Ordinateur infecté

Bonjour,
depuis quelques temps, j'ai quelques problèmes avec mon PC : il m'indique des erreurs de chargement de modules introuvables au démarrage et des publicités n'arrêtent pas de s'ouvrir lorsque j'ouvre internet explorer ou firefox. J'en est déduit que mon pc était infecté, et j'ai installé comodo et antivir; mais cela n'a rien changé.. Surtout que, comme je n'y comprends pas grand chose, je ne sais jamais quand je dois accepter ou refuser les accès avec comodo.
Quelqu'un pourrait-il m'aider à comprendre et à résoudre ce problème?

Je ne sait pas si c'est utile, mais j'ai fait un scan dont voici le rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:05:29, on 06/10/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe
C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Windows\AStiDog1210.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\COMODO\SafeSurf\cssurf.exe
C:\Program Files\COMODO\Firewall\cfp.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\WIBUKEY\Server\WkSvMgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\amélie\Desktop\blabla.exe.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.mini20.com/?tm=1&kw=Secure+Web+Search+Engine&KW1=Secure%20Web%20Search%20Engine&KW2=Best%20Malware%20Detection%20And%20Removal%20Software&searchbox=0&domainname=0&backfill=0
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [basicsmssmenu] "C:\Program Files\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Waiting1210] C:\Windows\AStiDog1210.exe
O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO SafeSurf] "C:\Program Files\COMODO\SafeSurf\cssurf.exe" -s
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSSMSGS] rundll32.exe wingdx32.rom,ytcRun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\AMLIE~1\AppData\Local\Temp\ddcAsPIX.dll,c
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\AMLIE~1\AppData\Local\Temp\awtqnNEw.dll,#1
O4 - HKCU\..\Run: [BM37425968] Rundll32.exe "C:\Users\AMLIE~1\AppData\Local\Temp\cgrfhwnn.dll",s
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Serveur réseau.lnk = C:\Program Files\WIBUKEY\Server\WkSvMgr.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{5E256102-96DA-406B-8F83-423128AAD651}: NameServer = 85.255.115.22,85.255.112.190
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll C:\Windows\system32\cssdll32.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Basics Service - Seagate Technology LLC - C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Packard Bell BV - C:\Program Files\Packard bell\SAXO24\HIDSERVICE.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: SrvCDEject - Unknown owner - C:\Program Files\Packard Bell\SrvCDEject.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Windows Tribute Service - Unknown owner - C:\Windows\system32\kdhwn.exe
End of file - 10749 bytes

Merci d'avance...
Configuration: Windows Vista
Internet Explorer 7.0

68 réponses

Résumé de la discussion

Des erreurs de chargement de modules introuvables au démarrage et des publicités intempestives lors de la navigation suspectent une infection, malgré l'installation de Comodo et d'Avira. Le rapport HijackThis révèle de nombreuses entrées au démarrage et des modules publicitaires, des BHO et des services variés, rendant difficile d'identifier ce qui est fiable et ce qui nécessite une intervention. Pour résoudre ces symptômes, il faut procéder à un nettoyage en profondeur, supprimer les extensions et BHO suspects, puis contrôler les paramètres de démarrage et les pages par défaut du navigateur. En cas de doute, privilégier un outil de désinfection dédié et réinitialiser les règles de sécurité peut prévenir les redirections publicitaires et les accès non autorisés.

Bobot (l’IA à votre service)
  1. C'est fait.
    Est-ce que je devrais refaire un rapport HijackThis pour être sur qu'il n'y ait plus de pb, ou est-ce que c'est inutile?
    1. Contributeur sécurité
      oui vire ce qui reste manuellement. Désactivé la restauration puis redémarre ton ordi puis réactive la . Puis cré un point de restauration
      1. ca y est, j'ai supprimé les logiciels installés avec tools cleaner (mais leurs raccourcis sont tjs sur le bureau, ne vaut-il pas mieux que je les supprime manuellement?)
        . Est-ce que je dois créer un point de restauration?
        1. Non, tout a l'air bien maintenant... Merci beaucoup à toi , à papyber et à anthony5151.
          1. Contributeur sécurité
            ok vire ce qui est dans moved files en allant dans poste de travail puis c puis otmovit

            encore des soucis???
            1. Et oui, ce n'était pas très malin de ma part de faire ca...

              Voilà le rapport de OTMoveIt :

              < C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZU2F0IC\params[1].js >
              C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZU2F0IC\params[1].js moved successfully.
              < C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WNYLHPZ4\index[1].js >
              C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WNYLHPZ4\index[1].js moved successfully.
              < C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WNYLHPZ4\index[1].htm >
              C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WNYLHPZ4\index[1].htm moved successfully.
              C:\Users\amélie\AppData\Local\Microsoft\Windows\Burn\Burn\ArchiCAD_v10fr\ArchiCAD 10\Arch10.fr_Crk.exe moved successfully.
              C:\Users\amélie\AppData\Local\Microsoft\Windows\Burn\Burn\ArchiCAD_v10fr\ArchiCAD 10\Cracktro.exe moved successfully.
              File/Folder I:\Backup\TITANIUM\D\logiciels\ArchiCAD_v10fr\Crack\Arch10.fr_Crk.exe not found.
              File/Folder I:\Backup\TITANIUM\D\logiciels\ArchiCAD_v10fr\Crack\Cracktro.exe not found.
              File/Folder I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10\Archicad 10_Crk.exe not found.
              File/Folder I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10\_Crack\Archicad 10_Crk.exe I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\archicad 10 int.rar not found.
              File/Folder I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10.FR + Crack + PlungIns.rar not found.
              File/Folder I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10.FR + Crack + PlungIns.rar not found.

              OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 10122008_195356
              1. Contributeur sécurité
                oui il faut du temps quand on télécharge de nombreux cracks , infectés...

                vire ce qui est dans le dossier quarantine en allant dans poste de travail puis:
                C:\QooBox\Quarantine

                ________________

                vire les cracks qui sont dans le dossier I puis BACKUP

                __________________

                vide ta poubelle

                _____________________

                télécharge OTMoveIt
                http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur https://www.luanagames.com/index.fr.html
                double-clique sur OTMoveIt.exe pour le lancer.
                copie la liste qui se trouve en citation ci-dessous,
                et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

                Citation :

                C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZU2F0IC\params[1].js
                C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WNYLHPZ4\index[1].js
                C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WNYLHPZ4\index[1].htm
                C:\Users\amélie\AppData\Local\Microsoft\Windows\Burn\Burn\ArchiCAD_v10fr\ArchiCAD 10\Arch10.fr_Crk.exe
                C:\Users\amélie\AppData\Local\Microsoft\Windows\Burn\Burn\ArchiCAD_v10fr\ArchiCAD 10\Cracktro.exe
                I:\Backup\TITANIUM\D\logiciels\ArchiCAD_v10fr\Crack\Arch10.fr_Crk.exe
                I:\Backup\TITANIUM\D\logiciels\ArchiCAD_v10fr\Crack\Cracktro.exe
                I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10\Archicad 10_Crk.exe
                I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10\_Crack\Archicad 10_Crk.exe I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\archicad 10 int.rar
                I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10.FR + Crack + PlungIns.rar
                I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10.FR + Crack + PlungIns.rar

                clique sur MoveIt! pour lancer la suppression.
                le résultat apparaitra dans le cadre "Results".
                clique sur Exit pour fermer.
                poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

                il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
                1. rapport du scan en ligne :

                  ;***********************************************************************************************************************************************************************************
                  ANALYSIS: 2008-10-10 02:17:34
                  PROTECTIONS: 1
                  MALWARE: 25
                  SUSPECTS: 13
                  ;***********************************************************************************************************************************************************************************
                  PROTECTIONS
                  Description Version Active Updated
                  ;===================================================================================================================================================================================
                  Windows Defender 1.1.4005.0 No No
                  ;===================================================================================================================================================================================
                  MALWARE
                  Id Description Type Active Severity Disinfectable Disinfected Location
                  ;===================================================================================================================================================================================
                  00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@doubleclick[1].txt
                  00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@doubleclick[1].txt
                  00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@atdmt[2].txt
                  00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@atdmt[2].txt
                  00139535 Application/Processor HackTools No 0 Yes No C:\Windows\System32\SmitfraudFix\Process.exe
                  00139535 Application/Processor HackTools No 0 Yes No C:\Windows\System32\Process.exe
                  00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@tradedoubler[2].txt
                  00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@tradedoubler[1].txt
                  00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@fastclick[2].txt
                  00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@mediaplex[1].txt
                  00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@mediaplex[1].txt
                  00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@com[1].txt
                  00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@xiti[1].txt
                  00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@xiti[1].txt
                  00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@ad.yieldmanager[1].txt
                  00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@ad.yieldmanager[1].txt
                  00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@apmebf[1].txt
                  00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@apmebf[2].txt
                  00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@serving-sys[2].txt
                  00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@bs.serving-sys[2].txt
                  00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@weborama[2].txt
                  00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@weborama[1].txt
                  00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@advertising[2].txt
                  00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@advertising[2].txt
                  00169287 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@media.adrevolver[1].txt
                  00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@ads.pointroll[1].txt
                  00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@bluestreak[1].txt
                  00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@bluestreak[2].txt
                  00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adrevolver[2].txt
                  00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@adultfriendfinder[1].txt
                  00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\Low\amélie@smartadserver[2].txt
                  00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Cookies\amélie@smartadserver[2].txt
                  00366244 Application/NirCmd.A HackTools No 0 Yes No C:\QooBox\Quarantine\C\fixwareout\FindT\nircmd.exe.vir
                  00387058 W32/Flux.DP.worm Virus/Worm No 1 Yes No C:\QooBox\Quarantine\C\autorun.inf.vir
                  00388689 Adware/AntiSpywareExpert Adware No 0 Yes No C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZU2F0IC\params[1].js
                  00388804 Application/PCPrivacyCleaner HackTools No 0 Yes No C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WNYLHPZ4\index[1].js
                  00388804 Application/PCPrivacyCleaner HackTools No 0 Yes No C:\Users\amélie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WNYLHPZ4\index[1].htm
                  03738686 Generic Malware Virus/Trojan No 0 Yes No C:\ComboFix(0)\catchme.cfexe
                  03738686 Generic Malware Virus/Trojan No 0 No No C:\Users\amélie\Desktop\ComboFix.exe[32788R22FWJFW\catchme.cfexe]
                  ;===================================================================================================================================================================================
                  SUSPECTS
                  Sent Location ��\��Ns5
                  ;===================================================================================================================================================================================
                  No C:\Users\amélie\AppData\Local\Microsoft\Windows\Burn\Burn\ArchiCAD_v10fr\ArchiCAD 10\Arch10.fr_Crk.exe
                  No C:\Users\amélie\AppData\Local\Microsoft\Windows\Burn\Burn\ArchiCAD_v10fr\ArchiCAD 10\Cracktro.exe ��\��Ns5
                  No I:\Backup\TITANIUM\D\logiciels\ArchiCAD_v10fr\Crack\Arch10.fr_Crk.exe ��\��Ns5
                  No I:\Backup\TITANIUM\D\logiciels\ArchiCAD_v10fr\Crack\Cracktro.exe ��\��Ns5
                  No I:\RECYCLER\S-1-5-21-1390067357-287218729-839522115-500\Df2\ArchiCAD_v10fr\Crack\Arch10.fr_Crk.exe ��\��Ns5
                  No I:\RECYCLER\S-1-5-21-1390067357-287218729-839522115-500\Df2\ArchiCAD_v10fr\Crack\Cracktro.exe ��\��Ns5
                  No I:\RECYCLER\S-1-5-21-1390067357-287218729-839522115-500\Df3\ArchiCAD_v10fr\Crack\Arch10.fr_Crk.exe ��\��Ns5
                  No I:\RECYCLER\S-1-5-21-1390067357-287218729-839522115-500\Df3\ArchiCAD_v10fr\Crack\Cracktro.exe ��\��Ns5
                  No I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10\Archicad 10_Crk.exe ��\��Ns5
                  No I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10\_Crack\Archicad 10_Crk.exe ��\��Ns5
                  No I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\archicad 10 int.rar[Crack\Archicad 10_Crk.exe]
                  No I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10.FR + Crack + PlungIns.rar[archicad 10 int.rar][Crack\Archicad 10_Crk.exe]
                  No I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\ArchiCAD 10.FR + Crack + PlungIns.rar[_Crack\Archicad 10_Crk.exe]
                  ;===================================================================================================================================================================================
                  VULNERABILITIES
                  Id Severity Description ��\��Ns5
                  ;===================================================================================================================================================================================
                  ;===================================================================================================================================================================================

                  Je ne vais pas pouvoir revenir sur le net pendant trois jours, mais je serais de retour dès lundi, j'espère que vous serez toujours là !!
                  Je ne pensais pas que nettoyer un ordi pouvais prendre autant de temps... Merci encore.
                  1. Dernier rapport d'antivir :

                    Avira AntiVir Personal
                    Report file date: jeudi 9 octobre 2008 18:06

                    Scanning for 1673969 virus strains and unwanted programs.

                    Licensed to: Avira AntiVir PersonalEdition Classic
                    Serial number: 0000149996-ADJIE-0001
                    Platform: Windows Vista
                    Windows version: (Service Pack 1) [6.0.6001]
                    Boot mode: Normally booted
                    Username: SYSTEM
                    Computer name: PC-DE-AMÉLIE

                    Version information:
                    BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00
                    AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53
                    AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
                    LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
                    LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
                    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
                    ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15
                    ANTIVIR2.VDF : 7.0.7.12 4066816 Bytes 08/10/2008 16:04:29
                    ANTIVIR3.VDF : 7.0.7.20 78848 Bytes 09/10/2008 16:04:30
                    Engineversion : 8.1.1.35
                    AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
                    AESCRIPT.DLL : 8.1.0.76 319867 Bytes 09/10/2008 16:04:41
                    AESCN.DLL : 8.1.0.23 119156 Bytes 10/07/2008 12:44:49
                    AERDL.DLL : 8.1.1.2 438644 Bytes 09/10/2008 16:04:40
                    AEPACK.DLL : 8.1.2.3 364918 Bytes 09/10/2008 16:04:38
                    AEOFFICE.DLL : 8.1.0.25 196986 Bytes 09/10/2008 16:04:37
                    AEHEUR.DLL : 8.1.0.59 1438071 Bytes 09/10/2008 16:04:36
                    AEHELP.DLL : 8.1.0.15 115063 Bytes 10/07/2008 12:44:48
                    AEGEN.DLL : 8.1.0.36 315764 Bytes 09/10/2008 16:04:32
                    AEEMU.DLL : 8.1.0.7 430452 Bytes 31/07/2008 08:33:21
                    AECORE.DLL : 8.1.1.11 172406 Bytes 09/10/2008 16:04:31
                    AEBB.DLL : 8.1.0.1 53617 Bytes 10/07/2008 12:44:48
                    AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
                    AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
                    AVREP.DLL : 8.0.0.2 98344 Bytes 09/10/2008 16:04:30
                    AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
                    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
                    AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
                    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
                    SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
                    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
                    RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
                    RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

                    Configuration settings for the scan:
                    Jobname..........................: Complete system scan
                    Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
                    Logging..........................: low
                    Primary action...................: interactive
                    Secondary action.................: ignore
                    Scan master boot sector..........: on
                    Scan boot sector.................: on
                    Boot sectors.....................: C:, I:,
                    Process scan.....................: on
                    Scan registry....................: on
                    Search for rootkits..............: off
                    Scan all files...................: Intelligent file selection
                    Scan archives....................: on
                    Recursion depth..................: 20
                    Smart extensions.................: on
                    Macro heuristic..................: on
                    File heuristic...................: medium

                    Start of the scan: jeudi 9 octobre 2008 18:06

                    The scan of running processes will be started
                    Scan process 'avscan.exe' - '1' Module(s) have been scanned
                    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
                    Scan process 'taskeng.exe' - '1' Module(s) have been scanned
                    Scan process 'SearchFilterHost.exe' - '1' Module(s) have been scanned
                    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                    Scan process 'SearchProtocolHost.exe' - '1' Module(s) have been scanned
                    Scan process 'avguard.exe' - '1' Module(s) have been scanned
                    Scan process 'sched.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'VSSVC.exe' - '1' Module(s) have been scanned
                    Scan process 'notepad.exe' - '1' Module(s) have been scanned
                    Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
                    Scan process 'mscorsvw.exe' - '1' Module(s) have been scanned
                    Scan process 'firefox.exe' - '1' Module(s) have been scanned
                    Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
                    Scan process 'wmplayer.exe' - '1' Module(s) have been scanned
                    Scan process 'mobsync.exe' - '1' Module(s) have been scanned
                    Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
                    Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
                    Scan process 'WUDFHost.exe' - '1' Module(s) have been scanned
                    Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'StarWindServiceAE.exe' - '1' Module(s) have been scanned
                    Scan process 'SrvCDEject.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'IoctlSvc.exe' - '1' Module(s) have been scanned
                    Scan process 'PDFProFiltSrv.exe' - '1' Module(s) have been scanned
                    Scan process 'NMSAccessU.exe' - '1' Module(s) have been scanned
                    Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
                    Scan process 'HidService.exe' - '1' Module(s) have been scanned
                    Scan process 'cmdagent.exe' - '1' Module(s) have been scanned
                    Scan process 'DevSvc.exe' - '1' Module(s) have been scanned
                    Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
                    Scan process 'SyncServicesBasics.exe' - '1' Module(s) have been scanned
                    Scan process 'WkSvMgr.exe' - '1' Module(s) have been scanned
                    Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
                    Scan process 'SmpSys.exe' - '1' Module(s) have been scanned
                    Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
                    Scan process 'PdfPro5Hook.exe' - '1' Module(s) have been scanned
                    Scan process 'UnlockerAssistant.exe' - '1' Module(s) have been scanned
                    Scan process 'cfp.exe' - '1' Module(s) have been scanned
                    Scan process 'cssurf.exe' - '1' Module(s) have been scanned
                    Scan process 'taskeng.exe' - '1' Module(s) have been scanned
                    Scan process 'GrooveMonitor.exe' - '1' Module(s) have been scanned
                    Scan process 'AStiDog1210.exe' - '1' Module(s) have been scanned
                    Scan process 'PWRISOVM.EXE' - '1' Module(s) have been scanned
                    Scan process 'hpcmpmgr.exe' - '1' Module(s) have been scanned
                    Scan process 'hpwuSchd.exe' - '1' Module(s) have been scanned
                    Scan process 'MaxMenuMgrBasics.exe' - '1' Module(s) have been scanned
                    Scan process 'RtHDVCpl.exe' - '1' Module(s) have been scanned
                    Scan process 'rundll32.exe' - '1' Module(s) have been scanned
                    Scan process 'rundll32.exe' - '1' Module(s) have been scanned
                    Scan process 'explorer.exe' - '1' Module(s) have been scanned
                    Scan process 'dwm.exe' - '1' Module(s) have been scanned
                    Scan process 'taskeng.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'SLsvc.exe' - '1' Module(s) have been scanned
                    Scan process 'audiodg.exe' - '0' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'lsm.exe' - '1' Module(s) have been scanned
                    Scan process 'lsass.exe' - '1' Module(s) have been scanned
                    Scan process 'services.exe' - '1' Module(s) have been scanned
                    Scan process 'csrss.exe' - '1' Module(s) have been scanned
                    Scan process 'wininit.exe' - '1' Module(s) have been scanned
                    Scan process 'csrss.exe' - '1' Module(s) have been scanned
                    Scan process 'smss.exe' - '1' Module(s) have been scanned
                    75 processes with 75 modules were scanned

                    Starting master boot sector scan:
                    Master boot sector HD0
                    [INFO] No virus was found!
                    Master boot sector HD1
                    [INFO] No virus was found!
                    Master boot sector HD2
                    [INFO] No virus was found!
                    Master boot sector HD3
                    [INFO] No virus was found!
                    [WARNING] System error [21]: Le périphérique n'est pas prêt.
                    [INFO] Please restart the search with Administrator rights
                    Master boot sector HD4
                    [INFO] No virus was found!
                    [WARNING] System error [21]: Le périphérique n'est pas prêt.
                    [INFO] Please restart the search with Administrator rights
                    Master boot sector HD5
                    [INFO] No virus was found!
                    [WARNING] System error [21]: Le périphérique n'est pas prêt.
                    [INFO] Please restart the search with Administrator rights
                    Master boot sector HD6
                    [INFO] No virus was found!
                    [WARNING] System error [21]: Le périphérique n'est pas prêt.
                    [INFO] Please restart the search with Administrator rights
                    Master boot sector HD7
                    [INFO] No virus was found!

                    Start scanning boot sectors:
                    Boot sector 'C:\'
                    [INFO] No virus was found!
                    Boot sector 'I:\'
                    [INFO] No virus was found!

                    Starting to scan the registry.
                    The registry was scanned ( '50' files ).

                    Starting the file scan:

                    Begin scan in 'C:\' <HDD>
                    C:\hiberfil.sys
                    [WARNING] The file could not be opened!
                    C:\pagefile.sys
                    [WARNING] The file could not be opened!
                    C:\Downloads\ArchiCAD 11FR CRACK.rar
                    [0] Archive type: RAR
                    --> wkwin32.DLL
                    [DETECTION] Contains recognition pattern of the WORM/AimBot.IO worm
                    [NOTE] The file was deleted!
                    C:\Downloads\OBJECTiVE ArchiCAD11 Cracked-ARHIT3CHT.rar
                    [0] Archive type: RAR
                    --> OBJECTiVEWinAC11\Crack\OBJECTiVE_2.02_crk.exe
                    [DETECTION] Contains recognition pattern of the DR/Agent.23552.C dropper
                    [NOTE] The file was deleted!
                    C:\Program Files\Malwarebytes' Anti-Malware\mbam-dor.exe
                    [DETECTION] Is the TR/Drop.Agent.ckm Trojan
                    [NOTE] The file was moved to '494f305a.qua'!
                    C:\QooBox\Quarantine\catchme2008-10-09_150407,65.zip
                    [0] Archive type: ZIP
                    --> TuePub_installation.exe
                    [DETECTION] Is the TR/Killav.28714 Trojan
                    [NOTE] The file was deleted!
                    C:\QooBox\Quarantine\C\TuePub\TuePub.exe.zip
                    [0] Archive type: ZIP
                    --> TuePub.exe
                    [DETECTION] Is the TR/Trash.Gen Trojan
                    [NOTE] The file was deleted!
                    C:\QooBox\Quarantine\C\Users\amélie\Desktop\TuePub_installation.exe.zip
                    [0] Archive type: ZIP
                    --> TuePub_installation.exe
                    [DETECTION] Is the TR/Killav.28714 Trojan
                    [NOTE] The file was deleted!
                    C:\Users\amélie\Desktop\SmitfraudFix.exe
                    [DETECTION] Contains recognition pattern of the DR/Tool.Reboot.F.165 dropper
                    [WARNING] The file was ignored!
                    C:\Users\amélie\Desktop\TuePub_installation.exe
                    [WARNING] The file could not be opened!
                    C:\Users\amélie\Documents\Logiciels à installer\Adobe\Adobe photoshop CS2\Adobe photoshop CS2 + Crack.rar
                    [0] Archive type: RAR
                    --> KeyGen.exe
                    [DETECTION] Contains recognition pattern of the WORM/Autorun.cxl worm
                    [NOTE] The file was deleted!
                    C:\Windows\System32\drivers\sptd.sys
                    [WARNING] The file could not be opened!
                    Begin scan in 'I:\' <FreeAgent Drive>
                    I:\Archives\Logiciels\Adobe\Adobe photoshop CS2\KeyGen.exe
                    [DETECTION] Contains recognition pattern of the WORM/Autorun.cxl worm
                    [NOTE] The file was deleted!
                    I:\Backup\PC-DE-AMÉLIE\C\Users\amélie\Documents\Logiciels à installer\Adobe\Adobe photoshop CS2\Adobe photoshop CS2 + Crack.rar
                    [0] Archive type: RAR
                    --> KeyGen.exe
                    [DETECTION] Contains recognition pattern of the WORM/Autorun.cxl worm
                    [NOTE] The file was deleted!
                    I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Desktop\INDESIGN 4.0 CS2\KEYGEN (Serial + Activation) for Adobe Creative Suite 2-Photoshop CS2 v9-Illustrator CS2 v12-InDesign CS2v 4-GoLive CS2 v.exe
                    [DETECTION] Is the TR/Agent.59904.B Trojan
                    [NOTE] The file was deleted!
                    I:\Backup\PC-DE-AMÉLIE\History\Level2\C\Users\amélie\Documents\Logiciels à installer\Adobe photoshop CS2\KeyGen.exe
                    [DETECTION] Contains recognition pattern of the WORM/Autorun.cxl worm
                    [NOTE] The file was deleted!
                    I:\RECYCLER\S-1-5-21-1390067357-287218729-839522115-500\Df2\INDESIGN 4.0 CS2\KEYGEN (Serial + Activation) for Adobe Creative Suite 2-Photoshop CS2 v9-Illustrator CS2 v12-InDesign CS2v 4-GoLive CS2 v.exe
                    [DETECTION] Is the TR/Agent.59904.B Trojan
                    [NOTE] The file was deleted!
                    I:\RECYCLER\S-1-5-21-1390067357-287218729-839522115-500\Df3\INDESIGN 4.0 CS2\KEYGEN (Serial + Activation) for Adobe Creative Suite 2-Photoshop CS2 v9-Illustrator CS2 v12-InDesign CS2v 4-GoLive CS2 v.exe
                    [DETECTION] Is the TR/Agent.59904.B Trojan
                    [NOTE] The file was deleted!

                    End of the scan: jeudi 9 octobre 2008 20:19
                    Used time: 2:12:33 Hour(s)

                    The scan has been done completely.

                    20954 Scanning directories
                    654795 Files were scanned
                    14 viruses and/or unwanted programs were found
                    0 Files were classified as suspicious:
                    12 files were deleted
                    0 files were repaired
                    1 files were moved to quarantine
                    0 files were renamed
                    4 Files cannot be scanned
                    654777 Files not concerned
                    5656 Archives were scanned
                    9 Warnings
                    13 Notes
                    1. Tuepub a disparu, bravo!! Voila le rapport de OT movelt :

                      C:\TuePub moved successfully.
                      C:\Users\amélie\Desktop\TuePub_installation.exe moved successfully.

                      OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 10092008_205035

                      Entre tps, j'avais refais un sacn avec antivir remis à jour, est-ce que ca t'intéresse que je te poste son rapport?

                      Je continue...
                      1. Contributeur sécurité
                        Télécharge OTMoveIT (de Old_Timer) sur ton Bureau.
                        http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
                        redémarre en mode sans échec
                        1) Redémarre ton ordi
                        2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
                        3) Tu verras un écran avec options de démarrage apparaître
                        4) Choisis la première option : Sans Échec, et valide avec "Entrée"
                        5) Choisis ton compte habituel, et non Administrateur

                        essaie de désinstaller ce tuepub par ajout suppression de programmes

                        Clique double sur OTMoveIT.exe pour le lancer.
                        copie la liste qui se trouve en citation ci-dessous,
                        C:\TuePub
                        C:\Users\amélie\Desktop\TuePub_installation.exe 

                        et colle-la dans le cadre de gauche de OTMoveIT :
                        Paste List of Files/Folders to be moved.

                        Clique sur MoveIt! pour lancer la suppression.
                        le résultat apparaîtra dans le cadre Results.
                        Clique sur Exit pour fermer.
                        Poste le rapport situé dans C:\\\_OTMoveIT\MovedFiles.

                        Il te sera peut-être demandé de redémarrer le pc pour achever la suppression.
                        si c'est le cas accepte par Yes.

                        redémarre normalement et scanne ton PC ici
                        faire un Scan Antivirus en ligne avec Internet explorer et accepter l'ActiveX
                        poster le rapport ici ensuite
                        https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan

                        règle internet comme ceci
                        Pour activer ces contrôles ActiveX,
                        Démarrer-->Paramètres-->Panneau de configuration-->Options Internet
                        ou
                        Sur la fenêtre du navigateur Internet,
                        Outils-->Options Internet
                        Dans la fenêtre qui s'ouvre, sélectionner l'onglet Sécurité.
                        Après cela, cliquer sur le bouton Personnaliser le niveau...
                        Une nouvelle fenêtre s'ouvre,
                        dans la partie qui se nomme Paramètres de sécurité,
                        effectuer alors les réglages suivants :
                        A la ligne : Contrôles ActiveX reconnus sûrs pour l'écriture de scripts,
                        cocher la case Activer.
                        Puis, à la ligne : Contrôles d'initialisation et de scripts ActiveX non marqués comme sécurisés,
                        cocher la case Désactiver.
                        Maintenant, à la ligne :
                        Exécuter les contrôles ActiveX et les plugins,
                        cocher la case Activer.
                        Après cela, à la ligne :
                        Télécharger les contrôles ActiveX non signés,
                        cocher la case Désactiver.
                        Et pour finir, à la ligne : Télécharger les contrôles ActiveX signés,
                        cocher la case Demander.
                        Cliquer sur le bouton OK, afin que les modifications soient prises en compte.
                        1. Voilà, enfin!!! le rapport est complet...

                          Autre petite info, le fichier tuepub est toujours là.
                          1. .
                            -- Instantané actualisé --
                            .
                            ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                            .
                            .
                            *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                            REGEDIT4

                            [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                            "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-07-30 68856]
                            "SmpcSys"="C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe" [2008-02-04 1038136]
                            "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]

                            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                            "NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-12-12 86016]
                            "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-12-12 8530464]
                            "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-12-12 81920]
                            "toolbar_eula_launcher"="C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 28672]
                            "basicsmssmenu"="C:\Program Files\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe" [2007-10-09 169328]
                            "HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" [2003-06-25 49152]
                            "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-10-23 233472]
                            "PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2008-07-07 167936]
                            "Waiting1210"="C:\Windows\AStiDog1210.exe" [2007-03-23 60416]
                            "UVS11 Preload"="C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe" [2007-07-23 341232]
                            "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
                            "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
                            "COMODO SafeSurf"="C:\Program Files\COMODO\SafeSurf\cssurf.exe" [2008-09-29 278264]
                            "COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [2008-09-29 1655552]
                            "UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2008-05-02 15872]
                            "PDFHook"="C:\Program Files\Nuance\PDF Professional 5\pdfpro5hook.exe" [2008-03-30 774144]
                            "PDF5 Registry Controller"="C:\Program Files\Nuance\PDF Professional 5\RegistryController.exe" [2008-03-30 58656]
                            "RtHDVCpl"="RtHDVCpl.exe" [2007-10-01 C:\Windows\RtHDVCpl.exe]

                            C:\Users\am‚lie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
                            Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]

                            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
                            Serveur r‚seau.lnk - C:\Program Files\WIBUKEY\Server\WkSvMgr.exe [2008-09-23 3768320]

                            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
                            "EnableLUA"= 0 (0x0)
                            "EnableUIADesktopToggle"= 0 (0x0)

                            [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
                            "AppInit_DLLs"= C:\Windows\system32\guard32.dll C:\Windows\system32\cssdll32.dll fpdrkb.dll

                            [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
                            "VIDC.YV12"= yv12vfw.dll
                            "msacm.dvacm"= C:\PROGRA~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm
                            "msacm.MPEGacm"= C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\MPEGacm.acm
                            "msacm.ulmp3acm"= C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\ulmp3acm.acm

                            [HKLM\~\startupfolder\C:^Users^amélie^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
                            path=C:\Users\amélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
                            backup=C:\Windows\pss\MagicDisc.lnk.Startup
                            backupExtension=.Startup

                            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
                            --a------ 2007-12-22 09:20 222080 C:\Program Files\Alcohol Soft\Alcohol 120\AxCmd.exe

                            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
                            --a------ 2008-08-22 08:07 2567992 C:\Program Files\BitComet\BitComet.exe

                            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
                            --a------ 2007-10-19 20:16 286720 C:\Program Files\QuickTime\QTTask.exe

                            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
                            --a------ 2007-09-25 01:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

                            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsWelcomeCenter]
                            --a------ 2008-01-21 04:23 2153472 C:\Windows\System32\oobefldr.dll

                            [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
                            "DisableMonitoring"=dword:00000001

                            [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
                            "DisableMonitoring"=dword:00000001

                            [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
                            "DisableMonitoring"=dword:00000001

                            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
                            "{247657A5-6CCB-43FF-AFFD-2D8469C1AB76}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
                            "{DC2A6321-2C9A-45C9-B584-3C2A4FC4DC9D}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
                            "{456DAB85-7D94-49FE-BF7B-4DF953278DEC}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
                            "{F319CB14-08F6-4FB8-9D3E-D535696417A6}"= C:\Program Files\Skype\Phone\Skype.exe:Skype
                            "{E3865BC7-9752-4B49-93EC-3C8510A4A08F}"= UDP:C:\Program Files\WIBUKEY\Server\WkSvW32.exe:WIBU-KEY Network Server
                            "{4307D8A1-933C-463E-B7B4-0BB3B6929B79}"= TCP:C:\Program Files\WIBUKEY\Server\WkSvW32.exe:WIBU-KEY Network Server
                            "{C328990F-A20A-4F6E-A8BB-505BA817B50D}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
                            "{DE16EAC1-19C4-4B33-BFC0-07724E13B1A3}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
                            "{645F760F-6E68-43AF-8C5A-C9917A134364}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
                            "{50D2F47B-F0DB-4449-811F-F3C8C7668B38}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
                            "{63D48ED9-DDD2-488D-B1BB-1C01B4844D74}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
                            "TCP Query User{5C2CC0ED-AA4E-4B91-9523-C08DF9B16DAC}C:\\program files\\emule\\emule.exe"= UDP:C:\program files\emule\emule.exe:eMule
                            "UDP Query User{DC920FD2-A88D-4EB5-BE23-CE2705E0D622}C:\\program files\\emule\\emule.exe"= TCP:C:\program files\emule\emule.exe:eMule
                            "{809E4A3A-2CA8-43EC-9CBB-43A4FAF5D387}"= UDP:16030:BitComet 16030 TCP
                            "{B0DCDE60-1B6C-4219-A48F-5E56216521AF}"= TCP:16030:BitComet 16030 UDP
                            "TCP Query User{78FD4E4F-BDB7-4044-8908-8A973E50F7DD}C:\\program files\\bitcomet\\bitcomet.exe"= UDP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client
                            "UDP Query User{79E681F6-1965-4CB2-9BB8-BA97DC6C854A}C:\\program files\\bitcomet\\bitcomet.exe"= TCP:C:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client
                            "{D6A44291-2AB4-443C-B8B1-FC0E4788B2EF}"= UDP:16030:BitComet 16030 TCP
                            "{42FA6C8A-E75C-467C-BB89-8077BA1C9704}"= TCP:16030:BitComet 16030 UDP

                            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
                            "EnableFirewall"= 0 (0x0)

                            R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\Windows\system32\DRIVERS\cmdguard.sys [2008-09-29 85008]
                            R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\Windows\system32\DRIVERS\cmdhlp.sys [2008-09-29 25104]
                            R2 Basics Service;Basics Service;C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe [2007-10-09 124280]
                            R2 NMSAccessU;NMSAccessU;C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
                            R2 PDFProFiltSrv;PDFProFiltSrv;C:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe [2008-03-30 144672]
                            R2 SrvCDEject;SrvCDEject;C:\Program Files\Packard Bell\SrvCDEject.exe [2007-09-07 600064]
                            S3 CAM1210;USB video camera;C:\Windows\system32\Drivers\cam1210.sys [2007-03-22 94208]
                            S4 ErrDev;Microsoft Hardware Error Device Driver;C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
                            S4 MegaSR;MegaSR;C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
                            S4 nvrd32;NVIDIA nForce RAID Driver;C:\Windows\system32\drivers\nvrd32.sys [2007-09-11 123424]

                            [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
                            \shell\AutoRun\command - H:\Art-lantis_4.5_installer.exe

                            [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{90fa3b73-790e-11dd-82db-001c258e9fb3}]
                            \shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL M:\resycled\boot.com m:
                            \shell\Open\command - M:\resycled\boot.com m:
                            .
                            Contenu du dossier 'Tâches planifiées'

                            2008-10-09 C:\Windows\Tasks\Extension de garantie-amélie.job
                            - C:\Program Files\Packard Bell\SetupmyPC\PBCarNot.exe [2008-02-04 12:13]

                            2008-10-09 C:\Windows\Tasks\Recovery DVD Creator-amélie.job
                            - C:\Program Files\Packard Bell\SetupMyPc\MCDCheck.exe [2008-02-04 12:13]
                            .

                            **************************************************************************

                            catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                            Rootkit scan 2008-10-09 15:05:57
                            Windows 6.0.6001 Service Pack 1 NTFS

                            Recherche de processus cachés ...

                            Recherche d'éléments en démarrage automatique cachés ...

                            Recherche de fichiers cachés ...

                            C:\Users\amélie\AppData\Local\Microsoft\Portable Devices\wpdlog09.sqm 472 bytes
                            C:\Users\amélie\AppData\Local\Microsoft\Portable Devices\wpdlog10.sqm 472 bytes
                            C:\Users\amélie\AppData\Local\Microsoft\Portable Devices\wpdlog11.sqm 472 bytes
                            C:\Users\amélie\AppData\Local\Microsoft\Portable Devices\wpdlog12.sqm 472 bytes
                            C:\Users\amélie\AppData\Local\Microsoft\Portable Devices\wpdlog13.sqm 472 bytes
                            C:\Users\amélie\AppData\Local\Microsoft\Portable Devices\wpdlog14.sqm 472 bytes

                            Scan terminé avec succès
                            Fichiers cachés: 6

                            **************************************************************************
                            .
                            ------------------------ Autres processus actifs ------------------------
                            .
                            C:\Windows\System32\audiodg.exe
                            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                            C:\Windows\System32\conime.exe
                            C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                            C:\Program Files\Bonjour\mDNSResponder.exe
                            C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
                            C:\Program Files\COMODO\Firewall\cmdagent.exe
                            C:\Program Files\Packard Bell\SAXO24\HidService.exe
                            C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                            C:\Windows\System32\IoctlSvc.exe
                            C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                            C:\Windows\System32\rundll32.exe
                            C:\Windows\System32\rundll32.exe
                            C:\Windows\System32\WUDFHost.exe
                            C:\Program Files\Windows Media Player\wmpnscfg.exe
                            C:\Program Files\Windows Media Player\wmpnetwk.exe
                            C:\Program Files\Windows Live\Messenger\usnsvc.exe
                            C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
                            C:\Windows\System32\wbem\WMIADAP.exe
                            C:\Windows\servicing\TrustedInstaller.exe
                            C:\Windows\System32\dllhost.exe
                            .
                            **************************************************************************
                            .
                            Heure de fin: 2008-10-09 15:10:29 - La machine a redémarré
                            ComboFix-quarantined-files.txt 2008-10-09 13:10:18
                            ComboFix2.txt 2008-10-08 20:19:04

                            Avant-CF: 369 123 258 368 octets libres
                            Après-CF: 368,819,539,968 octets libres

                            3134 --- E O F --- 2008-10-09 01:11:37

                            Sinon, j'ai essayé de démarrer le scan d'eset online sacanner, mais cela n'a pas marché (soit disant que mon ordinnateur n'a pas le système requis!!!).
                            1. + 2008-07-27 17:58:36 438,272 ----a-w C:\Windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1fd49b5551906ebe\webengine.dll
                              + 2008-07-27 18:00:28 37,896 ----a-w C:\Windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_7357fe437a1ad1ff\WMINet_Utils.dll
                              + 2008-07-27 17:55:56 37,896 ----a-w C:\Windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_5c9014e793bd16f2\WMINet_Utils.dll
                              + 2008-07-27 18:03:16 37,896 ----a-w C:\Windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_7332e2f97a6cdea0\WMINet_Utils.dll
                              + 2008-07-27 17:58:36 37,896 ----a-w C:\Windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_5c675395941257b3\WMINet_Utils.dll
                              + 2008-06-20 01:18:02 4,210,688 ----a-w C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16708_none_aa52d7cf92c6806a\PresentationCore.dll
                              + 2008-06-20 01:18:04 1,738,760 ----a-w C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.16708_none_aa52d7cf92c6806a\wpfgfx_v0300.dll
                              + 2008-06-20 01:12:56 4,210,688 ----a-w C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20864_none_aa9793eaac18627e\PresentationCore.dll
                              + 2008-06-20 01:12:58 1,738,760 ----a-w C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6000.20864_none_aa9793eaac18627e\wpfgfx_v0300.dll
                              + 2008-06-20 01:14:43 4,210,688 ----a-w C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18096_none_abd5c4af9037dcff\PresentationCore.dll
                              + 2008-06-20 01:14:45 1,738,760 ----a-w C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.18096_none_abd5c4af9037dcff\wpfgfx_v0300.dll
                              + 2008-06-20 01:13:31 4,210,688 ----a-w C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22208_none_acc2b340a90ab125\PresentationCore.dll
                              + 2008-06-20 01:13:33 1,738,760 ----a-w C:\Windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6001.22208_none_acc2b340a90ab125\wpfgfx_v0300.dll
                              + 2008-07-27 18:00:26 53,248 ----a-w C:\Windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.16720_none_173a294b153205b9\RegAsm.exe
                              + 2008-07-27 17:55:54 53,248 ----a-w C:\Windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.20883_none_00723fef2ed44aac\RegAsm.exe
                              + 2008-07-27 18:03:14 53,248 ----a-w C:\Windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.18111_none_17150e011584125a\RegAsm.exe
                              + 2008-07-27 17:58:34 53,248 ----a-w C:\Windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.22230_none_00497e9d2f298b6d\RegAsm.exe
                              + 2008-07-27 18:00:26 32,768 ----a-w C:\Windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.16720_none_ea5553f167a4fe69\RegSvcs.exe
                              + 2008-07-27 17:55:54 32,768 ----a-w C:\Windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.20883_none_d38d6a958147435c\RegSvcs.exe
                              + 2008-07-27 18:03:14 32,768 ----a-w C:\Windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.18111_none_ea3038a767f70b0a\RegSvcs.exe
                              + 2008-07-27 17:58:34 32,768 ----a-w C:\Windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.22230_none_d364a943819c841d\RegSvcs.exe
                              + 2008-07-27 18:00:27 486,400 ----a-w C:\Windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.16720_none_f35be08bdcd55c80\System.Data.OracleClient.dll
                              + 2008-07-27 17:55:55 486,400 ----a-w C:\Windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.20883_none_dc93f72ff677a173\System.Data.OracleClient.dll
                              + 2008-07-27 18:03:15 486,400 ----a-w C:\Windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.18111_none_f336c541dd276921\System.Data.OracleClient.dll
                              + 2008-07-27 17:58:35 486,400 ----a-w C:\Windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.22230_none_dc6b35ddf6cce234\System.Data.OracleClient.dll
                              + 2008-07-27 18:00:26 2,933,248 ----a-w C:\Windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.16720_none_94bc651bb3dd8769\System.Data.dll
                              + 2008-07-27 17:55:55 2,933,248 ----a-w C:\Windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.20883_none_7df47bbfcd7fcc5c\System.Data.dll
                              + 2008-07-27 18:03:15 2,933,248 ----a-w C:\Windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.18111_none_949749d1b42f940a\System.Data.dll
                              + 2008-07-27 17:58:35 2,933,248 ----a-w C:\Windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.22230_none_7dcbba6dcdd50d1d\System.Data.dll
                              + 2008-07-27 18:00:27 258,048 ----a-w C:\Windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.dll
                              + 2008-07-27 18:19:30 113,664 ----a-w C:\Windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.Wrapper.dll
                              + 2008-07-27 17:55:55 258,048 ----a-w C:\Windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6fc766fbdb\System.EnterpriseServices.dll
                              + 2008-07-27 18:15:31 113,664 ----a-w C:\Windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6fc766fbdb\System.EnterpriseServices.Wrapper.dll
                              + 2008-07-27 18:03:15 258,048 ----a-w C:\Windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881ae16c389\System.EnterpriseServices.dll
                              + 2008-07-27 18:22:54 113,664 ----a-w C:\Windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881ae16c389\System.EnterpriseServices.Wrapper.dll
                              + 2008-07-27 17:58:35 258,048 ----a-w C:\Windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.dll
                              + 2008-07-27 18:19:59 113,664 ----a-w C:\Windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.Wrapper.dll
                              + 2008-06-20 01:18:03 368,640 ----a-w C:\Windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6000.16708_none_7162284d78ee8495\System.Printing.dll
                              + 2008-06-20 01:12:56 368,640 ----a-w C:\Windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6000.20864_none_71a6e468924066a9\System.Printing.dll
                              + 2008-06-20 01:14:43 368,640 ----a-w C:\Windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6001.18096_none_72e5152d765fe12a\System.Printing.dll
                              + 2008-06-20 01:13:31 368,640 ----a-w C:\Windows\winsxs\x86_system.printing_31bf3856ad364e35_6.0.6001.22208_none_73d203be8f32b550\System.Printing.dll
                              + 2008-07-27 18:00:27 261,632 ----a-w C:\Windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.16720_none_13b0b874683b2e16\System.Transactions.dll
                              + 2008-07-27 17:55:55 261,632 ----a-w C:\Windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.20883_none_fce8cf1881dd7309\System.Transactions.dll
                              + 2008-07-27 18:03:15 261,632 ----a-w C:\Windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.18111_none_138b9d2a688d3ab7\System.Transactions.dll
                              + 2008-07-27 17:58:35 261,632 ----a-w C:\Windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.22230_none_fcc00dc68232b3ca\System.Transactions.dll
                              + 2008-07-27 18:00:27 5,238,784 ----a-w C:\Windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16720_none_f74db0bb1630f0b7\System.Web.dll
                              + 2008-07-27 17:55:55 5,238,784 ----a-w C:\Windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.20883_none_e085c75f2fd335aa\System.Web.dll
                              + 2008-07-27 18:03:15 5,238,784 ----a-w C:\Windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.18111_none_f72895711682fd58\System.Web.dll
                              + 2008-07-27 17:58:35 5,238,784 ----a-w C:\Windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.22230_none_e05d060d3028766b\System.Web.dll
                              + 2008-06-20 01:17:52 622,080 ----a-w C:\Windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6000.16708_none_2ff970587479d632\icardagt.exe
                              + 2008-06-20 01:12:47 622,080 ----a-w C:\Windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6000.20864_none_303e2c738dcbb846\icardagt.exe
                              + 2008-06-20 01:14:33 622,080 ----a-w C:\Windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6001.18096_none_317c5d3871eb32c7\icardagt.exe
                              + 2008-06-20 01:13:21 622,080 ----a-w C:\Windows\winsxs\x86_wcf-icardagt_exe_31bf3856ad364e35_6.0.6001.22208_none_32694bc98abe06ed\icardagt.exe
                              + 2008-06-20 01:17:52 11,264 ----a-w C:\Windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6000.16708_none_0f2f11926daa5c1a\icardres.dll
                              + 2008-06-20 01:12:47 11,264 ----a-w C:\Windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6000.20864_none_0f73cdad86fc3e2e\icardres.dll
                              + 2008-06-20 01:14:34 11,264 ----a-w C:\Windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6001.18096_none_10b1fe726b1bb8af\icardres.dll
                              + 2008-06-20 01:13:21 11,264 ----a-w C:\Windows\winsxs\x86_wcf-icardres_dll_vista_31bf3856ad364e35_6.0.6001.22208_none_119eed0383ee8cd5\icardres.dll
                              + 2008-06-20 01:17:52 97,800 ----a-w C:\Windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6000.16708_none_a208c058b2726d70\infocardapi.dll
                              + 2008-06-20 01:12:47 97,800 ----a-w C:\Windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6000.20864_none_a24d7c73cbc44f84\infocardapi.dll
                              + 2008-06-20 01:14:34 97,800 ----a-w C:\Windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6001.18096_none_a38bad38afe3ca05\infocardapi.dll
                              + 2008-06-20 01:13:21 97,800 ----a-w C:\Windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6001.22208_none_a4789bc9c8b69e2b\infocardapi.dll
                              + 2008-06-20 01:17:50 181,264 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6000.16708_none_fe4321a01ff82159\SMConfigInstaller.exe
                              + 2008-06-20 01:12:45 181,264 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6000.20864_none_fe87ddbb394a036d\SMConfigInstaller.exe
                              + 2008-06-20 01:14:31 181,264 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6001.18096_none_ffc60e801d697dee\SMConfigInstaller.exe
                              + 2008-06-20 01:13:19 181,264 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_cfg_ins_exe_31bf3856ad364e35_6.0.6001.22208_none_00b2fd11363c5214\SMConfigInstaller.exe
                              + 2008-06-20 01:17:50 11,280 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6000.16708_none_768bf6749b33d781\ServiceModelEvents.dll
                              + 2008-06-20 01:12:45 11,280 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6000.20864_none_76d0b28fb485b995\ServiceModelEvents.dll
                              + 2008-06-20 01:14:31 11,280 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6001.18096_none_780ee35498a53416\ServiceModelEvents.dll
                              + 2008-06-20 01:13:19 11,280 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_evt_dll_vista_31bf3856ad364e35_6.0.6001.22208_none_78fbd1e5b178083c\ServiceModelEvents.dll
                              + 2008-06-20 01:17:50 11,288 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6000.16708_none_c71e0ae74c96da14\ServiceModelInstallRC.dll
                              + 2008-06-20 01:12:45 11,288 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6000.20864_none_c762c70265e8bc28\ServiceModelInstallRC.dll
                              + 2008-06-20 01:14:31 11,288 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6001.18096_none_c8a0f7c74a0836a9\ServiceModelInstallRC.dll
                              + 2008-06-20 01:13:19 11,288 ----a-w C:\Windows\winsxs\x86_wcf-m_sm_ins_rc_dll_31bf3856ad364e35_6.0.6001.22208_none_c98de65862db0acf\ServiceModelInstallRC.dll
                              + 2008-06-20 01:17:50 20,504 ----a-w C:\Windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6000.16708_none_a3ffcadd4e70a1cb\ServiceMonikerSupport.dll
                              + 2008-06-20 01:12:45 20,504 ----a-w C:\Windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6000.20864_none_a44486f867c283df\ServiceMonikerSupport.dll
                              + 2008-06-20 01:14:31 20,504 ----a-w C:\Windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6001.18096_none_a582b7bd4be1fe60\ServiceMonikerSupport.dll
                              + 2008-06-20 01:13:19 20,504 ----a-w C:\Windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6001.22208_none_a66fa64e64b4d286\ServiceMonikerSupport.dll
                              + 2008-06-20 01:17:48 126,976 ----a-w C:\Windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6000.16708_none_63949d8530c1b03d\System.IdentityModel.Selectors.dll
                              + 2008-06-20 01:12:43 126,976 ----a-w C:\Windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6000.20864_none_4ccd53a14a6341c9\System.IdentityModel.Selectors.dll
                              + 2008-06-20 01:14:29 126,976 ----a-w C:\Windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6001.18096_none_6379c99b310a6d10\System.IdentityModel.Selectors.dll
                              + 2008-06-20 01:13:17 126,976 ----a-w C:\Windows\winsxs\x86_wcf-system.identitymodel.selectors_b03f5f7f11d50a3a_6.0.6001.22208_none_4ca2f28d4aba1c9a\System.IdentityModel.Selectors.dll
                              + 2008-06-20 01:17:48 430,080 ----a-w C:\Windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6000.16708_none_25cbae22402e02cf\System.IdentityModel.dll
                              + 2008-06-20 01:12:43 430,080 ----a-w C:\Windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6000.20864_none_0f04643e59cf945b\System.IdentityModel.dll
                              + 2008-06-20 01:14:29 430,080 ----a-w C:\Windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6001.18096_none_25b0da384076bfa2\System.IdentityModel.dll
                              + 2008-06-20 01:13:17 430,080 ----a-w C:\Windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6001.22208_none_0eda032a5a266f2c\System.IdentityModel.dll
                              + 2008-06-20 01:17:48 131,072 ----a-w C:\Windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6000.16708_none_da90e376bacdcee4\System.IO.Log.dll
                              + 2008-06-20 01:12:43 131,072 ----a-w C:\Windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6000.20864_none_c3c99992d46f6070\System.IO.Log.dll
                              + 2008-06-20 01:14:29 131,072 ----a-w C:\Windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6001.18096_none_da760f8cbb168bb7\System.IO.Log.dll
                              + 2008-06-20 01:13:17 131,072 ----a-w C:\Windows\winsxs\x86_wcf-system.io.log_b03f5f7f11d50a3a_6.0.6001.22208_none_c39f387ed4c63b41\System.IO.Log.dll
                              + 2008-06-20 01:17:48 966,656 ----a-w C:\Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.16708_none_0763f56b20648936\System.Runtime.Serialization.dll
                              + 2008-06-20 01:12:43 966,656 ----a-w C:\Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.20864_none_f09cab873a061ac2\System.Runtime.Serialization.dll
                              + 2008-06-20 01:14:29 966,656 ----a-w C:\Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.18096_none_0749218120ad4609\System.Runtime.Serialization.dll
                              + 2008-06-20 01:13:17 966,656 ----a-w C:\Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.22208_none_f0724a733a5cf593\System.Runtime.Serialization.dll
                              + 2008-06-20 01:17:48 5,931,008 ----a-w C:\Windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.16708_none_151c0556eb2446e8\System.ServiceModel.dll
                              + 2008-06-20 01:12:44 5,931,008 ----a-w C:\Windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6000.20864_none_fe54bb7304c5d874\System.ServiceModel.dll
                              + 2008-06-20 01:14:30 5,931,008 ----a-w C:\Windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.18096_none_1501316ceb6d03bb\System.ServiceModel.dll
                              + 2008-06-20 01:13:17 5,931,008 ----a-w C:\Windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.22208_none_fe2a5a5f051cb345\System.ServiceModel.dll
                              + 2008-06-20 01:18:04 71,160 ----a-w C:\Windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6000.16708_none_a9d2d87807800ad7\PenIMC.dll
                              + 2008-06-20 01:12:57 71,160 ----a-w C:\Windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6000.20864_none_aa17949320d1eceb\PenIMC.dll
                              + 2008-06-20 01:14:44 71,160 ----a-w C:\Windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6001.18096_none_ab55c55804f1676c\PenIMC.dll
                              + 2008-06-20 01:13:32 71,160 ----a-w C:\Windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6001.22208_none_ac42b3e91dc43b92\PenIMC.dll
                              + 2008-06-20 01:18:02 598,016 ----a-w C:\Windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6000.16708_none_4e2f046e504dbf2f\PresentationBuildTasks.dll
                              + 2008-06-20 01:12:56 598,016 ----a-w C:\Windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6000.20864_none_4e73c089699fa143\PresentationBuildTasks.dll
                              + 2008-06-20 01:14:42 598,016 ----a-w C:\Windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6001.18096_none_4fb1f14e4dbf1bc4\PresentationBuildTasks.dll
                              + 2008-06-20 01:13:30 598,016 ----a-w C:\Windows\winsxs\x86_wpf-presentationbuildtasks_31bf3856ad364e35_6.0.6001.22208_none_509edfdf6691efea\PresentationBuildTasks.dll
                              + 2008-06-20 01:18:05 105,016 ----a-w C:\Windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6000.16708_none_c7b724ab9124a824\PresentationCFFRasterizerNative_v0300.dll
                              + 2008-06-20 01:12:58 105,016 ----a-w C:\Windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6000.20864_none_c7fbe0c6aa768a38\PresentationCFFRasterizerNative_v0300.dll
                              + 2008-06-20 01:14:45 105,016 ----a-w C:\Windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6001.18096_none_c93a118b8e9604b9\PresentationCFFRasterizerNative_v0300.dll
                              + 2008-06-20 01:13:33 105,016 ----a-w C:\Windows\winsxs\x86_wpf-presentationcffrasterizernative_31bf3856ad364e35_6.0.6001.22208_none_ca27001ca768d8df\PresentationCFFRasterizerNative_v0300.dll
                              + 2008-06-20 01:18:04 46,104 ----a-w C:\Windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6000.16708_none_03bb5c5f150048a8\PresentationFontCache.exe
                              + 2008-06-20 01:12:57 46,104 ----a-w C:\Windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6000.20864_none_0400187a2e522abc\PresentationFontCache.exe
                              + 2008-06-20 01:14:44 46,104 ----a-w C:\Windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6001.18096_none_053e493f1271a53d\PresentationFontCache.exe
                              + 2008-06-20 01:13:32 46,104 ----a-w C:\Windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6001.22208_none_062b37d02b447963\PresentationFontCache.exe
                              + 2008-06-20 01:18:02 196,608 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6000.16708_none_30a585270b6384ca\PresentationFramework.Aero.dll
                              + 2008-06-20 01:12:56 196,608 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6000.20864_none_30ea414224b566de\PresentationFramework.Aero.dll
                              + 2008-06-20 01:14:43 196,608 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6001.18096_none_3228720708d4e15f\PresentationFramework.Aero.dll
                              + 2008-06-20 01:13:31 196,608 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.aero_31bf3856ad364e35_6.0.6001.22208_none_3315609821a7b585\PresentationFramework.Aero.dll
                              + 2008-06-20 01:18:02 139,264 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6000.16708_none_f28b0aca2c97e2a7\PresentationFramework.Classic.dll
                              + 2008-06-20 01:12:56 139,264 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6000.20864_none_f2cfc6e545e9c4bb\PresentationFramework.Classic.dll
                              + 2008-06-20 01:14:43 139,264 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6001.18096_none_f40df7aa2a093f3c\PresentationFramework.Classic.dll
                              + 2008-06-20 01:13:31 139,264 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.classic_31bf3856ad364e35_6.0.6001.22208_none_f4fae63b42dc1362\PresentationFramework.Classic.dll
                              + 2008-06-20 01:18:03 397,312 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6000.16708_none_2f805e050c0d9c4d\PresentationFramework.Luna.dll
                              + 2008-06-20 01:12:56 397,312 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6000.20864_none_2fc51a20255f7e61\PresentationFramework.Luna.dll
                              + 2008-06-20 01:14:43 397,312 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6001.18096_none_31034ae5097ef8e2\PresentationFramework.Luna.dll
                              + 2008-06-20 01:13:31 397,312 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.luna_31bf3856ad364e35_6.0.6001.22208_none_31f039762251cd08\PresentationFramework.Luna.dll
                              + 2008-06-20 01:18:03 163,840 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6000.16708_none_e8d6f689ad14b5dd\PresentationFramework.Royale.dll
                              + 2008-06-20 01:12:56 163,840 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6000.20864_none_e91bb2a4c66697f1\PresentationFramework.Royale.dll
                              + 2008-06-20 01:14:43 163,840 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6001.18096_none_ea59e369aa861272\PresentationFramework.Royale.dll
                              + 2008-06-20 01:13:31 163,840 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework.royale_31bf3856ad364e35_6.0.6001.22208_none_eb46d1fac358e698\PresentationFramework.Royale.dll
                              + 2008-06-20 01:18:03 5,283,840 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.16708_none_6ca8219658c89e97\PresentationFramework.dll
                              + 2008-06-20 01:12:56 5,283,840 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6000.20864_none_6cecddb1721a80ab\PresentationFramework.dll
                              + 2008-06-20 01:14:43 5,283,840 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.18096_none_6e2b0e765639fb2c\PresentationFramework.dll
                              + 2008-06-20 01:13:31 5,283,840 ----a-w C:\Windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6001.22208_none_6f17fd076f0ccf52\PresentationFramework.dll
                              + 2008-06-20 01:18:04 132,120 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6000.16708_none_6e2d32c922d172b5\PresentationHostDLL.dll
                              + 2008-06-20 01:12:57 132,120 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6000.20864_none_6e71eee43c2354c9\PresentationHostDLL.dll
                              + 2008-06-20 01:14:44 132,120 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6001.18096_none_6fb01fa92042cf4a\PresentationHostDLL.dll
                              + 2008-06-20 01:13:32 132,120 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6001.22208_none_709d0e3a3915a370\PresentationHostDLL.dll
                              + 2008-06-20 01:18:05 326,160 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6000.16708_none_6e15f8e122f01527\PresentationHost.exe
                              + 2008-06-20 01:12:58 326,160 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6000.20864_none_6e5ab4fc3c41f73b\PresentationHost.exe
                              + 2008-06-20 01:14:45 326,160 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6001.18096_none_6f98e5c1206171bc\PresentationHost.exe
                              + 2008-06-20 01:13:33 326,160 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6001.22208_none_7085d452393445e2\PresentationHost.exe
                              + 2008-06-20 01:18:05 43,544 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6000.16708_none_28acdc3c7ca15459\PresentationHostProxy.dll
                              + 2008-06-20 01:12:58 43,544 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6000.20864_none_28f1985795f3366d\PresentationHostProxy.dll
                              + 2008-06-20 01:14:45 43,544 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6001.18096_none_2a2fc91c7a12b0ee\PresentationHostProxy.dll
                              + 2008-06-20 01:13:33 43,544 ----a-w C:\Windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6001.22208_none_2b1cb7ad92e58514\PresentationHostProxy.dll
                              + 2008-06-20 01:18:05 781,344 ----a-w C:\Windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6000.16708_none_54e7d16a49527fd6\PresentationNative_v0300.dll
                              + 2008-06-20 01:12:58 781,344 ----a-w C:\Windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6000.20864_none_552c8d8562a461ea\PresentationNative_v0300.dll
                              + 2008-06-20 01:14:45 781,344 ----a-w C:\Windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6001.18096_none_566abe4a46c3dc6b\PresentationNative_v0300.dll
                              + 2008-06-20 01:13:33 781,344 ----a-w C:\Windows\winsxs\x86_wpf-presentationnative_31bf3856ad364e35_6.0.6001.22208_none_5757acdb5f96b091\PresentationNative_v0300.dll
                              + 2008-06-20 01:18:03 528,384 ----a-w C:\Windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6000.16708_none_fe4bf0c02b8bb752\ReachFramework.dll
                              + 2008-06-20 01:12:56 528,384 ----a-w C:\Windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6000.20864_none_fe90acdb44dd9966\ReachFramework.dll
                              + 2008-06-20 01:14:43 528,384 ----a-w C:\Windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6001.18096_none_ffcedda028fd13e7\ReachFramework.dll
                              + 2008-06-20 01:13:31 528,384 ----a-w C:\Windows\winsxs\x86_wpf-reachframework_31bf3856ad364e35_6.0.6001.22208_none_00bbcc3141cfe80d\ReachFramework.dll
                              + 2008-01-21 02:25:20 688,128 ----a-w C:\Windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6000.16708_none_7fdeb5cb1f6006f4\System.Speech.dll
                              + 2008-01-21 02:25:20 688,128 ----a-w C:\Windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6000.20864_none_802371e638b1e908\System.Speech.dll
                              + 2008-01-21 02:25:20 688,128 ----a-w C:\Windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18096_none_8161a2ab1cd16389\System.Speech.dll
                              + 2008-01-21 02:25:20 688,128 ----a-w C:\Windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.22208_none_824e913c35a437af\System.Speech.dll
                              + 2008-06-20 01:18:03 167,936 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6000.16708_none_d89abdc0441aa5f7\UIAutomationClient.dll
                              + 2008-06-20 01:12:57 167,936 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6000.20864_none_d8df79db5d6c880b\UIAutomationClient.dll
                              + 2008-06-20 01:14:43 167,936 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6001.18096_none_da1daaa0418c028c\UIAutomationClient.dll
                              + 2008-06-20 01:13:31 167,936 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationclient_31bf3856ad364e35_6.0.6001.22208_none_db0a99315a5ed6b2\UIAutomationClient.dll
                              + 2008-06-20 01:18:03 385,024 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6000.16708_none_52ddd5f551389366\UIAutomationClientsideProviders.dll
                              + 2008-06-20 01:12:57 385,024 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6000.20864_none_532292106a8a757a\UIAutomationClientsideProviders.dll
                              + 2008-06-20 01:14:43 385,024 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6001.18096_none_5460c2d54ea9effb\UIAutomationClientsideProviders.dll
                              + 2008-06-20 01:13:31 385,024 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationclientsideproviders_31bf3856ad364e35_6.0.6001.22208_none_554db166677cc421\UIAutomationClientsideProviders.dll
                              + 2008-06-20 01:18:03 40,960 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6000.16708_none_02be96e58dc41a05\UIAutomationProvider.dll
                              + 2008-06-20 01:12:57 40,960 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6000.20864_none_03035300a715fc19\UIAutomationProvider.dll
                              + 2008-06-20 01:14:43 40,960 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6001.18096_none_044183c58b35769a\UIAutomationProvider.dll
                              + 2008-06-20 01:13:31 40,960 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6001.22208_none_052e7256a4084ac0\UIAutomationProvider.dll
                              + 2008-06-20 01:18:03 98,304 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6000.16708_none_5b33e6fd9dc2c35f\UIAutomationTypes.dll
                              + 2008-06-20 01:12:57 98,304 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6000.20864_none_5b78a318b714a573\UIAutomationTypes.dll
                              + 2008-06-20 01:14:43 98,304 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6001.18096_none_5cb6d3dd9b341ff4\UIAutomationTypes.dll
                              + 2008-06-20 01:13:31 98,304 ----a-w C:\Windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6001.22208_none_5da3c26eb406f41a\UIAutomationTypes.dll
                              + 2008-06-20 01:18:03 1,245,184 ----a-w C:\Windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6000.16708_none_558ed2744a98566d\WindowsBase.dll
                              + 2008-06-20 01:12:57 1,245,184 ----a-w C:\Windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6000.20864_none_55d38e8f63ea3881\WindowsBase.dll
                              + 2008-06-20 01:14:44 1,245,184 ----a-w C:\Windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6001.18096_none_5711bf544809b302\WindowsBase.dll
                              + 2008-06-20 01:13:32 1,245,184 ----a-w C:\Windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6001.22208_none_57feade560dc8728\WindowsBase.dll
                              + 2008-06-20 01:18:03 94,208 ----a-w C:\Windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6000.16708_none_f83dd4f37ea24879\WindowsFormsIntegration.dll
                              + 2008-06-20 01:12:57 94,208 ----a-w C:\Windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6000.20864_none_f882910e97f42a8d\WindowsFormsIntegration.dll
                              + 2008-06-20 01:14:44 94,208 ----a-w C:\Windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6001.18096_none_f9c0c1d37c13a50e\WindowsFormsIntegration.dll
                              + 2008-06-20 01:13:32 94,208 ----a-w C:\Windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6001.22208_none_faadb06494e67934\WindowsFormsIntegration.dll
                              + 2008-06-20 01:18:04 25,616 ----a-w C:\Windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6000.16708_none_543012117fbf197d\XamlViewer_v0300.exe
                              + 2008-06-20 01:12:58 25,616 ----a-w C:\Windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6000.20864_none_5474ce2c9910fb91\XamlViewer_v0300.exe
                              + 2008-06-20 01:14:45 25,616 ----a-w C:\Windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6001.18096_none_55b2fef17d307612\XamlViewer_v0300.exe
                              + 2008-06-20 01:13:33 25,616 ----a-w C:\Windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6001.22208_none_569fed8296034a38\XamlViewer_v0300.exe
                              + 2008-06-20 01:18:05 301,568 ----a-w C:\Windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6000.16708_none_c75532110b61771a\XPSViewer.exe
                              + 2008-06-20 01:12:59 301,568 ----a-w C:\Windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6000.20864_none_c799ee2c24b3592e\XPSViewer.exe
                              + 2008-06-20 01:14:45 301,568 ----a-w C:\Windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6001.18096_none_c8d81ef108d2d3af\XPSViewer.exe
                              + 2008-06-20 01:13:33 301,568 ----a-w C:\Windows\winsxs\x86_wpf-xpsviewerexe_31bf3856ad364e35_6.0.6001.22208_none_c9c50d8221a5a7d5\XPSViewer.exe
                              + 2008-06-20 01:18:06 1,138,688 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6000.16708_none_3087b8727ad0e447\System.Workflow.Activities.dll
                              + 2008-06-20 01:12:59 1,138,688 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6000.20864_none_30cc748d9422c65b\System.Workflow.Activities.dll
                              + 2008-06-20 01:14:46 1,138,688 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6001.18096_none_320aa552784240dc\System.Workflow.Activities.dll
                              + 2008-06-20 01:13:34 1,138,688 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.activities_31bf3856ad364e35_6.0.6001.22208_none_32f793e391151502\System.Workflow.Activities.dll
                              + 2008-06-20 01:18:06 1,630,208 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6000.16708_none_8a05df0910e7dfb8\System.Workflow.ComponentModel.dll
                              + 2008-06-20 01:13:00 1,630,208 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6000.20864_none_8a4a9b242a39c1cc\System.Workflow.ComponentModel.dll
                              + 2008-06-20 01:14:47 1,630,208 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6001.18096_none_8b88cbe90e593c4d\System.Workflow.ComponentModel.dll
                              + 2008-06-20 01:13:35 1,630,208 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_6.0.6001.22208_none_8c75ba7a272c1073\System.Workflow.ComponentModel.dll
                              + 2008-06-20 01:18:07 540,672 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6000.16708_none_633ca329a2d930cc\System.Workflow.Runtime.dll
                              + 2008-06-20 01:13:00 540,672 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6000.20864_none_63815f44bc2b12e0\System.Workflow.Runtime.dll
                              + 2008-06-20 01:14:47 540,672 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6001.18096_none_64bf9009a04a8d61\System.Workflow.Runtime.dll
                              + 2008-06-20 01:13:35 540,672 ----a-w C:\Windows\winsxs\x86_wwf-system.workflow.runtime_31bf3856ad364e35_6.0.6001.22208_none_65ac7e9ab91d6187\System.Workflow.Runtime.dll
                              1. + 2008-07-27 18:00:25 18,944 ----a-w C:\Windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_967eaf5860c6dda6\mscorsn.dll
                                + 2008-07-27 17:55:53 18,944 ----a-w C:\Windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7fb6c5fc7a692299\mscorsn.dll
                                + 2008-07-27 18:03:13 18,944 ----a-w C:\Windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9659940e6118ea47\mscorsn.dll
                                + 2008-07-27 17:58:33 18,944 ----a-w C:\Windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7f8e04aa7abe635a\mscorsn.dll
                                + 2008-07-27 18:00:25 230,912 ----a-w C:\Windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5b1627d403b6b0de\mscorsvc.dll
                                + 2008-07-27 17:55:53 230,912 ----a-w C:\Windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.20883_none_444e3e781d58f5d1\mscorsvc.dll
                                + 2008-07-27 18:03:13 230,912 ----a-w C:\Windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5af10c8a0408bd7f\mscorsvc.dll
                                + 2008-07-27 17:58:33 230,912 ----a-w C:\Windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.22230_none_44257d261dae3692\mscorsvc.dll
                                + 2008-07-27 18:00:25 69,632 ----a-w C:\Windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_201c2ab5e826014f\mscorsvw.exe
                                + 2008-07-27 17:55:53 69,632 ----a-w C:\Windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_0954415a01c84642\mscorsvw.exe
                                + 2008-07-27 18:03:13 69,632 ----a-w C:\Windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1ff70f6be8780df0\mscorsvw.exe
                                + 2008-07-27 17:58:33 69,632 ----a-w C:\Windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_092b8008021d8703\mscorsvw.exe
                                + 2008-07-27 18:00:25 19,456 ----a-w C:\Windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cec3db076487f2b9\mscortim.dll
                                + 2008-07-27 17:55:53 19,456 ----a-w C:\Windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b7fbf1ab7e2a37ac\mscortim.dll
                                + 2008-07-27 18:03:13 19,456 ----a-w C:\Windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ce9ebfbd64d9ff5a\mscortim.dll
                                + 2008-07-27 17:58:33 19,456 ----a-w C:\Windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b7d330597e7f786d\mscortim.dll
                                + 2008-07-27 18:00:25 5,815,296 ----a-w C:\Windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_328358fc2e900398\mscorwks.dll
                                + 2008-07-27 17:55:53 5,815,296 ----a-w C:\Windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1bbb6fa04832488b\mscorwks.dll
                                + 2008-07-27 18:03:13 5,815,296 ----a-w C:\Windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_325e3db22ee21039\mscorwks.dll
                                + 2008-07-27 17:58:33 5,815,296 ----a-w C:\Windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1b92ae4e4887894c\mscorwks.dll
                                + 2008-07-27 18:00:22 82,944 ----a-w C:\Windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.16720_none_399312dcb0de0ef0\NETFXSBS10.exe
                                + 2008-07-27 17:55:49 82,944 ----a-w C:\Windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.20883_none_39ded0fdca29a265\NETFXSBS10.exe
                                + 2008-07-27 18:03:10 82,944 ----a-w C:\Windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.18111_none_3b8521b8adfb9d47\NETFXSBS10.exe
                                + 2008-07-27 17:58:30 82,944 ----a-w C:\Windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.22230_none_3bf81e61c72a5b9c\NETFXSBS10.exe
                                + 2008-07-27 18:00:26 100,856 ----a-w C:\Windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_77e2e7244a50f2f9\ngen.exe
                                + 2008-07-27 17:55:54 100,856 ----a-w C:\Windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_611afdc863f337ec\ngen.exe
                                + 2008-07-27 18:03:14 100,856 ----a-w C:\Windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_77bdcbda4aa2ff9a\ngen.exe
                                + 2008-07-27 17:58:34 100,856 ----a-w C:\Windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_60f23c76644878ad\ngen.exe
                                + 2008-07-27 18:00:26 24,584 ----a-w C:\Windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dc5677122d543f36\normalization.dll
                                + 2008-07-27 17:55:54 24,584 ----a-w C:\Windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c58e8db646f68429\normalization.dll
                                + 2008-07-27 18:03:14 24,584 ----a-w C:\Windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dc315bc82da64bd7\normalization.dll
                                + 2008-07-27 17:58:34 24,584 ----a-w C:\Windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c565cc64474bc4ea\normalization.dll
                                + 2008-07-27 18:00:26 88,584 ----a-w C:\Windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_29fcfd8eff55da0a\PerfCounter.dll
                                + 2008-07-27 17:55:54 88,584 ----a-w C:\Windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1335143318f81efd\PerfCounter.dll
                                + 2008-07-27 18:03:14 88,584 ----a-w C:\Windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_29d7e244ffa7e6ab\PerfCounter.dll
                                + 2008-07-27 17:58:34 88,584 ----a-w C:\Windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_130c52e1194d5fbe\PerfCounter.dll
                                + 2008-07-27 18:00:26 143,360 ----a-w C:\Windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_9cbc7d3e49842763\peverify.dll
                                + 2008-07-27 17:55:54 143,360 ----a-w C:\Windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_85f493e263266c56\peverify.dll
                                + 2008-07-27 18:03:14 143,360 ----a-w C:\Windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9c9761f449d63404\peverify.dll
                                + 2008-07-27 17:58:34 143,360 ----a-w C:\Windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_85cbd290637bad17\peverify.dll
                                + 2008-07-27 18:00:22 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.16720_none_a4b3513de20981cb\sbs_diasymreader.dll
                                + 2008-07-27 17:55:49 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.20883_none_a4ff0f5efb551540\sbs_diasymreader.dll
                                + 2008-07-27 18:03:10 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.18111_none_a6a56019df271022\sbs_diasymreader.dll
                                + 2008-07-27 17:58:30 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.22230_none_a7185cc2f855ce77\sbs_diasymreader.dll
                                + 2008-07-27 18:00:22 14,336 ----a-w C:\Windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.16720_none_15bc4e0a4553cb65\sbs_iehost.dll
                                + 2008-07-27 17:55:49 14,336 ----a-w C:\Windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.20883_none_16080c2b5e9f5eda\sbs_iehost.dll
                                + 2008-07-27 18:03:10 14,336 ----a-w C:\Windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.18111_none_17ae5ce6427159bc\sbs_iehost.dll
                                + 2008-07-27 17:58:30 14,336 ----a-w C:\Windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.22230_none_1821598f5ba01811\sbs_iehost.dll
                                + 2008-07-27 18:00:22 14,360 ----a-w C:\Windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.16720_none_fadb1f7894625625\sbs_microsoft.jscript.dll
                                + 2008-07-27 17:55:49 14,360 ----a-w C:\Windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.20883_none_fb26dd99adade99a\sbs_microsoft.jscript.dll
                                + 2008-07-27 18:03:10 14,360 ----a-w C:\Windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.18111_none_fccd2e54917fe47c\sbs_microsoft.jscript.dll
                                + 2008-07-27 17:58:30 14,360 ----a-w C:\Windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.22230_none_fd402afdaaaea2d1\sbs_microsoft.jscript.dll
                                + 2008-07-27 18:00:22 14,904 ----a-w C:\Windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.16720_none_f5ad60ba98e5129e\sbs_microsoft.vsa.vb.codedomprocessor.dll
                                + 2008-07-27 17:55:49 14,904 ----a-w C:\Windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.20883_none_f5f91edbb230a613\sbs_microsoft.vsa.vb.codedomprocessor.dll
                                + 2008-07-27 18:03:10 14,904 ----a-w C:\Windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.18111_none_f79f6f969602a0f5\sbs_microsoft.vsa.vb.codedomprocessor.dll
                                + 2008-07-27 17:58:30 14,904 ----a-w C:\Windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.22230_none_f8126c3faf315f4a\sbs_microsoft.vsa.vb.codedomprocessor.dll
                                + 2008-07-27 18:00:22 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.16720_none_61341d4d3a39619e\sbs_mscordbi.dll
                                + 2008-07-27 17:55:49 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.20883_none_617fdb6e5384f513\sbs_mscordbi.dll
                                + 2008-07-27 18:03:10 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.18111_none_63262c293756eff5\sbs_mscordbi.dll
                                + 2008-07-27 17:58:30 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.22230_none_639928d25085ae4a\sbs_mscordbi.dll
                                + 2008-07-27 18:00:22 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.16720_none_9f5dffc77038aef0\sbs_mscorrc.dll
                                + 2008-07-27 17:55:49 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.20883_none_9fa9bde889844265\sbs_mscorrc.dll
                                + 2008-07-27 18:03:10 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.18111_none_a1500ea36d563d47\sbs_mscorrc.dll
                                + 2008-07-27 17:58:30 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.22230_none_a1c30b4c8684fb9c\sbs_mscorrc.dll
                                + 2008-07-27 18:00:22 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.16720_none_e401d368df1b12c0\sbs_mscorsec.dll
                                + 2008-07-27 17:55:49 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.20883_none_e44d9189f866a635\sbs_mscorsec.dll
                                + 2008-07-27 18:03:10 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.18111_none_e5f3e244dc38a117\sbs_mscorsec.dll
                                + 2008-07-27 17:58:30 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.22230_none_e666deedf5675f6c\sbs_mscorsec.dll
                                + 2008-07-27 18:00:22 14,384 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.16720_none_bd4e76fe38514ab5\sbs_system.configuration.install.dll
                                + 2008-07-27 17:55:49 14,384 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.20883_none_bd9a351f519cde2a\sbs_system.configuration.install.dll
                                + 2008-07-27 18:03:10 14,384 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.18111_none_bf4085da356ed90c\sbs_system.configuration.install.dll
                                + 2008-07-27 17:58:30 14,384 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.22230_none_bfb382834e9d9761\sbs_system.configuration.install.dll
                                + 2008-07-27 18:00:22 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.16720_none_fc8de474efb056bd\sbs_system.data.dll
                                + 2008-07-27 17:55:49 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.20883_none_fcd9a29608fbea32\sbs_system.data.dll
                                + 2008-07-27 18:03:10 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.18111_none_fe7ff350eccde514\sbs_system.data.dll
                                + 2008-07-27 17:58:30 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.22230_none_fef2effa05fca369\sbs_system.data.dll
                                + 2008-07-27 18:00:22 14,376 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.16720_none_5f2d7cf328bb48aa\sbs_system.enterpriseservices.dll
                                + 2008-07-27 17:55:49 14,376 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.20883_none_5f793b144206dc1f\sbs_system.enterpriseservices.dll
                                + 2008-07-27 18:03:10 14,376 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.18111_none_611f8bcf25d8d701\sbs_system.enterpriseservices.dll
                                + 2008-07-27 17:58:30 14,376 ----a-w C:\Windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.22230_none_619288783f079556\sbs_system.enterpriseservices.dll
                                + 2008-07-27 18:00:22 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.16720_none_91b3897b707a12a8\sbs_VsaVb7rt.dll
                                + 2008-07-27 17:55:49 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.20883_none_91ff479c89c5a61d\sbs_VsaVb7rt.dll
                                + 2008-07-27 18:03:10 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.18111_none_93a598576d97a0ff\sbs_VsaVb7rt.dll
                                + 2008-07-27 17:58:30 14,344 ----a-w C:\Windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.22230_none_9418950086c65f54\sbs_VsaVb7rt.dll
                                + 2008-07-27 18:00:22 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.16720_none_fe9f152188a71eb9\sbs_wminet_utils.dll
                                + 2008-07-27 17:55:49 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.20883_none_feead342a1f2b22e\sbs_wminet_utils.dll
                                + 2008-07-27 18:03:10 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.18111_none_009123fd85c4ad10\sbs_wminet_utils.dll
                                + 2008-07-27 17:58:30 14,352 ----a-w C:\Windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.22230_none_010420a69ef36b65\sbs_wminet_utils.dll
                                + 2008-07-27 18:00:22 16,896 ----a-w C:\Windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.16720_none_730a240a07e5914d\sbscmp10.dll
                                + 2008-07-27 17:55:49 16,896 ----a-w C:\Windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.20883_none_7355e22b213124c2\sbscmp10.dll
                                + 2008-07-27 18:03:10 16,896 ----a-w C:\Windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.18111_none_74fc32e605031fa4\sbscmp10.dll
                                + 2008-07-27 17:58:30 16,896 ----a-w C:\Windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.22230_none_756f2f8f1e31ddf9\sbscmp10.dll
                                + 2008-07-27 18:00:26 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.16720_none_54f78ae6608fe120\sbscmp20_mscorlib.dll
                                + 2008-07-27 17:55:55 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.20883_none_3e2fa18a7a322613\sbscmp20_mscorlib.dll
                                + 2008-07-27 18:03:14 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.18111_none_54d26f9c60e1edc1\sbscmp20_mscorlib.dll
                                + 2008-07-27 17:58:34 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.22230_none_3e06e0387a8766d4\sbscmp20_mscorlib.dll
                                + 2008-07-27 18:00:22 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.16720_none_7db29add493b7e7f\sbscmp20_mscorwks.dll
                                + 2008-07-27 17:55:49 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.20883_none_7dfe58fe628711f4\sbscmp20_mscorwks.dll
                                + 2008-07-27 18:03:10 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.18111_none_7fa4a9b946590cd6\sbscmp20_mscorwks.dll
                                + 2008-07-27 17:58:31 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.22230_none_8017a6625f87cb2b\sbscmp20_mscorwks.dll
                                + 2008-07-27 18:00:22 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.16720_none_4b551485ea019eb3\sbscmp20_perfcounter.dll
                                + 2008-07-27 17:55:49 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.20883_none_4ba0d2a7034d3228\sbscmp20_perfcounter.dll
                                + 2008-07-27 18:03:10 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.18111_none_4d472361e71f2d0a\sbscmp20_perfcounter.dll
                                + 2008-07-27 17:58:31 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.22230_none_4dba200b004deb5f\sbscmp20_perfcounter.dll
                                + 2008-07-27 18:00:22 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.16720_none_647b8d4369ff4ca5\SharedReg12.dll
                                + 2008-07-27 17:55:49 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.20883_none_64c74b64834ae01a\SharedReg12.dll
                                + 2008-07-27 18:03:10 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.18111_none_666d9c1f671cdafc\SharedReg12.dll
                                + 2008-07-27 17:58:31 16,896 ----a-w C:\Windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.22230_none_66e098c8804b9951\SharedReg12.dll
                                + 2008-07-27 18:00:26 118,784 ----a-w C:\Windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5afe5731cbebfefe\shfusion.dll
                                + 2008-07-27 17:55:55 118,784 ----a-w C:\Windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_44366dd5e58e43f1\shfusion.dll
                                + 2008-07-27 18:03:14 118,784 ----a-w C:\Windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5ad93be7cc3e0b9f\shfusion.dll
                                + 2008-07-27 17:58:34 118,784 ----a-w C:\Windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_440dac83e5e384b2\shfusion.dll
                                + 2008-07-27 18:00:26 95,232 ----a-w C:\Windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a636a70dcbde39f5\ShFusRes.dll
                                + 2008-07-27 17:55:55 95,232 ----a-w C:\Windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8f6ebdb1e5807ee8\ShFusRes.dll
                                + 2008-07-27 18:03:14 95,232 ----a-w C:\Windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a6118bc3cc304696\ShFusRes.dll
                                + 2008-07-27 17:58:34 95,232 ----a-w C:\Windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8f45fc5fe5d5bfa9\ShFusRes.dll
                                + 2008-07-27 18:00:26 392,184 ----a-w C:\Windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_1415c3a3fa85eb80\SOS.dll
                                + 2008-07-27 17:55:55 392,184 ----a-w C:\Windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fd4dda4814283073\SOS.dll
                                + 2008-07-27 18:03:14 392,184 ----a-w C:\Windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_13f0a859fad7f821\SOS.dll
                                + 2008-07-27 17:58:34 392,184 ----a-w C:\Windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fd2518f6147d7134\SOS.dll
                                + 2008-07-27 18:00:28 81,400 ----a-w C:\Windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_61378f49539876ca\TLBREF.DLL
                                + 2008-07-27 17:55:56 81,400 ----a-w C:\Windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_4a6fa5ed6d3abbbd\TLBREF.DLL
                                + 2008-07-27 18:03:16 81,400 ----a-w C:\Windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_611273ff53ea836b\TLBREF.DLL
                                + 2008-07-27 17:58:36 81,400 ----a-w C:\Windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_4a46e49b6d8ffc7e\TLBREF.DLL
                                + 2008-07-27 18:00:28 1,172,472 ----a-w C:\Windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.16720_none_40151493a5ee7836\vbc.exe
                                + 2008-07-27 17:55:56 1,172,472 ----a-w C:\Windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.20883_none_294d2b37bf90bd29\vbc.exe
                                + 2008-07-27 18:03:16 1,172,472 ----a-w C:\Windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_3feff949a64084d7\vbc.exe
                                + 2008-07-27 17:58:36 1,172,472 ----a-w C:\Windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_292469e5bfe5fdea\vbc.exe
                                + 2008-07-27 18:00:22 193,016 ----a-w C:\Windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.16720_none_9b66959baa339139\vbc7ui.dll
                                + 2008-07-27 17:55:49 193,016 ----a-w C:\Windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.20883_none_849eac3fc3d5d62c\vbc7ui.dll
                                + 2008-07-27 18:03:10 193,016 ----a-w C:\Windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.18111_none_9b417a51aa859dda\vbc7ui.dll
                                + 2008-07-27 17:58:31 193,016 ----a-w C:\Windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.22230_none_8475eaedc42b16ed\vbc7ui.dll
                                + 2008-07-27 18:00:28 438,272 ----a-w C:\Windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_36c546033798e90a\webengine.dll
                                + 2008-07-27 17:55:56 438,272 ----a-w C:\Windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1ffd5ca7513b2dfd\webengine.dll
                                + 2008-07-27 18:03:16 438,272 ----a-w C:\Windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_36a02ab937eaf5ab\webengine.dll
                                1. + 2008-07-27 17:55:49 147,968 ----a-w C:\Windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.20883_none_56b9361b013a3341\AdoNetDiag.dll
                                  + 2008-07-27 18:03:10 147,968 ----a-w C:\Windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.18111_none_6d5c042ce7e9faef\AdoNetDiag.dll
                                  + 2008-07-27 17:58:31 147,968 ----a-w C:\Windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.22230_none_569074c9018f7402\AdoNetDiag.dll
                                  + 2008-07-27 18:00:22 58,880 ----a-w C:\Windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_c55cc3986aa0f96b\AppLaunch.exe
                                  + 2008-07-27 17:55:49 58,880 ----a-w C:\Windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ae94da3c84433e5e\AppLaunch.exe
                                  + 2008-07-27 18:03:11 58,880 ----a-w C:\Windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c537a84e6af3060c\AppLaunch.exe
                                  + 2008-07-27 17:58:31 58,880 ----a-w C:\Windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae6c18ea84987f1f\AppLaunch.exe
                                  + 2008-07-27 18:00:22 22,024 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d5762fdb578fde3d\aspnet_filter.dll
                                  + 2008-07-27 17:55:49 22,024 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_beae467f71322330\aspnet_filter.dll
                                  + 2008-07-27 18:03:11 22,024 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d551149157e1eade\aspnet_filter.dll
                                  + 2008-07-27 17:58:31 22,024 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_be85852d718763f1\aspnet_filter.dll
                                  + 2008-07-27 18:00:22 17,416 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dda3740568b14f3b\aspnet_isapi.dll
                                  + 2008-07-27 17:55:49 17,416 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c6db8aa98253942e\aspnet_isapi.dll
                                  + 2008-07-27 18:03:11 17,416 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dd7e58bb69035bdc\aspnet_isapi.dll
                                  + 2008-07-27 17:58:31 17,416 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6b2c95782a8d4ef\aspnet_isapi.dll
                                  + 2008-07-27 18:00:24 97,792 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_90e8a24fd2d12b2d\MmcAspExt.dll
                                  + 2008-07-27 17:55:52 97,792 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7a20b8f3ec737020\MmcAspExt.dll
                                  + 2008-07-27 18:03:12 97,792 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_90c38705d32337ce\MmcAspExt.dll
                                  + 2008-07-27 17:58:32 97,792 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_79f7f7a1ecc8b0e1\MmcAspExt.dll
                                  + 2008-07-27 18:00:22 33,800 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_ddd04c5afc661a12\Aspnet_perf.dll
                                  + 2008-07-27 17:55:49 33,800 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c70862ff16085f05\Aspnet_perf.dll
                                  + 2008-07-27 18:03:11 33,800 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ddab3110fcb826b3\Aspnet_perf.dll
                                  + 2008-07-27 17:58:31 33,800 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6dfa1ad165d9fc6\Aspnet_perf.dll
                                  + 2008-07-27 18:00:22 84,480 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.16720_none_303fe2adfd729d2f\aspnet_rc.dll
                                  + 2008-07-27 17:55:49 84,480 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.20883_none_1977f9521714e222\aspnet_rc.dll
                                  + 2008-07-27 18:03:11 84,480 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.18111_none_301ac763fdc4a9d0\aspnet_rc.dll
                                  + 2008-07-27 17:58:31 84,480 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.22230_none_194f3800176a22e3\aspnet_rc.dll
                                  + 2008-07-27 18:00:22 33,288 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_124dc10f21a7964c\aspnet_regiis.exe
                                  + 2008-07-27 17:55:49 33,288 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_fb85d7b33b49db3f\aspnet_regiis.exe
                                  + 2008-07-27 18:03:11 33,288 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1228a5c521f9a2ed\aspnet_regiis.exe
                                  + 2008-07-27 17:58:31 33,288 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_fb5d16613b9f1c00\aspnet_regiis.exe
                                  + 2008-07-27 18:00:22 34,312 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_8142f10dc28972ea\aspnet_state.exe
                                  + 2008-07-27 17:55:49 34,312 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_6a7b07b1dc2bb7dd\aspnet_state.exe
                                  + 2008-07-27 18:03:11 34,312 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_811dd5c3c2db7f8b\aspnet_state.exe
                                  + 2008-07-27 17:58:31 34,312 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_6a52465fdc80f89e\aspnet_state.exe
                                  + 2008-07-27 18:00:23 33,792 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_c50edb888bf66284\aspnet_wp.exe
                                  + 2008-07-27 17:55:49 33,792 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ae46f22ca598a777\aspnet_wp.exe
                                  + 2008-07-27 18:03:11 33,792 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c4e9c03e8c486f25\aspnet_wp.exe
                                  + 2008-07-27 17:58:31 33,792 ----a-w C:\Windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae1e30daa5ede838\aspnet_wp.exe
                                  + 2008-07-27 18:00:23 230,904 ----a-w C:\Windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_03362a9d8d7b9753\ilasm.exe
                                  + 2008-07-27 17:55:52 230,904 ----a-w C:\Windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_ec6e4141a71ddc46\ilasm.exe
                                  + 2008-07-27 18:03:12 230,904 ----a-w C:\Windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_03110f538dcda3f4\ilasm.exe
                                  + 2008-07-27 17:58:32 230,904 ----a-w C:\Windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ec457fefa7731d07\ilasm.exe
                                  + 2008-07-27 18:00:27 57,392 ----a-w C:\Windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_52860d14b787880b\System.EnterpriseServices.Thunk.dll
                                  + 2008-07-27 17:55:55 57,392 ----a-w C:\Windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_3bbe23b8d129ccfe\System.EnterpriseServices.Thunk.dll
                                  + 2008-07-27 18:03:15 57,392 ----a-w C:\Windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5260f1cab7d994ac\System.EnterpriseServices.Thunk.dll
                                  + 2008-07-27 17:58:35 57,392 ----a-w C:\Windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_3b956266d17f0dbf\System.EnterpriseServices.Thunk.dll
                                  + 2008-07-27 18:00:23 105,464 ----a-w C:\Windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.16720_none_20f118a5f8b7c691\clrgc.exe
                                  + 2008-07-27 17:55:50 105,464 ----a-w C:\Windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.20883_none_0a292f4a125a0b84\clrgc.exe
                                  + 2008-07-27 18:03:11 105,464 ----a-w C:\Windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.18111_none_20cbfd5bf909d332\clrgc.exe
                                  + 2008-07-27 17:58:31 105,464 ----a-w C:\Windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.22230_none_0a006df812af4c45\clrgc.exe
                                  + 2008-07-27 18:00:23 89,608 ----a-w C:\Windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b30d9713c2a13a95\CORPerfMonExt.dll
                                  + 2008-07-27 17:55:50 89,608 ----a-w C:\Windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_9c45adb7dc437f88\CORPerfMonExt.dll
                                  + 2008-07-27 18:03:11 89,608 ----a-w C:\Windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b2e87bc9c2f34736\CORPerfMonExt.dll
                                  + 2008-07-27 17:58:31 89,608 ----a-w C:\Windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9c1cec65dc98c049\CORPerfMonExt.dll
                                  + 2008-07-27 18:00:23 80,376 ----a-w C:\Windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.16720_none_fe9ea81e2cc7a10d\csc.exe
                                  + 2008-07-27 17:55:50 80,376 ----a-w C:\Windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.20883_none_e7d6bec24669e600\csc.exe
                                  + 2008-07-27 18:03:11 80,376 ----a-w C:\Windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.18111_none_fe798cd42d19adae\csc.exe
                                  + 2008-07-27 17:58:31 80,376 ----a-w C:\Windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.22230_none_e7adfd7046bf26c1\csc.exe
                                  + 2008-07-27 18:00:23 1,163,768 ----a-w C:\Windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.16720_none_299326f9d18fcbcd\cscomp.dll
                                  + 2008-07-27 17:55:51 1,163,768 ----a-w C:\Windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.20883_none_12cb3d9deb3210c0\cscomp.dll
                                  + 2008-07-27 18:03:11 1,163,768 ----a-w C:\Windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.18111_none_296e0bafd1e1d86e\cscomp.dll
                                  + 2008-07-27 17:58:31 1,163,768 ----a-w C:\Windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.22230_none_12a27c4beb875181\cscomp.dll
                                  + 2008-07-27 18:00:22 145,408 ----a-w C:\Windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.16720_none_70fa2f2bea847d65\cscompui.dll
                                  + 2008-07-27 17:55:49 145,408 ----a-w C:\Windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.20883_none_5a3245d00426c258\cscompui.dll
                                  + 2008-07-27 18:03:10 145,408 ----a-w C:\Windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.18111_none_70d513e1ead68a06\cscompui.dll
                                  + 2008-07-27 17:58:31 145,408 ----a-w C:\Windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.22230_none_5a09847e047c0319\cscompui.dll
                                  + 2008-07-27 18:00:23 27,136 ----a-w C:\Windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dad3d84a4fe9cf2d\Culture.dll
                                  + 2008-07-27 17:55:51 27,136 ----a-w C:\Windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c40beeee698c1420\Culture.dll
                                  + 2008-07-27 18:03:11 27,136 ----a-w C:\Windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_daaebd00503bdbce\Culture.dll
                                  + 2008-07-27 17:58:31 27,136 ----a-w C:\Windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c3e32d9c69e154e1\Culture.dll
                                  + 2008-07-27 18:00:23 35,320 ----a-w C:\Windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.16720_none_e5e61fca33bbd736\cvtres.exe
                                  + 2008-07-27 17:55:51 35,320 ----a-w C:\Windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.20883_none_cf1e366e4d5e1c29\cvtres.exe
                                  + 2008-07-27 18:03:11 35,320 ----a-w C:\Windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.18111_none_e5c10480340de3d7\cvtres.exe
                                  + 2008-07-27 17:58:31 35,320 ----a-w C:\Windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.22230_none_cef5751c4db35cea\cvtres.exe
                                  + 2008-07-27 18:00:22 13,824 ----a-w C:\Windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d1bdbba018204fce\CvtResUI.dll
                                  + 2008-07-27 17:55:49 13,824 ----a-w C:\Windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_baf5d24431c294c1\CvtResUI.dll
                                  + 2008-07-27 18:03:10 13,824 ----a-w C:\Windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d198a05618725c6f\CvtResUI.dll
                                  + 2008-07-27 17:58:31 13,824 ----a-w C:\Windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_bacd10f23217d582\CvtResUI.dll
                                  + 2008-07-27 18:00:23 575,496 ----a-w C:\Windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.16720_none_d10442cb1462cc84\diasymreader.dll
                                  + 2008-07-27 17:55:51 575,496 ----a-w C:\Windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.20883_none_ba3c596f2e051177\diasymreader.dll
                                  + 2008-07-27 18:03:11 575,496 ----a-w C:\Windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.18111_none_d0df278114b4d925\diasymreader.dll
                                  + 2008-07-27 17:58:32 575,496 ----a-w C:\Windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.22230_none_ba13981d2e5a5238\diasymreader.dll
                                  + 2008-07-27 18:00:23 62,968 ----a-w C:\Windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_887641f8543b58cd\dfdll.dll
                                  + 2008-07-27 17:55:51 62,968 ----a-w C:\Windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_71ae589c6ddd9dc0\dfdll.dll
                                  + 2008-07-27 18:03:11 62,968 ----a-w C:\Windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_885126ae548d656e\dfdll.dll
                                  + 2008-07-27 17:58:31 62,968 ----a-w C:\Windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7185974a6e32de81\dfdll.dll
                                  + 2008-07-27 18:00:28 96,760 ----a-w C:\Windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.16720_none_768419d85fe38f05\dfshim.dll
                                  + 2008-07-27 17:55:56 96,760 ----a-w C:\Windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.20883_none_76cfd7f9792f227a\dfshim.dll
                                  + 2008-07-27 18:03:16 96,760 ----a-w C:\Windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.18111_none_787628b45d011d5c\dfshim.dll
                                  + 2008-07-27 17:58:36 96,760 ----a-w C:\Windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.22230_none_78e9255d762fdbb1\dfshim.dll
                                  + 2008-07-27 18:00:23 36,344 ----a-w C:\Windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.16720_none_cdc273811ae653eb\dw20.exe
                                  + 2008-07-27 17:55:51 36,344 ----a-w C:\Windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.20883_none_b6fa8a25348898de\dw20.exe
                                  + 2008-07-27 18:03:11 36,344 ----a-w C:\Windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.18111_none_cd9d58371b38608c\dw20.exe
                                  + 2008-07-27 17:58:32 36,344 ----a-w C:\Windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.22230_none_b6d1c8d334ddd99f\dw20.exe
                                  + 2008-07-27 18:00:23 798,224 ----a-w C:\Windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cf8a616af2a68bf7\EventLogMessages.dll
                                  + 2008-07-27 17:55:51 798,224 ----a-w C:\Windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b8c2780f0c48d0ea\EventLogMessages.dll
                                  + 2008-07-27 18:03:11 798,224 ----a-w C:\Windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_cf654620f2f89898\EventLogMessages.dll
                                  + 2008-07-27 17:58:32 798,224 ----a-w C:\Windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b899b6bd0c9e11ab\EventLogMessages.dll
                                  + 2008-07-27 18:00:23 18,936 ----a-w C:\Windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_02f7688b0a477a67\fusion.dll
                                  + 2008-07-27 17:55:51 18,936 ----a-w C:\Windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ec2f7f2f23e9bf5a\fusion.dll
                                  + 2008-07-27 18:03:11 18,936 ----a-w C:\Windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_02d24d410a998708\fusion.dll
                                  + 2008-07-27 17:58:32 18,936 ----a-w C:\Windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ec06bddd243f001b\fusion.dll
                                  + 2008-07-27 18:00:29 41,984 ----a-w C:\Windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.16720_none_9297cbea7e22b2e8\netfxperf.dll
                                  + 2008-07-27 17:55:56 41,984 ----a-w C:\Windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.20883_none_92e38a0b976e465d\netfxperf.dll
                                  + 2008-07-27 18:03:17 41,984 ----a-w C:\Windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.18111_none_9489dac67b40413f\netfxperf.dll
                                  + 2008-07-27 17:58:37 41,984 ----a-w C:\Windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.22230_none_94fcd76f946eff94\netfxperf.dll
                                  + 2008-07-27 18:00:24 65,032 ----a-w C:\Windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b6dc6c95d82f7e23\InstallUtilLib.dll
                                  + 2008-07-27 17:55:52 65,032 ----a-w C:\Windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a0148339f1d1c316\InstallUtilLib.dll
                                  + 2008-07-27 18:03:12 65,032 ----a-w C:\Windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b6b7514bd8818ac4\InstallUtilLib.dll
                                  + 2008-07-27 17:58:32 65,032 ----a-w C:\Windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9febc1e7f22703d7\InstallUtilLib.dll
                                  + 2008-07-27 18:00:24 998,408 ----a-w C:\Windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16720_none_2b477be306910f6b\mscordacwks.dll
                                  + 2008-07-27 17:55:52 998,408 ----a-w C:\Windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.20883_none_147f92872033545e\mscordacwks.dll
                                  + 2008-07-27 18:03:12 998,408 ----a-w C:\Windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.18111_none_2b22609906e31c0c\mscordacwks.dll
                                  + 2008-07-27 17:58:32 998,408 ----a-w C:\Windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.22230_none_1456d1352088951f\mscordacwks.dll
                                  + 2008-07-27 18:00:24 83,456 ----a-w C:\Windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_6d15d8a7c565aae6\mscordbc.dll
                                  + 2008-07-27 17:55:52 83,456 ----a-w C:\Windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_564def4bdf07efd9\mscordbc.dll
                                  + 2008-07-27 18:03:12 83,456 ----a-w C:\Windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_6cf0bd5dc5b7b787\mscordbc.dll
                                  + 2008-07-27 17:58:32 83,456 ----a-w C:\Windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_56252df9df5d309a\mscordbc.dll
                                  + 2008-07-27 18:00:24 308,224 ----a-w C:\Windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_704c45e65c1b155c\mscordbi.dll
                                  + 2008-07-27 17:55:52 308,224 ----a-w C:\Windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_59845c8a75bd5a4f\mscordbi.dll
                                  + 2008-07-27 18:03:12 308,224 ----a-w C:\Windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_70272a9c5c6d21fd\mscordbi.dll
                                  + 2008-07-27 17:58:32 308,224 ----a-w C:\Windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_595b9b3876129b10\mscordbi.dll
                                  + 2008-07-27 18:00:29 282,112 ----a-w C:\Windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.16720_none_b3641f8d59134c1c\mscoree.dll
                                  + 2008-07-27 17:55:56 282,112 ----a-w C:\Windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.20883_none_b3afddae725edf91\mscoree.dll
                                  + 2008-07-27 18:03:17 282,112 ----a-w C:\Windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.18111_none_b5562e695630da73\mscoree.dll
                                  + 2008-07-27 17:58:36 282,112 ----a-w C:\Windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.22230_none_b5c92b126f5f98c8\mscoree.dll
                                  + 2008-07-27 18:00:29 15,360 ----a-w C:\Windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.16720_none_175dada98e1713c9\mscorees.dll
                                  + 2008-07-27 17:55:56 15,360 ----a-w C:\Windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.20883_none_17a96bcaa762a73e\mscorees.dll
                                  + 2008-07-27 18:03:17 15,360 ----a-w C:\Windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.18111_none_194fbc858b34a220\mscorees.dll
                                  + 2008-07-27 17:58:37 15,360 ----a-w C:\Windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.22230_none_19c2b92ea4636075\mscorees.dll
                                  + 2008-07-27 18:00:24 46,592 ----a-w C:\Windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_eabc86bf6fd8fce5\mscorie.dll
                                  + 2008-07-27 17:55:52 46,592 ----a-w C:\Windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d3f49d63897b41d8\mscorie.dll
                                  + 2008-07-27 18:03:12 46,592 ----a-w C:\Windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ea976b75702b0986\mscorie.dll
                                  + 2008-07-27 17:58:32 46,592 ----a-w C:\Windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d3cbdc1189d08299\mscorie.dll
                                  + 2008-07-27 18:00:29 158,720 ----a-w C:\Windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.16720_none_7a962ef9ddf8e5ca\mscorier.dll
                                  + 2008-07-27 17:55:56 158,720 ----a-w C:\Windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.20883_none_7ae1ed1af744793f\mscorier.dll
                                  + 2008-07-27 18:03:17 158,720 ----a-w C:\Windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.18111_none_7c883dd5db167421\mscorier.dll
                                  + 2008-07-27 17:58:37 158,720 ----a-w C:\Windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.22230_none_7cfb3a7ef4453276\mscorier.dll
                                  + 2008-07-27 18:00:29 83,968 ----a-w C:\Windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.16720_none_bc2740c9f4b44e45\mscories.dll
                                  + 2008-07-27 17:55:56 83,968 ----a-w C:\Windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.20883_none_bc72feeb0dffe1ba\mscories.dll
                                  + 2008-07-27 18:03:17 83,968 ----a-w C:\Windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.18111_none_be194fa5f1d1dc9c\mscories.dll
                                  + 2008-07-27 17:58:37 83,968 ----a-w C:\Windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.22230_none_be8c4c4f0b009af1\mscories.dll
                                  + 2008-07-27 18:00:24 367,104 ----a-w C:\Windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_bf82ae7730dc9b9e\mscorjit.dll
                                  + 2008-07-27 17:55:52 367,104 ----a-w C:\Windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a8bac51b4a7ee091\mscorjit.dll
                                  + 2008-07-27 18:03:12 367,104 ----a-w C:\Windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_bf5d932d312ea83f\mscorjit.dll
                                  + 2008-07-27 17:58:33 367,104 ----a-w C:\Windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_a89203c94ad42152\mscorjit.dll
                                  + 2008-07-27 18:00:24 94,208 ----a-w C:\Windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_c3051899495c0261\mscorld.dll
                                  + 2008-07-27 17:55:52 94,208 ----a-w C:\Windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ac3d2f3d62fe4754\mscorld.dll
                                  + 2008-07-27 18:03:12 94,208 ----a-w C:\Windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_c2dffd4f49ae0f02\mscorld.dll
                                  + 2008-07-27 17:58:33 94,208 ----a-w C:\Windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ac146deb63538815\mscorld.dll
                                  + 2008-07-27 18:00:28 96,768 ----a-w C:\Windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.16720_none_a586c87acc4ee451\mscormmc.dll
                                  + 2008-07-27 17:55:56 96,768 ----a-w C:\Windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.20883_none_a5d2869be59a77c6\mscormmc.dll
                                  + 2008-07-27 18:03:16 96,768 ----a-w C:\Windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.18111_none_a778d756c96c72a8\mscormmc.dll
                                  + 2008-07-27 17:58:36 96,768 ----a-w C:\Windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.22230_none_a7ebd3ffe29b30fd\mscormmc.dll
                                  + 2008-07-27 18:00:25 114,176 ----a-w C:\Windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f809cbf55be51514\mscorpe.dll
                                  + 2008-07-27 17:55:53 114,176 ----a-w C:\Windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_e141e29975875a07\mscorpe.dll
                                  + 2008-07-27 18:03:13 114,176 ----a-w C:\Windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f7e4b0ab5c3721b5\mscorpe.dll
                                  + 2008-07-27 17:58:33 114,176 ----a-w C:\Windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_e119214775dc9ac8\mscorpe.dll
                                  + 2008-07-27 18:00:25 345,600 ----a-w C:\Windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f04d2f859bf6b755\mscorrc.dll
                                  + 2008-07-27 17:55:53 345,600 ----a-w C:\Windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d9854629b598fc48\mscorrc.dll
                                  + 2008-07-27 18:03:13 345,600 ----a-w C:\Windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f028143b9c48c3f6\mscorrc.dll
                                  + 2008-07-27 17:58:33 345,600 ----a-w C:\Windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d95c84d7b5ee3d09\mscorrc.dll
                                  + 2008-07-27 18:00:25 77,312 ----a-w C:\Windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_11d75989f473c8ca\mscorsec.dll
                                  + 2008-07-27 17:55:53 77,312 ----a-w C:\Windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fb0f702e0e160dbd\mscorsec.dll
                                  + 2008-07-27 18:03:13 77,312 ----a-w C:\Windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_11b23e3ff4c5d56b\mscorsec.dll
                                  + 2008-07-27 17:58:33 77,312 ----a-w C:\Windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fae6aedc0e6b4e7e\mscorsec.dll
                                  + 2008-07-27 18:00:26 31,744 ----a-w C:\Windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a5bb7e77ee33a16c\mscorsecr.dll
                                  + 2008-07-27 17:55:54 31,744 ----a-w C:\Windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8ef3951c07d5e65f\mscorsecr.dll
                                  + 2008-07-27 18:03:14 31,744 ----a-w C:\Windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a596632dee85ae0d\mscorsecr.dll
                                  + 2008-07-27 17:58:34 31,744 ----a-w C:\Windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8ecad3ca082b2720\mscorsecr.dll
                                  1. + 2008-07-11 19:39:09 46,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\ComSvcConfig.resources.dll
                                    + 2008-06-16 22:21:53 864,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\infocard.resources.dll
                                    + 2008-07-11 19:39:09 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\Microsoft.Transactions.Bridge.Dtc.Resources.dll
                                    + 2008-07-11 19:39:09 19,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\Microsoft.Transactions.Bridge.Resources.dll
                                    + 2008-07-11 19:39:09 37,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\ServiceModelReg.resources.dll
                                    + 2008-07-11 19:39:09 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\SMDiagnostics.resources.dll
                                    + 2008-07-11 19:39:09 20,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\SMSvcHost.resources.dll
                                    + 2008-07-11 19:39:09 65,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\System.IdentityModel.Resources.dll
                                    + 2008-07-11 19:39:09 57,344 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\System.IdentityModel.Selectors.Resources.dll
                                    + 2008-07-11 19:39:09 12,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\System.IO.Log.Resources.dll
                                    + 2008-07-11 19:39:09 102,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\System.RunTime.Serialization.Resources.dll
                                    + 2008-07-11 19:39:09 36,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\System.ServiceModel.Install.Resources.dll
                                    + 2008-07-11 19:39:09 499,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\System.ServiceModel.Resources.dll
                                    + 2008-07-11 19:39:09 42,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_435334722c6cd2f1\WsatConfig.resources.dll
                                    + 2008-07-11 00:55:43 46,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\ComSvcConfig.resources.dll
                                    + 2008-06-16 22:22:54 864,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\infocard.resources.dll
                                    + 2008-07-11 00:55:43 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\Microsoft.Transactions.Bridge.Dtc.Resources.dll
                                    + 2008-07-11 00:55:43 19,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\Microsoft.Transactions.Bridge.Resources.dll
                                    + 2008-07-11 00:55:43 37,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\ServiceModelReg.resources.dll
                                    + 2008-07-11 00:55:43 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\SMDiagnostics.resources.dll
                                    + 2008-07-11 00:55:43 20,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\SMSvcHost.resources.dll
                                    + 2008-07-11 00:55:42 65,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\System.IdentityModel.Resources.dll
                                    + 2008-07-11 00:55:42 57,344 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\System.IdentityModel.Selectors.Resources.dll
                                    + 2008-07-11 00:55:42 12,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\System.IO.Log.Resources.dll
                                    + 2008-07-11 00:55:42 102,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\System.RunTime.Serialization.Resources.dll
                                    + 2008-07-11 00:55:43 36,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\System.ServiceModel.Install.Resources.dll
                                    + 2008-07-11 00:55:42 499,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\System.ServiceModel.Resources.dll
                                    + 2008-07-11 00:55:43 42,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_43c22ff3459f2bea\WsatConfig.resources.dll
                                    + 2008-07-11 00:47:34 53,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\PresentationBuildTasks.resources.dll
                                    + 2008-07-11 00:47:34 110,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\PresentationCore.resources.dll
                                    + 2008-07-11 00:47:34 245,760 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\PresentationFramework.resources.dll
                                    + 2008-07-11 00:47:34 372,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\PresentationUI.resources.dll
                                    + 2008-07-11 00:47:34 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\ReachFramework.resources.dll
                                    + 2008-07-11 00:47:34 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\System.Printing.resources.dll
                                    + 2008-07-11 00:47:34 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\System.Speech.resources.dll
                                    + 2008-07-11 00:47:34 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\UIAutomationClient.resources.dll
                                    + 2008-07-11 00:47:34 12,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\UIAutomationClientsideProviders.resources.dll
                                    + 2008-07-11 00:47:34 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\UIAutomationProvider.resources.dll
                                    + 2008-07-11 00:47:34 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\UIAutomationTypes.resources.dll
                                    + 2008-07-11 00:47:34 90,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\WindowsBase.resources.dll
                                    + 2008-07-11 00:47:34 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.16716_fr-fr_52abc00386255c5c\WindowsFormsIntegration.resources.dll
                                    + 2008-07-11 00:47:46 53,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\PresentationBuildTasks.resources.dll
                                    + 2008-07-11 00:47:46 110,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\PresentationCore.resources.dll
                                    + 2008-07-11 00:47:46 245,760 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\PresentationFramework.resources.dll
                                    + 2008-07-11 00:47:46 372,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\PresentationUI.resources.dll
                                    + 2008-07-11 00:47:46 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\ReachFramework.resources.dll
                                    + 2008-07-11 00:47:46 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\System.Printing.resources.dll
                                    + 2008-07-11 00:47:46 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\System.Speech.resources.dll
                                    + 2008-07-11 00:47:46 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\UIAutomationClient.resources.dll
                                    + 2008-07-11 00:47:46 12,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\UIAutomationClientsideProviders.resources.dll
                                    + 2008-07-11 00:47:46 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\UIAutomationProvider.resources.dll
                                    + 2008-07-11 00:47:46 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\UIAutomationTypes.resources.dll
                                    + 2008-07-11 00:47:46 90,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\WindowsBase.resources.dll
                                    + 2008-07-11 00:47:46 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6000.20876_fr-fr_52f47d469f73a3cc\WindowsFormsIntegration.resources.dll
                                    + 2008-07-11 19:39:10 53,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\PresentationBuildTasks.resources.dll
                                    + 2008-07-11 19:39:10 110,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\PresentationCore.resources.dll
                                    + 2008-07-11 19:39:10 245,760 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\PresentationFramework.resources.dll
                                    + 2008-07-11 19:39:10 372,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\PresentationUI.resources.dll
                                    + 2008-07-11 19:39:10 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\ReachFramework.resources.dll
                                    + 2008-07-11 19:39:10 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\System.Printing.resources.dll
                                    + 2008-07-11 19:39:10 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\System.Speech.resources.dll
                                    + 2008-07-11 19:39:10 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\UIAutomationClient.resources.dll
                                    + 2008-07-11 19:39:10 12,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\UIAutomationClientsideProviders.resources.dll
                                    + 2008-07-11 19:39:10 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\UIAutomationProvider.resources.dll
                                    + 2008-07-11 19:39:10 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\UIAutomationTypes.resources.dll
                                    + 2008-07-11 19:39:10 90,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\WindowsBase.resources.dll
                                    + 2008-07-11 19:39:10 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18106_fr-fr_549cce958343d15c\WindowsFormsIntegration.resources.dll
                                    + 2008-07-11 00:55:43 53,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\PresentationBuildTasks.resources.dll
                                    + 2008-07-11 00:55:43 110,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\PresentationCore.resources.dll
                                    + 2008-07-11 00:55:43 245,760 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\PresentationFramework.resources.dll
                                    + 2008-07-11 00:55:43 372,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\PresentationUI.resources.dll
                                    + 2008-07-11 00:55:43 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\ReachFramework.resources.dll
                                    + 2008-07-11 00:55:43 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\System.Printing.resources.dll
                                    + 2008-07-11 00:55:43 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\System.Speech.resources.dll
                                    + 2008-07-11 00:55:43 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\UIAutomationClient.resources.dll
                                    + 2008-07-11 00:55:43 12,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\UIAutomationClientsideProviders.resources.dll
                                    + 2008-07-11 00:55:43 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\UIAutomationProvider.resources.dll
                                    + 2008-07-11 00:55:43 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\UIAutomationTypes.resources.dll
                                    + 2008-07-11 00:55:43 90,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\WindowsBase.resources.dll
                                    + 2008-07-11 00:55:43 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.22221_fr-fr_550bca169c762a55\WindowsFormsIntegration.resources.dll
                                    + 2008-06-20 01:17:50 163,840 ----a-w C:\Windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6.0.6000.16708_none_ef4812419297c719\Microsoft.Transactions.Bridge.Dtc.dll
                                    + 2008-06-20 01:12:45 163,840 ----a-w C:\Windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6.0.6000.20864_none_d880c85dac3958a5\Microsoft.Transactions.Bridge.Dtc.dll
                                    + 2008-06-20 01:14:31 163,840 ----a-w C:\Windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6.0.6001.18096_none_ef2d3e5792e083ec\Microsoft.Transactions.Bridge.Dtc.dll
                                    + 2008-06-20 01:13:19 163,840 ----a-w C:\Windows\winsxs\x86_microsoft.transactions.bridge.dtc_b03f5f7f11d50a3a_6.0.6001.22208_none_d8566749ac903376\Microsoft.Transactions.Bridge.Dtc.dll
                                    + 2008-07-27 18:03:14 479,232 ----a-w C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcm80.dll
                                    + 2008-07-27 18:03:14 558,080 ----a-w C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcp80.dll
                                    + 2008-07-27 18:03:14 635,904 ----a-w C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcr80.dll
                                    + 2008-10-08 21:04:40 224,768 ----a-w C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_bcb86ed6ac711f91\msvcm90.dll
                                    + 2008-10-08 21:04:40 568,832 ----a-w C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_bcb86ed6ac711f91\msvcp90.dll
                                    + 2008-10-08 21:04:40 655,872 ----a-w C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_bcb86ed6ac711f91\msvcr90.dll
                                    + 2008-07-27 18:00:24 69,632 ----a-w C:\Windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.16720_none_81591d45b0e55432\MSBuild.exe
                                    + 2008-07-27 17:55:52 69,632 ----a-w C:\Windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.20883_none_6a9133e9ca879925\MSBuild.exe
                                    + 2008-07-27 18:03:12 69,632 ----a-w C:\Windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.18111_none_813401fbb13760d3\MSBuild.exe
                                    + 2008-07-27 17:58:32 69,632 ----a-w C:\Windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.22230_none_6a687297cadcd9e6\MSBuild.exe
                                    + 2008-07-27 18:00:24 4,546,560 ----a-w C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.16720_none_c7dc8a0ec1089f13\mscorlib.dll
                                    + 2008-07-27 17:55:52 4,546,560 ----a-w C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6000.20883_none_b114a0b2daaae406\mscorlib.dll
                                    + 2008-07-27 18:03:13 4,546,560 ----a-w C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.18111_none_c7b76ec4c15aabb4\mscorlib.dll
                                    + 2008-07-27 17:58:33 4,546,560 ----a-w C:\Windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.22230_none_b0ebdf60db0024c7\mscorlib.dll
                                    + 2008-07-27 18:00:22 98,808 ----a-w C:\Windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_3921f539eb3d8e34\alink.dll
                                    + 2008-07-27 17:55:49 98,808 ----a-w C:\Windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_225a0bde04dfd327\alink.dll
                                    + 2008-07-27 18:03:10 98,808 ----a-w C:\Windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_38fcd9efeb8f9ad5\alink.dll
                                    + 2008-07-27 17:58:31 98,808 ----a-w C:\Windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_22314a8c053513e8\alink.dll
                                    + 2008-07-27 18:00:22 28,672 ----a-w C:\Windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.16720_none_6556da40a4b1aa70\alinkui.dll
                                    + 2008-07-27 17:55:49 28,672 ----a-w C:\Windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.20883_none_4e8ef0e4be53ef63\alinkui.dll
                                    + 2008-07-27 18:03:10 28,672 ----a-w C:\Windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.18111_none_6531bef6a503b711\alinkui.dll
                                    + 2008-07-27 17:58:31 28,672 ----a-w C:\Windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.22230_none_4e662f92bea93024\alinkui.dll
                                    + 2008-07-27 18:00:28 1,344,000 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.16720_none_7f3638c1b8807636\VsaVb7rt.dll
                                    + 2008-07-27 17:55:56 1,344,000 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6000.20883_none_686e4f65d222bb29\VsaVb7rt.dll
                                    + 2008-07-27 18:03:16 1,344,000 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.18111_none_7f111d77b8d282d7\VsaVb7rt.dll
                                    + 2008-07-27 17:58:36 1,344,000 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.22230_none_68458e13d277fbea\VsaVb7rt.dll
                                    + 2008-07-27 18:00:22 218,112 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.16720_none_50855fce2ae6758a\Vsavb7rtUI.dll
                                    + 2008-07-27 17:55:49 218,112 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6000.20883_none_39bd76724488ba7d\Vsavb7rtUI.dll
                                    + 2008-07-27 18:03:10 218,112 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.18111_none_506044842b38822b\Vsavb7rtUI.dll
                                    + 2008-07-27 17:58:31 218,112 ----a-w C:\Windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.22230_none_3994b52044ddfb3e\Vsavb7rtUI.dll
                                    + 2008-07-27 18:00:22 147,968 ----a-w C:\Windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6000.16720_none_6d811f76e797ee4e\AdoNetDiag.dll
                                    • 1
                                    • 2
                                    • 3
                                    • 4