e43964b1ae17e9a080376c6d\System.Configuration.Install.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\8cc4dd9babffe370cf375925fba15f84\Microsoft.VisualBasic.Compatibility.Data.ni.dll

+ 2012-06-14 13:50 . 2012-06-14 13:50 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\993018172a83c2431adeb6a309aa27cf\System.ServiceProcess.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\984398a06970ec18178ddf072de6167e\System.Messaging.ni.dll

+ 2012-06-14 13:50 . 2012-06-14 13:50 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\a650d1b1ee920b0fecfe5e8342217265\System.Drawing.Design.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\3266ef1067584da5503061cb4c694b82\ehExtHost.ni.exe

+ 2012-06-14 14:03 . 2012-06-14 14:03 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\b4339d59d892015b9b85f45da5405968\WindowsLiveLocal.WriterPlugin.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cab30ee882d32c6359c5e71f91115674\WindowsLive.Writer.SpellChecker.ni.dll

+ 2012-06-14 14:01 . 2012-06-14 14:01 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bf812087547b87d15f5d962567c19ed5\WindowsLive.Writer.Controls.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9fd83508417a1fbcaecbd9bc4517cf87\WindowsLive.Writer.HtmlEditor.ni.dll

+ 2012-06-14 14:01 . 2012-06-14 14:01 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\94b811060d696946b20fd357b734ee53\WindowsLive.Writer.Interop.ni.dll

+ 2012-06-14 14:02 . 2012-06-14 14:02 258560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8382b11f7b421755b4cf07b344e761b1\WindowsLive.Writer.Mshtml.ni.dll

+ 2012-06-14 14:02 . 2012-06-14 14:02 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6b2fbf2e97edff13c87a1d542aec6190\WindowsLive.Writer.BlogClient.ni.dll

+ 2012-06-14 14:02 . 2012-06-14 14:02 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\58895e1ec530c5a0b4d304c071ea9608\WindowsLive.Writer.BrowserControl.ni.dll

+ 2012-06-14 14:02 . 2012-06-14 14:02 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\54289c8fe09f12d1257a647b73237956\WindowsLive.Writer.Localization.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4301a860eb28265f4e4181ff0b238f31\WindowsLive.Writer.FileDestinations.ni.dll

+ 2012-06-14 14:02 . 2012-06-14 14:02 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\16b217f8f1a2694db53b5acda8231485\WindowsLive.Writer.Passport.ni.dll

+ 2012-06-14 14:02 . 2012-06-14 14:02 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0f0ac77d1901c796f6fb7cd1335ba4d9\WindowsLive.Writer.Extensibility.ni.dll

+ 2012-06-14 14:02 . 2012-06-14 14:02 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\7cea701bfe1a6fbc1e1b0d09a690f873\WindowsLive.Client.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\961b28b18dc304d4434ca9938abd1d60\WindowsFormsIntegration.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\58b6523c5167dd748a679e8a46330c32\TaskScheduler.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\e8583c3f80cd2a94f552a64b4953dde2\System.Web.Routing.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\394765924d5b924fe87103c943abc69c\System.Web.Extensions.Design.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\4b72a66912627a66c65ebc8ce8d82e91\System.Web.Entity.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\973d534cb631a5c9c7ea74842056332d\System.Web.Entity.Design.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\c80448d686095317e9019f48572b03e0\System.Web.DynamicData.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\a5f548d874a19f075ca408ac46e57d72\System.Web.Abstractions.ni.dll

+ 2012-06-14 13:52 . 2012-06-14 13:52 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b7a7f9c607e09bfa03c07b5ff3a8ae3\System.ServiceProcess.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\9023843c5179d58bd814b64f440679a1\System.Messaging.ni.dll

+ 2012-06-14 13:52 . 2012-06-14 13:52 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\4e3449df387e6a0680d25969da6f965a\System.Drawing.Design.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\0e9f88f220b048e2b0d2c8e3801e1fbd\napsnap.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\821bb293acac9e6fbb0dc69087e2a172\napinit.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\1f10581674c9eb08c896e21fc1f43be4\MMCFxCommon.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\49af28b21e53bc36f58c371995dfae1a\Microsoft.ManagementConsole.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\491bfb35b47079843c7faecb5b67787d\EventViewer.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\97a8bea875e2f88da466cfa59340a528\ehExtHost32.ni.exe

- 2012-04-11 12:35 . 2012-01-26 23:35 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

+ 2012-06-13 13:17 . 2012-04-23 22:37 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

+ 2012-06-13 19:58 . 2012-05-17 22:35 1129472 c:\windows\SysWOW64\wininet.dll

+ 2012-06-13 19:58 . 2012-05-17 22:36 1103872 c:\windows\SysWOW64\urlmon.dll

+ 2012-06-13 19:58 . 2012-05-17 22:45 1800192 c:\windows\SysWOW64\jscript9.dll

+ 2012-06-13 19:58 . 2012-05-17 22:27 1793024 c:\windows\SysWOW64\iertutil.dll

+ 2012-06-13 19:58 . 2012-05-17 22:48 9737728 c:\windows\SysWOW64\ieframe.dll

+ 2012-06-13 19:58 . 2012-05-18 01:59 1392128 c:\windows\system32\wininet.dll

+ 2012-06-13 19:58 . 2012-05-18 01:59 1346048 c:\windows\system32\urlmon.dll

+ 2012-06-13 19:58 . 2012-05-18 02:06 2311680 c:\windows\system32\jscript9.dll

+ 2012-06-13 19:58 . 2012-05-18 01:54 2144768 c:\windows\system32\iertutil.dll

+ 2009-07-14 04:45 . 2012-06-14 13:47 3777877 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat

- 2009-07-14 04:45 . 2012-06-05 12:33 3777877 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat

+ 2010-02-04 23:23 . 2012-06-14 14:07 1243712 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat

+ 2010-02-04 23:23 . 2012-06-14 14:07 6455900 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3138168355-341146757-651766743-1001-8192.dat

+ 2012-03-15 11:17 . 2012-03-15 11:17 5029672 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll

- 2009-07-13 20:37 . 2009-06-10 20:40 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll

+ 2012-06-13 13:15 . 2012-03-21 22:28 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll

+ 2012-03-15 11:17 . 2012-03-15 11:17 5029672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll

- 2009-07-13 20:46 . 2009-06-10 21:23 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll

+ 2012-06-13 13:15 . 2012-03-21 22:29 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 3825952 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 3825952 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll

+ 2012-06-13 20:08 . 2012-06-13 20:08 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll

- 2012-05-09 20:08 . 2012-05-09 20:08 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll

+ 2012-04-22 20:46 . 2012-04-22 20:46 1187328 c:\windows\Installer\837d5f.msp

+ 2012-03-15 12:26 . 2012-03-15 12:26 4212736 c:\windows\Installer\837d55.msp

+ 2012-06-13 20:07 . 2012-06-13 20:07 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\8fce722dc334f83b7695e7f64a629986\System.Deployment.ni.dll

+ 2012-06-13 20:07 . 2012-06-13 20:07 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\201c37951ad7baf71b37fa3c55097e58\System.Activities.Presentation.ni.dll

+ 2012-06-13 20:07 . 2012-06-13 20:07 2056704 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\32bece98175466e5a63d120d96e33269\PresentationUI.ni.dll

+ 2012-06-13 20:07 . 2012-06-13 20:07 1843712 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\f866554cae3c9bf97ef2fa2e90f4ebda\Microsoft.VisualBasic.Compatibility.ni.dll

+ 2012-06-13 20:06 . 2012-06-13 20:06 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\44f8907ea08f9c7ff390b17a925a98fd\Microsoft.VisualBasic.ni.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\7f0476e4df01ca2219f7db531408e91c\System.Windows.Forms.DataVisualization.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\f87f8bc0bc9563096150f23f6c220e7b\System.Printing.ni.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 1666048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\e899cda47704280f54949c69b78c55cc\System.Deployment.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\36299fad6b7b591cfb6bd9e50dbd33df\System.Activities.Presentation.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\442af6f7c8b447bdec3ad8d23da89c5a\ReachFramework.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\cf455da9b8fedf66767c1a7ab3eea9c9\PresentationUI.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 1139712 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2ed0173a2e75b1a3943bd2d96649a50c\Microsoft.VisualBasic.Compatibility.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\09c2f8f606e09d85cfe6e0ad89fbe729\Microsoft.VisualBasic.ni.dll

+ 2012-06-14 13:50 . 2012-06-14 13:50 2707456 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\13dec2cd87ea433f1746027ccbaa3bc4\System.Workflow.Runtime.ni.dll

+ 2012-06-14 13:50 . 2012-06-14 13:50 5955072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\1c1764b9120f6a73ebdfb58b8e4ab9df\System.Workflow.ComponentModel.ni.dll

+ 2012-06-14 13:50 . 2012-06-14 13:50 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\254e69d8d12742213f715fc860aad36f\System.Workflow.Activities.ni.dll

+ 2012-06-14 13:49 . 2012-06-14 13:49 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\35b994e63fbc2836f32326e9f5862a1b\System.Web.Services.ni.dll

+ 2012-06-14 13:49 . 2012-06-14 13:49 1453568 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\86a3611cdef98c49edd41c3cb52d5b81\System.Printing.ni.dll

+ 2012-06-14 13:47 . 2012-06-14 13:47 2318336 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\6ea40f2da0e2321428a7bdd387e475fd\System.Drawing.ni.dll

+ 2012-06-14 13:47 . 2012-06-14 13:47 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\817485fd285d4ceca00b5a2f54127187\System.Deployment.ni.dll

+ 2012-06-14 13:49 . 2012-06-14 13:49 3101696 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\ace65925339dc7a67f7d5801d305fea7\ReachFramework.ni.dll

+ 2012-06-14 13:48 . 2012-06-14 13:48 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\bb6de6dc7e0983ff5d5eb50e4d303401\PresentationUI.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b6af7cba1817dc28bdcea3f0552b05f3\Microsoft.MediaCenter.UI.ni.dll

+ 2012-06-14 14:06 . 2012-06-14 14:06 1516032 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\77cfbc9d38b1f0ba1dda1acbf8dc864e\Microsoft.MediaCenter.ni.dll

+ 2012-06-14 14:01 . 2012-06-14 14:01 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b7831aa9ae1459f54994bb88096135a0\WindowsLive.Writer.PostEditor.ni.dll

+ 2012-06-14 14:02 . 2012-06-14 14:02 1105408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5970a18cc76b9e7f063e964d61a7f3e4\WindowsLive.Writer.ApplicationFramework.ni.dll

+ 2012-06-14 14:01 . 2012-06-14 14:01 2018304 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2137f840aa4841440459310c974098ab\WindowsLive.Writer.CoreServices.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\b345f2895557e6ef39b94aebdeb4a57e\System.WorkflowServices.ni.dll

+ 2012-06-14 13:52 . 2012-06-14 13:52 1914880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\fd5cec6034bba6b7c0c9b8429b6f2222\System.Workflow.Runtime.ni.dll

+ 2012-06-14 13:52 . 2012-06-14 13:52 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\7ad53a4ed45b577ddc8f80aa5c8e012d\System.Workflow.ComponentModel.ni.dll

+ 2012-06-14 13:52 . 2012-06-14 13:52 2994688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\5c617f481e72820be334a511ad7e0648\System.Workflow.Activities.ni.dll

+ 2012-06-14 13:52 . 2012-06-14 13:52 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\a31a450e93129457172e6e101f3f328a\System.Web.Services.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\e950097b782a3726f9ec9a2662944e73\System.Web.Mobile.ni.dll

+ 2012-06-14 14:05 . 2012-06-14 14:05 2403840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\99d890cec9c7b5d0883d2d84ad98a457\System.Web.Extensions.ni.dll

+ 2012-06-14 13:51 . 2012-06-14 13:51 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\da97dedec4a2fd679a2c45b6e91b2481\System.Printing.ni.dll

+ 2012-06-14 13:51 . 2012-06-14 13:51 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ebefde27b0ef7f39bb49c493b34a602c\System.Drawing.ni.dll

+ 2012-06-14 13:51 . 2012-06-14 13:51 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\37aa8a6e1a69671c23eb916417629682\System.Deployment.ni.dll

+ 2012-06-14 13:51 . 2012-06-14 13:51 2147328 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4ddbf3609f6efff982c900440dcdb181\ReachFramework.ni.dll

+ 2012-06-14 13:51 . 2012-06-14 13:51 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\1b357b8f86096b51ac50f1d7c90fd9b9\PresentationUI.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\edd366eb04c2fe0aaabba01c5a2105e0\Narrator.ni.exe

+ 2012-06-14 14:04 . 2012-06-14 14:04 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\e143c439fa3698366c4b2b1911a5f8f2\MMCEx.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\66183b1d79527c54e9d5ffdd8f8fda69\MIGUIControls.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3eaec5bc57c67c3b24ca2bb281ca249d\Microsoft.VisualBasic.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b02bdb4f1d9b1e3fb1c5b79838e371e4\Microsoft.PowerShell.Editor.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4f309ae82c753663e09a9a4cdb8375e1\Microsoft.PowerShell.Commands.Utility.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\f606df7f73ca8fb4ad5fc8edf23c3a88\Microsoft.MediaCenter.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\3e794c9f632eef8f63037605644b2385\Microsoft.MediaCenter.UI.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\4c9b801dd450ef4344d43ba63cd8928f\Microsoft.Ink.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d7fe0033c89960de70477f3a3bf6f139\Microsoft.Build.Tasks.v3.5.ni.dll

+ 2012-06-14 14:04 . 2012-06-14 14:04 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\608fbe1dfdc8d81dacec493fb0359ff4\Microsoft.Build.Tasks.ni.dll

+ 2012-06-14 14:03 . 2012-06-14 14:03 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\9118d768723cabeb71ee31c9ae817dd5\mcstore.ni.dll

+ 2012-06-13 13:15 . 2012-03-21 22:29 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

- 2009-07-13 20:46 . 2009-06-10 21:23 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

+ 2012-06-13 19:58 . 2012-05-17 23:11 12314624 c:\windows\SysWOW64\mshtml.dll

- 2009-07-14 02:34 . 2012-06-13 15:17 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat

+ 2009-07-14 02:34 . 2012-06-14 14:00 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat

+ 2012-06-13 19:58 . 2012-05-18 02:47 17807360 c:\windows\system32\mshtml.dll

+ 2010-02-15 09:11 . 2012-06-13 20:05 58957832 c:\windows\system32\MRT.exe

+ 2012-06-13 19:58 . 2012-05-18 02:16 10924032 c:\windows\system32\ieframe.dll

+ 2012-06-13 20:07 . 2012-06-13 20:07 17355264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\d9f25602d3fabd454ee8f8c0b7cd987f\System.Windows.Forms.ni.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 13198336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 18000896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll

+ 2012-06-13 20:09 . 2012-06-13 20:09 11451904 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll

+ 2012-06-14 13:48 . 2012-06-14 13:48 17382912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\ced1d3b0790804426463ad06a61f180e\System.Windows.Forms.ni.dll

+ 2012-06-14 13:49 . 2012-06-14 13:49 15252992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\f6514b690596d60ca9f4fa64e14a8355\System.Web.ni.dll

+ 2012-06-14 13:50 . 2012-06-14 13:50 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\dfb7152260d641e49ec1ecf0f2df0f37\System.Design.ni.dll

+ 2012-06-14 13:48 . 2012-06-14 13:48 19173376 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\916af5e5c39e1226e0b87a80e3a979f2\PresentationFramework.ni.dll

+ 2012-06-14 13:46 . 2012-06-14 13:46 16517120 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\ea90a194614680a484a25b6ccc4df754\PresentationCore.ni.dll

+ 2012-06-14 13:51 . 2012-06-14 13:51 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\009c50fb69919b90fb233cb4c35d0ad7\System.Windows.Forms.ni.dll

+ 2012-06-14 13:52 . 2012-06-14 13:52 11824128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\84fbf353f91385690a3e4e982aa6930e\System.Web.ni.dll

+ 2012-06-14 13:52 . 2012-06-14 13:52 10578432 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\1321319c8922886e520d2821b5a64dca\System.Design.ni.dll

+ 2012-06-14 13:51 . 2012-06-14 13:51 14325760 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\517358eb2fd962a942dd1ea6afc5b93e\PresentationFramework.ni.dll

+ 2012-06-14 13:51 . 2012-06-14 13:51 12218880 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\e9d0ba41128f363f2390c7e630129c2b\PresentationCore.ni.dll

.

-- Snapshot teruggezet naar huidige datum --

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]

2012-04-11 20:08 87440 ----a-w- c:\program files (x86)\adawaretb\adawareDx.dll

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

2012-06-11 12:58 2068536 ----a-w- c:\program files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\adawaretb\adawareDx.dll" [2012-04-11 87440]

"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll" [2012-06-11 2068536]

.

[HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]

.

[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]

[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]

[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]

"HPADVISOR"="c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-09-29 1685048]

"RGSC"="c:\program files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" [2008-11-14 305064]

"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-08-17 39408]

"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-08-02 1242448]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-04 98304]

"HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]

"QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2010-02-25 323640]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464]

"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]

"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2010-03-23 500792]

"VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456]

"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]

"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032]

"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]

"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-06-11 1104440]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Microsoft Office.lnk - c:\program files (x86)\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\progra~2\Bandoo\BndHook.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]

R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x]

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 135664]

R2 NNFSVC;Norman Network Filtering service;c:\program files\Norman\Ngs\Bin\Nnf.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-05-03 158856]

R3 dump_wmimmc;dump_wmimmc;c:\ijji\ENGLISH\AVA\Binaries\GameGuard\dump_wmimmc.sys [x]

R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 135664]

R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]

R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]

S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [x]

S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x]

S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6a.sys [x]

S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x]

S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x]

S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2009-03-02 89600]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

S2 avgfws;AVG Firewall;c:\program files (x86)\AVG\AVG2012\avgfws.exe [2012-03-23 2321520]

S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe [2012-04-30 5106744]

S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]

S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]

S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]

S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x]

S2 vToolbarUpdater11.1.0;vToolbarUpdater11.1.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe [2012-06-11 935480]

S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [x]

S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [x]

S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896]

S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]

S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]

.

.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

ezSharedSvc

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2009-08-20 12:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

.

Inhoud van de 'Gedeelde Taken' map

.

2012-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 09:55]

.

2012-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-17 09:55]

.

2012-06-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3138168355-341146757-651766743-1001Core.job

- c:\users\Erik\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-23 11:52]

.

2012-06-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3138168355-341146757-651766743-1001UA.job

- c:\users\Erik\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-23 11:52]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU]

"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-07-22 450048]

"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-08-25 610872]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-27 171520]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.lauwerscollege.nl/

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office10\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll

FF - ProfilePath - c:\users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\973o5s3e.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - AVG Secure Search

FF - prefs.js: browser.startup.homepage - hxxp://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_1&u=AFBB9A88CC87736C2EF0A64FD4E5DFBC

FF - prefs.js: keyword.URL - hxxp://nl.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=937811&p=

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

.

- - - - ORPHANS VERWIJDERD - - - -

.

WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

WebBrowser-{A8864317-E18B-4292-99D9-E6E65AB905D3} - (no file)

WebBrowser-{87775FDB-6972-41F9-AE51-8326E38CB206} - (no file)

WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-3138168355-341146757-651766743-1001\Software\SecuROM\License information*]

"datasecu"=hex:9e,42,29,b6,f5,ae,c3,9f,d4,24,fc,66,9c,33,7c,af,23,1b,81,b4,12,

79,da,9d,64,f6,6f,83,40,c7,ca,6a,62,fd,83,7f,46,2a,48,35,a0,92,e7,5e,11,f4,\

"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe

c:\program files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe

c:\program files (x86)\CyberLink\Shared files\RichVideo.exe

c:\progra~2\Bandoo\Bandoo.exe

c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

c:\program files (x86)\Common Files\Steam\SteamService.exe

.

**************************************************************************

.

Voltooingstijd: 2012-06-14 16:16:16 - machine werd herstart

ComboFix-quarantined-files.txt 2012-06-14 14:16

ComboFix2.txt 2012-06-13 17:47

.

Pre-Run: 111.534.292.992 bytes beschikbaar

Post-Run: 111.261.200.384 bytes beschikbaar

.

- - End Of File - - B38CBB18BF817E5344C4DC3C083BF6D9

Link naar reactie
Delen op andere sites
Erikm Bijdrager

Erikm

Geplaatst:
  • Auteur
Geplaatst:

AVG is klaar met scannen. Geen bedreigingen gevonden! Ik opende nog wel taakbeheer, en zag daar 3 processen zonder gebruiker en beschrijving, namelijk atieclxx.exe, csrss.exe en winlogon.exe. Ook toen ComboFix de PC herstartte, kreeg ik een foutmelding van een dll bestand. Weet zo niet meer welke.

Erik

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Verwijder Combofix: Start -> Uitvoeren/Zoekopdracht en typ: ComboFix /Uninstall

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Indien aanwezig mag je de map C:\Qoobox manueel verwijderen.

Download CCleaner.

Klik op “Download Latest Version” en dan start de download van CCleaner automatisch en gratis op.

Installeer het en start CCleaner op. Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Schoonmaken'. Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”. Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Atieclxx.exe is onderdeel van de grafische kaart van ATI = dus een betrouwbaar proces. Zowel csrss.exe als winlogon.exe zijn - in principe - legitieme bestanden (maar worden ook wel eens door malware misbruikt). Indien die csrss.exe zich op deze locatie C:\Windows\System32 bevindt, is het volkomen legaal. Op andere locaties kan het een virus zijn. Even zoeken naar de locatie kan daar een antwoord op bieden. Winlogon.exe behoort tot de standaardbestanden van Windows. Mocht daar iets mee aan de hand zijn, zou dat - normaal - merkbaar moeten geweest zijn in alles wat we gedaan hebben. Lijkt me dus ook geen probleem. En als AVG geen kik meer geeft, is dat ook een positief signaal.

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:
Dat had ik ook al uitgevonden, maar bij alle 3 de processen staat geen gebruiker en omschrijving. Daarom viel me dat dus op.
Begrijpelijk. Maar niet alle taken in taakbeheer krijgen een gebruikersnaam of een omschrijving mee. Dus dat is op zich geen negatief iets.

Vermits er verder geen virusmeldingen meer zijn, lijkt me je probleem van de baan en mag je - als dat voor jou OK is - hieronder op "markeer als opgelost" tokkelen !

Link naar reactie
Delen op andere sites
Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.