Hitman Pro Support and Discussion Thread

Hi Erik,

Attached a log file (EWS scan mode reported about unknown files).

Regards,
Kardo

 

How do I find out if this is a false positive? HMP is reporting, but ignoring it. MBAM and MRT don't even find it. Appreciate any help on it. Thanks. Note: It just appeared today, but seems to be 49.9 days old?

UPDATE: When I scan the item with HMP with the file scan only, nothing shows as a problem.

 

No, sorry - seem to have lost it - evidently deleted - was ignored originally. Guess all is ok - no problems so far and all scans show "0" problems. Thanks anyway. MBAM, HMP, MRT, Windows Defender, SpywareBlaster all showing nothing.

 

New subject... I recently had the dreaded "Cyber Crime" malware. I've had this before, but I was able to go into safe mode and use system restore to restore to an older date. This time, I couldn't get into safe mode, it kept restarting Windows. FYI, Win XP-pro. I downloaded Hitman Pro and was able to make a bootable flashdrive that scaned and identified the malware, but didn't remove it. I wound up take the hard drive out and hooking it to my laptop and went to the path Hitman Pro showed and manually removed the files. This worked! My concern is that I was hoping to be able to scan the "new" hard drive (E:/) with Hitman Pro but I can't find any way to tell it which drive to scan. Am I missing something, or it designed to just scan the drive the OS is on?

 

According to the FDM developer, this is a false positive. 6/51 on VT.

Code:

HitmanPro 3.7.9.216
www.hitmanpro.com

  Computer name . . . . : 2082-52G
  Windows . . . . . . . : 6.1.1.7601.X86/2
  User name . . . . . . : 2082-52G\xxxxxxxx
  UAC . . . . . . . . . : Disabled
  License . . . . . . . : Free

  Scan date . . . . . . : 2014-04-30 10:52:15
  Scan mode . . . . . . : Normal
  Scan duration . . . . : 2m 17s
  Disk access mode  . . : Direct disk access (SRB)
  Cloud . . . . . . . . : Internet
  Reboot  . . . . . . . : No

  Threats . . . . . . . : 1
  Traces  . . . . . . . : 1

  Objects scanned . . . : 891,130
  Files scanned . . . . : 6,800
  Remnants scanned  . . : 170,295 files / 714,035 keys

Malware _____________________________________________________________________

  C:\Toolbx\FDM\fdmumsp.dll
  Size . . . . . . . : 106,496 bytes
  Age  . . . . . . . : 0.5 days (2014-04-29 23:14:05)
  Entropy  . . . . . : 6.3
  SHA-256  . . . . . : 9A7039FA929B021757EB14A1E28CA1076C3DFE3EB579730EC8C8B9BC06DA4C51
  > Bitdefender  . . . : Gen:Trojan.Heur.LP.gu4@ai2aUxgk
  Fuzzy  . . . . . . : 100.0
  Forensic Cluster
  -0.8s C:\Toolbx\FDM\
  -0.8s C:\Toolbx\FDM\unins000.dat
  -0.7s C:\Toolbx\FDM\unins000.exe
  -0.7s C:\Toolbx\FDM\Language\
  -0.7s C:\Toolbx\FDM\Language\alb.lng
  -0.7s C:\Toolbx\FDM\Language\arb.lng
  -0.7s C:\Toolbx\FDM\Language\bul.lng
  -0.7s C:\Toolbx\FDM\Language\cat.lng
  -0.7s C:\Toolbx\FDM\Language\chs.lng
  -0.7s C:\Toolbx\FDM\Language\cht.lng
  -0.7s C:\Toolbx\FDM\Language\cro.lng
  -0.7s C:\Toolbx\FDM\Language\czk.lng
  -0.7s C:\Toolbx\FDM\Language\dan.lng
  -0.7s C:\Toolbx\FDM\Language\dut.lng
  -0.7s C:\Toolbx\FDM\Language\ell.lng
  -0.7s C:\Toolbx\FDM\Language\far.lng
  -0.7s C:\Toolbx\FDM\Language\fin.lng
  -0.7s C:\Toolbx\FDM\Language\fre.lng
  -0.7s C:\Toolbx\FDM\Language\gal.lng
  -0.7s C:\Toolbx\FDM\Language\ger.lng
  -0.7s C:\Toolbx\FDM\Language\heb.lng
  -0.7s C:\Toolbx\FDM\Language\hun.lng
  -0.7s C:\Toolbx\FDM\Language\id.lng
  -0.7s C:\Toolbx\FDM\Language\ita.lng
  -0.7s C:\Toolbx\FDM\Language\jpn.lng
  -0.7s C:\Toolbx\FDM\Language\kor.lng
  -0.6s C:\Toolbx\FDM\Language\lt.lng
  -0.6s C:\Toolbx\FDM\Language\mac.lng
  -0.6s C:\Toolbx\FDM\Language\nor.LNG
  -0.6s C:\Toolbx\FDM\Language\pol.lng
  -0.6s C:\Toolbx\FDM\Language\ptbr.lng
  -0.6s C:\Toolbx\FDM\Language\pt_PT.lng
  -0.6s C:\Toolbx\FDM\Language\rom.lng
  -0.6s C:\Toolbx\FDM\Language\rus.lng
  -0.6s C:\Toolbx\FDM\Language\slo.lng
  -0.6s C:\Toolbx\FDM\Language\spn.lng
  -0.6s C:\Toolbx\FDM\Language\srb.lng
  -0.6s C:\Toolbx\FDM\Language\svk.lng
  -0.6s C:\Toolbx\FDM\Language\swe.lng
  -0.6s C:\Toolbx\FDM\Language\tha.lng
  -0.6s C:\Toolbx\FDM\Language\tur.lng
  -0.6s C:\Toolbx\FDM\Language\ukr.lng
  -0.6s C:\Toolbx\FDM\Language\uzb.lng
  -0.6s C:\Toolbx\FDM\Language\val.lng
  -0.6s C:\Toolbx\FDM\Language\vie.lng
  -0.6s C:\Toolbx\FDM\fdm.exe
  -0.2s C:\Toolbx\FDM\etasks.exe
  -0.2s C:\Toolbx\FDM\Updater.exe
  -0.2s C:\Toolbx\FDM\dlall.htm
  -0.2s C:\Toolbx\FDM\dlfvideo.htm
  -0.2s C:\Toolbx\FDM\dllink.htm
  -0.2s C:\Toolbx\FDM\dlpage.htm
  -0.2s C:\Toolbx\FDM\dlselected.htm
  -0.2s C:\Toolbx\FDM\fdm.tlb
  -0.2s C:\Toolbx\FDM\Help\
  -0.2s C:\Toolbx\FDM\Help\Free Download Manager.chm
  -0.1s C:\Toolbx\FDM\Language\eng.lng
  -0.1s C:\Toolbx\FDM\iefdmdm.dll
  -0.1s C:\Toolbx\FDM\iefdm2.dll
  -0.0s C:\Toolbx\FDM\npfdm.dll
  -0.0s C:\Toolbx\FDM\Chrome\
  -0.0s C:\Toolbx\FDM\Chrome\fdm_nativehost.exe
  -0.0s C:\Toolbx\FDM\Chrome\manifest.json
  -0.0s C:\Toolbx\FDM\flvsniff.dll
  -0.0s C:\Toolbx\FDM\detoured.dll
  0.0s C:\Toolbx\FDM\fdmumsp.dll
  0.0s C:\Toolbx\FDM\license.txt
  0.0s C:\Toolbx\FDM\fdmcs.dat
  0.0s C:\Toolbx\FDM\Skins\
  0.0s C:\Toolbx\FDM\Skins\How to create a skin.url
  0.0s C:\Toolbx\FDM\Skins\old style\
  0.0s C:\Toolbx\FDM\Skins\old style\back.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\back_d.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\checks.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\choosefolder.ico
  0.0s C:\Toolbx\FDM\Skins\old style\creategroup.ico
  0.0s C:\Toolbx\FDM\Skins\old style\dldtasks.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\dldtasks_sel.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\dlinfo.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\dropbox.ico
  0.0s C:\Toolbx\FDM\Skins\old style\filelist.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\filelist_sel.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\go.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\groups.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\groupsmenu.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\groupsmenu_d.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\login.ico
  0.0s C:\Toolbx\FDM\Skins\old style\logstat.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\mute.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\scheduler.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\scheduler_sel.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\settime.ico
  0.0s C:\Toolbx\FDM\Skins\old style\sitelist.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\sitelist_sel.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\skin.ini
  0.0s C:\Toolbx\FDM\Skins\old style\tool0.bmp
  0.0s C:\Toolbx\FDM\Skins\old style\tool0_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool0_small.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool0_small_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_bt.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_bt_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_bt_small.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_bt_small_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_dld.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_dld_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_dld_small.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_dld_small_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_hfe.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_hfe_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_hfe_small.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_hfe_small_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_sch.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_sch_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_sch_small.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_sch_small_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_sites.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_sites_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_sites_small.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_sites_small_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_spider.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_spider_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_spider_small.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tool_spider_small_d.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\tosel.ico
  0.1s C:\Toolbx\FDM\Skins\old style\tounsel.ico
  0.1s C:\Toolbx\FDM\Skins\old style\tray.ico
  0.1s C:\Toolbx\FDM\Skins\old style\tray_down.ico
  0.1s C:\Toolbx\FDM\Skins\old style\tray_err.ico
  0.1s C:\Toolbx\FDM\Skins\old style\tray_starting.ico
  0.1s C:\Toolbx\FDM\Skins\old style\vidman.bmp
  0.1s C:\Toolbx\FDM\Skins\old style\vidman_d.bmp
  0.1s C:\Toolbx\FDM\Plugins\
  0.1s C:\Toolbx\FDM\Plugins\FDM plugins SDK.url
  0.1s C:\Toolbx\FDM\fdm_01.gif
  0.1s C:\Toolbx\FDM\Archive\
  0.1s C:\Toolbx\FDM\Archive\unrar.dll
  0.1s C:\Toolbx\FDM\Archive\7-zip\
  0.1s C:\Toolbx\FDM\Archive\7-zip\Codecs\
  0.1s C:\Toolbx\FDM\Archive\7-zip\Codecs\Deflate.dll
  0.1s C:\Toolbx\FDM\Archive\7-zip\Formats\
  0.1s C:\Toolbx\FDM\Archive\7-zip\Formats\arj.dll
  0.1s C:\Toolbx\FDM\Archive\7-zip\Formats\zip.dll
  0.1s C:\Toolbx\FDM\Firefox\
  0.1s C:\Toolbx\FDM\Firefox\extension\
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome.manifest
  0.1s C:\Toolbx\FDM\Firefox\extension\install.rdf
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_brcache.js
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_dldObserver.js
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_ffext.js
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_ffext.xul
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_ffextDM.js
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_ffextDM.xul
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_ffpxy.js
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_fmbtn.js
  0.1s C:\Toolbx\FDM\Firefox\extension\chrome\content\fdm_objtabs.css
  0.2s C:\Toolbx\FDM\Firefox\extension\components\
  0.2s C:\Toolbx\FDM\Firefox\extension\components\.autoreg
  0.2s C:\Toolbx\FDM\Firefox\extension\components\ivmsfdmff.xpt
  0.2s C:\Toolbx\FDM\Firefox\extension\components\ivmsfdmff22.xpt
  0.2s C:\Toolbx\FDM\Firefox\extension\components\vmsfdmff.dll
  0.2s C:\Toolbx\FDM\Firefox\extension\components\vmsfdmff22.dll
  0.2s C:\Toolbx\FDM\Server\
  0.2s C:\Toolbx\FDM\Server\adddownloadres_err.html
  0.2s C:\Toolbx\FDM\Server\adddownloadres_ok.html
  0.2s C:\Toolbx\FDM\Server\compdlds.html
  0.2s C:\Toolbx\FDM\Server\index.html
  0.2s C:\Toolbx\FDM\fdmwi.exe
  0.2s C:\Toolbx\FDM\fdmbtsupp.dll
  0.4s C:\Toolbx\FDM\MediaConverter.dll
  0.8s C:\Toolbx\FDM\player.swf
  0.8s C:\Toolbx\FDM\vistafx.dll
  0.8s C:\Toolbx\FDM\sigkey.dat
  0.8s C:\Toolbx\FDM\tips.dat
  0.8s C:\Toolbx\FDM\msdl.dll
  0.8s C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager\
  0.9s C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager\Free Download Manager.lnk
  1.0s C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager\FDM remote control server.lnk
  1.0s C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager\Documentation.lnk
  1.0s C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager\Free Download Manager on the Web.lnk
  1.0s C:\Users\Adric\Desktop\Free Download Manager.lnk
  1.0s C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager\Uninstall Free Download Manager.lnk
  1.0s C:\Toolbx\FDM\fdm.url

Also, when I tried to save the log, I got the following pop-up and could not save it. No idea
how hmp ends up trying to save to this path that does not exist.

 

I'm still having this problem. I replaced Win8 with Win8.1+Update and HMP still incorrectly flags a lot of files from the same system disk when running under my Win8 (32bit) systems. HMP is getting confused with all those unhidden partitions.

 

Hi Erik

I have some Files for you to check and whitelist

Spoiler

Code:

Properties

Name ieframe.dll
Location C:\Windows\System32
Size 10.6 MB
Time 19.8 days ago (2014-04-11 17:26:44)
Entropy 6.4
Product Windows® Internet Explorer
Publisher Microsoft Corporation
Description Internet Explorer
Version 8.00.6001.19518
Copyright © Microsoft Corporation. All rights reserved.
SHA-256 50054F8AFFB98C413E40072464B967FFDC6E15E0DEB9A249872CB1A0DE0B3EF0

Scoring (7.0)

Program starts automatically without user intervention.
The file is in use by one or more active processes.
The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
Time indicates that the file appeared recently on this computer.
The file is protected by Windows File Protection (WFP). This is typical for critical Windows system files.

Startup

HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\UrlSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\UrlSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
HKU\S-1-5-21-911542882-2029379874-2294310465-1000\SOFTWARE\Microsoft\Internet Explorer\UrlSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}

References

HKLM\SOFTWARE\Classes\CLSID\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}\
HKU\S-1-5-21-911542882-2029379874-2294310465-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}\

Forensic Cluster

-195.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAXKB8LP
-194.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAGH3LDG
-193.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA7NQFWN
-185.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAXWHBV9
-184.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAPYNM1S
-171.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CALDL2L8
-168.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAU5Z2YS
-167.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAZXNYEF
-155.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAFZBGL6
-153.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAUQ49ZR
-143.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA1OVPU9
-142.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAV3FOAZ
-134.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA3757UK
-134.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA1JRLAS
-129.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CABGKOWS
-128.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA2IM7JP
-121.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAQ2ZHOX
-120.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAVP7IS8
-118.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA0LK8AI
-112.3s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.6001.23580_none_cbb7fbd5c0ce3cae.manifest
-112.3s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.6001.19518_none_cb8212b4a770a12c.manifest
-112.3s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.23580_none_47be8f56dd4ae876.manifest
-112.3s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.19518_none_4788a635c3ed4cf4.manifest
-112.3s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-winsockautodialstub_31bf3856ad364e35_8.0.6001.23580_none_d346f3fd8cf63fbd.manifest
-112.3s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-winsockautodialstub_31bf3856ad364e35_8.0.6001.19518_none_d3110adc7398a43b.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_8.0.6001.23580_none_d053342217e6d6af.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_8.0.6001.19518_none_d01d4b00fe893b2d.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.23580_none_feae3c87e9286560.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.19518_none_fe785366cfcac9de.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23580_none_a8ecd7db8da5289b.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.19518_none_a8b6eeba74478d19.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.23580_none_2abfcd10bbb00f70.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.19518_none_2a89e3efa25273ee.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.23580_none_1a428ae3434ef4de.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.19518_none_1a0ca1c229f1595c.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-jscriptdebugui_31bf3856ad364e35_8.0.6001.23580_none_9d887194fcd11bfc.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-jscriptdebugui_31bf3856ad364e35_8.0.6001.19518_none_9d528873e373807a.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23580_none_127e22c0492a5ff6.manifest
-112.2s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19518_none_1248399f2fccc474.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.23580_none_2aa952acc964e200.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.19518_none_2a73698bb007467e.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.23580_none_734b071679bc7b92.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.19518_none_73151df5605ee010.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.23580_none_f65f355351555a49.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.19518_none_f6294c3237f7bec7.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_8.0.6001.23580_none_2b450c1e7290a421.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_8.0.6001.19518_none_2b0f22fd5933089f.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-htmlconverter_31bf3856ad364e35_8.0.6001.23580_none_4e34d29bb686e54d.manifest
-112.1s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-htmlconverter_31bf3856ad364e35_8.0.6001.19518_none_4dfee97a9d2949cb.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-htmlactivexcompat_31bf3856ad364e35_8.0.6001.23580_none_fa8b8ffe3ef5419b.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-htmlactivexcompat_31bf3856ad364e35_8.0.6001.19518_none_fa55a6dd2597a619.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23580_none_df6a11c109ede2f2.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.19518_none_df34289ff0904770.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.23580_none_4302ad0369a243cb.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.19518_none_42ccc3e25044a849.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-extcompat_31bf3856ad364e35_8.0.6001.23580_none_1fcbceba05c5e547.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-extcompat_31bf3856ad364e35_8.0.6001.19518_none_1f95e598ec6849c5.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.23580_none_1ec12f876f023d54.manifest
-112.0s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.19518_none_1e8b466655a4a1d2.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-controls_31bf3856ad364e35_8.0.6001.23580_none_acfd7aa17f1e97fa.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-controls_31bf3856ad364e35_8.0.6001.19518_none_acc7918065c0fc78.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.23580_none_1fdfa7662139b975.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.19518_none_1fa9be4507dc1df3.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.23580_none_576c8f3086a911da.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.19518_none_5736a60f6d4b7658.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23580_none_e5051634d0fef113.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23580_none_e5051634d0fef113.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.19518_none_e4cf2d13b7a15591.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..tivexpolicyprovider_31bf3856ad364e35_8.0.6001.23580_none_6f871c667ade0309.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..tivexpolicyprovider_31bf3856ad364e35_8.0.6001.19518_none_6f51334561806787.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_8.0.6001.23580_none_7255c8c781046fa4.manifest
-111.9s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_8.0.6001.19518_none_721fdfa667a6d422.manifest
-111.8s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.23580_none_c3e1c95bab9e89ef.manifest
-111.8s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.19518_none_97c95171ec982efe.manifest
-111.8s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.19518_none_c3abe03a9240ee6d.manifest
-111.8s C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.23580_none_97ff3a9305f5ca80.manifest
-104.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA4DSO86
-103.5s C:\Windows\winsxs\Catalogs\abf5d489d52d1797bf3447fa65849732407112b898da92128fd4351552d055ae.cat
-103.5s C:\Windows\winsxs\Manifests\x86_bc7a5622fc5fa353bf031ade070c4d9f_31bf3856ad364e35_8.0.6001.23580_none_1dc0afea7d292ea5.manifest
-103.4s C:\Windows\winsxs\Manifests\x86_f0bedb78ac1a8804e3adc5ab4e0d576a_31bf3856ad364e35_8.0.6001.19518_none_18134f7c35085e74.manifest
-103.3s C:\Windows\winsxs\Manifests\x86_e34013d3d9ba07d3b895a34bbc750892_31bf3856ad364e35_8.0.6001.23580_none_260fdc702e70ce31.manifest
-103.2s C:\Windows\winsxs\Manifests\x86_32584951ec446d3bc0561358cc500b96_31bf3856ad364e35_8.0.6001.19518_none_91c4995726cc6f9f.manifest
-103.1s C:\Windows\winsxs\Manifests\x86_df36b35579255723a80e4358fe257d29_31bf3856ad364e35_8.0.6001.23580_none_034814bf112a38f2.manifest
-103.0s C:\Windows\winsxs\Manifests\x86_65f21a98cad015ca8a86ed83b9f8cf57_31bf3856ad364e35_8.0.6001.19518_none_2379f63f258219e1.manifest
-103.0s C:\Windows\winsxs\Manifests\x86_da24dc1d29a8b7a1b6d70568c7cae98b_31bf3856ad364e35_8.0.6001.23580_none_75be4efd7d993ece.manifest
-102.9s C:\Windows\winsxs\Manifests\x86_355f5a8dd779b8fc3265a1bdb42bfabd_31bf3856ad364e35_8.0.6001.19518_none_458eb4638a874cc8.manifest
-102.9s C:\Windows\winsxs\Manifests\x86_82b175c87ecb848d6eb28b8badbb456f_31bf3856ad364e35_8.0.6001.23580_none_7e3408e1207a17b8.manifest
-102.8s C:\Windows\winsxs\Manifests\x86_9cef9f00dcff8de0c6118d6068e75f9d_31bf3856ad364e35_8.0.6001.19518_none_ec73a1f1afff92c3.manifest
-102.7s C:\Windows\winsxs\Manifests\x86_ba6caaa5e3c6ff09807d3769bf934bc6_31bf3856ad364e35_8.0.6001.23580_none_d33160db3143eb5d.manifest
-102.6s C:\Windows\winsxs\Manifests\x86_51f06ed0fe702afd59da8c329e532dfc_31bf3856ad364e35_8.0.6001.19518_none_abc5c8ad3121b98e.manifest
-102.6s C:\Windows\winsxs\Manifests\x86_2b502fa3a52c8af87468724df0d1a988_31bf3856ad364e35_8.0.6001.23580_none_3ec8438751121dd6.manifest
-102.5s C:\Windows\winsxs\Manifests\x86_fdfc94fe41624c5b530358e7bef3a03f_31bf3856ad364e35_8.0.6001.19518_none_56f7dfe605ecac76.manifest
-102.4s C:\Windows\winsxs\Manifests\x86_fbf003171035af9229b1b8c059bf8178_31bf3856ad364e35_8.0.6001.23580_none_33e4df842b1e2b37.manifest
-102.3s C:\Windows\winsxs\Manifests\x86_d2b8c1bfe11e42144d4e3c9f3a098a31_31bf3856ad364e35_8.0.6001.19518_none_3bec6b45515b5521.manifest
-102.2s C:\Windows\winsxs\Manifests\x86_991950aedffea846feee38b961cfbafa_31bf3856ad364e35_8.0.6001.23580_none_cf80555359ff2630.manifest
-102.1s C:\Windows\winsxs\Manifests\x86_78e01f7a9647c023aba8d4bbe331a604_31bf3856ad364e35_8.0.6001.19518_none_9c33798a892bb3a4.manifest
-102.0s C:\Windows\winsxs\Manifests\x86_642583d442bf7793cff11130176ad912_31bf3856ad364e35_8.0.6001.23580_none_208115fb5a0d4f76.manifest
-102.0s C:\Windows\winsxs\Manifests\x86_cdcbdcedc25a330feaaa7a76b508e499_31bf3856ad364e35_8.0.6001.19518_none_cff2ccae9dab9b40.manifest
-101.9s C:\Windows\winsxs\Manifests\x86_bedce697318617c4b58f73a247392ae5_31bf3856ad364e35_8.0.6001.23580_none_11bae54856349f8a.manifest
-101.8s C:\Windows\winsxs\Manifests\x86_7d668918263c6d25652f99c704d3e0a4_31bf3856ad364e35_8.0.6001.19518_none_7679df60229298a2.manifest
-101.8s C:\Windows\winsxs\Manifests\x86_171cdbe0d3ff46f599442c13e5a993c1_31bf3856ad364e35_8.0.6001.23580_none_a32e76e868d72e96.manifest
-101.7s C:\Windows\winsxs\Manifests\x86_2dc996c86b758466aeb879e1dcff65bd_31bf3856ad364e35_8.0.6001.19518_none_1b535e6189099f50.manifest
-101.6s C:\Windows\winsxs\Manifests\x86_5c59606dc88d38114ea1c456912ffead_31bf3856ad364e35_8.0.6001.23580_none_3e8ed7e2e9b38849.manifest
-101.6s C:\Windows\winsxs\Manifests\x86_120d20c69d31545c0dcfbd04e0b4410e_31bf3856ad364e35_8.0.6001.19518_none_88b0d7a3e267714a.manifest
-101.5s C:\Windows\winsxs\Manifests\x86_de32aa50d8c139c621bdba06878db671_31bf3856ad364e35_8.0.6001.23580_none_1d05d79551d3d619.manifest
-101.4s C:\Windows\winsxs\Manifests\x86_4015200f56c4b1555f4d7e0bda674276_31bf3856ad364e35_8.0.6001.19518_none_6709d1f4121702bd.manifest
-101.4s C:\Windows\winsxs\Manifests\x86_8bb1439e56a36418426d737fea2f7997_31bf3856ad364e35_8.0.6001.23580_none_e73d996a359970d3.manifest
-101.3s C:\Windows\winsxs\Manifests\x86_b7b0bf28fb751a507af61df57cf0fe36_31bf3856ad364e35_8.0.6001.19518_none_ab2d3d10b7b0780a.manifest
-101.2s C:\Windows\winsxs\Manifests\x86_d076c3033907acc1c608aeba17e9d2bf_31bf3856ad364e35_8.0.6001.23580_none_bfed62ae60448f7b.manifest
-101.2s C:\Windows\winsxs\Manifests\x86_5080bbe9797c8516e489be60a1b7d57d_31bf3856ad364e35_8.0.6001.19518_none_83d0270892e00bd1.manifest
-101.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAM5OAAF
-101.1s C:\Windows\winsxs\Manifests\x86_7542f5948008b8cf336b8984e7defc7c_31bf3856ad364e35_8.0.6001.23580_none_e4b186d855c54fc6.manifest
-101.0s C:\Windows\winsxs\Manifests\x86_083dec8fad36aa478ae64bbe655d08d7_31bf3856ad364e35_8.0.6001.19518_none_c0f567fa3bece7e2.manifest
-100.9s C:\Windows\winsxs\Manifests\x86_2388c099274ffd2330bf91214a2561b7_31bf3856ad364e35_8.0.6001.23580_none_eaf15c1420b63492.manifest
-100.8s C:\Windows\winsxs\Manifests\x86_9d77a339900975f4aec6587751764f07_31bf3856ad364e35_8.0.6001.19518_none_fb7e670c46ce1519.manifest
-100.7s C:\Windows\winsxs\Manifests\x86_447b01fb57fd634b19e4a99075c8c774_31bf3856ad364e35_8.0.6001.23580_none_ff174dceb129b1ab.manifest
-100.7s C:\Windows\winsxs\Manifests\x86_478b72e9b8ac11950bc080c7e50952b9_31bf3856ad364e35_8.0.6001.19518_none_853037864979677c.manifest
-100.5s C:\Windows\winsxs\Manifests\x86_9301c35465ed2db1cfbb892ae7bac45a_31bf3856ad364e35_8.0.6001.23580_none_8be2e4d20fe1cfc8.manifest
-100.3s C:\Windows\winsxs\Manifests\x86_b6f70b5d4a1d8b223e96b9d180ab35ff_31bf3856ad364e35_8.0.6001.19518_none_7841f991c60aca6a.manifest
-100.3s C:\Windows\winsxs\Manifests\x86_28def40849d3488466be681fe0708c17_31bf3856ad364e35_8.0.6001.23580_none_01c756342c9c1554.manifest
-100.2s C:\Windows\winsxs\Manifests\x86_800cc2f2c5bbc8a48be6e3e18af7ef42_31bf3856ad364e35_8.0.6001.19518_none_ae6526bba749ca30.manifest
-100.1s C:\Windows\winsxs\Manifests\x86_11cefb0196a90ce237e0d6f3a32e91d6_31bf3856ad364e35_8.0.6001.23580_none_21f5ee350e0996db.manifest
-100.0s C:\Windows\winsxs\Manifests\x86_22deef9fb1d2c211112ba04a89b6b5be_31bf3856ad364e35_8.0.6001.19518_none_96689d71a66698e2.manifest
-100.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAXTVP3P
-99.9s C:\Windows\winsxs\Manifests\x86_c13cfa2edb8a77ed2f4c520cb910c0eb_31bf3856ad364e35_8.0.6001.23580_none_06a69bef7f36d881.manifest
-99.8s C:\Windows\winsxs\Manifests\x86_68880b4af3bb7179b4bc210602bb3bdd_31bf3856ad364e35_8.0.6001.19518_none_19bad091b0eee569.manifest
-99.7s C:\Windows\winsxs\Manifests\x86_688d4b5877167c95d716510351d63864_31bf3856ad364e35_8.0.6001.23580_none_42866a61ec58b2f2.manifest
-99.7s C:\Windows\winsxs\Manifests\x86_f3d91d80cfa7ebecec58077284728140_31bf3856ad364e35_8.0.6001.19518_none_e7ae44fcdbb272f8.manifest
-99.6s C:\Windows\winsxs\Manifests\x86_8ef01f2269fd0a0f790206ba6c64a24b_31bf3856ad364e35_8.0.6001.23580_none_e8214b06b36abeb9.manifest
-99.5s C:\Windows\winsxs\Manifests\x86_d2180becbcaeda09ab83fa32de4ccc27_31bf3856ad364e35_8.0.6001.19518_none_fb4888a19f3121d5.manifest
-99.5s C:\Windows\winsxs\Manifests\x86_9d4709ee01c2ba52ca4646ce178c03f1_31bf3856ad364e35_8.0.6001.23580_none_51b85c433639b018.manifest
-99.4s C:\Windows\winsxs\Manifests\x86_3407fbe8ccec6433afed1cd361626dbf_31bf3856ad364e35_8.0.6001.19518_none_5a4fffd09b5ad435.manifest
-99.3s C:\Windows\winsxs\Manifests\x86_6e575c7678ccad1edf170df4e9821c13_31bf3856ad364e35_8.0.6001.23580_none_145580b0d1aeba12.manifest
-99.3s C:\Windows\winsxs\Manifests\x86_e3ac3432e27cfde3c5a694e36332439a_31bf3856ad364e35_8.0.6001.19518_none_f4694e69a0d7f5fe.manifest
-99.2s C:\Windows\winsxs\Manifests\x86_fe22c330578d35cc4a03e29e9c385fce_31bf3856ad364e35_8.0.6001.23580_none_108a471e5ea154cf.manifest
-99.1s C:\Windows\winsxs\Manifests\x86_bbbb2a0e5906b80bd30b6df02f0aa00d_31bf3856ad364e35_8.0.6001.19518_none_80d785fffad7211d.manifest
-98.5s C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23580_none_a8ecd7db8da5289b\
-98.4s C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.19518_none_a8b6eeba74478d19\
-97.8s C:\Windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.23580_none_1a428ae3434ef4de\
-97.6s C:\Windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.19518_none_1a0ca1c229f1595c\
-96.9s C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23580_none_127e22c0492a5ff6\
-96.5s C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19518_none_1248399f2fccc474\
-92.9s C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.23580_none_4302ad0369a243cb\
-92.7s C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.19518_none_42ccc3e25044a849\
-92.5s C:\Windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23580_none_df6a11c109ede2f2\
-92.4s C:\Windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.19518_none_df34289ff0904770\
-90.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAGVFNFC
-89.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAB77FQU
-88.7s C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2936068~31bf3856ad364e35~x86~~8.0.1.2.cat
-88.6s C:\Windows\servicing\Packages\Package_for_KB2936068~31bf3856ad364e35~x86~~8.0.1.2.cat
-88.6s C:\Windows\servicing\Packages\Package_for_KB2936068~31bf3856ad364e35~x86~~8.0.1.2.mum
-88.5s C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2936068_ie8~31bf3856ad364e35~x86~~8.0.1.2.cat
-88.5s C:\Windows\servicing\Packages\Package_for_KB2936068_ie8~31bf3856ad364e35~x86~~8.0.1.2.cat
-88.5s C:\Windows\servicing\Packages\Package_for_KB2936068_ie8~31bf3856ad364e35~x86~~8.0.1.2.mum
-88.4s C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2936068_ie8_0~31bf3856ad364e35~x86~~8.0.1.2.cat
-88.4s C:\Windows\servicing\Packages\Package_for_KB2936068_ie8_0~31bf3856ad364e35~x86~~8.0.1.2.cat
-88.4s C:\Windows\servicing\Packages\Package_for_KB2936068_ie8_0~31bf3856ad364e35~x86~~8.0.1.2.cat
-88.4s C:\Windows\servicing\Packages\Package_for_KB2936068_ie8_0~31bf3856ad364e35~x86~~8.0.1.2.mum
-82.5s C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2936068~31bf3856ad364e35~x86~~8.0.1.2.cat
-82.5s C:\Windows\servicing\Packages\Package_1_for_KB2936068~31bf3856ad364e35~x86~~8.0.1.2.cat
-82.5s C:\Windows\servicing\Packages\Package_1_for_KB2936068~31bf3856ad364e35~x86~~8.0.1.2.mum
-77.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAST9EVB
-76.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAHFC7RA
-76.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAHFC7RA
-76.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAHFC7RA
-64.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA4MOSPH
-63.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAVZSVV9
-55.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA1IBX61
-53.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA7M0TW4
-52.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAKH014E
-40.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA8TR0P8
-39.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAP7Q6XQ
-30.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CATC2F9N
-29.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA6ISHPA
-28.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAE8H26R
-13.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAFEGFF2
-12.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAJTDRT1
-7.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA053Z7F
-4.0s C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.0.6002.19034_none_9587d7775386a817\kernel32.dll
-4.0s C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.0.6002.23323_none_961b47b06c9d0ce7\kernel32.dll
-2.7s C:\Windows\System32\mshtml.tlb
-2.7s C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.23580_none_f65f355351555a49\mshtml.tlb
-2.7s C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.23580_none_f65f355351555a49\mshtml.tlb
-2.6s C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23580_none_e5051634d0fef113\WininetPlugin.dll
-2.6s C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23580_none_e5051634d0fef113\WininetPlugin.dll
-2.6s C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.19518_none_e4cf2d13b7a15591\WininetPlugin.dll
-2.6s C:\Windows\System32\msfeedssync.exe
-2.6s C:\Windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23580_none_df6a11c109ede2f2\msfeedssync.exe
-2.5s C:\Windows\System32\ie4uinit.exe
-2.5s C:\Windows\System32\corpol.dll
-2.5s C:\Windows\winsxs\x86_microsoft-windows-i..tivexpolicyprovider_31bf3856ad364e35_8.0.6001.23580_none_6f871c667ade0309\corpol.dll
-2.5s C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.6001.19518_none_cb8212b4a770a12c\ieinstal.exe
-2.5s C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.19518_none_e4cf2d13b7a15591\jsproxy.dll
-2.5s C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23580_none_e5051634d0fef113\jsproxy.dll
-2.4s C:\Windows\System32\licmgr10.dll
-2.4s C:\Windows\winsxs\x86_microsoft-windows-ie-controls_31bf3856ad364e35_8.0.6001.23580_none_acfd7aa17f1e97fa\licmgr10.dll
-2.4s C:\Windows\System32\iernonce.dll
-2.4s C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23580_none_a8ecd7db8da5289b\iernonce.dll
-2.4s C:\Windows\System32\msfeedsbs.dll
-2.3s C:\Windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23580_none_df6a11c109ede2f2\msfeedsbs.dll
-2.3s C:\Windows\System32\iesetup.dll
-2.3s C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23580_none_a8ecd7db8da5289b\iesetup.dll
-2.3s C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_8.0.6001.19518_none_2b0f22fd5933089f\mshtmled.dll
-2.3s C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_8.0.6001.23580_none_2b450c1e7290a421\mshtmled.dll
-2.2s C:\Windows\System32\url.dll
-2.2s C:\Windows\winsxs\x86_microsoft-windows-ie-winsockautodialstub_31bf3856ad364e35_8.0.6001.23580_none_d346f3fd8cf63fbd\url.dll
-2.2s C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.19518_none_2a73698bb007467e\IEShims.dll
-2.2s C:\Windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.23580_none_2aa952acc964e200\IEShims.dll
-2.1s C:\Windows\System32\ieUnatt.exe
-2.1s C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.19518_none_2a89e3efa25273ee\sqmapi.dll
-2.1s C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.23580_none_2abfcd10bbb00f70\sqmapi.dll
-2.1s C:\Windows\System32\iesysprep.dll
-2.0s C:\Windows\System32\iepeers.dll
-2.0s C:\Windows\System32\occache.dll
-2.0s C:\Windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.23580_none_1a428ae3434ef4de\occache.dll
-1.9s C:\Windows\System32\ieui.dll
-1.9s C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.23580_none_47be8f56dd4ae876\ieui.dll
-1.9s C:\Windows\System32\iedkcs32.dll
-1.9s C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.19518_none_73151df5605ee010\ieproxy.dll
-1.9s C:\Windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.23580_none_734b071679bc7b92\ieproxy.dll
-1.8s C:\Windows\System32\html.iec
-1.8s C:\Windows\winsxs\x86_microsoft-windows-ie-htmlconverter_31bf3856ad364e35_8.0.6001.23580_none_4e34d29bb686e54d\html.iec
-1.8s C:\Windows\winsxs\x86_microsoft-windows-ie-jscriptdebugui_31bf3856ad364e35_8.0.6001.19518_none_9d528873e373807a\jsdbgui.dll
-1.7s C:\Windows\System32\mstime.dll
-1.7s C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.23580_none_c3e1c95bab9e89ef\mstime.dll
-1.6s C:\Windows\System32\iertutil.dll
-1.6s C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.19518_none_e4cf2d13b7a15591\wininet.dll
-1.5s C:\Windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.23580_none_feae3c87e9286560\iesysprep.dll
-1.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA7UFO2Y
-1.4s C:\Windows\System32\inetcpl.cpl
-1.3s C:\Windows\System32\msfeeds.dll
-1.3s C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_8.0.6001.19518_none_d01d4b00fe893b2d\VGX.dll
-1.2s C:\Windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_8.0.6001.23580_none_d053342217e6d6af\VGX.dll
-1.2s C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23580_none_127e22c0492a5ff6\ieUnatt.exe
-1.2s C:\Windows\System32\urlmon.dll
-1.1s C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.19518_none_1e8b466655a4a1d2\iedvtool.dll
-1.1s C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23580_none_a8ecd7db8da5289b\ie4uinit.exe
-1.0s C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.6001.23580_none_cbb7fbd5c0ce3cae\ieinstal.exe
-1.0s C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.23580_none_576c8f3086a911da\iedkcs32.dll
-1.0s C:\Windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.23580_none_4302ad0369a243cb\msfeeds.dll
-0.9s C:\Windows\winsxs\x86_microsoft-windows-ie-jscriptdebugui_31bf3856ad364e35_8.0.6001.23580_none_9d887194fcd11bfc\jsdbgui.dll
-0.9s C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19518_none_1248399f2fccc474\iexplore.exe
-0.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA8G1M3I
-0.8s C:\Windows\winsxs\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_8.0.6001.23580_none_7255c8c781046fa4\inetcpl.cpl
-0.8s C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23580_none_127e22c0492a5ff6\iexplore.exe
-0.7s C:\Windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.23580_none_1fdfa7662139b975\iepeers.dll
-0.7s C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23580_none_e5051634d0fef113\wininet.dll
-0.6s C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.23580_none_97ff3a9305f5ca80\urlmon.dll
* C:\Windows\System32\ieframe.dll
0.1s C:\Windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.23580_none_1ec12f876f023d54\iedvtool.dll
0.4s C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.23580_none_47be8f56dd4ae876\ieframe.dll
1.1s C:\Windows\System32\mshtml.dll
1.3s C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.23580_none_f65f355351555a49\mshtml.dll
1.4s C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.23580_none_2abfcd10bbb00f70\iertutil.dll
5.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAQQ00NV
13.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAXPWR78
14.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA0RT31F
24.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAOABINY
24.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CATYLDFZ
29.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAR10C2W
30.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA2KH513
37.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CABZ8S0C
37.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAKB7S1A
42.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CATW0SPS
42.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA8FKQU4
48.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAZ0M4S0
48.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CARBU25P
54.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA0E25VD
55.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CANHIH7X
61.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA9YTFN4
62.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA4MD8RM
68.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA39EG5H
69.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAVQW92K
83.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA417496
84.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAI9UD7Y
96.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAC6MDW3
97.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA513IOV
105.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA01MSYO
106.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAM0QH2G
114.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA3OMDP5
115.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA8B6JTQ
116.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CALELAR0
123.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAE1EHDI
124.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAE05ZFO
124.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAE05ZFO
129.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAJWYMDT
130.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA0IUKXV
135.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAMVWHTP
136.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CATGMIGF
157.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAB448BF
158.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA4VX38J
165.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA9V174Q
166.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAE35CCQ
167.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA73SQI4
174.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CANKK5OP
175.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAJL2IER
176.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA5BNI0W
185.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAKOK9Y6
186.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA65VLQM
187.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAOXQ2AR
195.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA8UGEZS
196.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAEHGHB5
204.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAJGEDQW
210.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA433H8H
210.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAOV2R3X
220.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAY2XF6V
221.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAPKGJFS
222.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAIM588M
230.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA9V5KV5
233.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA3L078J
234.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA426JCA
246.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAB90MYZ
249.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA3XD0D4
249.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAMQDDJH
249.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAA2W82C
249.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA334NET
249.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA6GSXN0
252.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA3O8FV5
252.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAZXK35B
252.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAZXK35B
252.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CANVCRNG
252.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CANVCRNG
252.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CARW08NW
252.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA609QBJ
252.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA609QBJ
262.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAUHGEMP
263.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA9EF72Y
263.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\bullet[1].gif
265.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAX41YMN
266.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CABL1AXZ
267.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAXAHCKI
268.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA112NFS
269.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CA1YGORN
271.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAF4ZL41
271.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAF4ZL41
272.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAT3LZ0V
275.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAW7V2XH
276.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAAGYYTC
278.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAN5WA7B
278.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA07CGNT
281.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA0DUA8C
282.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAJ33OGI
283.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAXRLMD6
284.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAT7CYGY
285.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA6GIF3A
286.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAP3O75C
286.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAKTP2DM
287.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CANFYO0B
287.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAESA3LE
288.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAIMEE3S
289.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA002TCD
290.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA708F0R
291.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAGXI7BF
292.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAYR1RVA
292.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAIPEF2X
293.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CALXR8P2
293.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA0VKAZ0
294.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAC5XI30
296.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAAEVUGL
297.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAMWSF30
298.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAPWT5FC
299.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAMLBF0Q
300.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAMT9WTD
301.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAUPI4WH
303.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAQ6Q3T3
304.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAHIMQHW
305.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAW4L7ZI
306.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAYOG20M
307.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAW0B048
308.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAJKLASV
309.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA19D1QN
310.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAMS9813
310.7s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAA4IHCL
311.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAMBP484
312.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CANY249R
313.2s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CA083U4M
314.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAYPB3A9
315.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAWT572E
316.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15G454LD\CAVLJ4XJ
317.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA5IFLNV
317.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAMOMZTV
318.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA33TFSX
319.4s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAP4VOGM
320.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CADIAXCH
321.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CAIXX7WW
322.0s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DLB27V88\CA2KNFIQ
322.9s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAYQ2XT5
323.8s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAU7YXUC
324.6s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\74Z96EPK\CAAVJTQ5
325.5s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA1F601V
326.3s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CAPUUMUI
327.1s C:\Users\Alexander Robrecht\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFRHB6NB\CA3PAI8Q

　
SHA256: 50054f8affb98c413e40072464b967ffdc6e15e0deb9a249872cb1a0de0b3ef0
Dateiname: ieframe.dll
Erkennungsrate: 0 / 51
Analyse-Datum: 2014-05-01 12:15:06 UTC ( vor 0 Minuten )

 

Hi Erik

Here is part 2 can you check and whitelist the File


Properties

Name NPSWF32_13_0_0_206.dll
Location C:\Windows\system32\Macromed\Flash
Size 15.6 MB
Time 1.2 days ago (2014-05-01 13:11:35)
Authenticode Valid
Entropy 7.0
RSA Key Size 2048
SHA-256 9E9B71950BB563ABBAA24A1D4EC67F5A23563948C660D7E124C128D36F6FA21C

Scoring (6.0)

Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Program starts automatically without user intervention.
Time indicates that the file appeared recently on this computer.

Program is code signed with a valid Authenticode certificate.

Startup

HKLM\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer\

References

C:\Windows\system32\Macromed\Flash\flashplayer.xpt

Forensic Cluster

* C:\Windows\System32\Macromed\Flash\NPSWF32_13_0_0_206.dll
0.3s C:\Windows\System32\Macromed\Flash\FlashUtil32_13_0_0_206_Plugin.exe
0.5s C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
1.6s C:\Windows\Prefetch\INSTALL_FLASH_PLAYER.EXE-F60B424E.pf
2.6s C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-0CF170F4.pf

　
SHA256: 9e9b71950bb563abbaa24a1d4ec67f5a23563948c660d7e124c128d36f6fa21c
Dateiname: NPSWF32_13_0_0_206.dll
Erkennungsrate: 0 / 52
Analyse-Datum: 2014-05-02 16:44:33 UTC ( vor 0 Minuten )

 

Hi Erik,

Attached a log file (EWS scan mode reported about unknown files).

Regards,
Kardo

 

F.P. EMET 4.1 Update 1
OS Windows XP Home SP3:

 

@Sampei Nihira

Just click on ignore and select "Report that this file is safe"

 

TH
Now is OK.

False Positive for "Invalid digital signature".

 

Is this a false positive?
Can't double click it.
Upload via HitmanPro failed on ViruTotal.
Uploaded it manually and it says that file is clean (0/52).

 

Problem with scancloud. Almost 10 minutes now and still queued...

 

some problemos with isp or try router reset
it may help.Here no Problems with Scan or
other Things all best.

 

Solved. Btw thanks for your post lucien.

 

your welcome..Now it looks good.!

 

No replies from Erik since three weeks. This is a bit unusual no?

 

maybe he is on vacation,but you are right it's been a while..
he was here on Duty..(April,17 last post)

 

Probably very busy with HitmanPro.Alert 3!

 

Hi Erik

I have another one File for you for checking and whitelist


Properties

Name shell32.dll
Location C:\Windows\System32
Size 11.1 MB
Time 0.7 days ago (2014-05-13 19:33:03)
Entropy 6.1
Product Microsoft® Windows® Operating System
Publisher Microsoft Corporation
Description Windows Shell Common Dll
Version 6.0.6002.19070
Copyright © Microsoft Corporation. All rights reserved.
SHA-256 4045FB24E7F90EEA07D011AF73B2A309A908795362AE85114276650F78AA607C

Scoring (8.0)

Program starts automatically without user intervention.
Time indicates that the file appeared recently on this computer.
The file is in use by one or more active processes.
The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
The file is protected by Windows File Protection (WFP). This is typical for critical Windows system files.

Startup

HKLM\SOFTWARE\Classes\Directory\Shellex\CopyHookHandlers\FileSystem\
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}\

References

HKLM\SOFTWARE\Classes\CLSID\{0DF44EAA-FF21-4412-828E-260A8728E7F1}\
HKLM\SOFTWARE\Classes\CLSID\{217FC9C0-3AEA-1069-A2DB-08002B30309D}\
HKLM\SOFTWARE\Classes\CLSID\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF}\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{0DF44EAA-FF21-4412-828E-260A8728E7F1}\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF}\

　
SHA256: 4045fb24e7f90eea07d011af73b2a309a908795362ae85114276650f78aa607c
Dateiname: shell32.dll
Erkennungsrate: 0 / 53
Analyse-Datum: 2014-05-14 10:11:47 UTC ( vor 1 Minute )

 

Done. But you should not run continuously in EWS mode

 

My Hitman Licens runs out,only 6 Days Left as every year
is there some nice promo,coupon code around.

 

Hi Erik

Thank you very much. I will only help you