What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Computer Issuse

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I bought a desktop back in March. Recently, I've been experience various problems with it. But first, the specs:

-64-bit Windows Vista Home Basic
-Intel Core 2 Duo P7450 @ 2.13ghz
-4gb's of DDR2
-nVidia GeForce 9600M GS
-manufactured by HP
-model is IQ526t

Opera
Opera takes as much memory as it does for TF2. I have no idea why, even with one tab open it will take 200k of memory. As a result, the scrolling of a page ensues lag so I was forced to take smooth scroll off. Nonetheless, it still takes as much memory as TF2. I'm using the 32 bit version for windows [the only available version] but Opera says it should work fine on 64-bit computers.

(Possible) Solutions
-Reinstall (no changes)

Processor
My processor is always using 100% of it's power.

(Possible) Solutions
-eliminate memory wasting programs (I already switched from AVG to Avira)
-defrag (No changes)
-disk cleanup (No changes)

As a result, my computer's boot time has slowed down enormously. At one point, I thought removing several gigs of media and what-not would improve the speed. However, after I loaded all the music and videos I had on to an external hard drive, nothing had changed.

Here's the HiJackThis Log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:04:08 AM, on 7/31/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
C:\Users\Robin Choudhury\Program Files (x86)\DNA\btdna.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE
C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\GIZMO2\GIZMO.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\HWManager.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\OSDForm.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ire&pf=cndt
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ire&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ire&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ire&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] c:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe
O4 - HKLM\..\Run: [HP KEYBOARD] "C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE"
O4 - HKLM\..\Run: [Buttons & OSDs control application gen2] "C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [UpdatePDIRShortCut] "c:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [UCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam"
O4 - HKLM\..\Run: [TSMAgent] "c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [GIZMO2] C:\Program Files (x86)\GIZMO2\GIZMO.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [HPSmartCenterBoot] _C:\Program Files (x86)\Hewlett-Packard\TouchSmart\SmartCenter 2.0\SmartCenter.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Robin Choudhury\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Robin Choudhury\Program Files (x86)\DNA\btdna.exe"
O4 - HKCU\..\Run: [googletalk] C:\Users\Robin Choudhury\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: ImpulseNow.lnk = C:\Program Files (x86)\Stardock\Impulse\Now\ImpulseNow.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files (x86)\Stardock\Object Desktop\ObjectDock\ObjectDock.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: CalendarSynchService - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Touch Screen Enhance - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Touch Screen Enhance Service\HPTSEnSrv.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 13465 bytes
Post #3
Hi Carnot,

:welcome:

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't, manually reboot to ensure a complete clean

Then

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot (shut down your computer then restart it).
Also "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.
Post #4 last edited
Here's the Malwarebytes' Anti-Malware log:

Malwarebytes' Anti-Malware 1.40
Database version: 2594
Windows 6.0.6002 Service Pack 2

8/10/2009 5:41:47 PM
mbam-log-2009-08-10 (17-41-47).txt

Scan type: Quick Scan
Objects scanned: 223696
Time elapsed: 12 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


Here's the HijackThis! log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:04:08 AM, on 7/31/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
C:\Users\Robin Choudhury\Program Files (x86)\DNA\btdna.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE
C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\GIZMO2\GIZMO.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\HWManager.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\OSDForm.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ire&pf=cndt
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ire&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ire&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ire&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] c:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe
O4 - HKLM\..\Run: [HP KEYBOARD] "C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE"
O4 - HKLM\..\Run: [Buttons & OSDs control application gen2] "C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [UpdatePDIRShortCut] "c:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [UCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam"
O4 - HKLM\..\Run: [TSMAgent] "c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [GIZMO2] C:\Program Files (x86)\GIZMO2\GIZMO.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [HPSmartCenterBoot] _C:\Program Files (x86)\Hewlett-Packard\TouchSmart\SmartCenter 2.0\SmartCenter.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Robin Choudhury\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Robin Choudhury\Program Files (x86)\DNA\btdna.exe"
O4 - HKCU\..\Run: [googletalk] C:\Users\Robin Choudhury\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: ImpulseNow.lnk = C:\Program Files (x86)\Stardock\Impulse\Now\ImpulseNow.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files (x86)\Stardock\Object Desktop\ObjectDock\ObjectDock.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: CalendarSynchService - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Touch Screen Enhance - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Touch Screen Enhance Service\HPTSEnSrv.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 13465 bytes


The nature of my computer hasn't changed much. I gave up on Opera and switched to Chrome. I managed to lower the processor usage from 100% be getting rid of Windows Error Reporting tool. Other than that, the computer is still quite slow from when it was originally purchased.
Post #5
Carnot,


Please go to Kaspersky website and perform an online antivirus scan.

  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    • Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As….
  • Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
  • Please post this log in your next reply.
Post #7
Carnot,

Seeing as how we really haven't found any malware yet, that does seem exssesive. Let's get a deeper scan instead. If I can't find any problems, I'll send you over to the Tech Team to see if they can help you tweak a bit more speed out of it.

  • Download OTL to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
    Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.
Post #8
OTL logfile created on: 8/10/2009 10:27:22 PM - Run 1
OTL by OldTimer - Version 3.0.10.5 Folder = C:\Users\Robin Choudhury\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18813)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 1.92 Gb Available Physical Memory | 48.11% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 450.78 Gb Total Space | 267.65 Gb Free Space | 59.37% Space Free | Partition Type: NTFS
Drive D: | 14.98 Gb Total Space | 2.08 Gb Free Space | 13.87% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: CHOUDHURY
Current User Name: Robin Choudhury
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2009/05/13 16:48:22 | 00,108,289 | —- | M] (Avira GmbH) – C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2009/08/05 23:37:06 | 00,185,089 | —- | M] (Avira GmbH) – C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2008/12/12 12:06:30 | 00,021,296 | —- | M] (Hewlett-Packard) – C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
PRC - [2009/02/06 18:08:58 | 00,533,360 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
PRC - [2009/05/19 11:36:18 | 00,240,512 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2006/11/02 08:04:16 | 00,010,240 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
PRC - [2008/12/12 12:06:30 | 00,026,928 | —- | M] (Hewlett-Packard) – C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
PRC - [2009/01/16 18:02:20 | 03,866,624 | —- | M] (Analog Devices, Inc.) – C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
PRC - [2009/02/06 18:08:58 | 00,454,000 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe
PRC - [2007/04/18 08:01:34 | 00,065,536 | —- | M] (Hewlett-Packard Company) – C:\hp\support\hpsysdrv.exe
PRC - [2009/04/16 22:14:22 | 00,208,896 | —- | M] (Hewlett Packard) – C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe
PRC - [2009/04/16 22:14:36 | 00,233,472 | —- | M] (Hewlett Packard) – C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\HWManager.exe
PRC - [2008/10/17 16:56:54 | 01,152,296 | —- | M] (CyberLink Corp.) – C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
PRC - [2008/10/17 16:57:18 | 00,189,736 | —- | M] (CyberLink) – C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
PRC - [2007/05/08 16:24:20 | 00,054,840 | —- | M] (Hewlett-Packard) – C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
PRC - [2008/12/01 15:48:38 | 01,148,200 | —- | M] (CyberLink Corp.) – C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
PRC - [2009/03/02 13:08:47 | 00,209,153 | —- | M] (Avira GmbH) – C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2009/08/08 18:21:20 | 00,133,104 | —- | M] (Google Inc.) – C:\Users\Robin Choudhury\AppData\Local\Google\Update\1.2.183.7\GoogleCrashHandler.exe
PRC - [2009/03/12 14:11:44 | 01,314,816 | —- | M] (Analog Devices, Inc.) – C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
PRC - [2009/05/30 10:30:20 | 00,693,760 | —- | M] (Hewlett-Packard) – C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE
PRC - [2009/07/25 05:23:12 | 00,149,280 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Java\jre6\bin\jusched.exe
PRC - [2009/05/13 15:53:24 | 00,372,224 | —- | M] () – C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\Keystatus.exe
PRC - [2008/05/14 11:31:36 | 00,014,376 | —- | M] (Broadcom Corporation.) – c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
PRC - [2009/03/08 04:34:00 | 00,115,712 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Internet Explorer\IELowutil.exe
PRC - [2009/06/10 17:51:19 | 01,217,784 | —- | M] (Valve Corporation) – C:\Program Files (x86)\Steam\Steam.exe
PRC - [2009/07/02 12:09:43 | 00,316,664 | —- | M] (Valve Corporation) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2009/04/14 14:56:20 | 00,102,400 | —- | M] (Hewlett Packard) – C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\OSDForm.exe
PRC - [2009/07/28 15:32:22 | 00,830,960 | —- | M] (Google Inc.) – C:\Users\Robin Choudhury\AppData\Local\Google\Chrome\Application\chrome.exe
PRC - [2009/07/28 15:32:22 | 00,830,960 | —- | M] (Google Inc.) – C:\Users\Robin Choudhury\AppData\Local\Google\Chrome\Application\chrome.exe
PRC - [2009/07/17 22:29:24 | 00,288,048 | —- | M] (BitTorrent, Inc.) – C:\Program Files (x86)\uTorrent\uTorrent.exe
PRC - [2009/07/28 15:32:22 | 00,830,960 | —- | M] (Google Inc.) – C:\Users\Robin Choudhury\AppData\Local\Google\Chrome\Application\chrome.exe
PRC - [2009/06/07 05:28:34 | 01,648,640 | —- | M] () – C:\Program Files (x86)\foobar2000\foobar2000.exe
PRC - [2009/08/10 22:20:59 | 00,513,536 | —- | M] (OldTimer Tools) – C:\Users\Robin Choudhury\Desktop\OTL.exe
PRC - [2009/01/20 18:09:58 | 00,101,888 | —- | M] (Hewlett-Packard) – C:\Program Files (x86)\Hewlett-Packard\HP Touch Screen Enhance Service\HPTSEnSrv.EXE

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2008/07/15 05:09:48 | 00,111,616 | —- | M] (Andrea Electronics Corporation) – C:\Windows\SysNative\AEADISRV.EXE – (AEADIFilters [Auto | Running])
SRV:64bit: - [2009/04/11 00:11:13 | 00,053,760 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\bthserv.dll – (BthServ [Auto | Running])
SRV:64bit: - [2008/05/14 11:31:34 | 00,796,712 | —- | M] (Broadcom Corporation.) – c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe – (btwdins [Auto | Running])
SRV:64bit: - [2009/07/09 21:35:17 | 01,038,088 | —- | M] (Acresso Software Inc.) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe – (FLEXnet Licensing Service 64 [On_Demand | Stopped])
SRV:64bit: - [2008/01/20 19:47:32 | 00,383,544 | —- | M] (Microsoft Corporation) – C:\Program Files\Windows Defender\mpsvc.dll – (WinDefend [Auto | Running])
SRV:64bit: - [2008/01/20 19:52:15 | 01,216,000 | —- | M] (Microsoft Corporation) – C:\Program Files\Windows Media Player\wmpnetwk.exe – (WMPNetworkSvc [Auto | Running])
SRV - [2009/05/13 16:48:22 | 00,108,289 | —- | M] (Avira GmbH) – C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe – (AntiVirSchedulerService [Auto | Running])
SRV - [2009/08/05 23:37:06 | 00,185,089 | —- | M] (Avira GmbH) – C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe – (AntiVirService [Auto | Running])
SRV - [2008/12/12 12:06:30 | 00,021,296 | —- | M] (Hewlett-Packard) – C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe – (CalendarSynchService [Auto | Running])
SRV - [2009/03/29 21:42:14 | 00,066,368 | —- | M] (Microsoft Corporation) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2009/03/29 21:39:54 | 00,089,920 | —- | M] (Microsoft Corporation) – C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_64 [On_Demand | Stopped])
SRV - [2009/03/10 00:54:24 | 00,548,864 | —- | M] (Microsoft Corporation) – C:\Windows\ehome\ehRecvr.exe – (ehRecvr [On_Demand | Running])
SRV - [2009/03/10 00:54:24 | 00,122,368 | —- | M] (Microsoft Corporation) – C:\Windows\ehome\ehsched.exe – (ehSched [On_Demand | Running])
SRV - [2009/03/10 00:54:24 | 00,015,360 | —- | M] (Microsoft Corporation) – C:\Windows\ehome\ehstart.dll – (ehstart [Auto | Stopped])
SRV - [2009/07/09 21:35:11 | 00,655,624 | —- | M] (Acresso Software Inc.) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe – (FLEXnet Licensing Service [On_Demand | Stopped])
SRV - [2009/02/18 11:40:04 | 00,042,840 | —- | M] (Microsoft Corporation) – C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe – (FontCache3.0.0.0 [On_Demand | Stopped])
SRV - [2009/02/06 18:08:58 | 00,533,360 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe – (fsssvc [Auto | Running])
SRV - [2008/10/09 07:56:48 | 00,094,208 | —- | M] (Hewlett-Packard) – c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe – (HP Health Check Service [Auto | Running])
SRV - [2009/01/20 18:09:58 | 00,101,888 | —- | M] (Hewlett-Packard) – C:\Program Files (x86)\Hewlett-Packard\HP Touch Screen Enhance Service\HPTSEnSrv.EXE – (HP Touch Screen Enhance [Auto | Running])
SRV - [2005/04/04 00:41:10 | 00,069,632 | —- | M] (Macrovision Corporation) – C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe – (IDriverT [On_Demand | Stopped])
SRV - [2009/02/18 11:39:11 | 00,857,432 | —- | M] (Microsoft Corporation) – C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe – (idsvc [Unknown | Stopped])
SRV - [2006/11/02 02:46:05 | 00,018,944 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\keyiso.dll – (KeyIso [On_Demand | Running])
SRV - [2006/11/02 06:34:14 | 00,000,000 | —D | M] – C:\Windows\SysWow64\Msdtc – (MSDTC [Unknown | Stopped])
SRV - [2009/04/10 23:28:23 | 00,592,896 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\netlogon.dll – (Netlogon [On_Demand | Stopped])
SRV - [2008/11/04 01:06:28 | 00,441,712 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE – (odserv [On_Demand | Stopped])
SRV - [2006/10/26 14:03:08 | 00,145,184 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE – (ose [On_Demand | Stopped])
SRV - [2009/05/19 11:36:18 | 00,240,512 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe – (SeaPort [Auto | Running])
SRV - [2009/07/02 12:09:43 | 00,316,664 | —- | M] (Valve Corporation) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe – (Steam Client Service [On_Demand | Running])
SRV - [2006/11/01 23:35:15 | 00,060,994 | —- | M] () – C:\Windows\SysWow64\Wbem\vds.mof – (vds [On_Demand | Stopped])
SRV - [2006/11/01 23:35:15 | 00,055,846 | —- | M] () – C:\Windows\SysWow64\Wbem\vss.mof – (VSS [On_Demand | Stopped])

========== Driver Services (SafeList) ==========

DRV:64bit: - [2009/06/17 10:08:24 | 00,017,992 | —- | M] () – C:\Windows\SysNative\DRIVERS\OSDACPI.SYS – (ACPIService [On_Demand | Running])
DRV:64bit: - [2008/06/27 07:51:10 | 00,088,632 | —- | M] (Adobe Systems, Inc.) – C:\Windows\SysNative\drivers\adfs.sys – (adfs [Auto | Running])
DRV:64bit: - [2009/01/16 16:15:28 | 00,497,152 | —- | M] (Analog Devices, Inc.) – C:\Windows\SysNative\drivers\ADIHdAud.sys – (ADIHdAudAddService [On_Demand | Running])
DRV:64bit: - [2009/01/14 02:31:10 | 00,965,248 | —- | M] (AVerMedia TECHNOLOGIES, Inc.) – C:\Windows\SysNative\DRIVERS\AVerAVF2.sys – (AVerAVF2 [On_Demand | Running])
DRV:64bit: - [2009/04/06 10:51:06 | 00,073,048 | —- | M] (Avira GmbH) – C:\Windows\SysNative\DRIVERS\avgntflt.sys – (avgntflt [Auto | Running])
DRV:64bit: - [2009/04/10 22:39:55 | 00,026,112 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DRIVERS\BthEnum.sys – (BthEnum [On_Demand | Running])
DRV:64bit: - [2008/01/20 19:47:02 | 00,115,712 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DRIVERS\bthpan.sys – (BthPan [On_Demand | Running])
DRV:64bit: - [2009/04/10 22:40:06 | 00,694,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\Drivers\BTHport.sys – (BTHPORT [On_Demand | Stopped])
DRV:64bit: - [2009/04/10 22:39:53 | 00,034,816 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\Drivers\BTHUSB.sys – (BTHUSB [On_Demand | Running])
DRV:64bit: - [2008/05/13 14:02:14 | 00,092,200 | —- | M] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwaudio.sys – (btwaudio [On_Demand | Running])
DRV:64bit: - [2008/05/13 14:02:12 | 00,121,896 | —- | M] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwavdt.sys – (btwavdt [On_Demand | Running])
DRV:64bit: - [2008/01/29 03:46:58 | 00,036,392 | —- | M] (Broadcom Corporation.) – C:\Windows\SysNative\DRIVERS\btwl2cap.sys – (btwl2cap [On_Demand | Running])
DRV:64bit: - [2008/05/13 14:02:14 | 00,019,880 | —- | M] (Broadcom Corporation.) – C:\Windows\SysNative\DRIVERS\btwrchid.sys – (btwrchid [On_Demand | Running])
DRV:64bit: - [2009/02/06 18:42:12 | 00,061,808 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DRIVERS\fssfltr.sys – (fssfltr [Auto | Running])
DRV:64bit: - [2008/10/06 06:18:02 | 00,405,528 | —- | M] (Intel Corporation) – C:\Windows\SysNative\drivers\iastor.sys – (iaStor [Boot | Running])
DRV:64bit: - [2008/09/25 12:29:54 | 00,520,192 | —- | M] (Ralink Technology, Corp.) – C:\Windows\SysNative\DRIVERS\netr28x.sys – (netr28x [On_Demand | Running])
DRV:64bit: - [2009/05/09 01:14:20 | 00,015,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DRIVERS\NuidFltr.sys – (NuidFltr [On_Demand | Stopped])
DRV:64bit: - [2008/09/09 18:19:36 | 00,025,888 | —- | M] (PC-Doctor, Inc.) – C:\Program Files\PC-Doctor for Windows\pcd5srvc_x64.pkms – (PCD5SRVC{8AAF211B-043E02A9-05040000} [On_Demand | Stopped])
DRV:64bit: - [2009/04/10 22:39:57 | 00,178,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DRIVERS\rfcomm.sys – (RFCOMM [On_Demand | Running])
DRV:64bit: - [2008/12/23 03:47:52 | 00,188,416 | —- | M] (Realtek Corporation ) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys – (RTL8169 [On_Demand | Running])
DRV:64bit: - [2009/04/06 13:50:34 | 00,868,848 | —- | M] () – C:\Windows\SysNative\Drivers\sptd.sys – (sptd [Boot | Running])
DRV:64bit: - [2008/01/20 19:47:27 | 00,168,704 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\Drivers\usbvideo.sys – (usbvideo [On_Demand | Running])
DRV:64bit: - [2009/04/07 20:30:52 | 00,112,656 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\DRIVERS\VBoxNetAdp.sys – (VBoxNetAdp [On_Demand | Stopped])
DRV - [2008/08/14 07:57:42 | 00,074,720 | —- | M] (Adobe Systems, Inc.) – C:\Windows\SysWow64\drivers\adfs.sys – (adfs [Auto | Running])
DRV - [2006/09/18 14:35:23 | 00,001,088 | —- | M] () – C:\Windows\SysWow64\Wbem\mpsdrv.mof – (mpsdrv [On_Demand | Running])
DRV - [2006/09/18 14:36:40 | 00,003,066 | —- | M] () – C:\Windows\SysWow64\Wbem\tcpip.mof – (Tcpip [Boot | Running])
DRV - [2008/10/21 16:42:54 | 00,146,928 | —- | M] (CyberLink Corp.) – C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl – ({55662437-DA8C-40c0-AADA-2C816A897A49} [Auto | Running])

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ire&pf=cndt
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ire&pf=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ire&pf=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ire&pf=cndt

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ire&pf=cndt
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ire&pf=cndt
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:1.6
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20090123.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.071101000055
FF - prefs.js..extensions.enabledItems: [removed]:0.9947
FF - prefs.js..extensions.enabledItems: {0c8fbd76-bdeb-4c52-9b24-d587ce7b9dc3}:2.0.4
FF - prefs.js..extensions.enabledItems: [removed]:1.4.3
FF - prefs.js..extensions.enabledItems: [removed]:2.0.2
FF - prefs.js..extensions.enabledItems: [removed]:3.0.6
FF - prefs.js..extensions.enabledItems: [removed]:0.1.9
FF - prefs.js..extensions.enabledItems: [removed]:1.3
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.2

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/07/12 13:38:44 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2009/08/04 22:09:46 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2009/08/04 22:09:46 | 00,000,000 | —D | M]

[2009/03/13 22:14:29 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Extensions
[2009/03/13 22:14:29 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/08/10 18:16:13 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions
[2009/05/08 16:29:00 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\{0c8fbd76-bdeb-4c52-9b24-d587ce7b9dc3}
[2009/07/12 21:50:15 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/07/19 22:14:55 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}
[2009/06/07 19:06:55 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2009/07/09 20:41:42 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\[removed]
[2009/03/14 11:11:06 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\[removed]
[2009/03/14 09:45:18 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\[removed]
[2009/07/24 20:40:37 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\[removed]
[2009/06/28 15:22:00 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\[removed]
[2009/07/09 20:41:47 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\[removed]
[2009/06/28 15:22:00 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\mozilla\Firefox\Profiles\n5qxqs01.default\extensions\[removed]
[2009/08/04 20:43:15 | 00,000,000 | —D | M] – C:\Program Files (x86)\mozilla firefox\extensions
[2009/08/04 22:09:46 | 00,000,000 | —D | M] – C:\Program Files (x86)\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/03/13 21:46:31 | 00,000,000 | —D | M] – C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
[2009/03/24 15:38:05 | 00,000,000 | —D | M] – C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009/08/04 20:43:15 | 00,000,000 | —D | M] – C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
[2009/08/04 22:09:41 | 00,023,544 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browserdirprovider.dll
[2009/08/04 22:09:42 | 00,137,208 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\brwsrcmp.dll
[2008/09/03 17:11:24 | 00,054,600 | —- | M] (BitTorrent, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npbittorrent.dll
[2009/07/25 05:23:01 | 00,411,368 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeploytk.dll
[2009/02/06 12:44:28 | 01,447,296 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\mozilla firefox\plugins\npLegitCheckPlugin.dll
[2009/08/04 22:09:44 | 00,065,016 | —- | M] (mozilla.org) – C:\Program Files (x86)\mozilla firefox\plugins\npnul32.dll
[2006/10/26 20:12:16 | 00,016,192 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL
[2009/02/27 12:13:42 | 00,103,792 | —- | M] (Adobe Systems Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll
[2009/06/30 16:26:57 | 00,001,394 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom.xml
[2009/06/30 16:26:57 | 00,002,193 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\answers.xml
[2009/06/30 16:26:57 | 00,001,534 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\creativecommons.xml
[2009/06/30 16:26:57 | 00,002,344 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\eBay.xml
[2009/06/30 16:26:57 | 00,002,371 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\google.xml
[2009/06/30 16:26:57 | 00,001,178 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia.xml

O1 HOSTS File: (1243 bytes) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files (x86)\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [fssui] C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [NvMediaCenter] C:\Windows\SysNative\NvMcTray.DLL (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [SoundMAX] C:\Program Files (x86)\Analog Devices\SoundMAX\soundmax.exe (Analog Devices, Inc.)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Buttons & OSDs control application gen2] C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe (Hewlett Packard)
O4 - HKLM..\Run: [CLMLServer for HP TouchSmart] c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [DVDAgent] C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HP KEYBOARD] C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE (Hewlett-Packard)
O4 - HKLM..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [OsdMaestro] c:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe File not found
O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TSMAgent] c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePDIRShortCut] c:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe File not found
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [Google Update] C:\Users\Robin Choudhury\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
O4 - HKCU..\Run: [HPSmartCenterBoot] C:\Program Files (x86)\Hewlett-Packard\TouchSmart\SmartCenter 2.0\SmartCenter.exe (Hewlett-Packard)
O4 - HKCU..\Run: [ISUSPM Startup] C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe File not found
O4 - Startup: C:\Users\Robin Choudhury\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ImpulseNow.lnk = C:\Program Files (x86)\Stardock\Impulse\Now\ImpulseNow.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: BindDirectlyToPropertySetStorage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWow64\wshbth.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_15)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18:64bit: - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\SysWow64\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[1 C:\Windows\*.tmp files]
[2009/08/10 22:20:54 | 00,513,536 | —- | C] (OldTimer Tools) – C:\Users\Robin Choudhury\Desktop\OTL.exe
[2009/08/10 17:00:46 | 00,000,000 | —D | C] – C:\Users\Robin Choudhury\AppData\Roaming\Malwarebytes
[2009/08/10 17:00:41 | 00,000,810 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/08/10 17:00:37 | 00,038,160 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2009/08/10 17:00:35 | 00,022,040 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2009/08/10 17:00:35 | 00,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2009/08/10 17:00:35 | 00,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2009/08/10 16:50:11 | 03,942,048 | —- | C] (Malwarebytes Corporation ) – C:\Users\Robin Choudhury\Desktop\mbam-setup.exe
[2009/08/10 16:41:42 | 00,013,956 | —- | C] () – C:\Users\Robin Choudhury\Desktop\Malware Steps.docx
[2009/08/10 15:48:20 | 00,272,384 | —- | C] (OldTimer Tools) – C:\Users\Robin Choudhury\Desktop\TFC.exe
[2009/08/09 13:05:54 | 00,000,000 | —D | C] – C:\Program Files (x86)\SystemRequirementsLab
[2009/08/09 13:05:29 | 00,000,000 | —D | C] – C:\Users\Robin Choudhury\AppData\Roaming\SystemRequirementsLab
[2009/08/08 18:21:26 | 00,000,948 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1260698907-2261725472-1050271230-1001UA.job
[2009/08/08 18:21:21 | 00,000,896 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1260698907-2261725472-1050271230-1001Core.job
[2009/08/07 00:36:44 | 00,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2009/08/07 00:34:49 | 00,000,000 | —D | C] – C:\Program Files (x86)\Starcraft
[2009/08/07 00:27:11 | 00,000,000 | —D | C] – C:\ProgramData\Opera
[2009/08/06 23:36:13 | 00,000,000 | —D | C] – C:\Program Files (x86)\Combined Community Codec Pack
[2009/08/06 23:34:35 | 00,000,000 | —D | C] – C:\Users\Robin Choudhury\AppData\Roaming\Media Player Classic
[2009/08/06 14:36:00 | 00,000,000 | —D | C] – C:\Users\Robin Choudhury\Documents\Procexp
[2009/08/04 20:43:11 | 00,149,280 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2009/08/04 20:43:11 | 00,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2009/08/04 20:43:11 | 00,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2009/08/04 20:37:56 | 00,000,000 | —D | C] – C:\Program Files (x86)\Opera
[2009/08/03 23:28:15 | 00,061,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fssfltr.sys
[2009/08/03 23:28:14 | 00,000,000 | —D | C] – C:\Program Files\Windows Live
[2009/07/31 22:09:33 | 00,000,000 | —D | C] – C:\Program Files (x86)\Electronic Arts
[2009/07/31 22:09:26 | 00,000,000 | —D | C] – C:\ProgramData\Electronic Arts
[2009/07/31 22:09:15 | 00,001,336 | —- | C] () – C:\Windows\SysWow64\ealregsnapshot1.reg
[2009/07/31 11:50:56 | 00,000,000 | —D | C] – C:\Windows\Minidump
[2009/07/31 11:50:53 | 58,370,3306 | —- | C] () – C:\Windows\MEMORY.DMP
[2009/07/31 11:42:20 | 00,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2009/07/31 10:50:47 | 00,000,496 | —- | C] () – C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2009/07/31 10:48:53 | 00,000,000 | —D | C] – C:\ProgramData\Lavasoft
[2009/07/31 01:04:00 | 00,000,000 | —D | C] – C:\Program Files (x86)\Trend Micro
[2009/07/30 21:01:26 | 00,000,000 | —D | C] – C:\World History
[2009/07/28 17:45:31 | 09,233,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtml.dll
[2009/07/28 17:45:31 | 05,937,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtml.dll
[2009/07/28 17:45:29 | 11,067,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieframe.dll
[2009/07/28 17:45:28 | 12,458,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieframe.dll
[2009/07/28 17:45:25 | 02,334,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iertutil.dll
[2009/07/28 17:45:25 | 01,985,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iertutil.dll
[2009/07/28 17:45:25 | 01,484,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\urlmon.dll
[2009/07/28 17:45:25 | 01,208,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\urlmon.dll
[2009/07/28 17:45:24 | 01,146,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wininet.dll
[2009/07/28 17:45:24 | 00,915,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wininet.dll
[2009/07/28 17:45:24 | 00,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2009/07/28 17:45:24 | 00,458,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iedkcs32.dll
[2009/07/28 17:45:24 | 00,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2009/07/28 17:45:24 | 00,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2009/07/28 17:45:23 | 01,538,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2009/07/28 17:45:23 | 01,469,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2009/07/28 17:45:23 | 00,700,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2009/07/28 17:45:23 | 00,386,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iedkcs32.dll
[2009/07/28 17:45:23 | 00,252,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2009/07/28 17:45:23 | 00,184,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2009/07/28 17:45:23 | 00,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2009/07/28 17:45:23 | 00,162,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2009/07/28 17:45:23 | 00,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2009/07/28 17:45:23 | 00,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2009/07/28 17:45:23 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedsbs.dll
[2009/07/28 17:45:23 | 00,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2009/07/28 17:45:23 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedsbs.dll
[2009/07/28 17:45:22 | 01,638,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtml.tlb
[2009/07/28 17:45:22 | 01,638,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtml.tlb
[2009/07/28 17:45:22 | 00,219,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2009/07/28 17:45:22 | 00,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2009/07/28 17:45:22 | 00,132,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2009/07/28 17:45:22 | 00,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2009/07/28 17:45:22 | 00,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2009/07/28 17:45:22 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2009/07/28 17:45:22 | 00,057,667 | —- | C] () – C:\Windows\SysWow64\ieuinit.inf
[2009/07/28 17:45:22 | 00,057,667 | —- | C] () – C:\Windows\SysNative\ieuinit.inf
[2009/07/28 17:45:22 | 00,055,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2009/07/28 17:45:22 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jsproxy.dll
[2009/07/28 17:45:22 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jsproxy.dll
[2009/07/28 17:45:22 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2009/07/28 17:45:22 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2009/07/26 18:37:35 | 00,017,104 | —- | C] () – C:\Users\Robin Choudhury\Documents\autoexec.cfg
[2009/07/26 17:49:37 | 00,000,000 | —D | C] – C:\Users\Robin Choudhury\AppData\Roaming\foobar2000
[2009/07/26 17:48:53 | 00,000,000 | —D | C] – C:\Program Files (x86)\foobar2000
[2009/07/26 14:53:30 | 00,000,000 | -HSD | C] – C:\Config.Msi
[2009/07/25 13:15:26 | 00,032,768 | —- | C] (Analog Devices) – C:\Windows\SysWow64\adidrm.dll
[2009/07/25 13:11:23 | 00,000,000 | —D | C] – C:\Users\Robin Choudhury\AppData\Roaming\InstallShield
[2009/07/24 17:32:36 | 00,073,048 | —- | C] (Avira GmbH) – C:\Windows\SysNative\drivers\avgntflt.sys
[2009/07/24 17:32:36 | 00,028,520 | —- | C] (Avira GmbH) – C:\Windows\SysWow64\drivers\ssmdrv.sys
[2009/07/24 17:32:35 | 00,000,000 | —D | C] – C:\ProgramData\Avira
[2009/07/24 17:32:35 | 00,000,000 | —D | C] – C:\Program Files (x86)\Avira
[2009/07/18 18:00:41 | 00,000,000 | R–D | C] – C:\Users\Robin Choudhury\Desktop\Conciousness
[2009/07/18 16:28:21 | 00,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office Outlook Connector
[2009/07/18 16:27:27 | 00,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Sync Framework
[2009/07/18 16:26:41 | 00,000,000 | —D | C] – C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2009/07/18 16:25:22 | 00,000,000 | —D | C] – C:\Program Files (x86)\Windows Live
[2009/07/14 15:57:17 | 00,366,080 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2009/07/14 15:57:17 | 00,289,792 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2009/07/14 15:57:17 | 00,189,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2009/07/14 15:57:17 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2009/07/14 15:57:17 | 00,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2009/07/14 15:57:17 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2009/07/14 15:57:17 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dciman32.dll
[2009/07/14 15:57:17 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dciman32.dll
[2009/07/12 15:21:39 | 00,000,000 | —D | C] – C:\Windows\SysWow64\vi-VN
[2009/07/12 15:21:39 | 00,000,000 | —D | C] – C:\Windows\SysWow64\eu-ES
[2009/07/12 15:21:39 | 00,000,000 | —D | C] – C:\Windows\SysWow64\ca-ES
[2009/07/12 15:21:38 | 00,000,000 | —D | C] – C:\Windows\SysNative\eu-ES
[2009/07/12 15:21:38 | 00,000,000 | —D | C] – C:\Windows\SysNative\ca-ES
[2009/07/12 15:21:35 | 00,000,000 | —D | C] – C:\Windows\SysNative\vi-VN
[2009/07/12 14:19:26 | 00,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2009/07/12 14:18:41 | 12,240,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NlsLexicons0007.dll
[2009/07/12 14:18:41 | 12,240,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NlsLexicons0007.dll
[2009/07/12 14:18:36 | 02,582,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLsvc.exe
[2009/07/12 14:18:36 | 02,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FunctionDiscoveryFolder.dll
[2009/07/12 14:18:36 | 02,134,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FunctionDiscoveryFolder.dll
[2009/07/12 14:18:36 | 00,710,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLCExt.dll
[2009/07/12 14:18:34 | 02,644,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NlsLexicons0009.dll
[2009/07/12 14:18:34 | 02,644,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NlsLexicons0009.dll
[2009/07/12 14:18:31 | 04,699,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2009/07/12 14:18:31 | 02,280,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2009/07/12 14:18:31 | 01,081,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SLCExt.dll
[2009/07/12 14:18:31 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msstrc.dll
[2009/07/12 14:18:31 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscntrs.dll
[2009/07/12 14:18:31 | 00,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xmlfilter.dll
[2009/07/12 14:18:31 | 00,019,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2009/07/12 14:18:31 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msshooks.dll
[2009/07/12 14:18:29 | 01,480,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2009/07/12 14:18:25 | 02,204,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2009/07/12 14:18:25 | 01,381,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardagt.exe
[2009/07/12 14:18:25 | 01,085,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wcnwiz2.dll
[2009/07/12 14:18:25 | 00,968,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wcnwiz2.dll
[2009/07/12 14:18:25 | 00,948,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hdaudbus.sys
[2009/07/12 14:18:25 | 00,397,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WscEapPr.dll
[2009/07/12 14:18:25 | 00,291,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WscEapPr.dll
[2009/07/12 14:18:25 | 00,046,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\infocardcpl.cpl
[2009/07/12 14:18:24 | 01,165,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationNative_v0300.dll
[2009/07/12 14:18:24 | 01,146,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2009/07/12 14:18:23 | 00,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2009/07/12 14:18:22 | 00,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2009/07/12 14:18:21 | 01,688,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2009/07/12 14:18:21 | 01,576,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2009/07/12 14:18:21 | 00,694,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\bthport.sys
[2009/07/12 14:18:20 | 03,108,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2009/07/12 14:18:20 | 00,886,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmain.dll
[2009/07/12 14:18:19 | 01,515,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ntfs.sys
[2009/07/12 14:18:19 | 01,426,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tcpip.sys
[2009/07/12 14:18:19 | 00,779,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationNative_v0300.dll
[2009/07/12 14:18:18 | 12,897,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shell32.dll
[2009/07/12 14:18:17 | 01,582,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2009/07/12 14:18:17 | 00,946,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavenge.dll
[2009/07/12 14:18:17 | 00,526,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2009/07/12 14:18:16 | 00,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2009/07/12 14:18:15 | 00,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\spsys.sys
[2009/07/12 14:18:15 | 00,538,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2009/07/12 14:18:15 | 00,518,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2009/07/12 14:18:14 | 02,241,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msi.dll
[2009/07/12 14:18:13 | 03,547,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2009/07/12 14:18:13 | 00,677,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2009/07/12 14:18:12 | 03,263,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2009/07/12 14:18:12 | 01,804,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msxml3.dll
[2009/07/12 14:18:12 | 00,476,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2009/07/12 14:18:11 | 00,619,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardagt.exe
[2009/07/12 14:18:11 | 00,035,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\infocardcpl.cpl
[2009/07/12 14:18:10 | 02,868,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2009/07/12 14:18:10 | 01,418,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2009/07/12 14:18:10 | 01,217,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2009/07/12 14:18:10 | 00,836,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\p2psvc.dll
[2009/07/12 14:18:10 | 00,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2009/07/12 14:18:10 | 00,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2009/07/12 14:18:09 | 02,715,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmc.exe
[2009/07/12 14:18:09 | 02,506,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2009/07/12 14:18:09 | 01,185,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmv2clt.dll
[2009/07/12 14:18:08 | 01,216,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2009/07/12 14:18:08 | 00,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchIndexer.exe
[2009/07/12 14:18:08 | 00,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2009/07/12 14:18:08 | 00,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizui.dll
[2009/07/12 14:18:07 | 13,424,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2009/07/12 14:18:06 | 01,915,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2009/07/12 14:18:06 | 00,289,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spinstall.exe
[2009/07/12 14:18:06 | 00,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spreview.exe
[2009/07/12 14:18:05 | 00,978,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmv2clt.dll
[2009/07/12 14:18:05 | 00,499,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdohlp.dll
[2009/07/12 14:18:04 | 03,433,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfsr.exe
[2009/07/12 14:18:04 | 00,796,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2009/07/12 14:18:04 | 00,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2009/07/12 14:18:02 | 11,584,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shell32.dll
[2009/07/12 14:18:02 | 00,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2VDEC.DLL
[2009/07/12 14:18:02 | 00,644,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\p2psvc.dll
[2009/07/12 14:18:02 | 00,121,856 | —- | C] () – C:\Windows\SysNative\EhStorAuthn.dll
[2009/07/12 14:18:02 | 00,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorPwdMgr.dll
[2009/07/12 14:18:02 | 00,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorPwdMgr.dll
[2009/07/12 14:18:01 | 02,607,774 | —- | C] () – C:\Windows\SysNative\wlan.tmf
[2009/07/12 14:18:01 | 00,670,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2009/07/12 14:18:01 | 00,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssph.dll
[2009/07/12 14:18:01 | 00,441,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SearchIndexer.exe
[2009/07/12 14:18:01 | 00,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2009/07/12 14:18:01 | 00,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2009/07/12 14:18:01 | 00,223,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2009/07/12 14:18:01 | 00,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/07/12 14:17:59 | 00,858,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kernel32.dll
[2009/07/12 14:17:59 | 00,506,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2009/07/12 14:17:59 | 00,440,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\srv.sys
[2009/07/12 14:17:59 | 00,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2009/07/12 14:17:59 | 00,278,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscoree.dll
[2009/07/12 14:17:58 | 02,028,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2009/07/12 14:17:58 | 01,165,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntdll.dll
[2009/07/12 14:17:58 | 00,922,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10K.DLL
[2009/07/12 14:17:58 | 00,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2VDEC.DLL
[2009/07/12 14:17:58 | 00,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2009/07/12 14:17:58 | 00,351,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssph.dll
[2009/07/12 14:17:58 | 00,203,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssphtb.dll
[2009/07/12 14:17:58 | 00,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\korwbrkr.dll
[2009/07/12 14:17:57 | 03,894,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2009/07/12 14:17:57 | 00,403,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscoree.dll
[2009/07/12 14:17:57 | 00,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uDWM.dll
[2009/07/12 14:17:57 | 00,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sdohlp.dll
[2009/07/12 14:17:56 | 01,459,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2009/07/12 14:17:56 | 00,729,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10K.DLL
[2009/07/12 14:17:56 | 00,483,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairing.dll
[2009/07/12 14:17:56 | 00,478,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairing.dll
[2009/07/12 14:17:56 | 00,316,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msshsq.dll
[2009/07/12 14:17:56 | 00,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rfcomm.sys
[2009/07/12 14:17:55 | 02,900,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2009/07/12 14:17:55 | 00,606,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\http.sys
[2009/07/12 14:17:55 | 00,238,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sperror.dll
[2009/07/12 14:17:55 | 00,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sperror.dll
[2009/07/12 14:17:55 | 00,143,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\korwbrkr.dll
[2009/07/12 14:17:54 | 01,673,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeCPL.dll
[2009/07/12 14:17:54 | 01,019,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2009/07/12 14:17:54 | 00,401,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\P2PGraph.dll
[2009/07/12 14:17:54 | 00,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2009/07/12 14:17:54 | 00,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2009/07/12 14:17:54 | 00,228,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SLC.dll
[2009/07/12 14:17:54 | 00,041,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2009/07/12 14:17:53 | 10,625,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2009/07/12 14:17:53 | 00,231,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msshsq.dll
[2009/07/12 14:17:52 | 02,386,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVCORE.DLL
[2009/07/12 14:17:52 | 01,589,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msjet40.dll
[2009/07/12 14:17:52 | 01,259,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2009/07/12 14:17:52 | 00,581,632 | —- | C] (Microsoft) – C:\Windows\SysNative\IasMigPlugin.dll
[2009/07/12 14:17:52 | 00,131,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2009/07/12 14:17:52 | 00,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorAPI.dll
[2009/07/12 14:17:51 | 01,925,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2009/07/12 14:17:51 | 01,491,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wevtsvc.dll
[2009/07/12 14:17:51 | 00,164,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Storport.sys
[2009/07/12 14:17:51 | 00,049,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2009/07/12 14:17:50 | 01,336,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msxml6.dll
[2009/07/12 14:17:50 | 00,738,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ndis.sys
[2009/07/12 14:17:49 | 01,030,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printfilterpipelinesvc.exe
[2009/07/12 14:17:49 | 00,558,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2009/07/12 14:17:49 | 00,258,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchProtocolHost.exe
[2009/07/12 14:17:49 | 00,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFilterHost.exe
[2009/07/12 14:17:49 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\compcln.exe
[2009/07/12 14:17:48 | 01,381,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Query.dll
[2009/07/12 14:17:47 | 01,081,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qmgr.dll
[2009/07/12 14:17:46 | 01,078,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2009/07/12 14:17:46 | 01,064,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2009/07/12 14:17:46 | 00,883,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2009/07/12 14:17:46 | 00,648,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user32.dll
[2009/07/12 14:17:46 | 00,347,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2009/07/12 14:17:46 | 00,262,552 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2009/07/12 14:17:46 | 00,171,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\infocardapi.dll
[2009/07/12 14:17:46 | 00,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorShell.dll
[2009/07/12 14:17:46 | 00,114,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorShell.dll
[2009/07/12 14:17:46 | 00,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdBth.dll
[2009/07/12 14:17:45 | 01,584,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2009/07/12 14:17:45 | 01,495,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2009/07/12 14:17:45 | 01,065,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\advapi32.dll
[2009/07/12 14:17:45 | 00,719,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcss.dll
[2009/07/12 14:17:45 | 00,463,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IasMigReader.exe
[2009/07/12 14:17:45 | 00,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msexch40.dll
[2009/07/12 14:17:45 | 00,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\P2PGraph.dll
[2009/07/12 14:17:44 | 03,079,168 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2009/07/12 14:17:44 | 01,733,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msxml6.dll
[2009/07/12 14:17:44 | 01,316,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ole32.dll
[2009/07/12 14:17:44 | 00,967,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2009/07/12 14:17:44 | 00,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2009/07/12 14:17:43 | 01,658,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2009/07/12 14:17:43 | 01,433,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VSSVC.exe
[2009/07/12 14:17:43 | 01,357,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2009/07/12 14:17:43 | 01,183,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msxml3.dll
[2009/07/12 14:17:43 | 00,654,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kerberos.dll
[2009/07/12 14:17:43 | 00,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2009/07/12 14:17:43 | 00,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2009/07/12 14:17:42 | 01,792,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmc.exe
[2009/07/12 14:17:42 | 01,686,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comsvcs.dll
[2009/07/12 14:17:42 | 01,650,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\browseui.dll
[2009/07/12 14:17:42 | 00,466,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched20.dll
[2009/07/12 14:17:42 | 00,454,144 | —- | C] (Microsoft) – C:\Windows\SysWow64\IasMigPlugin.dll
[2009/07/12 14:17:42 | 00,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gdi32.dll
[2009/07/12 14:17:42 | 00,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spoolss.dll
[2009/07/12 14:17:42 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingWizard.exe
[2009/07/12 14:17:42 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingWizard.exe
[2009/07/12 14:17:41 | 01,930,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2009/07/12 14:17:41 | 01,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2009/07/12 14:17:41 | 01,092,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WsmSvc.dll
[2009/07/12 14:17:41 | 00,710,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Magnify.exe
[2009/07/12 14:17:41 | 00,406,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\afd.sys
[2009/07/12 14:17:41 | 00,123,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2009/07/12 14:17:41 | 00,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdBth.dll
[2009/07/12 14:17:40 | 02,012,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\milcore.dll
[2009/07/12 14:17:40 | 00,880,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2009/07/12 14:17:40 | 00,379,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2009/07/12 14:17:40 | 00,347,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2009/07/12 14:17:40 | 00,275,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bcrypt.dll
[2009/07/12 14:17:40 | 00,185,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SearchProtocolHost.exe
[2009/07/12 14:17:40 | 00,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SearchFilterHost.exe
[2009/07/12 14:17:39 | 02,484,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2009/07/12 14:17:39 | 01,112,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2009/07/12 14:17:39 | 00,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Magnify.exe
[2009/07/12 14:17:39 | 00,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NaturalLanguage6.dll
[2009/07/12 14:17:39 | 00,553,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpapimig.exe
[2009/07/12 14:17:39 | 00,192,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasrecst.dll
[2009/07/12 14:17:39 | 00,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spoolss.dll
[2009/07/12 14:17:38 | 02,424,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2009/07/12 14:17:38 | 02,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apds.dll
[2009/07/12 14:17:38 | 00,843,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schedsvc.dll
[2009/07/12 14:17:38 | 00,446,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\audiosrv.dll
[2009/07/12 14:17:38 | 00,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2009/07/12 14:17:38 | 00,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fsquirt.exe
[2009/07/12 14:17:37 | 01,040,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msctf.dll
[2009/07/12 14:17:37 | 01,013,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gpedit.dll
[2009/07/12 14:17:37 | 00,918,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comuid.dll
[2009/07/12 14:17:37 | 00,647,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2009/07/12 14:17:37 | 00,460,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2009/07/12 14:17:37 | 00,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvcp60.dll
[2009/07/12 14:17:37 | 00,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\es.dll
[2009/07/12 14:17:37 | 00,290,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msjtes40.dll
[2009/07/12 14:17:37 | 00,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwmi.dll
[2009/07/12 14:17:37 | 00,055,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Storprop.dll
[2009/07/12 14:17:36 | 01,244,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2009/07/12 14:17:36 | 00,950,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpedit.dll
[2009/07/12 14:17:36 | 00,847,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2009/07/12 14:17:36 | 00,820,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2009/07/12 14:17:36 | 00,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2009/07/12 14:17:36 | 00,620,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2009/07/12 14:17:36 | 00,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2009/07/12 14:17:36 | 00,099,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\infocardapi.dll
[2009/07/12 14:17:35 | 00,800,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\advapi32.dll
[2009/07/12 14:17:35 | 00,455,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2009/07/12 14:17:35 | 00,394,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wevtapi.dll
[2009/07/12 14:17:35 | 00,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstext40.dll
[2009/07/12 14:17:35 | 00,275,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fltMgr.sys
[2009/07/12 14:17:35 | 00,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\es.dll
[2009/07/12 14:17:35 | 00,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlhtml.dll
[2009/07/12 14:17:34 | 01,570,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2009/07/12 14:17:34 | 00,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msihnd.dll
[2009/07/12 14:17:34 | 00,447,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2009/07/12 14:17:34 | 00,339,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msexcl40.dll
[2009/07/12 14:17:34 | 00,321,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2009/07/12 14:17:34 | 00,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WebClnt.dll
[2009/07/12 14:17:34 | 00,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationSettings.exe
[2009/07/12 14:17:34 | 00,151,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLC.dll
[2009/07/12 14:17:34 | 00,131,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayDriverLib.dll
[2009/07/12 14:17:34 | 00,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2009/07/12 14:17:33 | 01,681,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wcnwiz.dll
[2009/07/12 14:17:33 | 01,209,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\comsvcs.dll
[2009/07/12 14:17:33 | 00,621,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvcrt.dll
[2009/07/12 14:17:33 | 00,498,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\devmgr.dll
[2009/07/12 14:17:33 | 00,454,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msxbde40.dll
[2009/07/12 14:17:33 | 00,238,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WcnNetsh.dll
[2009/07/12 14:17:33 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwmi.dll
[2009/07/12 14:17:32 | 01,985,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2009/07/12 14:17:32 | 01,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NetProjW.dll
[2009/07/12 14:17:32 | 01,077,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vssapi.dll
[2009/07/12 14:17:32 | 00,581,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wcncsvc.dll
[2009/07/12 14:17:32 | 00,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\srvnet.sys
[2009/07/12 14:17:32 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingProxy.dll
[2009/07/12 14:17:32 | 00,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingProxy.dll
[2009/07/12 14:17:32 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdBthProxy.dll
[2009/07/12 14:17:31 | 02,066,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2009/07/12 14:17:31 | 01,499,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2009/07/12 14:17:31 | 01,195,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2009/07/12 14:17:31 | 00,230,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msctfp.dll
[2009/07/12 14:17:31 | 00,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2009/07/12 14:17:30 | 00,660,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2009/07/12 14:17:30 | 00,643,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrepl40.dll
[2009/07/12 14:17:30 | 00,640,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2009/07/12 14:17:30 | 00,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvcp60.dll
[2009/07/12 14:17:30 | 00,469,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\newdev.dll
[2009/07/12 14:17:30 | 00,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\w32time.dll
[2009/07/12 14:17:30 | 00,354,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2009/07/12 14:17:30 | 00,323,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2009/07/12 14:17:30 | 00,289,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rsaenh.dll
[2009/07/12 14:17:30 | 00,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spoolsv.exe
[2009/07/12 14:17:30 | 00,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WebClnt.dll
[2009/07/12 14:17:30 | 00,164,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2009/07/12 14:17:29 | 01,060,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certutil.exe
[2009/07/12 14:17:29 | 00,978,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\crypt32.dll
[2009/07/12 14:17:29 | 00,754,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\propsys.dll
[2009/07/12 14:17:29 | 00,719,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gpsvc.dll
[2009/07/12 14:17:29 | 00,631,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLCommDlg.dll
[2009/07/12 14:17:29 | 00,471,992 | —- | C] () – C:\Windows\SysNative\dot3.tmf
[2009/07/12 14:17:29 | 00,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netbt.sys
[2009/07/12 14:17:29 | 00,205,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2009/07/12 14:17:29 | 00,119,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasrecst.dll
[2009/07/12 14:17:29 | 00,102,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2009/07/12 14:17:28 | 02,926,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2009/07/12 14:17:28 | 01,748,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2009/07/12 14:17:28 | 01,591,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupapi.dll
[2009/07/12 14:17:28 | 00,727,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtcprx.dll
[2009/07/12 14:17:28 | 00,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\umpnpmgr.dll
[2009/07/12 14:17:27 | 01,788,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d9.dll
[2009/07/12 14:17:27 | 00,840,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2009/07/12 14:17:27 | 00,700,507 | —- | C] () – C:\Windows\SysNative\eaphost.tmf
[2009/07/12 14:17:27 | 00,368,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mspbde40.dll
[2009/07/12 14:17:27 | 00,287,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rdbss.sys
[2009/07/12 14:17:26 | 01,245,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2009/07/12 14:17:26 | 00,480,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\swprv.dll
[2009/07/12 14:17:26 | 00,385,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLUI.exe
[2009/07/12 14:17:26 | 00,265,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msv1_0.dll
[2009/07/12 14:17:26 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\davclnt.dll
[2009/07/12 14:17:25 | 01,135,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2009/07/12 14:17:25 | 00,841,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2009/07/12 14:17:25 | 00,603,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MPSSVC.dll
[2009/07/12 14:17:25 | 00,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2009/07/12 14:17:25 | 00,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2009/07/12 14:17:25 | 00,380,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2009/07/12 14:17:25 | 00,353,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shlwapi.dll
[2009/07/12 14:17:25 | 00,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msltus40.dll
[2009/07/12 14:17:25 | 00,107,612 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/07/12 14:17:25 | 00,107,612 | —- | C] () – C:\Windows\SysNative\StructuredQuerySchema.bin
[2009/07/12 14:17:24 | 01,543,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2009/07/12 14:17:24 | 01,324,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\browseui.dll
[2009/07/12 14:17:24 | 00,671,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2009/07/12 14:17:24 | 00,344,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrd3x40.dll
[2009/07/12 14:17:24 | 00,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2009/07/12 14:17:24 | 00,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbhub.sys
[2009/07/12 14:17:23 | 01,394,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wercon.exe
[2009/07/12 14:17:23 | 00,935,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsecsnp.dll
[2009/07/12 14:17:23 | 00,885,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgkrnl.sys
[2009/07/12 14:17:23 | 00,648,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2009/07/12 14:17:23 | 00,581,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2009/07/12 14:17:23 | 00,344,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iassdo.dll
[2009/07/12 14:17:23 | 00,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2009/07/12 14:17:23 | 00,250,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wevtapi.dll
[2009/07/12 14:17:23 | 00,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlhtml.dll
[2009/07/12 14:17:22 | 03,662,128 | —- | C] () – C:\Windows\SysWow64\locale.nls
[2009/07/12 14:17:22 | 03,662,128 | —- | C] () – C:\Windows\SysNative\locale.nls
[2009/07/12 14:17:22 | 02,272,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2009/07/12 14:17:22 | 00,395,723 | —- | C] () – C:\Windows\SysNative\onex.tmf
[2009/07/12 14:17:22 | 00,384,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\services.exe
[2009/07/12 14:17:22 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBSTOR.SYS
[2009/07/12 14:17:21 | 01,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2009/07/12 14:17:21 | 00,582,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SLCommDlg.dll
[2009/07/12 14:17:21 | 00,563,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\oleaut32.dll
[2009/07/12 14:17:21 | 00,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kerberos.dll
[2009/07/12 14:17:21 | 00,443,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2009/07/12 14:17:21 | 00,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2009/07/12 14:17:21 | 00,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WcnNetsh.dll
[2009/07/12 14:17:20 | 03,174,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2009/07/12 14:17:20 | 01,730,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\apds.dll
[2009/07/12 14:17:20 | 00,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2009/07/12 14:17:20 | 00,462,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2009/07/12 14:17:20 | 00,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QAGENTRT.DLL
[2009/07/12 14:17:20 | 00,304,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mswsock.dll
[2009/07/12 14:17:20 | 00,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msv1_0.dll
[2009/07/12 14:17:20 | 00,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propdefs.dll
[2009/07/12 14:17:19 | 01,114,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2009/07/12 14:17:19 | 00,807,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msctf.dll
[2009/07/12 14:17:19 | 00,717,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2009/07/12 14:17:19 | 00,679,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvcrt.dll
[2009/07/12 14:17:19 | 00,618,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mswstr10.dll
[2009/07/12 14:17:19 | 00,375,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winhttp.dll
[2009/07/12 14:17:19 | 00,264,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2009/07/12 14:17:19 | 00,261,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2009/07/12 14:17:19 | 00,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\mrxdav.sys
[2009/07/12 14:17:19 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xmlfilter.dll
[2009/07/12 14:17:18 | 01,160,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2009/07/12 14:17:18 | 00,992,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2009/07/12 14:17:18 | 00,470,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoMetadataHandler.dll
[2009/07/12 14:17:18 | 00,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\emdmgmt.dll
[2009/07/12 14:17:18 | 00,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\newdev.dll
[2009/07/12 14:17:17 | 00,894,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2009/07/12 14:17:17 | 00,533,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPSECSVC.DLL
[2009/07/12 14:17:17 | 00,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2009/07/12 14:17:17 | 00,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrd2x40.dll
[2009/07/12 14:17:17 | 00,203,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MMDevAPI.dll
[2009/07/12 14:17:17 | 00,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2009/07/12 14:17:17 | 00,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2009/07/12 14:17:17 | 00,166,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2009/07/12 14:17:17 | 00,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secur32.dll
[2009/07/12 14:17:16 | 01,792,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2009/07/12 14:17:16 | 00,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2009/07/12 14:17:16 | 00,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wevtutil.exe
[2009/07/12 14:17:16 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\propdefs.dll
[2009/07/12 14:17:15 | 02,570,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\milcore.dll
[2009/07/12 14:17:15 | 01,068,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shdocvw.dll
[2009/07/12 14:17:15 | 00,981,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2009/07/12 14:17:15 | 00,621,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2009/07/12 14:17:15 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscb.dll
[2009/07/12 14:17:14 | 02,167,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2009/07/12 14:17:14 | 01,856,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2009/07/12 14:17:14 | 00,747,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmSvc.dll
[2009/07/12 14:17:14 | 00,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSDApi.dll
[2009/07/12 14:17:14 | 00,328,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2009/07/12 14:17:14 | 00,215,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\msiscsi.sys
[2009/07/12 14:17:14 | 00,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasnap.dll
[2009/07/12 14:17:14 | 00,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wevtutil.exe
[2009/07/12 14:17:14 | 00,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssitlb.dll
[2009/07/12 14:17:14 | 00,087,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssitlb.dll
[2009/07/12 14:17:13 | 01,090,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2009/07/12 14:17:13 | 01,074,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2009/07/12 14:17:13 | 00,502,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usp10.dll
[2009/07/12 14:17:12 | 01,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2009/07/12 14:17:12 | 00,450,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2009/07/12 14:17:12 | 00,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\devmgr.dll
[2009/07/12 14:17:12 | 00,335,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schannel.dll
[2009/07/12 14:17:12 | 00,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iassam.dll
[2009/07/12 14:17:12 | 00,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvinst.exe
[2009/07/12 14:17:12 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthserv.dll
[2009/07/12 14:17:12 | 00,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtffilt.dll
[2009/07/12 14:17:11 | 00,923,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2009/07/12 14:17:11 | 00,592,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netlogon.dll
[2009/07/12 14:17:11 | 00,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schannel.dll
[2009/07/12 14:17:11 | 00,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldpc.dll
[2009/07/12 14:17:11 | 00,174,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\srv2.sys
[2009/07/12 14:17:11 | 00,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptsvc.dll
[2009/07/12 14:17:11 | 00,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msctfp.dll
[2009/07/12 14:17:11 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscb.dll
[2009/07/12 14:17:11 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdBthProxy.dll
[2009/07/12 14:17:10 | 01,533,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wcnwiz.dll
[2009/07/12 14:17:10 | 00,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2009/07/12 14:17:10 | 00,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoMetadataHandler.dll
[2009/07/12 14:17:10 | 00,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2009/07/12 14:17:10 | 00,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSDApi.dll
[2009/07/12 14:17:10 | 00,287,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Wldap32.dll
[2009/07/12 14:17:10 | 00,269,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\volsnap.sys
[2009/07/12 14:17:09 | 01,382,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2009/07/12 14:17:09 | 00,712,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WindowsCodecs.dll
[2009/07/12 14:17:09 | 00,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2009/07/12 14:17:09 | 00,454,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vds.exe
[2009/07/12 14:17:09 | 00,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2009/07/12 14:17:09 | 00,198,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scrrun.dll
[2009/07/12 14:17:09 | 00,151,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi.dll
[2009/07/12 14:17:09 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quick.ime
[2009/07/12 14:17:09 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qintlgnt.ime
[2009/07/12 14:17:09 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\phon.ime
[2009/07/12 14:17:09 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cintlgnt.ime
[2009/07/12 14:17:09 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\chajei.ime
[2009/07/12 14:17:09 | 00,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\reg.exe
[2009/07/12 14:17:09 | 00,073,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\partmgr.sys
[2009/07/12 14:17:09 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2009/07/12 14:17:08 | 01,538,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\brcpl.dll
[2009/07/12 14:17:08 | 01,234,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2009/07/12 14:17:08 | 00,748,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2009/07/12 14:17:08 | 00,617,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adtschema.dll
[2009/07/12 14:17:08 | 00,617,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\adtschema.dll
[2009/07/12 14:17:08 | 00,450,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\comdlg32.dll
[2009/07/12 14:17:08 | 00,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wcncsvc.dll
[2009/07/12 14:17:08 | 00,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2009/07/12 14:17:08 | 00,323,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2009/07/12 14:17:08 | 00,279,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\services.exe
[2009/07/12 14:17:08 | 00,241,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceApi.dll
[2009/07/12 14:17:08 | 00,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dhcpcsvc6.dll
[2009/07/12 14:17:08 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2009/07/12 14:17:08 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2009/07/12 14:17:07 | 00,856,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mswdat10.dll
[2009/07/12 14:17:07 | 00,810,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnrollUI.dll
[2009/07/12 14:17:07 | 00,560,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdtcprx.dll
[2009/07/12 14:17:07 | 00,514,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ksecdd.sys
[2009/07/12 14:17:07 | 00,396,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2009/07/12 14:17:07 | 00,309,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasmans.dll
[2009/07/12 14:17:07 | 00,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\offfilt.dll
[2009/07/12 14:17:07 | 00,169,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskeng.exe
[2009/07/12 14:17:07 | 00,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2009/07/12 14:17:07 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rasl2tp.sys
[2009/07/12 14:17:07 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\reg.exe
[2009/07/12 14:17:07 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msjter40.dll
[2009/07/12 14:17:06 | 00,996,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2009/07/12 14:17:06 | 00,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certutil.exe
[2009/07/12 14:17:06 | 00,704,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2009/07/12 14:17:06 | 00,572,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiaservc.dll
[2009/07/12 14:17:06 | 00,475,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2009/07/12 14:17:06 | 00,361,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\clfs.sys
[2009/07/12 14:17:06 | 00,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2009/07/12 14:17:06 | 00,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2009/07/12 14:17:06 | 00,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnsapi.dll
[2009/07/12 14:17:06 | 00,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtffilt.dll
[2009/07/12 14:17:05 | 00,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RelMon.dll
[2009/07/12 14:17:05 | 00,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2009/07/12 14:17:05 | 00,332,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2009/07/12 14:17:05 | 00,241,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rsaenh.dll
[2009/07/12 14:17:05 | 00,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scrobj.dll
[2009/07/12 14:17:05 | 00,174,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fundisc.dll
[2009/07/12 14:17:05 | 00,169,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ndiswan.sys
[2009/07/12 14:17:05 | 00,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2009/07/12 14:17:05 | 00,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\raspptp.sys
[2009/07/12 14:17:05 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscntrs.dll
[2009/07/12 14:17:05 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msshooks.dll
[2009/07/12 14:17:04 | 00,488,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2009/07/12 14:17:04 | 00,276,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfplat.dll
[2009/07/12 14:17:04 | 00,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\adsldpc.dll
[2009/07/12 14:17:04 | 00,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnpsetup.dll
[2009/07/12 14:17:04 | 00,178,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pci.sys
[2009/07/12 14:17:04 | 00,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MMDevAPI.dll
[2009/07/12 14:17:04 | 00,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msstrc.dll
[2009/07/12 14:17:03 | 00,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2009/07/12 14:17:03 | 00,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcomm.dll
[2009/07/12 14:17:03 | 00,467,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netapi32.dll
[2009/07/12 14:17:03 | 00,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2009/07/12 14:17:03 | 00,125,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msiexec.exe
[2009/07/12 14:17:03 | 00,093,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2009/07/12 14:17:02 | 01,321,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2009/07/12 14:17:02 | 00,310,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2009/07/12 14:17:02 | 00,287,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2009/07/12 14:17:02 | 00,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasrad.dll
[2009/07/12 14:17:02 | 00,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fundisc.dll
[2009/07/12 14:17:02 | 00,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dhcpcsvc6.dll
[2009/07/12 14:17:02 | 00,129,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptsvc.dll
[2009/07/12 14:17:02 | 00,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2009/07/12 14:17:02 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasdiag.dll
[2009/07/12 14:17:02 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hidserv.dll
[2009/07/12 14:17:01 | 01,696,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2009/07/12 14:17:01 | 00,785,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Utilman.exe
[2009/07/12 14:17:01 | 00,722,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2009/07/12 14:17:01 | 00,325,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\acpi.sys
[2009/07/12 14:17:01 | 00,273,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\mrxsmb10.sys
[2009/07/12 14:17:01 | 00,212,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\osk.exe
[2009/07/12 14:17:01 | 00,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2009/07/12 14:17:01 | 00,108,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2009/07/12 14:17:01 | 00,062,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\termdd.sys
[2009/07/12 14:17:01 | 00,035,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TsWpfWrp.exe
[2009/07/12 14:17:01 | 00,034,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsWpfWrp.exe
[2009/07/12 14:17:00 | 01,035,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2009/07/12 14:17:00 | 01,020,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2009/07/12 14:17:00 | 00,547,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\termsrv.dll
[2009/07/12 14:17:00 | 00,247,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsvcs.dll
[2009/07/12 14:17:00 | 00,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2009/07/12 14:17:00 | 00,207,968 | —- | C] () – C:\Windows\SysNative\WFP.TMF
[2009/07/12 14:17:00 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\mrxsmb.sys
[2009/07/12 14:17:00 | 00,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi.dll
[2009/07/12 14:17:00 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msiexec.exe
[2009/07/12 14:17:00 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLUINotify.dll
[2009/07/12 14:17:00 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasdatastore.dll
[2009/07/12 14:16:59 | 01,691,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\connect.dll
[2009/07/12 14:16:59 | 01,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\chsbrkr.dll
[2009/07/12 14:16:59 | 00,980,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2009/07/12 14:16:59 | 00,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iassdo.dll
[2009/07/12 14:16:59 | 00,211,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winmm.dll
[2009/07/12 14:16:59 | 00,116,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imm32.dll
[2009/07/12 14:16:59 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2009/07/12 14:16:58 | 02,024,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2009/07/12 14:16:58 | 01,823,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2009/07/12 14:16:58 | 00,708,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2009/07/12 14:16:58 | 00,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2009/07/12 14:16:58 | 00,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dhcpcsvc.dll
[2009/07/12 14:16:58 | 00,260,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFault.exe
[2009/07/12 14:16:58 | 00,253,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncrypt.dll
[2009/07/12 14:16:58 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasads.dll
[2009/07/12 14:16:58 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvinst.exe
[2009/07/12 14:16:58 | 00,039,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\crashdmp.sys
[2009/07/12 14:16:58 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spcmsg.dll
[2009/07/12 14:16:58 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spcmsg.dll
[2009/07/12 14:16:57 | 02,420,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2009/07/12 14:16:57 | 00,708,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnntfy.dll
[2009/07/12 14:16:57 | 00,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsound.dll
[2009/07/12 14:16:57 | 00,408,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\volmgrx.sys
[2009/07/12 14:16:57 | 00,387,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecsExt.dll
[2009/07/12 14:16:57 | 00,302,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2009/07/12 14:16:57 | 00,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scrrun.dll
[2009/07/12 14:16:57 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2009/07/12 14:16:57 | 00,092,918 | —- | C] () – C:\Windows\SysWow64\slmgr.vbs
[2009/07/12 14:16:57 | 00,092,918 | —- | C] () – C:\Windows\SysNative\slmgr.vbs
[2009/07/12 14:16:56 | 01,093,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pidgenx.dll
[2009/07/12 14:16:56 | 01,060,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2009/07/12 14:16:56 | 00,757,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2009/07/12 14:16:56 | 00,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnrollUI.dll
[2009/07/12 14:16:56 | 00,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsdyn.dll
[2009/07/12 14:16:56 | 00,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2009/07/12 14:16:56 | 00,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2009/07/12 14:16:56 | 00,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dhcpcsvc.dll
[2009/07/12 14:16:56 | 00,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2009/07/12 14:16:56 | 00,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2009/07/12 14:16:56 | 00,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SCardSvr.dll
[2009/07/12 14:16:56 | 00,137,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2009/07/12 14:16:56 | 00,059,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\mup.sys
[2009/07/12 14:16:55 | 01,122,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2009/07/12 14:16:55 | 01,107,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pidgenx.dll
[2009/07/12 14:16:55 | 00,911,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasdlg.dll
[2009/07/12 14:16:55 | 00,258,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winspool.drv
[2009/07/12 14:16:55 | 00,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2009/07/12 14:16:55 | 00,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2009/07/12 14:16:55 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ipfltdrv.sys
[2009/07/12 14:16:54 | 00,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2009/07/12 14:16:54 | 00,310,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\msrpc.sys
[2009/07/12 14:16:54 | 00,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\InkEd.dll
[2009/07/12 14:16:53 | 02,205,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2009/07/12 14:16:53 | 01,676,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chsbrkr.dll
[2009/07/12 14:16:53 | 00,867,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2009/07/12 14:16:53 | 00,616,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlansvc.dll
[2009/07/12 14:16:53 | 00,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winlogon.exe
[2009/07/12 14:16:53 | 00,073,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscories.dll
[2009/07/12 14:16:52 | 01,502,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2009/07/12 14:16:52 | 00,593,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\comuid.dll
[2009/07/12 14:16:52 | 00,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/07/12 14:16:52 | 00,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2009/07/12 14:16:52 | 00,067,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\disk.sys
[2009/07/12 14:16:51 | 00,974,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcomm.dll
[2009/07/12 14:16:51 | 00,627,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2009/07/12 14:16:51 | 00,347,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WindowsCodecsExt.dll
[2009/07/12 14:16:51 | 00,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncrypt.dll
[2009/07/12 14:16:51 | 00,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iassam.dll
[2009/07/12 14:16:51 | 00,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spp.dll
[2009/07/12 14:16:51 | 00,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iashlpr.dll
[2009/07/12 14:16:51 | 00,055,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PSHED.DLL
[2009/07/12 14:16:51 | 00,019,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2009/07/12 14:16:50 | 00,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2009/07/12 14:16:50 | 00,180,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scrobj.dll
[2009/07/12 14:16:50 | 00,140,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2009/07/12 14:16:50 | 00,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtutils.dll
[2009/07/12 14:16:49 | 01,740,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2009/07/12 14:16:49 | 00,750,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2009/07/12 14:16:49 | 00,734,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2009/07/12 14:16:49 | 00,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2009/07/12 14:16:49 | 00,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasapi32.dll
[2009/07/12 14:16:49 | 00,308,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2009/07/12 14:16:49 | 00,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2009/07/12 14:16:49 | 00,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2009/07/12 14:16:49 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2009/07/12 14:16:49 | 00,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpr.dll
[2009/07/12 14:16:49 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssprxy.dll
[2009/07/12 14:16:48 | 01,891,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVENCOD.DLL
[2009/07/12 14:16:48 | 00,643,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2009/07/12 14:16:48 | 00,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2009/07/12 14:16:48 | 00,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\portcls.sys
[2009/07/12 14:16:48 | 00,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntmarta.dll
[2009/07/12 14:16:48 | 00,155,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ecache.sys
[2009/07/12 14:16:48 | 00,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasnap.dll
[2009/07/12 14:16:48 | 00,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samlib.dll
[2009/07/12 14:16:48 | 00,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iassvcs.dll
[2009/07/12 14:16:48 | 00,067,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\volmgr.sys
[2009/07/12 14:16:48 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\bthenum.sys
[2009/07/12 14:16:47 | 01,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2009/07/12 14:16:47 | 00,869,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2009/07/12 14:16:47 | 00,656,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2009/07/12 14:16:47 | 00,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2009/07/12 14:16:47 | 00,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\profsvc.dll
[2009/07/12 14:16:47 | 00,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srvsvc.dll
[2009/07/12 14:16:47 | 00,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2009/07/12 14:16:46 | 01,541,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2009/07/12 14:16:46 | 01,444,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2009/07/12 14:16:46 | 00,223,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iphlpsvc.dll
[2009/07/12 14:16:46 | 00,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mswsock.dll
[2009/07/12 14:16:46 | 00,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\osk.exe
[2009/07/12 14:16:46 | 00,153,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2009/07/12 14:16:46 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cscript.exe
[2009/07/12 14:16:46 | 00,130,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2009/07/12 14:16:46 | 00,108,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\userenv.dll
[2009/07/12 14:16:46 | 00,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\audiodg.exe
[2009/07/12 14:16:46 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasacct.dll
[2009/07/12 14:16:46 | 00,029,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Dumpata.sys
[2009/07/12 14:16:46 | 00,022,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2009/07/12 14:16:45 | 01,301,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2009/07/12 14:16:45 | 00,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2009/07/12 14:16:45 | 00,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powrprof.dll
[2009/07/12 14:16:45 | 00,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwm.exe
[2009/07/12 14:16:45 | 00,070,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2009/07/12 14:16:45 | 00,019,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\spldr.sys
[2009/07/12 14:16:44 | 03,235,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2009/07/12 14:16:44 | 01,882,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2009/07/12 14:16:44 | 00,593,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspaint.exe
[2009/07/12 14:16:44 | 00,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RelMon.dll
[2009/07/12 14:16:44 | 00,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2009/07/12 14:16:44 | 00,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regsvc.dll
[2009/07/12 14:16:44 | 00,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winmm.dll
[2009/07/12 14:16:44 | 00,188,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ks.sys
[2009/07/12 14:16:44 | 00,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\exfat.sys
[2009/07/12 14:16:44 | 00,117,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsrslvr.dll
[2009/07/12 14:16:43 | 00,860,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2009/07/12 14:16:43 | 00,612,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2009/07/12 14:16:43 | 00,564,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2009/07/12 14:16:43 | 00,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2009/07/12 14:16:43 | 00,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tapisrv.dll
[2009/07/12 14:16:43 | 00,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2009/07/12 14:16:43 | 00,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSCard.dll
[2009/07/12 14:16:43 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsepno.dll
[2009/07/12 14:16:42 | 00,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Utilman.exe
[2009/07/12 14:16:42 | 00,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\stobject.dll
[2009/07/12 14:16:42 | 00,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2009/07/12 14:16:42 | 00,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFault.exe
[2009/07/12 14:16:42 | 00,208,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfplat.dll
[2009/07/12 14:16:42 | 00,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\offfilt.dll
[2009/07/12 14:16:42 | 00,171,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\apphelp.dll
[2009/07/12 14:16:42 | 00,152,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2009/07/12 14:16:42 | 00,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2009/07/12 14:16:42 | 00,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authz.dll
[2009/07/12 14:16:42 | 00,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstlsapi.dll
[2009/07/12 14:16:41 | 00,995,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2009/07/12 14:16:41 | 00,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnntfy.dll
[2009/07/12 14:16:41 | 00,396,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AudioEng.dll
[2009/07/12 14:16:41 | 00,391,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscms.dll
[2009/07/12 14:16:41 | 00,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsvcs.dll
[2009/07/12 14:16:41 | 00,208,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3svc.dll
[2009/07/12 14:16:41 | 00,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2009/07/12 14:16:41 | 00,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2009/07/12 14:16:41 | 00,155,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscript.exe
[2009/07/12 14:16:41 | 00,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshom.ocx
[2009/07/12 14:16:41 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2009/07/12 14:16:41 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsmsext.dll
[2009/07/12 14:16:41 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2009/07/12 14:16:41 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasdatastore.dll
[2009/07/12 14:16:41 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSTheme.exe
[2009/07/12 14:16:40 | 01,279,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2009/07/12 14:16:40 | 00,971,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2009/07/12 14:16:40 | 00,881,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2009/07/12 14:16:40 | 00,444,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsound.dll
[2009/07/12 14:16:40 | 00,387,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2009/07/12 14:16:40 | 00,234,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2009/07/12 14:16:40 | 00,223,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscntfy.dll
[2009/07/12 14:16:40 | 00,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnpsetup.dll
[2009/07/12 14:16:40 | 00,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2009/07/12 14:16:40 | 00,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\console.dll
[2009/07/12 14:16:40 | 00,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ulib.dll
[2009/07/12 14:16:40 | 00,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IPHLPAPI.DLL
[2009/07/12 14:16:40 | 00,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastapi.dll
[2009/07/12 14:16:40 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2009/07/12 14:16:40 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdProxy.dll
[2009/07/12 14:16:39 | 01,110,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wer.dll
[2009/07/12 14:16:39 | 00,759,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsecsnp.dll
[2009/07/12 14:16:39 | 00,688,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2009/07/12 14:16:39 | 00,667,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2009/07/12 14:16:39 | 00,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2009/07/12 14:16:39 | 00,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcrypt.dll
[2009/07/12 14:16:39 | 00,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2009/07/12 14:16:39 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2009/07/12 14:16:39 | 00,119,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2009/07/12 14:16:39 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\mrxsmb20.sys
[2009/07/12 14:16:39 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdx.sys
[2009/07/12 14:16:39 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpapi.dll
[2009/07/12 14:16:39 | 00,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iashlpr.dll
[2009/07/12 14:16:39 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfdisk.dll
[2009/07/12 14:16:39 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsbyuv.dll
[2009/07/12 14:16:38 | 00,690,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpcao.dll
[2009/07/12 14:16:38 | 00,507,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsdyn.dll
[2009/07/12 14:16:38 | 00,454,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IKEEXT.DLL
[2009/07/12 14:16:38 | 00,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscript.exe
[2009/07/12 14:16:38 | 00,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2009/07/12 14:16:38 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanhlp.dll
[2009/07/12 14:16:37 | 01,575,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVENCOD.DLL
[2009/07/12 14:16:37 | 00,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2009/07/12 14:16:37 | 00,617,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pcaui.dll
[2009/07/12 14:16:37 | 00,437,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2009/07/12 14:16:37 | 00,286,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasapi32.dll
[2009/07/12 14:16:37 | 00,216,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2009/07/12 14:16:37 | 00,161,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2009/07/12 14:16:37 | 00,155,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2009/07/12 14:16:37 | 00,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2009/07/12 14:16:37 | 00,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\newdev.exe
[2009/07/12 14:16:37 | 00,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2009/07/12 14:16:37 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceEject.exe
[2009/07/12 14:16:37 | 00,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msisip.dll
[2009/07/12 14:16:36 | 01,382,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2009/07/12 14:16:36 | 00,810,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slcc.dll
[2009/07/12 14:16:36 | 00,342,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\zipfldr.dll
[2009/07/12 14:16:36 | 00,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\modemui.dll
[2009/07/12 14:16:36 | 00,158,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasrad.dll
[2009/07/12 14:16:36 | 00,140,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2009/07/12 14:16:36 | 00,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshext.dll
[2009/07/12 14:16:36 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2009/07/12 14:16:36 | 00,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hdwwiz.exe
[2009/07/12 14:16:36 | 00,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2009/07/12 14:16:36 | 00,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbehci.sys
[2009/07/12 14:16:36 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshbth.dll
[2009/07/12 14:16:35 | 02,680,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2009/07/12 14:16:35 | 02,225,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2009/07/12 14:16:35 | 00,731,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2009/07/12 14:16:35 | 00,200,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2009/07/12 14:16:35 | 00,157,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2009/07/12 14:16:35 | 00,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ulib.dll
[2009/07/12 14:16:35 | 00,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pacer.sys
[2009/07/12 14:16:35 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\feclient.dll
[2009/07/12 14:16:34 | 06,100,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chtbrkr.dll
[2009/07/12 14:16:34 | 00,876,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2009/07/12 14:16:34 | 00,825,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasdlg.dll
[2009/07/12 14:16:34 | 00,691,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnpui.dll
[2009/07/12 14:16:34 | 00,589,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2009/07/12 14:16:34 | 00,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imm32.dll
[2009/07/12 14:16:34 | 00,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscript.exe
[2009/07/12 14:16:34 | 00,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshext.dll
[2009/07/12 14:16:34 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iassvcs.dll
[2009/07/12 14:16:33 | 01,152,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2009/07/12 14:16:33 | 00,714,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2009/07/12 14:16:33 | 00,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2009/07/12 14:16:33 | 00,299,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\udfs.sys
[2009/07/12 14:16:33 | 00,168,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpmon.dll
[2009/07/12 14:16:33 | 00,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2009/07/12 14:16:32 | 00,777,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slcc.dll
[2009/07/12 14:16:32 | 00,474,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2009/07/12 14:16:32 | 00,306,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2009/07/12 14:16:32 | 00,245,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2009/07/12 14:16:32 | 00,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2009/07/12 14:16:32 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshom.ocx
[2009/07/12 14:16:32 | 00,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntmarta.dll
[2009/07/12 14:16:32 | 00,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\wanarp.sys
[2009/07/12 14:16:32 | 00,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstlsapi.dll
[2009/07/12 14:16:32 | 00,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasads.dll
[2009/07/12 14:16:32 | 00,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dataclen.dll
[2009/07/12 14:16:32 | 00,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssprxy.dll
[2009/07/12 14:16:32 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsbyuv.dll
[2009/07/12 14:16:31 | 03,072,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2009/07/12 14:16:31 | 00,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2009/07/12 14:16:31 | 00,678,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2009/07/12 14:16:31 | 00,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasplap.dll
[2009/07/12 14:16:31 | 00,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2009/07/12 14:16:31 | 00,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powrprof.dll
[2009/07/12 14:16:31 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasacct.dll
[2009/07/12 14:16:31 | 00,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifmon.dll
[2009/07/12 14:16:31 | 00,009,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardres.dll
[2009/07/12 14:16:31 | 00,009,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardres.dll
[2009/07/12 14:16:30 | 01,248,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2009/07/12 14:16:30 | 00,622,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVXENCD.DLL
[2009/07/12 14:16:30 | 00,619,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2009/07/12 14:16:30 | 00,489,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2009/07/12 14:16:30 | 00,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2009/07/12 14:16:30 | 00,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleprn.dll
[2009/07/12 14:16:30 | 00,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authz.dll
[2009/07/12 14:16:30 | 00,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\newdev.exe
[2009/07/12 14:16:30 | 00,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanhlp.dll
[2009/07/12 14:16:30 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fc.exe
[2009/07/12 14:16:30 | 00,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lpk.dll
[2009/07/12 14:16:30 | 00,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\kbdhid.sys
[2009/07/12 14:16:29 | 01,645,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\connect.dll
[2009/07/12 14:16:29 | 01,224,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2009/07/12 14:16:29 | 00,842,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2009/07/12 14:16:29 | 00,615,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2009/07/12 14:16:29 | 00,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pcaui.dll
[2009/07/12 14:16:29 | 00,458,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BFE.DLL
[2009/07/12 14:16:29 | 00,317,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thawbrkr.dll
[2009/07/12 14:16:29 | 00,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2009/07/12 14:16:29 | 00,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scksp.dll
[2009/07/12 14:16:29 | 00,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmmon32.exe
[2009/07/12 14:16:29 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\npfs.sys
[2009/07/12 14:16:29 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hidserv.dll
[2009/07/12 14:16:29 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscisvif.dll
[2009/07/12 14:16:28 | 02,515,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2009/07/12 14:16:28 | 01,123,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2009/07/12 14:16:28 | 00,516,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2009/07/12 14:16:28 | 00,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\samlib.dll
[2009/07/12 14:16:28 | 00,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmci.dll
[2009/07/12 14:16:28 | 00,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2009/07/12 14:16:28 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iaspolcy.dll
[2009/07/12 14:16:28 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwinsat.dll
[2009/07/12 14:16:27 | 02,575,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2009/07/12 14:16:27 | 01,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2009/07/12 14:16:27 | 00,532,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpcao.dll
[2009/07/12 14:16:27 | 00,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2009/07/12 14:16:27 | 00,408,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2009/07/12 14:16:27 | 00,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fastfat.sys
[2009/07/12 14:16:27 | 00,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2009/07/12 14:16:27 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pintlgnt.ime
[2009/07/12 14:16:27 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\smss.exe
[2009/07/12 14:16:27 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2009/07/12 14:16:27 | 00,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rekeywiz.exe
[2009/07/12 14:16:27 | 00,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msimtf.dll
[2009/07/12 14:16:26 | 00,735,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2009/07/12 14:16:26 | 00,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2009/07/12 14:16:26 | 00,353,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2009/07/12 14:16:26 | 00,289,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscandui.dll
[2009/07/12 14:16:26 | 00,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tapisrv.dll
[2009/07/12 14:16:26 | 00,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scksp.dll
[2009/07/12 14:16:26 | 00,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsutil.dll
[2009/07/12 14:16:26 | 00,117,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2009/07/12 14:16:26 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2009/07/12 14:16:26 | 00,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\feclient.dll
[2009/07/12 14:16:26 | 00,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certprop.dll
[2009/07/12 14:16:26 | 00,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printfilterpipelineprxy.dll
[2009/07/12 14:16:25 | 02,043,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2009/07/12 14:16:25 | 01,642,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2009/07/12 14:16:25 | 00,669,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiaaut.dll
[2009/07/12 14:16:25 | 00,306,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2009/07/12 14:16:25 | 00,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2009/07/12 14:16:25 | 00,164,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsprop.dll
[2009/07/12 14:16:25 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpr.dll
[2009/07/12 14:16:25 | 00,009,239 | —- | C] () – C:\Windows\SysWow64\spcinstrumentation.man
[2009/07/12 14:16:25 | 00,009,239 | —- | C] () – C:\Windows\SysNative\spcinstrumentation.man
[2009/07/12 14:16:24 | 00,779,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FWPUCLNT.DLL
[2009/07/12 14:16:24 | 00,439,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winhttp.dll
[2009/07/12 14:16:24 | 00,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AUDIOKSE.dll
[2009/07/12 14:16:24 | 00,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2009/07/12 14:16:24 | 00,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2009/07/12 14:16:24 | 00,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AudioSes.dll
[2009/07/12 14:16:24 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\oleprn.dll
[2009/07/12 14:16:24 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2009/07/12 14:16:24 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rekeywiz.exe
[2009/07/12 14:16:24 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iaspolcy.dll
[2009/07/12 14:16:24 | 00,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\whealogr.dll
[2009/07/12 14:16:24 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2009/07/12 14:16:24 | 00,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscisvif.dll
[2009/07/12 14:16:23 | 01,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscui.cpl
[2009/07/12 14:16:23 | 01,102,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2009/07/12 14:16:23 | 00,407,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpapimig.exe
[2009/07/12 14:16:23 | 00,320,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2009/07/12 14:16:23 | 00,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2009/07/12 14:16:23 | 00,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\BTHUSB.SYS
[2009/07/12 14:16:22 | 01,738,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscui.cpl
[2009/07/12 14:16:22 | 00,642,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasgcw.dll
[2009/07/12 14:16:22 | 00,557,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2009/07/12 14:16:22 | 00,505,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2009/07/12 14:16:22 | 00,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2009/07/12 14:16:22 | 00,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2009/07/12 14:16:22 | 00,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certreq.exe
[2009/07/12 14:16:22 | 00,177,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2009/07/12 14:16:22 | 00,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hdwwiz.exe
[2009/07/12 14:16:22 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfdisk.dll
[2009/07/12 14:16:21 | 03,341,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2009/07/12 14:16:21 | 00,595,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2009/07/12 14:16:21 | 00,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasplap.dll
[2009/07/12 14:16:21 | 00,365,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2009/07/12 14:16:21 | 00,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certreq.exe
[2009/07/12 14:16:21 | 00,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rdpwd.sys
[2009/07/12 14:16:21 | 00,170,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2009/07/12 14:16:21 | 00,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2009/07/12 14:16:21 | 00,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conime.exe
[2009/07/12 14:16:21 | 00,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdWSD.dll
[2009/07/12 14:16:21 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dimsroam.dll
[2009/07/12 14:16:21 | 00,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmmon32.exe
[2009/07/12 14:16:21 | 00,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSTheme.exe
[2009/07/12 14:16:21 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPutil.exe
[2009/07/12 14:16:21 | 00,032,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2009/07/12 14:16:21 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwinsat.dll
[2009/07/12 14:16:20 | 00,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2009/07/12 14:16:20 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msutb.dll
[2009/07/12 14:16:20 | 00,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2009/07/12 14:16:20 | 00,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2009/07/12 14:16:20 | 00,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2009/07/12 14:16:20 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmon.dll
[2009/07/12 14:16:20 | 00,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2009/07/12 14:16:20 | 00,048,128 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2009/07/12 14:16:20 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tcpipreg.sys
[2009/07/12 14:16:20 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxsms.dll
[2009/07/12 14:16:20 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\whealogr.dll
[2009/07/12 14:16:19 | 00,644,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2009/07/12 14:16:18 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\watchdog.sys
[2009/07/12 14:16:17 | 00,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmdial32.dll
[2009/07/12 14:16:17 | 00,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2009/07/12 14:16:17 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rassstp.sys
[2009/07/12 14:16:16 | 02,438,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oobefldr.dll
[2009/07/12 14:16:16 | 00,616,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2009/07/12 14:16:15 | 01,544,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSVidCtl.dll
[2009/07/12 14:16:15 | 00,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiaaut.dll
[2009/07/12 14:16:15 | 00,521,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmdial32.dll
[2009/07/12 14:16:15 | 00,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2009/07/12 14:16:15 | 00,167,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdmaud.drv
[2009/07/12 14:16:15 | 00,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2009/07/12 14:16:15 | 00,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SCardSvr.dll
[2009/07/12 14:16:15 | 00,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdWSD.dll
[2009/07/12 14:16:15 | 00,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscsvc.dll
[2009/07/12 14:16:15 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\conime.exe
[2009/07/12 14:16:15 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MsCtfMonitor.dll
[2009/07/12 14:16:14 | 01,702,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2009/07/12 14:16:14 | 00,688,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2009/07/12 14:16:14 | 00,657,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVXENCD.DLL
[2009/07/12 14:16:14 | 00,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2009/07/12 14:16:14 | 00,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2009/07/12 14:16:14 | 00,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2009/07/12 14:16:14 | 00,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2009/07/12 14:16:14 | 00,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2009/07/12 14:16:14 | 00,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2009/07/12 14:16:14 | 00,187,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nwifi.sys
[2009/07/12 14:16:14 | 00,137,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsprop.dll
[2009/07/12 14:16:14 | 00,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlgpclnt.dll
[2009/07/12 14:16:14 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cipher.exe
[2009/07/12 14:16:14 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\l2nacp.dll
[2009/07/12 14:16:13 | 02,153,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\oobefldr.dll
[2009/07/12 14:16:13 | 00,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\modemui.dll
[2009/07/12 14:16:13 | 00,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\input.dll
[2009/07/12 14:16:13 | 00,216,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasmontr.dll
[2009/07/12 14:16:13 | 00,158,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\softkbd.dll
[2009/07/12 14:16:13 | 00,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\btpanui.dll
[2009/07/12 14:16:13 | 00,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2009/07/12 14:16:13 | 00,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dimsroam.dll
[2009/07/12 14:16:13 | 00,032,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Apphlpdm.dll
[2009/07/12 14:16:12 | 06,103,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\chtbrkr.dll
[2009/07/12 14:16:12 | 00,533,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2009/07/12 14:16:12 | 00,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscandui.dll
[2009/07/12 14:16:12 | 00,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasmontr.dll
[2009/07/12 14:16:12 | 00,083,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlgpclnt.dll
[2009/07/12 14:16:12 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dataclen.dll
[2009/07/12 14:16:12 | 00,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2009/07/12 14:16:12 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NcdProp.dll
[2009/07/12 14:16:11 | 00,542,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2009/07/12 14:16:11 | 00,339,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2009/07/12 14:16:11 | 00,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2009/07/12 14:16:11 | 00,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2009/07/12 14:16:11 | 00,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2009/07/12 14:16:11 | 00,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\credui.dll
[2009/07/12 14:16:11 | 00,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSDMon.dll
[2009/07/12 14:16:11 | 00,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\adsmsext.dll
[2009/07/12 14:16:11 | 00,072,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ohci1394.sys
[2009/07/12 14:16:11 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\deskmon.dll
[2009/07/12 14:16:11 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2009/07/12 14:16:10 | 02,226,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkexplorer.dll
[2009/07/12 14:16:10 | 00,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2009/07/12 14:16:10 | 00,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AUDIOKSE.dll
[2009/07/12 14:16:10 | 00,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2009/07/12 14:16:10 | 00,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\InkEd.dll
[2009/07/12 14:16:10 | 00,214,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceTypes.dll
[2009/07/12 14:16:10 | 00,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpcsvc.dll
[2009/07/12 14:16:10 | 00,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msctfui.dll
[2009/07/12 14:16:10 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2009/07/12 14:16:10 | 00,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cipher.exe
[2009/07/12 14:16:10 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifmon.dll
[2009/07/12 14:16:10 | 00,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\version.dll
[2009/07/12 14:16:09 | 00,946,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2009/07/12 14:16:09 | 00,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2009/07/12 14:16:09 | 00,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\thawbrkr.dll
[2009/07/12 14:16:09 | 00,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mdminst.dll
[2009/07/12 14:16:09 | 00,203,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2009/07/12 14:16:09 | 00,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpresult.exe
[2009/07/12 14:16:09 | 00,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2009/07/12 14:16:09 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msimtf.dll
[2009/07/12 14:16:08 | 00,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2009/07/12 14:16:08 | 00,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\softkbd.dll
[2009/07/12 14:16:08 | 00,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logagent.exe
[2009/07/12 14:16:08 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sendmail.dll
[2009/07/12 14:16:08 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2009/07/12 14:16:07 | 00,403,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2009/07/12 14:16:07 | 00,356,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2009/07/12 14:16:07 | 00,214,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSDMon.dll
[2009/07/12 14:16:07 | 00,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2009/07/12 14:16:07 | 00,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dmsynth.dll
[2009/07/12 14:16:07 | 00,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\olepro32.dll
[2009/07/12 14:16:07 | 00,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msctfui.dll
[2009/07/12 14:16:07 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rshx32.dll
[2009/07/12 14:16:07 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Apphlpdm.dll
[2009/07/12 14:16:07 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasdial.exe
[2009/07/12 14:16:07 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidusb.sys
[2009/07/12 14:16:06 | 00,284,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2009/07/12 14:16:06 | 00,200,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2009/07/12 14:16:06 | 00,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2009/07/12 14:16:06 | 00,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiapi.dll
[2009/07/12 14:16:06 | 00,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2009/07/12 14:16:06 | 00,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\smb.sys
[2009/07/12 14:16:06 | 00,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\deskadp.dll
[2009/07/12 14:16:06 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2009/07/12 14:16:05 | 00,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2009/07/12 14:16:05 | 00,418,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2009/07/12 14:16:05 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2009/07/12 14:16:05 | 00,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FwRemoteSvr.dll
[2009/07/12 14:16:05 | 00,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshbth.dll
[2009/07/12 14:16:05 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2009/07/12 14:16:05 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\version.dll
[2009/07/12 14:16:04 | 00,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2009/07/12 14:16:04 | 00,291,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2009/07/12 14:16:04 | 00,231,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscntfy.dll
[2009/07/12 14:16:04 | 00,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdmaud.drv
[2009/07/12 14:16:04 | 00,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tintlgnt.ime
[2009/07/12 14:16:04 | 00,116,736 | —- | C] (Microsoft) – C:\Windows\SysNative\SMBHelperClass.dll
[2009/07/12 14:16:04 | 00,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dmusic.dll
[2009/07/12 14:16:04 | 00,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gpapi.dll
[2009/07/12 14:16:04 | 00,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdSSDP.dll
[2009/07/12 14:16:04 | 00,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2009/07/12 14:16:04 | 00,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdSSDP.dll
[2009/07/12 14:16:04 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthci.dll
[2009/07/12 14:16:04 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fc.exe
[2009/07/12 14:16:04 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MsCtfMonitor.dll
[2009/07/12 14:16:04 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msisip.dll
[2009/07/12 14:16:03 | 02,247,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2009/07/12 14:16:03 | 00,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2009/07/12 14:16:03 | 00,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2009/07/12 14:16:03 | 00,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxg.sys
[2009/07/12 14:16:03 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PNPXAssoc.dll
[2009/07/12 14:16:03 | 00,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2009/07/12 14:16:03 | 00,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2009/07/12 14:16:03 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\l2nacp.dll
[2009/07/12 14:16:03 | 00,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2009/07/12 14:16:03 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2009/07/12 14:16:03 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cscapi.dll
[2009/07/12 14:16:03 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2009/07/12 14:16:03 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msjint40.dll
[2009/07/12 14:16:03 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CHxReadingStringIME.dll
[2009/07/12 14:16:02 | 00,347,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2009/07/12 14:16:02 | 00,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2009/07/12 14:16:02 | 00,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceTypes.dll
[2009/07/12 14:16:02 | 00,151,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2009/07/12 14:16:02 | 00,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceClassExtension.dll
[2009/07/12 14:16:02 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceClassExtension.dll
[2009/07/12 14:16:02 | 00,083,456 | —- | C] (Microsoft) – C:\Windows\SysWow64\SMBHelperClass.dll
[2009/07/12 14:16:02 | 00,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Storprop.dll
[2009/07/12 14:16:02 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rrinstaller.exe
[2009/07/12 14:16:02 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rrinstaller.exe
[2009/07/12 14:16:02 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cscdll.dll
[2009/07/12 14:16:02 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2009/07/12 14:16:01 | 00,506,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2009/07/12 14:16:01 | 00,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappcfg.dll
[2009/07/12 14:16:01 | 00,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLLUA.exe
[2009/07/12 14:16:01 | 00,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2009/07/12 14:16:01 | 00,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2009/07/12 14:16:01 | 00,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2009/07/12 14:16:01 | 00,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappcfg.dll
[2009/07/12 14:16:01 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdWCN.dll
[2009/07/12 14:16:01 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdWCN.dll
[2009/07/12 14:16:01 | 00,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tscupgrd.exe
[2009/07/12 14:16:01 | 00,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasdiag.dll
[2009/07/12 14:16:01 | 00,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkitemfactory.dll
[2009/07/12 14:16:01 | 00,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2009/07/12 14:16:01 | 00,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2009/07/12 14:16:01 | 00,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthudtask.exe
[2009/07/12 14:16:01 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipconfig.exe
[2009/07/12 14:16:01 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasdial.exe
[2009/07/12 14:16:01 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CHxReadingStringIME.dll
[2009/07/12 14:16:00 | 00,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2009/07/12 14:16:00 | 00,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfps.dll
[2009/07/12 14:16:00 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2009/07/12 14:16:00 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2009/07/12 14:16:00 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tscupgrd.exe
[2009/07/12 14:16:00 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slcinst.dll
[2009/07/12 14:16:00 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2009/07/12 14:16:00 | 00,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slcinst.dll
[2009/07/12 14:16:00 | 00,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2009/07/12 14:16:00 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkitemfactory.dll
[2009/07/12 14:16:00 | 00,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2009/07/12 14:16:00 | 00,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2009/07/12 14:16:00 | 00,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfpmp.exe
[2009/07/12 14:16:00 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FwRemoteSvr.dll
[2009/07/12 14:16:00 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msacm32.drv
[2009/07/12 14:15:59 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dfsc.sys
[2009/07/12 14:15:59 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2009/07/12 14:15:59 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2009/07/12 14:15:59 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cbsra.exe
[2009/07/12 14:15:59 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsigd.dll
[2009/07/12 14:15:59 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2009/07/12 14:15:59 | 00,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2009/07/12 14:15:59 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfpmp.exe
[2009/07/12 14:15:59 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msacm32.drv
[2009/07/12 14:15:59 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpupdate.exe
[2009/07/12 14:15:59 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcico.dll
[2009/07/12 14:15:58 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsilog.dll
[2009/07/12 14:15:57 | 00,131,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2009/07/12 14:15:57 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2009/07/12 14:15:57 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2009/07/12 14:15:57 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2009/07/12 14:15:57 | 00,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthudtask.exe
[2009/07/12 14:15:57 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NcdProp.dll
[2009/07/12 14:15:57 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdmdbg.dll
[2009/07/12 14:15:57 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetppui.dll
[2009/07/12 14:15:56 | 00,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\cdrom.sys
[2009/07/12 14:15:56 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\RNDISMP.sys
[2009/07/12 14:15:56 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\midimap.dll
[2009/07/12 14:15:56 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrnr.dll
[2009/07/12 14:15:56 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usb8023.sys
[2009/07/12 14:15:56 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\midimap.dll
[2009/07/12 14:15:56 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2009/07/12 14:15:56 | 00,009,212 | —- | C] () – C:\Windows\SysWow64\RacUR.xml
[2009/07/12 14:15:56 | 00,009,212 | —- | C] () – C:\Windows\SysNative\RacUR.xml
[2009/07/12 14:15:54 | 00,068,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\stream.sys
[2009/07/12 14:15:54 | 00,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\raspppoe.sys
[2009/07/12 14:15:54 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2009/07/12 14:15:54 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2009/07/12 14:15:54 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2009/07/12 14:15:54 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2009/07/12 14:15:53 | 08,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2009/07/12 14:15:53 | 08,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2009/07/12 14:15:53 | 00,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\f3ahvoas.dll
[2009/07/12 14:15:53 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\f3ahvoas.dll
[2009/07/12 14:15:53 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2009/07/12 14:15:53 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2009/07/12 14:15:53 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2009/07/12 14:15:53 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2009/07/12 14:15:53 | 00,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msimsg.dll
[2009/07/12 14:15:53 | 00,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msimsg.dll
[2009/07/12 14:15:53 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mferror.dll
[2009/07/12 14:15:53 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mferror.dll
[2009/07/12 14:15:42 | 00,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2009/07/12 14:15:35 | 00,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2009/07/12 14:14:45 | 00,936,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2009/07/12 14:14:42 | 00,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdscore.dll
[2009/07/12 14:14:42 | 00,138,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2009/07/12 14:14:33 | 00,315,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2009/03/10 00:10:27 | 00,327,680 | —- | C] () – C:\Windows\SysWow64\pythoncom25.dll
[2009/03/10 00:10:27 | 00,102,400 | —- | C] () – C:\Windows\SysWow64\pywintypes25.dll
[2008/12/12 12:06:30 | 00,058,672 | —- | C] () – C:\Windows\SysWow64\ASUSACPIDLL.dll
[2008/10/07 09:13:30 | 00,197,912 | —- | C] () – C:\Windows\SysWow64\physxcudart_20.dll
[2008/10/07 09:13:22 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelFrench.dll
[2008/01/20 19:50:05 | 00,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 05:34:27 | 00,000,219 | —- | C] () – C:\Windows\win.ini
[2006/11/02 05:34:27 | 00,000,219 | —- | C] () – C:\Windows\system.ini

========== Files - Modified Within 30 Days ==========

[1 C:\Windows\*.tmp files]
[2009/08/10 22:26:00 | 00,000,948 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1260698907-2261725472-1050271230-1001UA.job
[2009/08/10 22:20:59 | 00,513,536 | —- | M] (OldTimer Tools) – C:\Users\Robin Choudhury\Desktop\OTL.exe
[2009/08/10 22:19:39 | 00,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2009/08/10 21:26:46 | 00,000,454 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{AF75EFC2-AF91-400A-8A4C-78A1FE2929AD}.job
[2009/08/10 20:48:55 | 00,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/08/10 20:48:55 | 00,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/08/10 18:26:00 | 00,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1260698907-2261725472-1050271230-1001Core.job
[2009/08/10 17:43:30 | 00,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2009/08/10 17:42:17 | 00,000,012 | —- | M] () – C:\Windows\bthservsdp.dat
[2009/08/10 17:42:14 | 06,291,456 | -H– | M] () – C:\Users\Robin Choudhury\AppData\Local\IconCache.db
[2009/08/10 17:00:41 | 00,000,810 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/08/10 16:50:38 | 03,942,048 | —- | M] (Malwarebytes Corporation ) – C:\Users\Robin Choudhury\Desktop\mbam-setup.exe
[2009/08/10 16:41:45 | 00,013,956 | —- | M] () – C:\Users\Robin Choudhury\Desktop\Malware Steps.docx
[2009/08/10 15:48:23 | 00,272,384 | —- | M] (OldTimer Tools) – C:\Users\Robin Choudhury\Desktop\TFC.exe
[2009/08/07 22:01:55 | 00,595,770 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2009/08/07 22:01:55 | 00,101,484 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2009/08/07 22:01:54 | 00,690,960 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2009/08/07 22:01:21 | 00,021,504 | —- | M] () – C:\Users\Robin Choudhury\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/03 13:36:28 | 00,038,160 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2009/08/03 13:36:08 | 00,022,040 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2009/07/31 22:09:16 | 00,001,336 | —- | M] () – C:\Windows\SysWow64\ealregsnapshot1.reg
[2009/07/31 11:50:53 | 58,370,3306 | —- | M] () – C:\Windows\MEMORY.DMP
[2009/07/31 10:53:24 | 00,000,496 | —- | M] () – C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2009/07/31 10:14:45 | 00,000,680 | —- | M] () – C:\Users\Robin Choudhury\AppData\Local\d3d9caps.dat
[2009/07/25 05:23:07 | 00,149,280 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2009/07/25 05:23:07 | 00,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2009/07/25 05:23:05 | 00,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2009/07/25 05:23:00 | 00,411,368 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\deploytk.dll
[2009/07/24 07:17:41 | 00,017,104 | —- | M] () – C:\Users\Robin Choudhury\Documents\autoexec.cfg
[2009/07/21 15:11:15 | 01,146,880 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wininet.dll
[2009/07/21 15:11:04 | 01,484,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\urlmon.dll
[2009/07/21 15:09:54 | 00,243,712 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2009/07/21 15:07:37 | 09,233,408 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtml.dll
[2009/07/21 15:07:34 | 00,700,928 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2009/07/21 15:07:34 | 00,071,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedsbs.dll
[2009/07/21 15:06:56 | 00,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jsproxy.dll
[2009/07/21 15:06:48 | 01,538,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2009/07/21 15:06:31 | 02,334,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iertutil.dll
[2009/07/21 15:06:31 | 00,219,136 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2009/07/21 15:06:31 | 00,132,096 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2009/07/21 15:06:31 | 00,077,312 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2009/07/21 15:06:30 | 12,458,496 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieframe.dll
[2009/07/21 15:06:30 | 00,252,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2009/07/21 15:06:30 | 00,072,192 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2009/07/21 15:06:27 | 00,458,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iedkcs32.dll
[2009/07/21 14:52:28 | 00,915,456 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wininet.dll
[2009/07/21 14:52:13 | 01,208,832 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\urlmon.dll
[2009/07/21 14:50:46 | 00,206,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2009/07/21 14:48:31 | 05,937,152 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtml.dll
[2009/07/21 14:48:27 | 00,594,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2009/07/21 14:48:27 | 00,055,296 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedsbs.dll
[2009/07/21 14:47:47 | 00,025,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jsproxy.dll
[2009/07/21 14:47:41 | 01,469,440 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2009/07/21 14:47:28 | 00,164,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2009/07/21 14:47:28 | 00,109,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2009/07/21 14:47:27 | 01,985,536 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iertutil.dll
[2009/07/21 14:47:27 | 00,071,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2009/07/21 14:47:26 | 11,067,392 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieframe.dll
[2009/07/21 14:47:26 | 00,184,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2009/07/21 14:47:26 | 00,055,808 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2009/07/21 14:47:21 | 00,386,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iedkcs32.dll
[2009/07/21 13:34:53 | 00,162,816 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2009/07/21 13:34:41 | 00,070,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2009/07/21 13:34:12 | 00,012,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2009/07/21 13:34:00 | 01,638,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtml.tlb
[2009/07/21 13:13:58 | 00,133,632 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2009/07/21 13:13:51 | 00,173,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2009/07/21 13:13:15 | 00,013,312 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2009/07/21 13:12:49 | 01,638,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtml.tlb
[2009/07/21 12:09:32 | 00,057,667 | —- | M] () – C:\Windows\SysNative\ieuinit.inf
[2009/07/21 11:31:43 | 00,057,667 | —- | M] () – C:\Windows\SysWow64\ieuinit.inf
[2009/07/16 21:34:06 | 01,515,192 | —- | M] () – C:\Users\Robin Choudhury\AppData\Roaming\698e8de9c79e614b8d6a96b5ce9682e6-i686.cache-2
[2009/07/14 17:20:19 | 03,022,840 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT

========== LOP Check ==========

[2009/08/10 17:00:46 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming
[2009/04/10 13:35:33 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\Braid
[2009/07/31 10:26:39 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\CyberLink
[2009/04/06 13:54:58 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\DAEMON Tools
[2009/04/06 13:56:02 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\DAEMON Tools Lite
[2009/04/06 13:54:57 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\DAEMON Tools Pro
[2009/05/09 12:19:00 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\Dev-Cpp
[2009/07/19 22:18:07 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\dvdcss
[2009/08/10 19:48:34 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\foobar2000
[2009/07/09 19:48:51 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\GIZMO2
[2009/05/30 22:54:59 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\gtk-2.0
[2006/11/02 08:07:25 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\Media Center Programs
[2009/03/22 19:51:13 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\muvee Technologies
[2009/04/10 01:24:55 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\Opera
[2009/03/31 19:06:46 | 00,000,000 | RH-D | M] – C:\Users\Robin Choudhury\AppData\Roaming\SecuROM
[2009/04/08 18:45:30 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\Stardock
[2009/08/09 13:06:11 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\SystemRequirementsLab
[2009/08/10 22:30:00 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\uTorrent
[2009/04/07 16:21:29 | 00,000,000 | —D | M] – C:\Users\Robin Choudhury\AppData\Roaming\WinBatch
[2009/07/31 10:53:24 | 00,000,496 | —- | M] () – C:\Windows\Tasks\Ad-Aware Update (Weekly).job
[2009/08/10 18:26:00 | 00,000,896 | —- | M] () – C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1260698907-2261725472-1050271230-1001Core.job
[2009/08/10 22:26:00 | 00,000,948 | —- | M] () – C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1260698907-2261725472-1050271230-1001UA.job
[2009/03/14 09:06:40 | 00,000,456 | —- | M] () – C:\Windows\Tasks\PCDRScheduledMaintenance.job
[2009/08/10 17:43:30 | 00,000,006 | -H– | M] () – C:\Windows\Tasks\SA.DAT
[2009/08/10 17:42:18 | 00,032,532 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2009/08/10 21:26:46 | 00,000,454 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{AF75EFC2-AF91-400A-8A4C-78A1FE2929AD}.job

========== Purity Check ==========


< End of report >

OTL Extras logfile created on: 8/10/2009 10:27:22 PM - Run 1
OTL by OldTimer - Version 3.0.10.5 Folder = C:\Users\Robin Choudhury\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18813)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 1.92 Gb Available Physical Memory | 48.11% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 450.78 Gb Total Space | 267.65 Gb Free Space | 59.37% Space Free | Partition Type: NTFS
Drive D: | 14.98 Gb Total Space | 2.08 Gb Free Space | 13.87% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: CHOUDHURY
Current User Name: Robin Choudhury
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl[@ = cplfile] – C:\Windows\SysNative\control.exe (Microsoft Corporation)
.hlp[@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html[@ = htmlfile] – C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf[@ = inffile] – C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.ini[@ = inifile] – C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] – C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
.js[@ = JSFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.jse[@ = JSEFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.txt[@ = txtfile] – C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.vbe[@ = VBEFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.vbs[@ = VBSFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsf[@ = WSFFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsh[@ = WSHFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] – C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
.reg [@ = regfile] – C:\Windows\SysWow64\regedit.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]
"VistaSp2" = 69 6A AE F8 40 03 CA 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\BitTorrent\bittorrent.exe" = C:\Program Files (x86)\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent – (BitTorrent, Inc.)
"C:\Program Files (x86)\BitTorrent\bittorrent.exe" = C:\Program Files (x86)\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent – (BitTorrent, Inc.)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1652DE1C-9CE3-493B-A191-8859D840028C}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{17847D74-4D78-4588-95EC-A0B59F905DDD}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1A4A411F-232B-4C07-85BE-9AB9C1F8239A}" = rport=10243 | protocol=6 | dir=out | app=system |
"{1AB535F7-9DB0-46E9-BE6C-35911C367236}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1C9D23BF-495C-446C-B7D7-D43969423657}" = rport=137 | protocol=17 | dir=out | app=system |
"{23EB7546-ECBD-441C-8063-FE011775A882}" = lport=10243 | protocol=6 | dir=in | app=system |
"{2A6F8357-3DE5-4057-869B-7C57B377621A}" = lport=139 | protocol=6 | dir=in | app=system |
"{2B6BF008-6BBE-4406-AAC3-4F445E482792}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{338FD094-2188-4593-80CC-F820C1F15D5D}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{3B749436-26D5-4126-869B-B48A993E3377}" = rport=138 | protocol=17 | dir=out | app=system |
"{54F33F81-8672-4278-AF19-E21E0917797F}" = rport=445 | protocol=6 | dir=out | app=system |
"{6160A8D7-DE8A-4D20-9148-C73F9A51D17E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{62105992-CC0E-4B7A-980E-C4FC86A38588}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{770667CD-166D-400E-A1BB-1632CF372961}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{799463E1-E156-48B2-A4D2-D1FDC9226B8E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{815B53EF-E7D9-42D5-AD59-816A8895CB48}" = lport=2869 | protocol=6 | dir=in | app=system |
"{83E76855-1C19-4548-89C2-D473CE4B3D96}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8775235D-0A13-4FB2-A217-1221C80C5C37}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{87CAE165-4381-43D1-81B5-B0B33443AD52}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8B6AEB07-E365-4A4D-8400-5F6A38B7F061}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{90F4F90C-6E3B-4FCE-96EE-28FD2CDF2E67}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9D5A7665-2506-4ABC-8ED1-CC7F29F95B23}" = lport=445 | protocol=6 | dir=in | app=system |
"{AB5C0043-272F-40E0-8E72-1AF2173F0C87}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B07C71C5-8E07-421D-AA59-A3518A676116}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{B9BDB1AA-48D6-4324-8CE6-53E0B43B5C61}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C8350D68-D727-47D7-BF72-DC3378B6298F}" = lport=137 | protocol=17 | dir=in | app=system |
"{CBA9F756-309E-4B38-A2C4-07B2FF9594BE}" = lport=138 | protocol=17 | dir=in | app=system |
"{CCB98B69-5634-4768-8F5C-4398EA97ABF0}" = rport=139 | protocol=6 | dir=out | app=system |
"{D01806AB-A764-4975-BE29-3625FF863851}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0043F640-655B-4D35-80A3-3DDBC658C74F}" = protocol=6 | dir=in | app=c:\users\robin choudhury\appdata\local\google\google talk plugin\googletalkplugin.dll |
"{044CD884-E6BC-478B-A28B-834BB1BFEC1B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{105AACE3-FE9F-473C-9F4F-1B1234A7FE61}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hpdvdsmart.exe |
"{11386DBD-DA31-4EB0-82EE-53CE33E1A370}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{14D21699-83B2-4742-BBB3-18F76DCD64EC}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartvideo.exe |
"{17645E45-FCCF-4AA6-8266-7FEAB86F4B6F}" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\acrobat.com\acrobat.com.exe |
"{185BB582-0C51-4A02-9266-493DBC31035F}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{1958F470-DCD6-4D89-8A7A-139D369BC7A8}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{1ADF0E3C-BD77-44E6-961D-976829B4F4AC}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{1AF83266-5982-4738-B486-A1618B0F5C03}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{1BABE8D7-0D94-43F4-8038-1263402A504F}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartvideo.exe |
"{1C405E5B-F7B5-46F4-8670-5584AF2E15F4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\half-life 2 episode one\hl2.exe |
"{1CEFC221-D254-44D1-82B8-C920855DCE25}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\tsmagent.exe |
"{26DFF92C-6C67-434C-B108-3F507676AC80}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\half-life 2 episode two\hl2.exe |
"{27BA2832-429D-4A8E-972E-33054920C43A}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2F4B7D57-6EDD-4AEB-86FF-3FA8AEB51343}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2FF8BEE2-EE3A-46A4-96DA-5FE39B0317FA}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{33FCDF06-9018-470D-892E-F5CBC2C088D8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{38F5A835-B8FC-47A8-83F7-35513EE338D2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{448A668D-C380-4C98-BB0E-8E7CCA4EC25C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{489B7550-F006-4183-8505-4DD290267820}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\portal\hl2.exe |
"{50457452-CB95-4CE1-B97F-D14495DE1654}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{5790F740-8885-4BD6-AD75-53951F8D588F}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hpdvdsmart.exe |
"{58C5ABAF-4B1F-4EB9-89B1-C1C333FCBEB8}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr.exe |
"{5A80C760-43B7-4F3B-8371-4A07E9847293}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{5C056E26-5768-480A-A510-09CF4F8604BC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{5CD716E8-6030-4254-92DD-E92E6BCC19AA}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartmusic.exe |
"{64A0940B-0F00-4EBF-82A1-F89CA66C4C4C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7A6AFC2B-FB26-41A6-B8AF-6CD33F7EE53F}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{84335750-B895-44F1-9BA5-B285BBCF292F}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartvideo.exe |
"{8670C9C3-43E7-466E-9752-FB714A7F649A}" = protocol=17 | dir=in | app=c:\users\robin choudhury\appdata\local\google\google talk plugin\googletalkplugin.dll |
"{8787B63E-61E6-490E-8F14-9CBB0C4B6EC5}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{8D20500B-D994-45A1-A68A-3EF35D42D30F}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{92E6C01F-152E-4BC4-9765-7ECC85627297}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\half-life 2\hl2.exe |
"{93E35BA5-B3A7-4C9E-BA95-C2F7CB13F08C}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartmusic.exe |
"{94F660B0-591C-4027-864D-508C2AE0EAD9}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartphoto.exe |
"{97EA09CE-2DAA-4328-A4E7-207A2914FCC5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{986F30BA-6E1D-4D88-9FAF-C45DE9FEE15F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{9FFF31B4-DC8A-4B14-A87C-81B96904EA12}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A0980B0D-5740-411B-B1EE-F4C1777E6085}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{A0B74262-8A9F-4E41-BC0C-101E9EF4A422}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\kernel\clml\clmlsvc.exe |
"{A1231E8A-DD1A-4702-8972-4A499966227A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A3151584-A9B3-4B33-A18E-C064EA20BC9C}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{A369202F-6DCB-40DC-8B26-A2411FDB37C6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A48B5B13-03DD-4236-958B-3DB979E149DB}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{A683BA3A-63A3-443E-8EC7-5C7C4E6ABC22}" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\acrobat.com\acrobat.com.exe |
"{A88BF825-236C-4B60-A858-3E2D3C6983F4}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{A94BA5DA-3130-42C5-AF98-BD01C5E067C8}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\tsmagent.exe |
"{AB8937A6-F96B-4F43-BA2F-13BD299E8F22}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe |
"{B2B23C5B-9C53-40B7-B8B9-E848B7EC01C6}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{B98DFE6B-06CD-44B0-865B-25ECC6C1031F}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{BA8CCB14-95D0-46AB-B3CC-AFA2F14D7F12}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{BBD63C0C-2503-48CE-ADBD-7A6136790322}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\half-life 2\hl2.exe |
"{BDF777D2-1A2B-41C2-B7B0-610C17737149}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C1F17E52-0CB7-4038-A79B-D3388B9310F3}" = protocol=6 | dir=in | app=c:\users\robin choudhury\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{C3CBA238-6FB4-474F-B267-D6D3F4DE5F36}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{C62E8B43-3CA9-4BE5-A9B0-A9249BB6F5DD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\half-life 2 episode two\hl2.exe |
"{C996FBF1-E905-4E50-A484-3847C024E19F}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{CA95259E-DA5F-4EBD-9691-6ED8108EEA28}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartmusic.exe |
"{CC1D9F13-5009-48BF-8CFE-1CAA79F70078}" = protocol=17 | dir=in | app=c:\users\robin choudhury\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{D1B2D2A8-0BBF-422D-B57D-93A851254D36}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{DB97B02E-512B-42F5-9B21-8C52B52C4E9B}" = protocol=17 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"{DC144F29-59C8-4CF6-B833-ECA5D6B65580}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{E10C37D9-09B1-4276-B5D9-CA7D93EDEECD}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{E3984A7B-AFAF-48ED-96C0-ACDD7938A5F4}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartphoto.exe |
"{ED0F461B-EDB3-44BC-BA6B-378C4133B774}" = protocol=6 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"{F1435D52-4004-41A3-A507-6156C68DFCE7}" = protocol=6 | dir=out | app=system |
"{F5135CEA-4F2B-4887-94B7-1DF2D8071B73}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\kernel\clml\clmlsvc.exe |
"{F5EB967B-AAA5-49BA-ACF7-ECACE8AB3BEF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\half-life 2 episode one\hl2.exe |
"{F93AD457-8326-4ECF-B7D5-BF99D9BD87B0}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartphoto.exe |
"{FA0376ED-44E1-4084-B26A-C7CC0362FE4E}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\tsmagent.exe |
"{FC442836-7FCB-4AFA-B8B4-DDAB0974C2A3}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{FFD1BC00-2496-4EB7-B8CF-6E2C0939B1E5}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\portal\hl2.exe |
"TCP Query User{04C5DBD0-6716-47E4-88D4-6EA6005FE48F}C:\users\robin choudhury\program files (x86)\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\robin choudhury\program files (x86)\dna\btdna.exe |
"TCP Query User{12867D04-8DA4-4209-9139-4CAC0BECE476}C:\program files (x86)\steam\steamapps\_mish\source sdk base\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\source sdk base\hl2.exe |
"TCP Query User{1EC79F4E-A4A2-4973-B028-AF42D51B1295}C:\users\robin choudhury\program files (x86)\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\robin choudhury\program files (x86)\dna\btdna.exe |
"TCP Query User{254761FD-E48B-4800-952C-5405729796CA}C:\program files (x86)\steam\steamapps\_mish\zombie panic! source\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\zombie panic! source\hl2.exe |
"TCP Query User{52F90FD9-E502-4F48-B1F9-F4097830E4E1}C:\program files (x86)\steam\steamapps\_mish\insurgency\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\insurgency\hl2.exe |
"TCP Query User{582347C1-94D9-471A-A9A8-304B1340C9E8}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"TCP Query User{768509F3-8CA9-40ED-80EE-0B6E7BF5272E}C:\program files (x86)\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"TCP Query User{76D2F240-FD80-409B-9817-5C012D9DA6C5}C:\program files (x86)\steam\steamapps\_mish\dystopia\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\dystopia\hl2.exe |
"TCP Query User{8187FE7E-574A-4321-A5C7-2652F2A23D7D}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe |
"TCP Query User{86CB6CB2-C1B2-47C4-B881-F91210A1AC45}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"TCP Query User{9593DFF0-DBD5-4F10-88DC-00D61631D946}C:\program files (x86)\boxee\boxee.exe" = protocol=6 | dir=in | app=c:\program files (x86)\boxee\boxee.exe |
"TCP Query User{A04B6162-CBB5-463F-AB01-46FF6B3060BA}C:\program files (x86)\steam\steamapps\_mish\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\team fortress 2\hl2.exe |
"TCP Query User{BD8D95AB-37F5-4632-999E-5248116B70E6}C:\windows\system32\ftp.exe" = protocol=6 | dir=in | app=c:\windows\system32\ftp.exe |
"TCP Query User{C17C9092-D7A3-4639-A22E-602DC1EC76B2}C:\program files (x86)\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"TCP Query User{CBDA864E-8255-4793-B631-0B9F78168DF8}C:\program files (x86)\steam\steamapps\_mish\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\team fortress 2\hl2.exe |
"TCP Query User{EBC01AC0-9908-445D-9352-E9219A977319}C:\program files (x86)\steam\steamapps\_mish\synergy\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\synergy\hl2.exe |
"TCP Query User{FF9A32E8-344C-4662-973C-A37A799186CD}C:\program files (x86)\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"UDP Query User{058AEAF4-215D-4DE6-A571-6550910B3156}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"UDP Query User{10158945-B73F-4A71-B9A2-E51EF815AB45}C:\program files (x86)\steam\steamapps\_mish\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\team fortress 2\hl2.exe |
"UDP Query User{1258ADF1-C945-4BE9-87DD-5A3C7CE538BD}C:\program files (x86)\boxee\boxee.exe" = protocol=17 | dir=in | app=c:\program files (x86)\boxee\boxee.exe |
"UDP Query User{3997DD22-73F5-4FE6-A4C5-D29CEF39576E}C:\users\robin choudhury\program files (x86)\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\robin choudhury\program files (x86)\dna\btdna.exe |
"UDP Query User{4CF5D9BC-FD24-4F95-84EA-486D51569818}C:\program files (x86)\steam\steamapps\_mish\synergy\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\synergy\hl2.exe |
"UDP Query User{4EB4480A-D70A-492F-BC3D-EBB5F7F8B4E4}C:\program files (x86)\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"UDP Query User{621609A0-4BEA-495C-90E7-9748303ED1CA}C:\users\robin choudhury\program files (x86)\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\robin choudhury\program files (x86)\dna\btdna.exe |
"UDP Query User{78A5A2C6-D631-45DF-8A8A-3FA9F10337B3}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"UDP Query User{82395BA2-571C-43F7-B6BA-7A5FBD0DB96D}C:\program files (x86)\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"UDP Query User{83616685-AB8B-4F33-A8D1-0525FD5875E1}C:\program files (x86)\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"UDP Query User{8372B05C-C5E5-41D8-9FA5-DEFCB4DD7542}C:\program files (x86)\steam\steamapps\_mish\dystopia\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\dystopia\hl2.exe |
"UDP Query User{9126CE65-BCE7-4E34-9448-64A98CE4DD72}C:\program files (x86)\steam\steamapps\_mish\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\team fortress 2\hl2.exe |
"UDP Query User{9F6F1466-C66D-47F4-B84C-E2655AED711C}C:\program files (x86)\steam\steamapps\_mish\insurgency\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\insurgency\hl2.exe |
"UDP Query User{B2D5687D-9716-4E12-8BBE-610176AED7CD}C:\windows\system32\ftp.exe" = protocol=17 | dir=in | app=c:\windows\system32\ftp.exe |
"UDP Query User{B8910D81-2630-473A-BC41-8DD4ACE8E705}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe |
"UDP Query User{C6D0978D-CCA2-481C-A934-4057EBECB75F}C:\program files (x86)\steam\steamapps\_mish\zombie panic! source\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\zombie panic! source\hl2.exe |
"UDP Query User{F542C13E-8CB3-4362-B40C-B03E061214D0}C:\program files (x86)\steam\steamapps\_mish\source sdk base\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\_mish\source sdk base\hl2.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = Bluetooth by hp 6.1.0.4600
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{18A5D9CF-61DD-4BB6-A9C3-E90602E6E7E1}" = HP Touch Screen Configuration
"{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64
"{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{54E4B319-0CE0-448D-B299-EE05BC30E4D1}" = Windows Live Family Safety
"{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64
"{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64
"{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4
"{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit)
"{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"NVIDIA Drivers" = NVIDIA Drivers
"PC-Doctor for Windows" = Hardware Diagnostic Tools

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP TouchSmart Webcam
"{021C4C4F-C93C-4425-BFFD-C2D16776BFAE}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0F6391A2-2C26-4DCD-B066-8CAFBE9B3702}" = HP Touch Screen Enhance Service
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{154A4184-1A3D-4BF9-A5AE-4FA1660445F3}" = HP Total Care Advisor
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java™ 6 Update 15
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{36F4BB40-D092-4235-94F5-27DBC2670A36}_is1" = HP TouchSmart 360 Tour
"{37B85D7C-91DA-41CC-8A5E-CAB85B87A310}_is1" = HP TouchSmart Music Tutorial
"{38058455-8C21-4C2F-B2F6-14ED166039CB}" = HP Total Care Setup
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3C52E7DA-C431-4239-B66B-1BF703D5B194}" = Windows Live Photo Gallery
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update
"{4FAB5122-775E-4418-B8D9-E2873BC93570}" = Microsoft Live Search Toolbar
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In
"{5A627DFB-EA4C-4FFA-B711-69E849FB40D8}" = Buttons & OSDs control application gen2
"{5BA013CE-61A6-EAD5-5C9C-FF4B3F920815}" = muvee Reveal
"{63C1109E-D977-49ED-BCE3-D00D0BF187D6}" = Windows Live Mail
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{64B9E2F5-558E-4C56-B419-A1679518F6E7}" = HP Customer Experience Enhancements
"{656E96F9-EB13-4D02-8221-786544A34E1C}_is1" = HP TouchSmart Basic Tutorial
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2}" = Windows Live Writer
"{6B976ADF-8AE8-434E-B282-A06C7F624D2F}" = Python 2.5.2
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7A3735D0-2119-40D5-971C-4FFC1E2C7695}" = HP TouchSmart Calendar
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUSR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUSR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUSR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_PROPLUSR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_PROPLUSR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUSR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROPLUSR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_PROPLUSR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-0120-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{995F1E2E-F542-4310-8E1D-9926F5A279B3}" = Windows Live Toolbar
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A0640EC2-B97E-4FC1-AD14-227C9E386BB4}" = HP Recovery Manager RSS
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1.3
"{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP TouchSmart Music/Photo/Video
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B83FC356-B7C0-441F-8A4D-D71E088E7974}" = NVIDIA PhysX
"{BAEB9A15-011A-4C75-A2BA-06C3EE6C2F27}" = HP Touch Optimizer
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C55BE272-49FA-4353-9EB9-4E694AFA94C0}" = HP TouchSmart
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C6CA8874-5F22-4AF0-9BE3-016BF299C536}" = Windows Live Essentials
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}" = HP Active Support Library
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{E9E34215-82EF-4909-BE2F-F581F0DC9062}" = DirectX for Managed Code Update (Summer 2004)
"{ED543A85-BAC6-41C5-B7F4-A267DCB7C372}_is1" = HP TouchSmart Video Tutorials
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F41E9A47-0119-4DB7-849C-6BE6DA948B74}" = HP TouchSmart Notes
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FE57DE70-95DE-4B64-9266-84DA811053DB}" = HP Update
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2008-09-21 16:18
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"foobar2000" = foobar2000 v0.9.6.8
"HijackThis" = HijackThis 2.0.2
"Host OpenAL (ADI)" = Host OpenAL (ADI)
"HP KEYBOARD_is1" = HP KEYBOARD
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP TouchSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP TouchSmart Music/Photo/Video
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.5.2)" = Mozilla Firefox (3.5.2)
"PROPLUSR" = Microsoft Office Professional Plus 2007
"sp41099" = sp41099
"sp41121" = sp41121
"sp43205" = sp43205
"StarCraft" = StarCraft
"Steam App 17500" = Zombie Panic! Source
"Steam App 17520" = Synergy
"Steam App 17700" = Insurgency
"Steam App 440" = Team Fortress 2
"SystemRequirementsLab" = System Requirements Lab
"VLC media player" = VLC media player 1.0.0
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 8/11/2009 1:30:10 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:13 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:16 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:19 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:22 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:24 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:27 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:30 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:32 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

Error - 8/11/2009 1:30:35 AM | Computer Name = Choudhury | Source = MsiInstaller | ID = 11706
Description =

[ Media Center Events ]
Error - 4/18/2009 8:31:17 PM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Failed to retrieve EpgListings (Error: The remote name could not be
resolved: 'data.tvdownload.microsoft.com') (5076.1114)

Error - 4/28/2009 8:56:59 PM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Error connecting to the internet. (5568.1128)

Error - 4/28/2009 8:56:59 PM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Unable to contact server.. (5568.1129)

Error - 4/28/2009 8:57:28 PM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Error connecting to the internet. (5568.1128)

Error - 4/28/2009 8:57:28 PM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Unable to contact server.. (5568.1129)

Error - 5/7/2009 11:46:09 PM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Failed to retrieve EpgListings (Error: The remote name could not be
resolved: 'data.tvdownload.microsoft.com') (328.1114)

Error - 5/8/2009 8:21:25 PM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Failed to retrieve ClientUpdate (Error: Unable to connect to the remote
server) (5384.1114)

Error - 5/30/2009 3:21:51 AM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Failed to retrieve EpgListings (Error: Unable to connect to the remote
server) (5692.1114)

Error - 5/31/2009 1:40:30 AM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Error connecting to the internet. (7104.1128)

Error - 5/31/2009 1:40:30 AM | Computer Name = Choudhury | Source = MCUpdate | ID = 0
Description = Unable to contact server.. (7104.1129)

[ OSession Events ]
Error - 3/24/2009 12:22:12 AM | Computer Name = Choudhury | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 2224
seconds with 1440 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 8/11/2009 1:20:02 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7031
Description =

Error - 8/11/2009 1:20:06 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7031
Description =

Error - 8/11/2009 1:20:08 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7031
Description =

Error - 8/11/2009 1:20:13 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7031
Description =

Error - 8/11/2009 1:20:24 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7031
Description =

Error - 8/11/2009 1:20:27 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7032
Description =

Error - 8/11/2009 1:20:32 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7032
Description =

Error - 8/11/2009 1:20:36 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7032
Description =

Error - 8/11/2009 1:20:38 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7032
Description =

Error - 8/11/2009 1:20:43 AM | Computer Name = Choudhury | Source = Service Control Manager | ID = 7032
Description =


< End of report >
Post #9 last edited
Carnot,

I'm just not finding anything. :blush:

I suggest you post in the Windows Forum and see if the Tech Team can help. When you post there, please include a link back to this topic so that they can see your scans.

Meanwhile, Log looks good :D


You need to create a new Clean restore point:

  • Download SysRestorePoint to your desktop and unzip it to it's own folder.
  • Double click SysRestorePoint.exe so that we can make a new system restore point.
  • A box will pop up after it has made a new point, usually after a few seconds. Close that window and exit the program.
Remove all previous Restore Points
Click Start Menu > Run > copy and paste

cleanmgr

You may be asked to choose drive. Choose C: At top, click on More Options tab. Click Clean up… button in the System Restore box. Click on Yes button. When finished, click on Cancel button to exit.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.

  • Double click on OTL to run it.
  • Click on CleanUp!
  • When done, you will be prompted to restart your computer. Please restart your computer.


The following is my standard advice for the future. Use what you can and pat yourself on the back for what you're already doing.

Please take time to read Preventing Malware - Tools and Practices for Safe Computing. Very important information for your consideration is contained therein.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein


Also: "How to prevent malware"
by miekiemoes

Please respond back that you understand the above and let me know if you have any questions. Otherwise, this thread will be closed Resolved. :thumbup:
Post #10

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.


I'm using Vista and I can't find those options.
Post #12
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI